last executing test programs: 1m27.596701269s ago: executing program 1 (id=898): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x529c03, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './cgroup\x00'}) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='cgroup\x00', 0xc0, 0x0) 1m27.546979839s ago: executing program 1 (id=899): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'pimreg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r2, r0, 0x80000) 1m27.443010448s ago: executing program 1 (id=901): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) (async, rerun: 32) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) (async) landlock_restrict_self(r2, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) (async, rerun: 64) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) (rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) getdents64(r6, &(0x7f00000005c0)=""/4096, 0x1000) (async) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) 1m27.442725461s ago: executing program 1 (id=902): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x7, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) (async) r3 = fanotify_init(0x8, 0x40000) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r3, 0x1, 0x100018, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000008000791090000000000063000098020100009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) read$fb(r4, &(0x7f0000000180)=""/111, 0x6f) 1m27.35737097s ago: executing program 1 (id=903): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a8064100094f90224fc05", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={0x0, 0x0, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 1m27.354434785s ago: executing program 1 (id=905): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x8, 0x70bd2d, 0x25dfdbfc, {0xa, 0x3f, 0x1, 0x0, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='3', 0x1) 1m14.625558446s ago: executing program 2 (id=1019): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, r0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0x980912}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x10d) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r5, 0x5501) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000280)={0x3, 0x0, r3}) getsockopt$netlink(r7, 0x10e, 0x8, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delqdisc={0x74, 0x25, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x8}, {0x1}, {0xd, 0x6}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x7, 0x8000, 0xc96, 0x2, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x647, 0xffc, 0x2]}}, {{0x1c, 0x1, {0x2e, 0x1, 0x100, 0x20, 0x0, 0x65d7, 0x7, 0x2}}, {0x8, 0x2, [0xfff8, 0x5]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x20044801}, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r8, 0x0, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1m14.486378545s ago: executing program 2 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000080)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x20080054}, 0x0) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) getsockopt(r1, 0x1, 0xfffffffb, &(0x7f0000000180)=""/33, &(0x7f0000000200)=0x21) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 1m14.427195265s ago: executing program 2 (id=1021): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0xfc, 0x1, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000280)={{0x84, @multicast1, 0x4e1d, 0x3, 'ovf\x00', 0x0, 0x60000003, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x3}}, 0x44) write(r2, &(0x7f0000000780)='transport=loop,nqn=testnqn', 0x1a) 1m14.197129662s ago: executing program 2 (id=1022): syz_emit_ethernet(0xffffffffffffff9e, &(0x7f0000000100)={@random="e45e6a00ae0d", @broadcast, @void, {@generic={0x888e, "76783dd28912856cdc7fdc64db23350ff6c3d7a99cc1c837b07a23b1da44d74f038c001fdc5d95ebff5e896e55ed1edb1861622fc5482ec907f3387a1a71a51ce496b3429b9b99333877b7a0fd8557a34fbde88e49d5834c916e895ce248ee935672aca756c0e1be71233b6a3c342a11418e815c3c1c6a5eb42a2ea802e17c306063c8b893da55915347608d91b3123e6bb12603f90c65ac940f5e1adef963a1b28bfecce8196700564a560a8e89142b97e7aafca42c060345f459cddffb2079aeb0fe34f15ad4cfd57b7ccee3f66ab8b4"}}}, 0x0) syz_emit_ethernet(0xffffffffffffff9e, &(0x7f0000000100)={@random="e45e6a00ae0d", @broadcast, @void, {@generic={0x888e, "76783dd28912856cdc7fdc64db23350ff6c3d7a99cc1c837b07a23b1da44d74f038c001fdc5d95ebff5e896e55ed1edb1861622fc5482ec907f3387a1a71a51ce496b3429b9b99333877b7a0fd8557a34fbde88e49d5834c916e895ce248ee935672aca756c0e1be71233b6a3c342a11418e815c3c1c6a5eb42a2ea802e17c306063c8b893da55915347608d91b3123e6bb12603f90c65ac940f5e1adef963a1b28bfecce8196700564a560a8e89142b97e7aafca42c060345f459cddffb2079aeb0fe34f15ad4cfd57b7ccee3f66ab8b4"}}}, 0x0) (async) 1m14.196754013s ago: executing program 2 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000380)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=tcp,nolock,rsize=1024,wsize=1024\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_PORT_SELF={0x74, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x9, 0x2, 'gfs2\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x60000000}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f352bbe1654adfea5c42ca9b52fa64b8"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x68}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d0cda7f088da49b26a1d0a5ae05a6e26"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "92ebfbbef5723a46d96ffe4f4c938b53"}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x12, &(0x7f0000000340)='debug') sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.266694966s ago: executing program 2 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xfffd}, {0xfff1, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x24018880) sendmsg$kcm(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 1m12.320002751s ago: executing program 32 (id=905): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x8, 0x70bd2d, 0x25dfdbfc, {0xa, 0x3f, 0x1, 0x0, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='3', 0x1) 58.556474155s ago: executing program 3 (id=1192): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc117c000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002fb"], 0xe8}}, 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) r4 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xb) setresuid(0x0, 0xee01, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='sysfs\x00', &(0x7f0000000040)='\x00', 0x0) sendmmsg$alg(r3, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="f0a0d3", 0x3}, {&(0x7f0000000140)="8cd5767b", 0x4}], 0x2, 0x0, 0x0, 0x240440c0}], 0x1, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002240)=ANY=[@ANYBLOB="38000000e6000400", @ANYRES64=0x0, @ANYBLOB="02000000000000000f000000000000000a000000000000082f6465762f6675736500000000000000"], 0x38) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x24ec, 0x4, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x40) 58.465858839s ago: executing program 3 (id=1196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e9b3d0007e03cd65193a1e93daca63c86dd", 0x12}, {&(0x7f00000001c0)="d78d31402b512b3ead7c3bfa33d1853aa5b677db45ff1ee865a083dc64cc43d1be7a1e6e7109511d2fc5", 0x658}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3e, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003704feffffffffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="03000000000000000000ff0100f6008d3ccffedc1215923b020a"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) sendmmsg$inet(r3, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f00000001c0)={@loopback, @rand_addr=0x64010100}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0xfc}, 0x1, 0x0, 0x0, 0x40090}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 58.255095083s ago: executing program 33 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0xfffd}, {0xfff1, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x44}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x24018880) sendmsg$kcm(r3, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x20000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) 58.204672362s ago: executing program 3 (id=1201): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) 58.203313839s ago: executing program 3 (id=1202): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0\x00') r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002280)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000020c0)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1}, 0x3}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/159, 0x9f}], 0x7, &(0x7f00000009c0)=""/37, 0x25}, 0x401}, {{&(0x7f0000000a00), 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/107, 0x6b}], 0x2, &(0x7f0000000bc0)=""/248, 0xf8}, 0xfffffff7}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/133, 0x85}], 0x2, &(0x7f0000000f40)=""/9, 0x9}, 0x8001}, {{&(0x7f0000000f80)=@nfc, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/114, 0x72}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000001200)=""/204, 0xcc}, {&(0x7f0000001300)=""/57, 0x39}], 0x6, &(0x7f00000013c0)=""/130, 0x82}, 0x6}, {{&(0x7f0000001480)=@caif=@util, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001500)=""/188, 0xbc}, {&(0x7f00000015c0)=""/86, 0x56}, {&(0x7f0000001640)=""/117, 0x75}, {&(0x7f00000016c0)=""/125, 0x7d}, {&(0x7f0000001740)=""/109, 0x6d}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/63, 0x3f}, {&(0x7f0000001840)=""/214, 0xd6}, {&(0x7f0000001940)=""/113, 0x71}], 0x9, &(0x7f0000001a80)=""/234, 0xea}, 0x1}, {{&(0x7f0000001b80)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/184, 0xb8}, {&(0x7f0000001e00)=""/193, 0xc1}, {&(0x7f0000001f00)=""/66, 0x42}, {&(0x7f0000001f80)=""/121, 0x79}], 0x6, &(0x7f0000002080)=""/22, 0x16}, 0x10}], 0x7, 0x12000, &(0x7f00000022c0)={r4, r5+60000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r6, &(0x7f0000000000)='3', 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) unlink(&(0x7f00000002c0)='./file0\x00') (async) fanotify_init(0xf00, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x20) (async) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000002280)) (async) recvmmsg(r3, &(0x7f00000020c0)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1}, 0x3}, {{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/204, 0xcc}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)=""/159, 0x9f}], 0x7, &(0x7f00000009c0)=""/37, 0x25}, 0x401}, {{&(0x7f0000000a00), 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/107, 0x6b}], 0x2, &(0x7f0000000bc0)=""/248, 0xf8}, 0xfffffff7}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/255, 0xff}, {&(0x7f0000000e40)=""/133, 0x85}], 0x2, &(0x7f0000000f40)=""/9, 0x9}, 0x8001}, {{&(0x7f0000000f80)=@nfc, 0x80, &(0x7f0000001340)=[{&(0x7f0000001000)=""/45, 0x2d}, {&(0x7f0000001040)=""/114, 0x72}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000001180)=""/109, 0x6d}, {&(0x7f0000001200)=""/204, 0xcc}, {&(0x7f0000001300)=""/57, 0x39}], 0x6, &(0x7f00000013c0)=""/130, 0x82}, 0x6}, {{&(0x7f0000001480)=@caif=@util, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001500)=""/188, 0xbc}, {&(0x7f00000015c0)=""/86, 0x56}, {&(0x7f0000001640)=""/117, 0x75}, {&(0x7f00000016c0)=""/125, 0x7d}, {&(0x7f0000001740)=""/109, 0x6d}, {&(0x7f00000017c0)=""/13, 0xd}, {&(0x7f0000001800)=""/63, 0x3f}, {&(0x7f0000001840)=""/214, 0xd6}, {&(0x7f0000001940)=""/113, 0x71}], 0x9, &(0x7f0000001a80)=""/234, 0xea}, 0x1}, {{&(0x7f0000001b80)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/218, 0xda}, {&(0x7f0000001d40)=""/184, 0xb8}, {&(0x7f0000001e00)=""/193, 0xc1}, {&(0x7f0000001f00)=""/66, 0x42}, {&(0x7f0000001f80)=""/121, 0x79}], 0x6, &(0x7f0000002080)=""/22, 0x16}, 0x10}], 0x7, 0x12000, &(0x7f00000022c0)={r4, r5+60000000}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) (async) write(r6, &(0x7f0000000000)='3', 0x1) (async) 57.957047621s ago: executing program 3 (id=1204): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="c8", 0x1}], 0x1, 0x31, 0x4, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/3, 0x3}], 0x2) 57.585872445s ago: executing program 3 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000a00)='1\x00', 0x2) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) close_range(r0, r2, 0x2) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x474d, 0x1}}}, {{@ip={@remote, @private=0xa010102, 0xffffff00, 0xff000000, 'veth1_to_bridge\x00', 'lo\x00', {}, {0xff}, 0xff, 0x2, 0x1c}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x6, "7cdb"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) rmdir(&(0x7f0000000200)='./file0/file1\x00') syz_open_dev$sndpcmc(&(0x7f0000000280), 0x7ff, 0x100) 57.515927113s ago: executing program 34 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000a00)='1\x00', 0x2) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000000)) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) close_range(r0, r2, 0x2) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x474d, 0x1}}}, {{@ip={@remote, @private=0xa010102, 0xffffff00, 0xff000000, 'veth1_to_bridge\x00', 'lo\x00', {}, {0xff}, 0xff, 0x2, 0x1c}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x6, "7cdb"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xd}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) rmdir(&(0x7f0000000200)='./file0/file1\x00') syz_open_dev$sndpcmc(&(0x7f0000000280), 0x7ff, 0x100) 47.247440393s ago: executing program 6 (id=1348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x406100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x7ffff7ff, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x99) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRES64=r1]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x3, 0xfffffffffffffff9, 0x7fff, 0x4, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r5, r6, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r5, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x7fffffff, 0x0, 0x0, 0x7, 0x4, 0x40, 0x20, 0x8}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd05, &(0x7f0000000000)="0400000007000000000000007e0100003801") ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x85}) preadv(r8, &(0x7f0000001640), 0x0, 0xfffffff5, 0x3) r9 = socket$kcm(0x2c, 0x3, 0x0) close(r9) r10 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80801, 0x0) ioctl$XFS_IOC_SWAPEXT(r10, 0xc0c0586d, &(0x7f0000000480)={0x0, r1, r3, 0x1, 0xc08a, '\x00', {0x2, 0x6f2, 0x3, 0x5, 0x3, 0x9, 0x7, 0x7, {0x0, 0x1ff}, {0x3, 0x73a3}, {0xae, 0x9}, 0xfffffffffffffb95, 0x100, 0x5, 0x2, 0x3, 0x3, 0x9, 0x87d, 0x2, 0x6, '\x00', 0x7, 0xffffffff, 0x8000, 0x9}}) 47.184473139s ago: executing program 6 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000004c0)={0xbc, 0x1f, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='tcp', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x8, 0x300, 0xe373, 0x0, 0x5, 0x0}) (async) write(r3, &(0x7f0000000300)='127.0.0.1', 0x9) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='8009', 0x4) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./config\x00', 0x400, 0x2) r8 = openat(r7, &(0x7f00000000c0)='./config/nvmet/ports/1\x00', 0x200000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000600)="96849f7d2399fa72f09dde9c9ecacf66f1a04771dc7700bba6c2261f39dcb61d2db409e8ea2e396f428742c389f748e8eae5afddb141fcc0a52dd8e874084598e6e489e2e78c0d45df75ae813783f8c9b4df72386055ec68264c169a84c4994829fe62", 0x63, r8}, 0x68) (async) write(r6, &(0x7f0000000400)='ipv4', 0x4) (async, rerun: 32) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') (async, rerun: 32) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) setreuid(r9, 0xee01) 47.065688536s ago: executing program 6 (id=1352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x18}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x4, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 46.865906648s ago: executing program 6 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0300000000000000008000000000000000000000b51d352689fc4d29dd034a1e9db0b9ddeed45768949c1c7a232fde14df930913200cae863fb25a62f76fb0b9a460a26c779aaf6229c69423d86f564e94c46efee28e6892e54dfe3d02f32c8dbd7d1c6888fa23e3fd7b7729a9c959c1fc1f4f4e177ca6bf21a325104b67d90ce173efbe5d3399cc9dafd42a3caebd62307c9b08414245faad7052bfd6e4b26e3113ec360fb38dd67db6c58e725733ae233e6b1b97203e110c3cb0ae88b20f92990889ba4055cca5fc5361e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800458c00280000000000019078ac1e0001ffffffff0d0090780000fffe000000001000000000000000b9c50391d98d40c26b1f1338ea40ae9b74347e1e204ed9825dd9f3846cbe199cb0f84373dd21740de6fc075c781ae6a6a0d21bdf19ad21c3b084fab3a6a7a60c09bfe71d347a24a1925a17918ba5d176d7b9f9d4f27eba5c830f83a1a12946e23fa5ee02e1558636e9d967b0772d7b5ec370111a4d205f9b2a26bed9b1617139f9bb315681d26125ee2a4934f4a90d1efc983dee952cce0fbf78339f0099548d9d62dbeb85da5856159ad01bb05b"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x88101) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x498, 0x0, 0x0, 0x170, 0x170, 0x170, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, &(0x7f0000000240), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff000000, 'team0\x00', 'team_slave_1\x00', {}, {0xff}, 0x8, 0x1}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x101, @ipv6=@private1, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffffff, 'nr0\x00', 'macvlan1\x00', {}, {0xff}, 0x32, 0x1, 0x1ec9050a6b41369e}, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@set={{0x40}, {{0x2, [0x0, 0x4, 0x3, 0x5, 0x1, 0x4], 0x2}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4b}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x879, 0x573, @local, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) write$dsp(r4, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r5, 0x53, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030f000000000000000007"], 0x48}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034000280080001001e0000000800030005000000080001001c0000000800"], 0x128}, 0x1, 0x0, 0x0, 0x4004c814}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000100)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) move_mount(r2, 0x0, r3, 0x0, 0x121) setns(r4, 0x8000000) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000600)=ANY=[@ANYBLOB="a467a5d2eed581f0584a4c212850676eeed042e60fc32975aa1579231b8c0c5c41b86a1e76077c3a5af6578e3b709d63084b7cd07a84297ab8f02f039475fdb8d239ced1f0065e9bcc54891adde665da69baf6dff923a9639e6ff1761f77910c7319cc", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 46.776942139s ago: executing program 6 (id=1356): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1ffffffffffffe, 0x1) syz_emit_ethernet(0x6f, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa1a73f17f7b41afbc24cfcfc8c6aaaaaa0000000000000800450000610002000000119078000000000000000000004e2000909778eacf83411e940631d1177c5419d8194af788aae8b9e6f49fdd8f087287ce20e2b8aead35077937c4f4df11921904e78d2c1ee1106293c71053e9b23d301bf5ea995eadb59b"], 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffffffffd93, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000030700000a5c000000060a030400000000000000000a0000050900010073797a3100000010300004802c0001800b00010074617267657400001c0002800400030008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x71, 0x7fff0006}]}) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = socket(0xa, 0x5, 0x0) (rerun: 32) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TIOCEXCL(r7, 0x540c) (async) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f00000001c0)) ptrace(0x10, r5) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x0, 0x0) (async, rerun: 32) r8 = syz_open_dev$mtd(&(0x7f0000000080), 0x1, 0x8000) (rerun: 32) ioctl$ECCGETLAYOUT(r8, 0x81484d11, &(0x7f0000000640)) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r9, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async) r10 = accept$alg(r9, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) 46.196513955s ago: executing program 6 (id=1364): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) exit(0xf) timer_delete(r2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"e2bf26845437fe13e45843f86c59ef76c9ad9dc4b1727a56716842429eaba686", 0x20}, 0x6000}, {0x3b, '\x00', @buffer={"79f624a4545cb91f55ccb72d2ccc006e069215f01d6990e5ff61a138fd9d3f93", 0x20}, 0x9}]}) r3 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r3, 0x0, r4, 0x0, 0x46) unlink(&(0x7f0000000440)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000600)='U3\x00\x00', 0x4, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0xc}, 0x2) 46.091962771s ago: executing program 35 (id=1364): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) exit(0xf) timer_delete(r2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"e2bf26845437fe13e45843f86c59ef76c9ad9dc4b1727a56716842429eaba686", 0x20}, 0x6000}, {0x3b, '\x00', @buffer={"79f624a4545cb91f55ccb72d2ccc006e069215f01d6990e5ff61a138fd9d3f93", 0x20}, 0x9}]}) r3 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r3, 0x0, r4, 0x0, 0x46) unlink(&(0x7f0000000440)='./cgroup\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000600)='U3\x00\x00', 0x4, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0xc}, 0x2) 29.156919287s ago: executing program 4 (id=1541): syz_emit_ethernet(0x74, &(0x7f0000000180)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x10, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @remote, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x6}, @ra={0x94, 0x4}, @generic={0x44, 0x12, "8d01b1fc6291cfc6e89633504a929e9e"}, @ssrr={0x89, 0xf, 0x80, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}, "6616"}}}}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x1c}, 0x0, 0xd0, 0x110, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@cgroup0={{0x28}, {0xfffffe01}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x2}, {0x1, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x3, 0xa1, 0x401}]}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000340)="66bb0b760dc0f4", 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000e98f1d970ea9ff4e1cbaffa6753c8cdff256bbd5ad0bfedc7fc2ae35fae995fb564747b23c9d271a669b8a26dc3658a4863ce3ff7fc84271c1294860f4609b8e918d2b4510cdc4613b29ffe15a5b26a7c9916e9502827ef94563348635aa345593e9ab", @ANYRES16=r7, @ANYBLOB="010000000400fbdbdf250f0000003c000980080002000100000008000200c201000008000200060000000800020001000000080002000002000008000200090000000800020002000000"], 0x50}, 0x1, 0x0, 0x0, 0x24000800}, 0x440c0) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r7, 0x6, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc093}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcf2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x84}}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) 28.326770428s ago: executing program 4 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$kcm(0x2c, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x100000, 0x1, 0x1, 0x2, 0x9, 0x9}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r2, 0x8b32, &(0x7f0000000040)) close(r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xc0040, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfc, 0x0}}, 0xfffffffe}, 0x1c) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r9, 0x8008330e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 27.91435922s ago: executing program 4 (id=1547): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfac3, 0x2, 0x2, 0x2}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0xa02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000100)='./config/usb_gadget/g1\x00', r0, 0x4000, r4}, 0x18) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000000)='[(\x00', 0x688081, &(0x7f0000000280)={@align=0x9, {0x3, 0x2, 0x80000000, 0x1}}, 0xfffffffd, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xb}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 27.77415176s ago: executing program 4 (id=1548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="4131ac1585aaaaaaaaaaaaff0190780a0101ba2500000000000000db67f94900003d79d95300000000"], 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 27.566280333s ago: executing program 7 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x2, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xff, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 27.45615078s ago: executing program 4 (id=1552): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 27.356807781s ago: executing program 7 (id=1553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/damon_reclaim/parameters/wmarks_high\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='2', 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564dff, 0x0, 0x7ff}]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.16616813s ago: executing program 4 (id=1555): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x20, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x1, 0x0) r5 = eventfd2(0x10, 0x80000) r6 = eventfd2(0x70, 0x80800) io_submit(r1, 0x6, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="a1be3095c43b46d9beabfd6e7a5ca6b9aef3fee376920521139f54b8f71fc8e37c7fd50d56e4203939ecc9994f82a442833979c836f9488b91c8ef30675b085f2a9ff5efe349d953ed7cc94cb363c87aeeb9222c85ec7ae285a6bb079fdbc596b936da51db54337fa83375e94027f5042ba52b956894f8ef7d8f8f2a101b18ef95c3c07b6748a6671dc148c6a3", 0x8d, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x1000, r0, &(0x7f0000000280)="104edd830fdd7a888cb95cf599129fb537683e2d4d138fc93a4053d92d3ba4d706886e96e62a3e3ff39d99daaa665bac05e4f43adeaee0e822f2ecc2b1320559327914cb7ac0fcb1ba2444716f4c3b987346103e3fdc26a7d56fc43c80542d5b7b7f02253605f28830b9a78557cecbe6b089d0b14d124f3357f544007d904d8b72162bd8e9d9a94c26de829f2e6da027648ab8fc593d59928c5dd53f7871fad8a652b524060dc24618e5647d2af1", 0xae, 0x9, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f00000003c0)="dbdca89bca6e68c587356f7eddb76c02fd18b89c353a3a5a310a6453363a4631a5eb3fc0339cd8e8dfef46e1249bdabcac7a572a025afbfbd1696bfe0ce0cb7dd832909e267fc17513d7b6abaaa1a461974c84613943041e1a272b979d4694168a03fd5a00a3ab2e521fa040ce302de73f14f149b425b72589ed43091e90a05480d267dfc02b79c0b45f7455aeefbe11d6bfaf9018c702cda28e318f354e09f0fc2be07e8f5cc82da1b832cec8c8e47ed73fc1cff567923da46ea4b947a16d76e7b341abc6db1cd04450d6b47d57734f89117ac002ae333f98c83b49784397", 0xdf, 0x7d15, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000540)="ae6c1530b5582d9aa8ccf925740b10e35f03a4224b650c908faa606098244df30eaf1492cc20e4f0579e5c813a0d1089e0cae67c0bdb3a622c21513b449b2e314416f71473675ee9169f", 0x4a, 0x0, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0xfffa, r0, &(0x7f0000000600)="dd611e5f15bb3b330390204462d008f3494019d04b48025ec60d28eebd65da9296ddcf8468", 0x25, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000680)="09d3167326c761907bf8d373cf192c5676409b1881ff751a25eda3afe7fd588aff428a59e76e370085f998c45b2793a8c3362d9afe1ace4d1261ef9d6956be90d3ca92ae666f9a9bfb7d9a38d6208240089e32d6e6ceaa7bc5a379b00ac38e5c1fa4a266221b0736a0109647cbb401cab6d32ea6366f84c1fe65ff348dd0282322a444d1c740bb7f1bbbc3f4b9015b661ad73463c91a315572795c1669ab83f88ae29566cff5b10ab3001d78e63431f760ccafacebaf", 0xb6, 0x7697, 0x0, 0x0, r6}]) 26.987098105s ago: executing program 7 (id=1557): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x8a, 0x3f5, 0x9, 0x1}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18}, @nested_load_syzos={0x136, 0xf8, {0x1, 0x6, [@out_dx={0x6a, 0x28, {0xcb57, 0x6, 0xffffffffcf79ac1e}}, @rdmsr={0x66, 0x18, {0x2a2}}, @out_dx={0x6a, 0x28, {0xa43b, 0x0, 0x3f}}, @wr_drn={0x68, 0x20, {0x1, 0xa49}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest_nat=0x6802, 0x9, 0x7, 0x5}}, @nested_amd_vmload={0x182, 0x18}]}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x884, 0x600004}}, @set_irq_handler={0xc8, 0x20, {0x3}}, @uexit={0x0, 0x18, 0x4}, @nested_amd_invlpga={0x17d, 0x20, {0xa000, 0x92a}}, @nested_amd_invlpga={0x17d, 0x20, {0xffffffff, 0x8a3}}], 0x238}) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f00000002c0)) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffd893cce5657341327af2450000170f00000000c1c77fb004ca933258ef0a07000000004415f6f1676d5389907800"/61], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) 26.927010274s ago: executing program 7 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@bridge_getvlan={0x40, 0x72, 0x200, 0x70bd28, 0x25dfdbfb, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}}, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x102, 0x196) 26.802015375s ago: executing program 7 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.71264256s ago: executing program 7 (id=1562): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4044810) 12.170369951s ago: executing program 36 (id=1555): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000024882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x20, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000003340)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0x1, 0x0) r5 = eventfd2(0x10, 0x80000) r6 = eventfd2(0x70, 0x80800) io_submit(r1, 0x6, &(0x7f0000000780)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000180)="a1be3095c43b46d9beabfd6e7a5ca6b9aef3fee376920521139f54b8f71fc8e37c7fd50d56e4203939ecc9994f82a442833979c836f9488b91c8ef30675b085f2a9ff5efe349d953ed7cc94cb363c87aeeb9222c85ec7ae285a6bb079fdbc596b936da51db54337fa83375e94027f5042ba52b956894f8ef7d8f8f2a101b18ef95c3c07b6748a6671dc148c6a3", 0x8d, 0x8001, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x1000, r0, &(0x7f0000000280)="104edd830fdd7a888cb95cf599129fb537683e2d4d138fc93a4053d92d3ba4d706886e96e62a3e3ff39d99daaa665bac05e4f43adeaee0e822f2ecc2b1320559327914cb7ac0fcb1ba2444716f4c3b987346103e3fdc26a7d56fc43c80542d5b7b7f02253605f28830b9a78557cecbe6b089d0b14d124f3357f544007d904d8b72162bd8e9d9a94c26de829f2e6da027648ab8fc593d59928c5dd53f7871fad8a652b524060dc24618e5647d2af1", 0xae, 0x9, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f00000003c0)="dbdca89bca6e68c587356f7eddb76c02fd18b89c353a3a5a310a6453363a4631a5eb3fc0339cd8e8dfef46e1249bdabcac7a572a025afbfbd1696bfe0ce0cb7dd832909e267fc17513d7b6abaaa1a461974c84613943041e1a272b979d4694168a03fd5a00a3ab2e521fa040ce302de73f14f149b425b72589ed43091e90a05480d267dfc02b79c0b45f7455aeefbe11d6bfaf9018c702cda28e318f354e09f0fc2be07e8f5cc82da1b832cec8c8e47ed73fc1cff567923da46ea4b947a16d76e7b341abc6db1cd04450d6b47d57734f89117ac002ae333f98c83b49784397", 0xdf, 0x7d15, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, &(0x7f0000000540)="ae6c1530b5582d9aa8ccf925740b10e35f03a4224b650c908faa606098244df30eaf1492cc20e4f0579e5c813a0d1089e0cae67c0bdb3a622c21513b449b2e314416f71473675ee9169f", 0x4a, 0x0, 0x0, 0x2, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0xfffa, r0, &(0x7f0000000600)="dd611e5f15bb3b330390204462d008f3494019d04b48025ec60d28eebd65da9296ddcf8468", 0x25, 0x6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000680)="09d3167326c761907bf8d373cf192c5676409b1881ff751a25eda3afe7fd588aff428a59e76e370085f998c45b2793a8c3362d9afe1ace4d1261ef9d6956be90d3ca92ae666f9a9bfb7d9a38d6208240089e32d6e6ceaa7bc5a379b00ac38e5c1fa4a266221b0736a0109647cbb401cab6d32ea6366f84c1fe65ff348dd0282322a444d1c740bb7f1bbbc3f4b9015b661ad73463c91a315572795c1669ab83f88ae29566cff5b10ab3001d78e63431f760ccafacebaf", 0xb6, 0x7697, 0x0, 0x0, r6}]) 11.719919275s ago: executing program 37 (id=1562): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4044810) 2.870964779s ago: executing program 9 (id=1822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@arm64={0x5, 0x4, 0x5, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_ublk_setup_io_uring(0x4020, &(0x7f0000000340)={0x0, 0x20, 0x800, 0x1, 0x2ce}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r7, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0xb7a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x30}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000100)={0x20000000009, 0xffffffffffffffff, 0xc, {0x1000, 0x7}}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000400, 0x0}) 2.286738545s ago: executing program 8 (id=1830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$tun(r1, &(0x7f00000010c0)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x4dd}, {0xffff7}, {0x49}, {0x6a0a, 0x0, 0x1}, {0xb}, {0xde3}, {0x800, 0x0, 0x1}], @ipv6=@gre_packet={0x6, 0x6, "c49ec3", 0x124f, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x89, 0xa, 0x4, 0x5, 0xb9, 0x48, 0x1, [@dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x87, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9a, 0x88, "fd99da473e580fa4d1ebeaaadd17e2d4de191402277a8a82f2f657d041b21a5564726325c0ce8b5c1d368eeb1ae0041935e6ba951355f7196fd8104c77d04ddde1d6601c8eabdcc3cf62f26e6f611cce87964f81fdd32143561f2603d5c38778cb5f00bd56017bb96db99447f882c5723202011cee6ec5e76343067c64e1f868c2ee8c3377009f70"}]}, @fragment={0x1, 0x0, 0xd, 0x0, 0x0, 0x1, 0x64}, @routing={0x11, 0x2, 0x2, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x0, [], "776ca6fdb0f07fd2cbc1d79b05f0ccaa4c07002989c3a7912f5d4ca6fa6393eba65b97aef3fe634f07126c3e6ae66ea1d9b3f536845a74bc92289bfa2dd3a1189480966a2ed3ecc78ff7aaf835bae12210b0b6c6756424d1d371124baa81bfd510a8a38959eae7d81f0baee2e85eea42198655fca07e6b8363f042a7488bc79f549f78c1cdc105f2e9037ddc7cb092d6dd135a90ce730740c324a165e79a850e48c6f72b6baa7a3affdd5b0d10ebf88a350a8c66ac4b96aa8e5d3b05ca5308d9425b5f3d99c2991407ed3c7dd07eecc87d61eacc90ed2249068797cdff27f7d34229612a040e6ad00ef46dabba19a98ccdf5c75feba6360a25a7e061616be6bf43f17c865e180112364b146c29a05310af3b02f9c1d2652ba85a4e48060b7180077af0923f457b0c3bf93b5900959a4e93d06c6dc4d65887d1d28a8afa1c7d97e90eabc52aca4ae5780becb1ffa3a06104a2d48f7dd0c1da12655fe313c4a272d359330958923842fb6397f2e13b1d65bf0443a775265c65eb1cb55cca18d7de67a28f5a859d1745caa149514c1a76b14931b65a96abdb19f5117e085f6fa6e9a71fc674e633e56b6683f32dc205d014f963a7fc45a09135cf1332532780c409d7acdada438d22f7c71d0918c99ab5fb48b2bd7c0b2159e99505c15dc0279e12cc532472455c4d22065c8912866ce18b1b3bac279d37106cecfd6233921d5db00831d7bfc8ad95c23d9ca780d2216f1386b7e74192e4d212ed8713024911b5a29342ba3ba25ee2d99b70282eb5c89ce8f5fa4fef0d47afa661b8942cfa2fafea1268af9605fee6c36b46decf281ba7a08903be6c746f252f35c99e92a74cb417ceab9f857ffca38d9bea0164d4df6fee7ad482bccd0023689f480a92557527c3c157b237a5d9766377585a1f4239bab0915cd914b5f959aa6d669c7625ed320a31e09ce42e82736a119f09b4c24092b69a5de53bd80a04b9dc78ce9dae82dae0bc9dec00e72c78b0407ef51bb111c2dd902da97a58af1085e80ac552a390390a9ac0748a3d111343ec13e13e0d52fd7b2626e4f3e54c9d1047a8c270ad0b7a2951126617d11871104a480a731f8ba893ba9597830b5f58242079a272d3dbfbb26fe6f481042bf9da002a04e38135da33037d0e4a28c5a8e861333d2856ac9bdf12562553fe7818bd9bcf644e46a4bb7ce0dac89a3d3c080b6a4ba8403b0fdbeb91058a1d8475825c7a4936c832fb5c6453d0a46158e5274ce8ea33076f455f77696b66c102490d5e62daa10a28f0c3bb942dc4770efd60483502e2553bc0d1a3be3c2204de00dfd2b55a179c1ac54f37ac066f19b4f05c86d070831c7964b3660fcd663ece114c001d746bb0d9cce79ae5ff446227439164ccf5dac03388ef29801f882e1770f4db26315b116c1941833c511b0a36192b08546a1b41aeb43ca49aec9bca26cbb803943bd584767e1f748cf80facb7624d41237c9c31f3e394803f946fdb112d571f4129916b0c88d644652c6200a25d158fdfc287c50a1f48a78628ef53a775e8ae45ea45c4943737b61abe7dc38b0fe404bbfe02f66ca354c4aeb79a9048d2ff45a712cb7a62aa2362a279471c01578870e38d4b7fd9e79ef0a70d0b46c03abfc3bd1118e8d00c2e5472b85a7409b1ef6e17f6079b39d7dad62443c4ca75f4c0cc8e14d20b71e3615aa77da89773042f149b54edbfe8cedd1de24c8cef16587df870d1d457fbe8522d3a928a343ef179eb482706c126008fa9f19736ea3b9ea709bc27151df9ed39818659343d28711a6241c3a881fe9e247363d835498da9843ca85e1fde81406bd602802873d42a84947b63d88406505edc1179f9f6d930138ebf19974d43b6c124ade80fc88a21b33f29067c34fc46927104d9b7a011b6a101a3c1019518089b6fcd6a1bd5a044852f56075af3d00e6089c981d54edbfc1f2e4dc571218215370f59453ba5f0a0f71fbe49859f565d5d924897fa4c48fb31899ae871ccb5b41aa16db657330c682320f6fa396e946cec40aa970c58ec216f8b3d7c454d40f554bab1ecde01077dff2b1836550d1a4dcef25f329a2d0df560aa5ed11c1fbb453330ed86ade4d43ea466e2a4d9449d5b60bc98a1548c7d4b50dbc6e9322eb1e9bc24d6b60e44e89ce6dd0c9e7d50ddca91f8bda95e133d0743d0bd595fc2464dd6d079d2f1ea39ea3054ad2b7a984234a67aa469bef685202aa109e714b250eeea44db56dc213a6b94e08499dacbd533e04144351726387ffdda718517e84e3ec9cec220e3edb93dbef56cbe02af4a55ac355b693541a05847196b2c8cd071f083ed82d82e8db1293e43abe9f76505169576a3c9214cd347c0384950b592272ca2c2beab979da95d8a114b22ae7becfe5ba1ca5d0afea9f416680a3cbfcda5cc2206fe285a9767d0262a894072b1f194b902724b7d26d406c3a73ee3b1b7b83daf716ba74e9c8496654438aa51f6075935da3df9cd6d1e93016178fb8ca951ccafd274f3165d3d6db968d2cd856c068cc0e0679a818438a86874f2dea9ef343e2539756641d1176d1cde24aa194791236ab81d06c20742b7e2a026828376819562e10d2e9dfce8fe0c72c90fa83ab2e097dcdb124018bfe275500899b6d4b90eb4669b78733f9853e23f9d1906168772b12ca7f86a71973d7966538b9c83efb52cafb684dc096c24edc37d43b19221d0cc94677bcf07bec4b7fd5c43373b1bc63b435fb392ab6e8686e93fc585b1d8ba9ea69c764ba9534b5f2dd24cb7c683876d290ce632ab432e246c6f652f8fdc0655ec88d477369487ff74effb62f4c728a41348aef06dc7cb2682f1c383071515cff80966f39797b61f002ca97707aa22fba391952dd9d542b3f85cb16a21153d0c5a6a804c027facf8f7e4181bc5615a4771cc469b880138d480ab47ebc33c0331856b0f944ec777177bb040c9d58dc453583ecaea9645e71ec444ffc721d2e151fa8361bb1b4738dad25cfb3e5a246f046d93ea5628b4a5bf81ef85ea949e4b067210f98bb047db249f99fcdb4c635d432bff98e2a45bc7912792ce23dfb8952fd118757a622997c6f6ab91f602810c14a8eb449c097253a43c97370e0c6efb077f7877d9cb2b6b60f86f57aed3efa18961c7806305e61240cbecd4fc021c30bdc8924128d3038b488f98fb36a1805ff4d7c5b662285fd2caaa5ee760670b5c9f47dc69fac4b5870470d2a655aa34b7d88ea4a0049df522c76b22da25630506c3c6019b93d6ceebaabe351c7f0fee38440b83c418b4d3a5d6823757ca0c5a1b5cb9bc4a6c708fc4df12645cfea401ec759d2cbaac19e42dbb4f250237d12ec39f91510c37092a474896c0d1a918ed82b3c6ee99bff88901a0ad9fe26744e7e44f6c08156e8fd11d19b16099741ed3c4847cd851cba21d64ba484ab2446d70ce156031c1a0245c3d68b8a91645a5751a773dffb6726260360a8f0654cba8e219e9f0ba2b5c5bece8a4add54e0bc81b2362a3f8ecb6721e0dabfd11756d3545a1ce305931f1fb42607893578957ebb748df734d6f4a94f8f14fc6d34a8e57714cf45c5394be21ed17cf27ee95237b2d469ffffa6e15694b3c71433557582d65d25e7405f04957e8545099b8daa1a8ea722fcfac3446d705f2581a2365ab5c164325ccdffafbac3bd21ac67d994c9135fe2ea467adb8343bb546d1d6e76313bad1e57e031f5243cf042de7f99c09e1f32a6631267ee50d4bde40a5482af3bf55fadc1e463a9b3ea482f885c5bba8c99e2e561cb2a49e70c8a69dc4f94c5db1220549f08c6ca0931a35df6b891487d132c426542a1c58e60b7a02adb770371786c614fa9ebad1ba9b3b08668a44afef18e7877cdb11541100ab699432c0e2aa132295729c849cfe4d43ad44faedc2d09288cccec93bd64cc3d4870b627b690f81e71af8e9c7d1742bbee8fa57c94c106485f5dfa1ef9e31749253665efda2917635c61876d43a40d5ab34e09ae42a48cfef3325f568f5306a28203d6eb4dcbed9a83bc111d4074a624e81f11659062bbc0b1bea8342225a7e067d78aedd0157eed4460b0e62726dbb3f2519772c9297cb9360891e07bd476697704fc21eff0ee8b6f067ccba55b3f9f69c75c1c73ae1f7990560e25eee6fe47b0430dc8fc703e4fbe713661f142d34a7b90221f7f05e9d97a276ab388685c0d585046dc0e5b695d25578606225822e5410c27f618825993a8c03935eb35abb3ce9a849f28896d467548f9249a1262f1a5dc92da7dfb66e989f6ec46827ba62078bf7f63f5a329fa8e9fe8f6a60328a2b8d3121a720de29f82419ae5b2a32aa354dee4e22722f294d75af0bfe4b8a19193f29b469c5beb5d9d8be042d46594d80a94555071970e99e208c57e6643890e2bc77c6c5a09307b91b88315b69ff3cb114553ba4b17778b0686e7f41630f714d2e6b0ed1592f9e8dd4417a23ccbda92d825b70d05af86a29086579685fa59bb631292964c6ea8017869d9b13915aa65110c0da6c2450251c66e55ade0b2a41fe4181ca2921fd0212a04fc11e544fe37b788fea850baa2f8215a696fd7c558aeebd7ea176a2d8e1fb037bf6467071616ef959ed7220de1f7658d33d2e9d58dcb4c1ae63f1bb27c42a84063330ba69cccddf56158a5801bcb7882bdb64fb41f04272150b7e108df7c5fc141ae8516cac8cd944a159bfa6a53ef2c3d47f15c56db39cd833fd118a16b0ca50c15f0f4c3683ad72e99713d8e14a4b7543a12b949cfbc4a43318d8acf9b66ce9c82e32270d17ee1ff22fd5217a21b1045002d094be24ac6c1f87b415fc6d90095e1e72d8a2c5b48c69b062d06464a64a16b463a169dd0d1d3f9b182ae79e4ffdce6f98c9cebbf39fdd0623a092bcd99772a35ef4a92842271ae198e05c4007ea277d388931bf77ef5fcb800fd2481daeb2338b108f0894f0bc7c1dd63d900b33ad5345e2edfa3d809ca0858a8fd163d0364cfa6967fde4ba212753187824d63b322c9d82d3e1e49e3e2bf49f22ac3dea26475def1085cf004e06e8f6985e2e336361e9bc177546e0d5f034a55f4c3d5d76406a7fc0bd4f58a52a7f59e13241862188dad002575be5cabc94e5f26a3f5c9a62853e66944cda19c84e817080b810de6a5c8e9c27f2bbe38e4a7754e2b4fc532860bc539a490fc7130eff1a9e3b5f607b347bca0c13fa8e91b7dd62721d9b07a9a98cf1e1ee68f62e6f17a93d23ab785d0db12213236325590c01c8072ba6e332a728ac8b33ba657e992a59ae440af3dba39aa5be7d7ecbcc581191c4af862b8a8daad65f2b85c0b9fb1f9da68a97d17ef1353d126405c1167487ff45f5859c0df8e0991e2367e5628b05a2156fffe3c7a7a0bb78bebf2745787934df0931193d57df811463afc76028f6b2c2fbff097a97406a8915b9855ab11878ad04c431e0b773aad5f3e75678c916a162c834a4e7b1cceeba163ccac6099ed039067fb5bfe0b785c305bfd785e358107671738c54cb520b46eb626472ca0a39f9ab9474d9ac4dd10f3dfe39f41b413d51f7cfe4a4950c492cdfea6986bab33e0d6210df7541a22e67e447f8a01ccd8e2dc3defb17f5df0f9e53d80009075062f5b3664da4f1a9ace7b7567bfe0506b735f1f3d4155ab4409baa26ea3ba0144b0ab3950dc47061bf522a9c0680e1557f21ce0da49e622f708aeb94362389608443f0a04b35205a124b2fa4a1d9405b264e42c4f434d7c79c8dbe016d08021dc27bade1a241bc50c9fe9fd8a0c025d4b93bc931ae52c6889ff804c27b486ffa3fcf70ad"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4], "8f88db0258e70533fe809e5019c9d37437631ede81c3a77539ab5341b3986a6144eacb2505044e6198bae944dcd7db463a694d686268682d0ff55e95c3c218ef12ee6e9a7a8e7bae6e0f4f2456ca98858515e8e09b"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "5e4081555c745c786da14e8b78d01b0591d0a9328dd19fa29be4c67559e96c31441c35d2ae4f89ab7139f83bbab2876a1310423f3b6dd34cb82ebd5e44c89cbdd5b74d2b54105ef3e1c3a53b329da7ee69fe58e6426e35ae54fdaedb086351f526f79b5d8452d047248007325bcc0686a0bd45dc610e477c6ba4f9d1b69968c2f5bc3bfc9de7cb7ec5"}, {0x8, 0x88be, 0x0, {{0x3, 0x1, 0x40, 0x0, 0x1, 0x0, 0x7, 0x6}, 0x1, {0xdf}}}, {0x8, 0x22eb, 0x3, {{0x8, 0x2, 0x2, 0x0, 0x1, 0x2, 0x5, 0x6}, 0x2, {0x2, 0x9, 0x0, 0x4, 0x1, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "d361a260bfdddf6b59c571"}}}}}}, 0x129b) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) 1.916644313s ago: executing program 8 (id=1837): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x50, r0, 0xefc8c000) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) 1.844055231s ago: executing program 9 (id=1839): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0x8d26, 0x3, "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"}) 1.756806754s ago: executing program 9 (id=1841): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x80000) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 1.659815787s ago: executing program 9 (id=1842): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000022, 0x0, 0x4}]}) landlock_restrict_self(r5, 0xe) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="800900001000370429155a9e3b72ff8810000000", @ANYRES32=0x0, @ANYBLOB="890c040000000000600012800b0001006970366772650000500002800400120014000600fc01000000000000000000000000000014000700fc00000000000000000000000000000006000f00080000000500080003000000050008000600000008000c0005000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x20048880) syz_usb_connect(0x2, 0x393, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x8f, 0x59, 0xf7, 0x10, 0x1b3d, 0x186, 0xa94f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x381, 0x1, 0x4, 0x6, 0x20, 0x7, "", [{{0x9, 0x4, 0x3b, 0x5, 0xa, 0xc5, 0x42, 0xb0, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0xd, 0x2, [@generic={0xae, 0x22, "e1a7015d51d81339e0ef401835ab530cdfefe7446f204ab9a67d6bf6672ae69612c16eedb7aa82f110303c56a678b5a7fd656002d5c42245b1badc148c9a8a08483846f455f88ad6c8fe9c80cb4df5eae804c67e88ed98987b0f55e8b89883aa41b9d9f9691be993ff0272061c8e0d1f0072c646c3b39d2432c73108e955c1676f7cb21a12ca85afc91aa7a6fa9e94c177409616af485a487ca0ccba125477a625d3a19f9b8020a9e0cb7d3c"}, @generic={0x89, 0x11, "ece864cf68364eed3f86125dc55a4f799d0d16f12a561957ce5931afed3ae98663cabc45c637d00e1937a935d6f1ac5983fe91d90d645c96cff80bdaea0ea8490f0f155c3791c202073504e525172cd42dacb3c8123fcfe1445bca365418e641481dff51e3908c52d379a9c459dd3e202932af9bf0873338bbc2ad98c7d6f03c6ac58e433262a3"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x9, 0x1, 0x1, [@generic={0xd6, 0x6, "60ded12bee603c8af10698588d9eb69e0bc66fdfd9216f3d01eec65199b5910c4a620fed76a194d959e2eb11d3aea124f1997f915a304015ed35780a1dfa635320d49fc6c64d00b2dc6ed87c081cf9e0143323103400a3e9640bc8329338740efbe3fd2decae46fe27c15946d20313737467b13d6bfabb26ae549cd50c51d1b642f4e027a776ca6b474159980e4d38e098d5e0133894c9923fdb179626111656fa662444802d1200eeae77e0f1ccda13d25ea9b9f172f58384d9867e1d3e377bcba72d994e7c9da9aa6f44f7fd3c6ddb8c42ede9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x53, 0x7, 0x1e}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0xf3, 0x68, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x55, 0x2c}]}}, {{0x9, 0x5, 0x9, 0x4, 0x110e0f4df5eb804e, 0x5, 0x4, 0x38}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x10, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x50, 0xc1, 0x8, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x4, 0x4, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}, @generic={0xc9, 0xa, "2ecb66b40f0209aac1ef746a89f447ee946c81b74a12bf8ee63fcdbd45e6b8a3aa4a82651d1486be71c75d11e794b0d547ef037aedd824c4be1b244ca9bf784d54679d7c5528b62f7298be292d175ebd342a826d502c0d50887e8b3ed89fc6445160ec3fac6a91aee63ee98deb25afb81784e02e90f61e5b21e48578a44d1c00c510d14cb515628273fc904a6c9f68d4193d33fd0667cd495145d8a2ae81c064162fa443d912297cab8052a1197e3c3dec8c3f6b6d52d655dd647767baa3c26bce6833ec529f8a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x18, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0xe92a03d7c4b5d35c, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x5c, 0x1, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x89, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x9}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x8, 0xc8, 0x7, 0xdf, 0x3}, 0x5f, &(0x7f00000007c0)={0x5, 0xf, 0x5f, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x6, 0xf0f, 0xc73b, [0xc000, 0xff3ff0, 0xff4100, 0x0, 0x8080ff, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x6, 0x7f, 0xc5e2, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "55f96bdde94a8647e2a011776f8df739"}, @ss_container_id={0x14, 0x10, 0x4, 0x49, "8f2b63b4025d6eb812eb287f04ca9e00"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x4ff}}, {0x40, &(0x7f00000008c0)=@string={0x40, 0x3, "698539cabff34f4d77c4684cfb475ac4277dee6446fafa4e0e2ed762b9546e6827eabca0876f024d763811b6a37bcadf8bf498bdb4a4dcf15e04774b42a9"}}]}) r14 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_NSTYPE(r14, 0xb703, 0x0) 1.576732831s ago: executing program 8 (id=1843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x40, 0x8001002, 0x2b8}) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x7, @loopback, 0x1}, 0x1c) listen(r2, 0x50) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8000, &(0x7f0000000180)='+)\x00') r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r3, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.476819508s ago: executing program 5 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) truncate(&(0x7f0000000080)='./file0\x00', 0x4) pread64(r3, &(0x7f00000024c0)=""/205, 0xcd, 0x9) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042a0000fcceff5a05c377d01c2c9e427b8777901433fc14a779a9a1c550c32bf957eac099262aaf8d715119be0100c8319bb416deaaf015ecf5bdb3b9a25eed66e721886975d43ddc9f2675eefd03a27e5066e1a40a6c7f6feba65552f548a88d5efc38bff5f889e210e7fa0d4cac1f3db6099b93216f36ac438912c7401b1b4411c6447ea4bddf912663658d71646df91f9365b7df73fa4d5eb7bf1bf11e668452b5276a15c0831af010e9", @ANYRES32=0x0, @ANYBLOB="14220100000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 1.164104475s ago: executing program 8 (id=1850): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x80000) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 1.163809595s ago: executing program 0 (id=1851): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '^x\x00ID`\x87\xecuv\x9c\xeb\xc1\xd6\t\xaao\x92\x1d\xd7zP', 0x3a, ':dev/bus/usb/00#/00#\x00hKB\xd4$\xbc~\xcf4g-\xc1\xebD\xca\xa1\x1d\xd5GK\x8c\xad\xdfU\xb0\xcb\x9f\xda\r\x05\xbf\x17k\x13\'\xec\x18\xd2Y\xc7\x00{\xe8W\x98\x9eK}\x99\xc5\xe2\x80\x87\x91#\x92g[>}m\x14\xd7\'\x0e}+\xf9\x86\x0f\xe6\x98\xc3\x18V\n:\xb2$\x90\x0e\xaa\xa7\xee;K\x859\x01\t!Y\xb2\xee\xb7\x12\xcc\xc6\xb6&\xae\x9d\xc4\x03\xc52v \xe8\x92eV\xe8\xb8\xa6\xdb\xec\xee\xc1\xa6\xbc\x11Wk=P\xfb\x85\xa8\x06\xc65~\xa8\x99:\xed\xd9Em\xcb\xc3\x89\x82\xcfF\xfb\xf5\xeciy\xfc\xc5\xb8\x81\xab1\xc9\xf8\xc6z\r\xc3\x8b\xd4\xf9\x18\x8f\x87p\xa4\xf6\x18\xf8\xfa\xdc\x83ZM\xaa\xc5\x84\xab\xa3\"s\xa8\x988MF\xdc\x9b\xa5\x9c\nJ{\xb2\xa3\x9e\x92\xa9gG\x8e0P\x18\xd2\xaf}T\xae\xcdW\xa1\xa1\xb5\x93\xfc\xae\xc6\xec\xfb%\xe0\x1c\xc9\xaf\x12\xac\xb7\xe8rM\xb7\b\xdfo]\x99\xaf:[\xdf5y\xf1t\xa9h\x02\xa61\x84[<\xc6\xe1/?\xa9Q\xc64\xd7J\xd5\x8d\x12\x0f\xfe\x91#\xd8\x99Z\x052\xe2\xcc\x96\xfe\xd5L\xc8\xfe7\x01a\xfc\xa5Cj\x19\xfe\x12\xba\xf0\xa7\xdc\xd0\x7f\xef\x01^\xdf;\xa2J', 0x3a, './file0'}, 0x189) 1.049771751s ago: executing program 8 (id=1852): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000540)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r5, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000a40)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x7, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000b00)={0x601, 0x3, &(0x7f00000008c0)=[0x0, r6, 0x0], &(0x7f00000004c0)=[0x9, 0x7fffffff, 0x71], &(0x7f0000000a80)=[0x0, 0x0, r5, r7], &(0x7f0000000ac0)=[0x6, 0x3], 0x0, 0x5}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0xc23, 0x70bd29, 0x25dfdbff, {{}, {}, {0x13, 0x19, {0xa, 0x1, 0xfffffffd, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x200000d4}, 0x0) socket(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003a4f2b3d56f2d61c", @ANYRES32=r14, @ANYBLOB="04005b000600650040000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r11, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r16, @ANYBLOB="01000ad17cff4cac0034c7b4da188154652cbd7000fedbdf251c"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20040815) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000000c0)={0x7, 0x80000, r1}) sendmsg$IPCTNL_MSG_EXP_GET(r17, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040) sendto$inet6(r0, &(0x7f0000000140)="a36d", 0x2, 0x0, &(0x7f0000000200)={0xa, 0x4e22, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 996.003076ms ago: executing program 0 (id=1853): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0xc0080, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000004c80)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) (async) connect$netlink(r0, &(0x7f0000004c80)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) getpeername(r0, 0x0, &(0x7f0000005680)) write(r0, &(0x7f0000000000)="7409c6ae000000000059580d0000003dec568ef01096c241616464723d3132372e302e302e312c7472737664912a270f4d790e6ae66db826b889f23932a902441e08b5b1ca4aa96ad2b63263fef49d7a775d7c1ca03b9993a330588f30217fb874c0e53b7def0b1e0bb5a90a1454287509dda3d4a0aeccc8ca0e7458639b8a7d8d6d5db8099ddd45db70462b263450afaee617c5c3a797d13988dbb39e4b963918563e813b38deade38a3906d4dfb702c4bacb5d9ab2a0bb2d5eb2e58fa305f2276d00570f11f7bdf7af59bbc92477b71072072f1ebc303acf2ca3fcb702152447526058", 0xe4) 995.447283ms ago: executing program 0 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x500, 0x100) fcntl$notify(r1, 0x402, 0x34) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r2, 0x402, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@mpls_delroute={0xf0, 0x19, 0x8, 0x70bd25, 0x25dfdbfb, {0x1c, 0x20, 0x10, 0xb2, 0xfc, 0x2, 0xfe, 0x6, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{}, {0x4175}, {0x9}, {0x5}, {0xfb4c3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8000}, {0x9}, {0x5}, {0x0, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x100}, {0x80}, {0xf16db, 0x0, 0x1}, {0x200}, {0x3, 0x0, 0x1}, {0x100}, {0x7}, {0x8f3a, 0x0, 0x1}, {0x4}, {0x28000, 0x0, 0x1}, {0x9eb, 0x0, 0x1}, {0x12}, {0xc}, {0x1000, 0x0, 0x1}, {0xffff9}, {0x0, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x2}, {0x2}, {0x4, 0x0, 0x1}, {0x66, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x7, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DST={0x8, 0x1, {0xfff, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_OIF={0x8, 0x4, r3}, @RTA_MULTIPATH={0xc, 0x9, {0x46d4, 0x0, 0x5, r3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf5}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x16, 0xa, r3}}]}, 0xf0}}, 0x0) 926.663848ms ago: executing program 0 (id=1855): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000180)={0x120000, 0x0, {[0x0, 0x1, 0xfffffffffffffffd, 0x1, 0x7fffffffffffffff, 0x8, 0x9, 0x7fff]}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r2}, 0x38) 836.616926ms ago: executing program 8 (id=1856): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) unshare(0x4020400) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x28, 0x24, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x5, 0xffff}, {0xb, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) recvmmsg(r2, &(0x7f0000009840)=[{{0x0, 0x0, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004580)=""/73, 0x49}, 0x20dc}, {{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}], 0x2}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008240)=""/4096, 0x1000}, 0x2400000}, {{&(0x7f0000009240)=@alg, 0x80, 0x0, 0x0, &(0x7f0000009780)=""/152, 0x98}, 0x4}], 0x5, 0x100, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 703.0894ms ago: executing program 9 (id=1857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r1, &(0x7f0000003d40)=[{&(0x7f0000002c00)=""/4108, 0x100c}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x1, 0x8001}, {0x3, 0x300}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100040000000000001f28000000180001801400020067656e65766530"], 0x2c}}, 0x0) 607.051776ms ago: executing program 5 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb0e8e7832cd2fa09}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb0e8e7832cd2fa09}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 606.721305ms ago: executing program 9 (id=1859): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000004980)={0x0, 0x0}) (rerun: 32) recvmmsg(r0, &(0x7f0000004880)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000002540)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/121, 0x79}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/102, 0x66}, {&(0x7f0000002400)=""/19, 0x13}, {&(0x7f0000002440)=""/234, 0xea}], 0x6, &(0x7f00000025c0)=""/4096, 0x1000}, 0x6}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f00000035c0)=""/204, 0xcc}, {&(0x7f00000036c0)=""/117, 0x75}, {&(0x7f0000003740)=""/174, 0xae}, {&(0x7f0000003800)=""/129, 0x81}, {&(0x7f00000038c0)=""/74, 0x4a}, {&(0x7f0000003940)=""/170, 0xaa}, {&(0x7f0000003a00)=""/202, 0xca}, {&(0x7f0000003b00)=""/3, 0x3}, {&(0x7f0000003b40)=""/204, 0xcc}, {&(0x7f0000003c40)=""/220, 0xdc}], 0xa}}, {{&(0x7f0000003e00)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000003e80)=""/191, 0xbf}, {&(0x7f0000003f40)=""/95, 0x5f}, {&(0x7f0000003fc0)=""/168, 0xa8}, {&(0x7f0000004080)=""/65, 0x41}, {&(0x7f0000004100)=""/59, 0x3b}], 0x5, &(0x7f00000041c0)=""/137, 0x89}, 0x8}, {{&(0x7f0000004280)=@nfc_llcp, 0x80, &(0x7f0000004800)=[{&(0x7f0000004300)=""/11, 0xb}, {&(0x7f0000004340)=""/125, 0x7d}, {&(0x7f00000043c0)=""/28, 0x1c}, {&(0x7f0000004400)=""/245, 0xf5}, {&(0x7f0000004500)=""/143, 0x8f}, {&(0x7f00000045c0)=""/27, 0x1b}, {&(0x7f0000004600)=""/223, 0xdf}, {&(0x7f0000004700)=""/240, 0xf0}], 0x8}, 0xdce}], 0x4, 0x2100, &(0x7f00000049c0)={r1, r2+60000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 266.876308ms ago: executing program 0 (id=1860): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) r4 = socket(0x2, 0x2, 0x0) r5 = epoll_create1(0x80000) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)) ppoll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 85.105133ms ago: executing program 5 (id=1861): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400000007fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x2e, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x2f, 0x0, 0x1, 0x4}]}}}}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x121401, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@fd={0x6, 0x1, 0x4, 0x800, 0xc, {}, {0x4, 0x1, 0xc, 0x3, 0xfb, 0x2}, 0x1, 0x4, {}, 0xfffffffb, 0x0, r1}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x3, 0x1, 0x4, 0x4, 0x3, {r3, r4/1000+60000}, {0x5, 0x2, 0x3, 0x3, 0x6, 0x5, "3f85a6e2"}, 0x8, 0x3, {&(0x7f0000000000)=[{0xe, 0xfffffffe, {0x1}, 0x80000000}, {0xfff, 0x40, {0x7}, 0x8000}]}, 0x82, 0x0, r2}) socket$alg(0x26, 0x5, 0x0) 83.773233ms ago: executing program 5 (id=1862): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{}, "63e52fd2933f7555", "a16155f72dc8ed1aa5d3653db82d8b3a", "06d327d9", "ff4877ab20cf24c7"}, 0x28) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/15) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) pwritev(r0, &(0x7f0000004340)=[{&(0x7f0000002240)="3dacf16a2ab572f2966dd9273b8124f3a0d30686bfc9761178e86d59c17a88b53d5b24ec9e4f7f1de0b8e2e582739dab0defb1581ab82c7c6ae1657ecdddba184ffe374afa906726e9ec7bf4ab47105d3f5e5cd9b50035900d50060a48114e9de2dbd36724dcb2ff8ae118e5d2904edb788b8a08e99ec3206d37716aa6101235533332cef597b0bb10aea3ddbddc5d09eba60e0c5123f17f851d73334363818478c999bec1eeebfb0afe957a67f9e333a298c3832b6f4b77dcd4ba3fb53eab52693bf8c45fa589bf94b1c7be55798541bfccc364bd72b26d4f1befebadd360a9af6a095eed489fbfd6f839ff379a498d0c9b3369d97a92e5d255a157063e00d42863386be93101df2d5c8b44b09806541a15393e48049160564249498abe20ce95b6e929a45953edfc5d448e452cbee04f4d150f3714c964a6efbbf0761c46c342d39b1be28dc2b0968525573336fbd7ce058cd2b7304dbac8ed02e2dabadb2b09b816cd23d7aadac0c041967b291b77107fcfb501f98a9bbf6e11a548cf9d8bb9e8b6f78a42206911903051a1e663fccefdc599add77c0959e5df47a3b9d7ccb8d4f7ea40ecea988dc74423022a27d8ba25f21a40a7de165db729d2256097ff1e9d305960b46115557be1e82d1924da25fc7b6d1a06f2fe60f607bfec1e679fe69332001ceafdec75d388f5bfd4acd70a306a52d699696ee49e85ff3d5c7658b21b01eb02ea3eec562a14c94d5d3f8e806c74a5dc969b504f61a82861e28ab76575b0b197d561b8f3cfa1b5c3d811d12276969826d0055cf040f073ca16386a14807d2a70ad8e80550a0f634b60873fc583e459597335d756c40c7e7f1e553883c070b6872a23e327a2143e64feae7cfe103ed6969ae822c22d19031003df58d3356c6e0480166b54a2549419e67aab7b6a40d1afb7bf8a4b760efd2e5cffb2fa0548c02915fd66f5d4da8b8eb417172a14aeaceb767df8e994d18d3551c70ab48e8d16f6f2a769f7769cfb62743b0f8ba8a61af824d5cf4dc7e588f93f4f780e57cb7005cac202ad03d4c59c49285346f49f83240e6a8209e806cc59405924a0a4ee2c41c295736d7a18ecf9219018f1759f2d5b4e611ac1106aca08f9b0a9c97831d44b655530021720fea2e6234a8429d96d234942b1d3e2bb4e892482c13c2cd584e0c690dc55293f270d14a4440547e957a5029260d6f66216a14b35afa3fdeece8b5b536233e209bd168572704ebcfeb8ba198a792670ec9ffd85cc4332e73ae22fe988e48007bb5f2fcfe42ea5e845a483cee4bd5a1093cab05fa9bd7e1686235e7267550f70ce42342933ceb887d8fff077cfc653f8b7b4466adf21cf41e1d18495513db92a2a4cb750c9d88a84438e0f808e67d7091ce4ca0000f5f741a0305d188de65f7e18876e5c3c1d76d4f1794781d31ce88c4b777f7415e0283ddfe0700fa6f8494e0b09f68119144a93be2fd31fd8f32a964c3e4c9020aeb622ceffe1bc64b795a3f997e42dd3d6a644e54bdb3e64b6260ad70d1c09860adeb72af6582136b7845cd87a2335fb8df1a67fab1d4935747ada297d84846c56600733eb41e4efe88beac0af74e0d9b51c18a3cb6526aba2c4dc0a6ba0a13dd8e5fe6e958e1cd17e49c826b0780f56efbac98060b335467825707a86766739f8ae2313b551124e3ac86973de2b389f6e40636fdf969349bd1a1cee4e608a62b78e283d5f2a145bf66868371cb3f4e7dd310e17786c6cb8146bd32e3b5097a99c0df6f3480f26ebe3092b9d35cb45ab7b6038134fe71ca2d95d6e7b47e46e0f3723be941b8e45e8c9f0c318da2c968b40f4d6eaca56ed07908c1bdc405bbd8bcea3d8a9b4227a88cf69c791afb2889fab575c3cc623b78cb17f7b2bf2d733a5e22d71b5ea169d4111bafacf7356445cccfe7e3a4e04c2a340a08b2831bb7d5a9c31e0d2c06db3bca2ef92c6229e159d5eccff348e3aa3ffb0f9f5b4c9a82589a32d4decef31ba56aebae5dbac52c3ecc101be6c91dfd0cda5600416afd4fad0921c8f4d602744119ca16598879a1aac3f3f987ab9b8e37325302a80152a60e7436b2e31fb3beaf67d9f24d905d4d3fab1748ce1f878b58e8167540834a17f3819c56bf04761f451381b27325d0a34c54f85539a7617f3e445f39df64e9474022a91e65b71c14e72b14a2cb0b071183cc7befbbe85925d0b3cc2a8775e440bb85b81d6a86e60a82bc0bab667939124951552e766b935b1e160d985ac5bafb27d97edf78c99dfb19eeb2f98039a4f13511bb61feafc6ceab92a9e05724ee76c25850ade5fab5dabbaed8fab941eb2d591a52ff010a6e046a6e7383bd013b3bec453809aff164b9e5b9553f28d98f67cfb2fe81399c72d95717db891f2f7b6d8ceca792bb5c4b315885102387f3ae5d087c2399b3a6aaa5cb88b77cae21d0b07710c467284bb9da7ccfe0ff1daf4f50316035b0ff99621e68dbb5aaa8f79a711abdfb0e3226f144a33d7498d058043f86ff2e245cca47da86d77a895ada9c5442d74729908eb88662eadaf677b228634e2428d01c6f2050b0c8ccd397b103ad3cfcaf0fb5be899ed5474a4f9c42b522be9e969984e14db18bc9694e8f2b82b3ac1a30c453076e02094eb8c76ba77a15b2edecf004773b6818bfc59abdfe7085e4b75da4b3a784254b4aaedb7df9fe573ac1a5bf4a8b698653b46086becefdc3ea3357ed9a5322069160fafcaea839b526a1bb0bc6123cdd74fdb117fe464cc9b5e28a19dfeb0656ea72b788704493c13a5cc49b37ab986575628dc2a6a3ab7406cb9a30c5ca81e67ffa71e3eed8032a8653d0c7b01be5f9d58c5f4c4ba82197fa7445147fe2a51789547a03557e13d94d3ad9e1c74013fe2f093dc603dd97b138b8b8130a6f3e88e450edc411c48c371846c0dec52c0cffb8b5ed72f7ca6826d774e71befc01dcfc88abb0a73e4fe335854456d1f3d39e276fbbc9ad2d66aa8b45af555ae0b0092d51d7bec646fdecf08946f6a6bb476ac566888882c44feba385bfc42a7209c22833d528095b51ff4426097198d1cdd64d907652651524aa9dce2df00363095ec326f6fd70ff7e147254f51ce493dae302caef955b269a3619ea57133c5640d56bc27f73141934781eb715488b9a6b9a1f984631ebd6ecb56298afaaa85fd7654145e5d471491d0f49e69caab3b23deec44e38e3ef51a03ff6fce5d80b914c5cbb32abb8815db0ff14af8f57eb0f2bc0c3f54dd9932d0dba0b5e4cd953e02817c833f2cc5b9a23a903d5c527bc9a5050a11abcd9be5e284f357ecbdf91a7f0689cfa9b50b22472aa9971d35d6a551ee869b7e2564020e6618f1435277940081ed1ffb849ce2e715e1a7d28f521fe5d5976a4fa6c6c6f0b411a65fbe0ff9244ae987216ef04a44b84cee512c18b1c7814ceb4000ea31a9624cf0e1605cc816aba2bc135701790684f948738c63f173e221a5abadfef282ab8d615603a4c5b73fb78ed56654fd3c7f564f7b9585bb00cc260671c2a53fb2293c39392608204dcc04ec985fd108abb5f627cf3a4535ef73ca0874d50c161255bb27e647550e6d3a704d4fd02cd73edf3a912aca1392e5e23ac96432b9de6294c5d3d502c569b759a68ee6dd5dedc6a2160d8a800530d677f6df0101c3796526416bd79d18365b8b74f4939fac63f91d0b4728a46e04f078dc062ee5f0a353df151ddc31a5c95a7977db15818ad225d7a343cb3519c7a80ea0e65db1887a7a984eaa6ff589b15e6ec9e84803b89b4337dc58772e732bf614039f74a466baa27b8fb1d56d1be8cf9749d7a65a74df3feccaa1465e8f9a0209229e68be39d7d3bf39543dc93a6f0206c74f1198125ec151b421d0c07f693c538620075d92a9fbf6a7b24bce4cb647334f536902686a4fb66b9cd042b314fdb2951c51ceb133435592e8f6df7075dbcbb639785be503f7698b0a89a49082ac9d571f469592868a906dd0126e9f87a04cae62b095745d15f48047285dcc6c2359432af1f59abca92ccba1083505f2b73a8c452c4826654a69c4ab2672c83c1547d06882c294c677e88cd9a4a95d72cacc2bf6c1a70bcbb3452a1e034ae2a88566b8ccb8aeb45badd68d981150732c591481e003237b3ab51ac5aafcdbcf3ec6687075a5e3f9ab10468fb9166048f2328fe3ad447fc6add54c02ace7ac127dc75622c80d1a5c834548ee0df3cde2901bef191e23059110fdc5571bd39fe92044996106e5e85f1312e2f813efd0b993b425dab79ef797d75238d508ee54701447942e9f64433411dc9cb75d0d2d0ac9c0a06eb8735347b7c84c9e06756ac0e4680d7161d7675e77af84cad10e3e7a47c2641c2c75ab92cf05d0dfe97598199043d643102565d53676523db96d308e1a382845db8ac30e3672af448aeb4d7af5768143012a385e48caf591baf28b71256685951048afa9c395a279b793b84c4365058580397b757e607928ff20d8b499f22be59faa068c8afdc3d40818269149a44fe382f1d69cd060f686ad3805121aca3b6d04055257f2b82b8db85d7475397b0e86028345131a8cfa59dede9d757cf73f21384987ec825ae89ca9430d859a9eccc576dfbb801bb94c6fb7016d41479f1e81b91aae83a24aff4b6f4252fcbfb7b7b54f5bf5b24a52e1eaaa75fa3d3fab816bd4f9e922640e973dfdbb9cb71cd2e33ec766ad3b1b670190dbdfafd9d2fb2f4c92f9e9c62fc963b69ba18da7b69b5884237a08458ec5ad931ba7b25e50d39329bc229dc014fce1ef0e0c10557bcccd4497aa4c06518c05884b6a5bc346b13cbabb6d0f3c55a246001b6f830e2dc2cd94dbb5db362453f3828c16234ffc8013683625adc89b62e0b0415ced44d7f34556e79534b325b7c964ec4d2e29488430951fdb183bd73a35a1ad10004127529aa3efd69a18cfdb35052261baf74005a70547a99f00c66fa7086d29b145fad3a00be9e70dd39a58e880ae09b639deaf20acc89a4ae635268ee75c92c09c07a01f8437ad1449a3e8dab851df8b552f3f9b5509cf22a38786658ed25698780495de5978ef466c67bceca531bb9e2cd2fbec0161dd07ce28e0ce1d746bc8d01e7c6c36227b58fce902c177966c5b115bdc7600131b11efa7b79ab6717017d695f4f2328dff56afacb1a44efc3b16ea161c2b85b7fae1f3de9e1a1bfda63b402b44229e8222bb76dbda7d270e49d9cac081eeea1a7758aa3c0533dcf8242fc383c2d3238d9bfae44eed90aa1d81daf77cf03910e1baa37b25d4fc444039b8139fc9c741bf48396106dccbe094289125b7bce7baec8f706dae7254ec98eaae0e6c458b273eb32f0d714f88962945ee5b4816c94fb5e06398d15e3cf0a8d4ab0fde2e92b39eaf372b572bbd2c2f61a4eb66430d239989f50701df769315d644c4c03db5ade84ee24d2081e0446d7fcc056f43c716a2f0cbd8b7504995e84f4128cb9fb162e11d5d13776550852ed1bd006f2cfe2540d10efb47d85e30b9f9691ad90391b56c18cd5c4289a2453c6bad57722760c72c7721caae33ffa1fa98f223bd095af2fc65260d6ad03ef5ebad800e3b5a90b5987be8db403f8108c88be180661916026412bcd77fe9984f84ba82809726fc8f461b6c1fe120dcaea63de746c44a34d0cb2db0f4f73b5d47beabfcfed4cc7482aece748f034cdce7401736cef87541b370c7c5a4b1a1f4e102cc2aaa8e7fadc15cec8bba6061ffd9e3169ab64e8d7db0e4faa399409ab3293dd6fde3841eb3a28eb6eb0e658cdd5a3c3fa2dc3df0e6ecfa33a2c4e236d4a8f4c0c", 0x1000}, {&(0x7f0000003240)="7330d47775fb8acc78a5d6e1ec5c6e91f5fa0fda0d45631afe0f7af9e792fd7ec4c8a0d2bf39249f65cad17ff7db4b07eb125c2651aa2d42290a000354e984a74689b748ebc54e2a81884abc4e3a1ed5080d9b672d389778ae9215d98b5c51fa91abccff4235eee28fda351b47d9e7aa780c330e178d1ee01a7277523ad4d5cdc29292d7602649f0a9009cf9c91288599598a8eaccb08d1856fd8d9bd180d62efdffcdbad118f9311475aede9ec2843076b06a55a4540697063eb2119e20740d75f5c3ac971f1a9e58efd05328fbe7d61a32b6d57d0caa8010c1d5bce1e07b687ae5f6b8865d96e4cef0352e5ea8dbd5b5062eab817e1eb216d6182dd655a8925bbd37c7a91414737236d83a2cf39ca559e71c07684d0f8356db3a34c6a0dedb25f05815149b5a46e9089cc4a9e574e7a9fdb3934575acdf7128c0eccdad407bd924abfc76c1c725ab5a686450a1ec6002240ea56dbecd6d2ec760477da42e5a46723da724b9ae9c110c160aec17164d10bfbda2d079ab43eae2c850ec4eccb78ccd1943fecb0ba3c426110de3e8640ee918541ead244ee415fcc756cf4134fe65075f1b077694cc1276a61cbd0d506cdd2cc51f1aa7c6fd20733086df82782e3cd03829e35858ffa893c7712aa482066e9b37ef7a0e1db323503b797c316e569f0f946d977b1fb74bfb24b4304d251fb68697d1c8d6d04cb849dbf5fe4cf5a31ddff316f472b2eb818bd78b99c5dcfdae93c9b321f42f34c283629be4d5da96816fb5e4c20f532f80f50ca3e02b88b5b63340034fa8a406797de50ba2e2266021d1e921442bcd79b515ebbb1a918d4feaa8c7e529c5e5356f3ba7753d9c486091d69c84a0f88b461205a94ca3ec352454554d4aed87d3acab8b06fe9de995da15b1927cdcf419110ebb62bf2c3755b8cae9f36bed2c0e34aec42965f66890aa98a1613fe4fb4fd06c5fb91591ee163d0b016f8c539fef425f284f31790f07e218aa2c0755088a56d8568e7860c62df03a6fdf4fb6013973711fe501450072449900739715c4fec7b4bf4a048b048b03ef48f9601d249476b4d897f634077b231e834069eac207e4c2672879b8837c6c548735976bfb09b92a349d76ac0ed352f3714060d33b93882392d68b97cbacf4c9374532f16c8f64f056b1ed835b93029bacebc760e58d73f7aeab44b47eb7db67507d6a9f62dee44fcd42c111c324e90c216f71f93d39586b4875d468da41a247adde04d2b07be1214c3a70ec82c75b14ad6b61e648cebdb44750b0e312d03ed8c844d7f288d48a39cfa8306c6db22edc75e56a2cb551ba8e16297a07e3c992cfa747cefeb2687d97cda736bac0485caf49a89345013b004f75333b498f5c18a1d54dfc81004c7438a0a67bc62d7eb9be53b3dd1bc1a4fd99822dc9eaaa0f5b5ded1e20bc64a914c47c161a45c002f00b4f6301d7b2f1a6ec5af555038573594fe3a35b11b1bf2757f2ee07fc30b1b83c8cb018f0c3fab24cf1a5c81a2e1441ed2a60bb6ef0efb7d85f0c52bd05224b035ea4dcad1124da5f150ae23ba97a4a89337eb49d303245bcd2a4aa91a921d4bb5a6672dc524e5f702759dc87eec0d27cd6d590652971fbdbcee359a94271c312fd92a01325dffbd72eef1a9b75377e8e55b0ba0a8a4f483a9a52f3920a72f210c1e98902bf01899f248ac2c1f9bc9cd7a45a0f2f12eac0f5358b661650445a696b2ce8c689f87b8341194a22f0e49db2fc94951b19ade68c5573d025df6a72c9345229f19a115a309b5fd3b21ce648a3b1bea10a29f552c2c3e824327b55a7fcbe2d031b0b3416747d92a7085cfd0ef17adbb6a0c6f551cf3c8c6e640b678b037bebf8649b07977ee66a4fce2921eb281bdb67192a376cd132f3ebc88c72ad4160c2767f6db8a4762364975648091293fdbfc2014187d8b3f60c3eeab6cc99cdc99c6976a415f4ace44c5c2d0d15755cf0f2d16de60b78930d9d05ea5a40b344bc36a8ccf9b1958eb25a7b2556373afa572f830da38ad051891c73762f78d22b7a1c11a097fd46f6e5df06714ae6d9438e2c89ebe0a45156e2e69c85e5e2c9be4715544c686b56086a0af34158f28b074770fe98426b19c8bdb206ccea4bf94b1d5e7adeead6622ddc0557e2f61e423a0d0b44b1c5254a2ad8cbcc41654bc2bd891ceb565be48468eb3df007fb0d244f438d2bb58489cce31bb44c6850b8ac579a0e21b8dcc744c60377d5fdc023096150786df9b01040372461317c4ce3df3fdbf9f628bd27d0eefffcdd96d7e8cf9b60817eda28817c208d3daa5859391561f6ff9675f3e87433a84c0fc35e101c7d7124ae1a35cc6de79aec488ddec652010d08e2956898586a39d6b834ff9b2edea578a598bbb08af59a05178148a13a999f33dd94317eeae55c6b571df07a0105aa2eb941d3ddba199b9070b0931ea134a90008db3a401579b0be6d8a46b85f9f93d87b7dbe634725ecc4b436b21b048899e88423773d4248b8d84e7b0469d94efcd868042d3210fd80cf986154e82e0424960d04b34fc56fb59b8cc6fe02226717984bfe411cd9baf45254404b5676907b2b54b4ad000c0dfc66d73d4cee6ba9eb302a3a66c2539a3ad39db46732ec3db3796a080a0b40db97f8144d62948691fe7c03201e10e994d7232e58eb7fe48ec8639d8a0e3ff6fab234450655672b903dad9f5d6b44b8b0bf16b01b2aea13986869884922cc4a5352e9ba71afcaee6edd74210cccd46a8b5d259e45a6acdc8fa01bf812516027ae59325c608b5b34385862341f1c0a32e1f19a560eea8a47cba213a45e57c78a9f66f8bd7ec6087b91267b6eefe6b3d32317b6a8c8caf9fd1cd63ba5752f53f2f97f68ea0a6dec165bb81df528ae488fcb642b4f7df4d795536a0d79ff027429f6dc8741e2472e2bbd30ae82eea904a6a756512072a9c7c06a7d6be5b469972544c4e793ac32d75dbe0079c4961fc7c8cabf0333c28845398907650e1410c9f0309f92b693d3aa6dfa48f72a2f2d553519a76439799825520fadead35f04a279d5d2c72b2a6610ce281bf3182113da2211afff9c96be02bec59e5e667c24af0bbc289514713e344b6410d662395963046fb5836606548f0aca67d49ddf349dc36a873bbb752e76483d101ff62194cd80b4eb038ab599a0bc2b37eed82808903ddb2d015eb41e0607b9f0502ed92bc4ae248bae859c44180a889a0910d7883f1d0cf9d0eaa763f9d7a2947bd46125b9498cfe97e933aba885b68f95b227a7982deb37bb4940f7f6dd3f82244f4cddbd8dc4864d37d401e963d5be3989bd2ebe7e5665c3db662b08675443f9e9a318b0bd1208781d45c83760f7a6849d3cd3620f80a30d7f382b629436616f6a3b4621c6700037f30b7c01ae929156fbde7ff2c5eab4332a377bbb8d69a8f9e8147bdd5c6d2827077780dda0495470a7c6221fe81f78863ce9842aabaaf6c899cc3f784a468fc54a7ca42b71fedd7bde6d449a3f9b68c9d1c99bdb2008476bf4bbef1e329b8db693a7f4130410a0ada904608ac833e93109df1cc430fad8d74b436cc041fdf1dd1c899e329e7022799a50a67518000e452034663386e8fdbc15ddabf3ca7b3297169154408878be8c8e25c14c68a2be5af7758ee0e0de19c4b5ce31d9791f858dc933ca3fc27f522683a614675cf3bc43cbfedd7c7a8a502d28707102e1960d0e8ca66028253e8fe86e18f70aaa3c7af3838b32de9318159bac4b84632e73acf28b730fc0b6ff44db6f6caf7017a2f8411a3b3aa8bfde411445a4e325991b3bd5a6d3ff3c260ad58dad52aca0222155bbd33a4fdd9ba0c31906c78deaeaa822ab49c52fbeb3b20f04ddaa952fa8e9d846591d271126baf608ab0bc37ab3e600a14369efedebcef31acaf85d69f30462b9e0fab7c33b2003b9cfbddf829c773286c8c8e2db8acf583e5370f3777d6992064e5bbde996af4685b2f4b3aae5cd84754b75c370feeebc9a9b4a7a6f5d52b6ed0d44079c7d9998b4ae22f3410154a6491090154b0b18cdf1ecbd5f6eb4a621e341e83ad1f8b2d08000ae6bc28ce7a242df1016e80515936104b0b08e0fda66f7b6ef9f38cbb9b9644993d24097a9d464272e33b89422aec7c354e3b24e652ff532836aec00382393274c293d349def2f151b249d7d7d18cad27363617bffdf173cd2dc66906903bf31c6026ab22a9973019b71afd541256055da299d6b8db6a1e37428c3f51422794024cb5ba0a921cb51d51fd5a4b810f2e62afe8964681a2ad9be257c5793c7dc2f45d6bad61c2b6a3060d7570c9090ab7ff1dcc8a114fe6f6f4df28d868098f20b92e83dbd0c2fdd83f2862ee7742b24f3f78ef3464d97553fe750e4794559b0558b68ac0aeb084a9502570bad1e4641b90eadbc74ea85af292d554645e4ef1935587ea16ca6833d6de01ad9411b2b6ad1a62483c39b2dc27646449dd002d1a93eb0a47a0941717c890b3028b08946478a0be03ae35503cbd9b50f1496ade66396f42d5cd2d3f3f929fcc32c6b525fa73a3bb48631f1e1bb2df3979f27ceaa403b437644f7890e6bbd9cfa01a5205272d828d0ada72d1e1dfe347a04c7ebddd2abda3d5711187f4214f235dec239f092e6f094e2fe98ea3c078b7ddeb4e5cc5697ca4f97a4a03dc1fed8fb4c872d21752edce6f8db2bd7ffa47f3e72f8d0a997720ddcc771c3c047359e0ba6409585759ca1c29127965388fbaa04ade9de7cd630b77141d946efdabf2ed43bb26d6023a9b3f45cb16da4e9444cc5932bb0d716fe98914934a7704d780b08df169e23438928d0fb0bffadd2992ac9b08988a1de5e85510951471079373ab7428b8c9c6df3b91f01cdc02f7fc090a8aec1493df56a7e4ce18e899f145cef011b2c649fd320f663e202f3b735e163cdbcde3bd35f55a6fe406dd333c0cb44db9cb4bb2faff1ebd2851e5e80c45b5cd5c5bb5e849c06aa6967567b92454b32ec0e2775b2a0268f8c8cbd400eb1c67edf3517e6cd17df102dc97feec800572b29fb5cccb09fc9fa2ccb9784b77993da3f8bb68bec523b31469923759fd99b162f14b31d30ff729caa48542765a3bc5d6201bb620fc59967fd633a4962a45e1a7fa965f9d063002e40d6a9f470c899e5ab2ccf7a498f697f6dcb78ddd7d5491ba4d223bc5b5708db61325d3217df9a6b998f60ae902fd671658e083adc30c51f59b124b4ac95d6ed789757e99d5060881e3188e53df2f95c662aecd60ac481189c55cc088bf603173ac1cc1439c841b13647001c7dd42c9f97cf8886312515fc3c0fd80aa6a5057a29c2db9b96aa0710e2ab9f86646e5f9566dcc690da0ad08c84864f02a60ea7e6e54cbd5a466bfb5b4683bc0ed9499553ec5f5fb13937ae89ab4b88768d075393965ebb61a9f6f3eeca51c9070debe23f3e2354a5f075168edce5ab08fdc47b0cdeedc742929e0d151bf6ff90f0dcd9b0f3bc60d46a7996f23c243aabf5f6b62e4afcfc25856930dcf9348f324f672e4fc6e577e7b56fa194313259f0ef776b507848f750dc7c55888d9da2cd53ce64e5a2d2f61e7a4d7ea611d924e5242dd099038d245bc3d8dacacd428fa18add4c482f52dd47c35c7e35c4d19ee809e6a5eeb9189890bf4e1147abc806a41e898f94606e693c62b2d34a904ce5236006fcfc9aa2cf3659ca4fdfadc59779e9042a56847b09eb14cee5be526e383cf458287f97339cf5109b9a783a46cf8cf7118cf4c874d65c6ea35bfc7673e85be1fa3ff836ef5217e71b9b7b4689865cd5e3ae52d30432ef21753ace8b7f0c", 0x1000}, {&(0x7f0000004240)="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", 0xfe}], 0x3, 0x70a9eade, 0xdee) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000043c0), r0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004400)={0x0, @dev, @initdev}, &(0x7f0000004440)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004500)={'syztnl2\x00', &(0x7f0000004480)={'gre0\x00', 0x0, 0x40, 0x1, 0x8, 0x800, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast2, {[@generic={0x44, 0x6, "b8eb1f73"}, @timestamp={0x44, 0x8, 0x39, 0x0, 0xe, [0x400]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000045c0)={'syztnl1\x00', &(0x7f0000004540)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xe, 0x2, 0x40, @local, @remote, 0x1, 0x1, 0x0, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004600)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000046c0)={'syztnl2\x00', &(0x7f0000004640)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x80, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x40, 0x10, 0xf, 0x1}}) (async) getpeername$packet(r0, &(0x7f0000004700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004740)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000004800)={'syztnl2\x00', &(0x7f0000004780)={'sit0\x00', 0x0, 0x700, 0x8080, 0x7, 0xcea7, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@ssrr={0x89, 0x13, 0x7e, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004840)={0x0, @initdev, @initdev}, &(0x7f0000004880)=0xc) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000048c0)={0x0, @initdev, @initdev}, &(0x7f0000004900)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004980)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000004a00)={'syztnl2\x00', &(0x7f00000049c0)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x4, 0x8001, {{0x6, 0x4, 0x2, 0x38, 0x18, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @multicast2, {[@end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004a40)={'team0\x00', 0x0}) (async) getpeername$packet(r0, &(0x7f0000004a80)={0x11, 0x0, 0x0}, &(0x7f0000004ac0)=0x14) (async) getsockname$packet(r0, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004b40)=0x14) (async) getsockname$packet(r0, &(0x7f0000004b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000004c00)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000054c0)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005480)={&(0x7f0000004c40)={0x838, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x4, 0x1, 0x10, 0x3}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd1c8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x68}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r13}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xfff8, 0x6, 0x9e, 0x2}, {0xd9, 0x1, 0x7f, 0x40}, {0x4, 0xf5, 0x1, 0xbc8}, {0x7f, 0x22, 0x13, 0x3}, {0x10, 0x6, 0x5, 0x2}, {0x5, 0x7, 0x4, 0xe0}, {0x2000, 0x7, 0x23, 0x5}, {0x6, 0x0, 0xc, 0xd}, {0xce1d, 0x5, 0x6, 0x5ac0}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xad9a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x2000000}, 0x20040054) (async) socket(0x9, 0x6, 0x28e80000) lsetxattr$trusted_overlay_opaque(&(0x7f0000005500)='./file0\x00', &(0x7f0000005540), &(0x7f0000005580), 0x2, 0x1) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000055c0)={0x7, 0x0, [{0x8, 0x1, 0x1, 0x0, @msi={0x20, 0x2}}, {0x1, 0x3, 0x1, 0x0, @irqchip={0xaf, 0x7fffffff}}, {0x331, 0x4, 0x1, 0x0, @msi={0x7, 0xfffffffc, 0x7f, 0x31}}, {0x0, 0x4, 0x1, 0x0, @adapter={0x4, 0x4, 0xa, 0x10000, 0x401}}, {0x5, 0x3, 0x0, 0x0, @msi={0x2, 0x3, 0x5, 0x8}}, {0x7, 0x3, 0x1, 0x0, @adapter={0x1, 0x13, 0xfffffffffffffffd, 0x7f, 0x8}}, {0x4, 0x5, 0x1, 0x0, @sint={0xa8, 0xfffffbff}}]}) 49.483173ms ago: executing program 5 (id=1863): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) flock(r0, 0x2) 45.928978ms ago: executing program 0 (id=1864): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x181) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) flock(r5, 0xc) 0s ago: executing program 5 (id=1865): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000001040), 0x201, 0x0) mq_open(&(0x7f00000005c0)='\xb8\x88\xf5\xdb\xb4\xeb\xa5\xe7a\xd98\xd9\x96R\xe0Na%D\xf9x\xba\xc6[\xcb`\x14]\xfe\x8e\xb8\x1a\x83\xd3w\xbf7xdD\x8b\x9b\xb6\xc9\x8f\x7f\xe6\xe4r}-\xfe9\x8c5E\xf5\xdc\x14\r\x1b_\x0fs0\xaa>\xeae\xdeZ0WYfr\xe7\x9a\xa7\xa8\x9ac\xf9\x05\x96-\x9b\xf6\xf0\x18\x88\t\b\x9c\xf5\xa1\xda\xeb\x99\xcbP^q\x8afa\xa7U\xb3C\am\xd9\x7f\xa7\xa3P3a\xb2\xafbI\xc5\xa9\x80\xa8\xf6\x9b$d|g]\x13A*Rn\xf9\xaf\x98i\xa2B\a\x83\xfc\xf5\xcf\xafb\xe8\x98kU\xa9;\xc6}\xa6~\x86\xf4\'\xed\xc5>0xffffffffffffffff}, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2c7b, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001080)=@new_dev={0x3, 0xf6d}}}, &(0x7f0000001140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) kernel console output (not intermixed with test programs): type=1400 audit(190.933:2752): avc: denied { read append } for pid=11389 comm="syz.0.1457" name="cpuset.effective_cpus" dev="9p" ino=77093785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.075589][ T42] audit: type=1400 audit(190.933:2753): avc: denied { open } for pid=11389 comm="syz.0.1457" path="/415/file0/cpuset.effective_cpus" dev="9p" ino=77093785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 191.119146][T11399] FAULT_INJECTION: forcing a failure. [ 191.119146][T11399] name failslab, interval 1, probability 0, space 0, times 0 [ 191.128971][T11399] CPU: 3 UID: 0 PID: 11399 Comm: syz.7.1460 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.128991][T11399] Tainted: [L]=SOFTLOCKUP [ 191.128995][T11399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.129010][T11399] Call Trace: [ 191.129021][T11399] [ 191.129026][T11399] dump_stack_lvl+0x100/0x190 [ 191.129125][T11399] should_fail_ex.cold+0x5/0xa [ 191.129165][T11399] should_failslab+0xc2/0x120 [ 191.129208][T11399] __kmalloc_cache_noprof+0x91/0x6c0 [ 191.129226][T11399] ? configfs_write_iter+0x388/0x4e0 [ 191.129253][T11399] configfs_write_iter+0x388/0x4e0 [ 191.129269][T11399] vfs_write+0x6ac/0x1050 [ 191.129285][T11399] ? __pfx_configfs_write_iter+0x10/0x10 [ 191.129301][T11399] ? __pfx_vfs_write+0x10/0x10 [ 191.129320][T11399] ksys_write+0x12a/0x250 [ 191.129331][T11399] ? __pfx_ksys_write+0x10/0x10 [ 191.129345][T11399] do_syscall_64+0x115/0x870 [ 191.129381][T11399] ? clear_bhb_loop+0x70/0xc0 [ 191.129396][T11399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.129408][T11399] RIP: 0033:0x7fcbaf39e0d9 [ 191.129418][T11399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.129431][T11399] RSP: 002b:00007fcbb0273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.129456][T11399] RAX: ffffffffffffffda RBX: 00007fcbaf625fa0 RCX: 00007fcbaf39e0d9 [ 191.129465][T11399] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 191.129474][T11399] RBP: 00007fcbb0273090 R08: 0000000000000000 R09: 0000000000000000 [ 191.129482][T11399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.129488][T11399] R13: 00007fcbaf626038 R14: 00007fcbaf625fa0 R15: 00007ffcd09b5978 [ 191.129503][T11399] [ 191.227523][ T5727] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 191.541590][ T5827] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 191.671572][ T5827] usb 12-1: device descriptor read/64, error -71 [ 191.691917][ T5731] Bluetooth: hci0: command tx timeout [ 191.911579][ T5827] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 192.007110][T11415] xt_hashlimit: size too large, truncated to 1048576 [ 192.041779][ T5827] usb 12-1: device descriptor read/64, error -71 [ 192.151723][ T5827] usb usb12-port1: attempt power cycle [ 192.188546][T11421] __nla_validate_parse: 3 callbacks suppressed [ 192.188560][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 192.314198][T11433] FAULT_INJECTION: forcing a failure. [ 192.314198][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.316795][T11431] Cannot find del_set index 4 as target [ 192.318497][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.0.1471 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.318515][T11433] Tainted: [L]=SOFTLOCKUP [ 192.318518][T11433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.318525][T11433] Call Trace: [ 192.318529][T11433] [ 192.318533][T11433] dump_stack_lvl+0x100/0x190 [ 192.318556][T11433] should_fail_ex.cold+0x5/0xa [ 192.318572][T11433] _copy_from_iter+0x1f4/0x1690 [ 192.318631][T11433] ? __pfx__copy_from_iter+0x10/0x10 [ 192.318646][T11433] ? kasan_save_track+0x14/0x30 [ 192.318661][T11433] ? __kasan_kmalloc+0xaa/0xb0 [ 192.318675][T11433] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 192.318687][T11433] ? configfs_write_iter+0x388/0x4e0 [ 192.318704][T11433] configfs_write_iter+0xb3/0x4e0 [ 192.318720][T11433] vfs_write+0x6ac/0x1050 [ 192.318733][T11433] ? __pfx_configfs_write_iter+0x10/0x10 [ 192.318748][T11433] ? __pfx_vfs_write+0x10/0x10 [ 192.318767][T11433] ksys_write+0x12a/0x250 [ 192.318777][T11433] ? __pfx_ksys_write+0x10/0x10 [ 192.318792][T11433] do_syscall_64+0x115/0x870 [ 192.318806][T11433] ? clear_bhb_loop+0x70/0xc0 [ 192.318820][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.318831][T11433] RIP: 0033:0x7f668979e0d9 [ 192.318842][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.318852][T11433] RSP: 002b:00007f668a61c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.318864][T11433] RAX: ffffffffffffffda RBX: 00007f6689a25fa0 RCX: 00007f668979e0d9 [ 192.318871][T11433] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 192.318877][T11433] RBP: 00007f668a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 192.318884][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.318890][T11433] R13: 00007f6689a26038 R14: 00007f6689a25fa0 R15: 00007fff0cb591c8 [ 192.318904][T11433] [ 192.387320][T11435] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 192.492244][ T5827] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 192.513303][ T5827] usb 12-1: device descriptor read/8, error -71 [ 192.721780][ T1036] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 192.751545][ T5827] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 192.772292][ T5827] usb 12-1: device descriptor read/8, error -71 [ 192.872694][ T1036] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 192.882031][ T1036] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.883956][ T5827] usb usb12-port1: unable to enumerate USB device [ 192.888064][ T1036] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 192.897310][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.926162][ T1036] opticon 9-1:1.0: opticon converter detected [ 192.937499][ T1036] usb 9-1: opticon converter now attached to ttyUSB0 [ 193.015350][T11447] 9pnet_virtio: no channels available for device syz [ 193.018187][T11448] 9pnet_virtio: no channels available for device syz [ 193.196152][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.196347][ T5829] usb 10-1: USB disconnect, device number 3 [ 193.213405][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.238636][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.249424][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.401817][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.407297][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.422655][T11441] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 193.625712][ T1036] usb 9-1: USB disconnect, device number 5 [ 193.632654][T11480] FAULT_INJECTION: forcing a failure. [ 193.632654][T11480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.640924][T11480] CPU: 2 UID: 0 PID: 11480 Comm: syz.5.1481 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.640944][T11480] Tainted: [L]=SOFTLOCKUP [ 193.640949][T11480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.640956][T11480] Call Trace: [ 193.640960][T11480] [ 193.640965][T11480] dump_stack_lvl+0x100/0x190 [ 193.640987][T11480] should_fail_ex.cold+0x5/0xa [ 193.641003][T11480] _copy_to_user+0x32/0xd0 [ 193.641022][T11480] simple_read_from_buffer+0xcb/0x170 [ 193.641037][T11480] proc_fail_nth_read+0x1af/0x230 [ 193.641058][T11480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.641078][T11480] ? rw_verify_area+0xce/0x6d0 [ 193.641094][T11480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 193.641113][T11480] vfs_read+0x1e4/0xb40 [ 193.641132][T11480] ? __pfx_vfs_read+0x10/0x10 [ 193.641149][T11480] ? __fget_files+0x215/0x3d0 [ 193.641165][T11480] ? __fget_files+0x21f/0x3d0 [ 193.641180][T11480] ksys_read+0x12a/0x250 [ 193.641195][T11480] ? __pfx_ksys_read+0x10/0x10 [ 193.641209][T11480] do_syscall_64+0x115/0x870 [ 193.641222][T11480] ? clear_bhb_loop+0x70/0xc0 [ 193.641236][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.641248][T11480] RIP: 0033:0x7f611dd5e90e [ 193.641258][T11480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.641269][T11480] RSP: 002b:00007f611ebc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.641281][T11480] RAX: ffffffffffffffda RBX: 00007f611ebc16c0 RCX: 00007f611dd5e90e [ 193.641288][T11480] RDX: 000000000000000f RSI: 00007f611ebc10a0 RDI: 0000000000000004 [ 193.641294][T11480] RBP: 00007f611ebc1090 R08: 0000000000000000 R09: 0000000000000000 [ 193.641300][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.641306][T11480] R13: 00007f611e026038 R14: 00007f611e025fa0 R15: 00007ffc7feaedd8 [ 193.641320][T11480] [ 193.705099][ T1036] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 193.718985][ T1036] opticon 9-1:1.0: device disconnected [ 193.974917][T11491] Invalid argument reading file caps for ./file0 [ 193.986393][T11496] cgroup: fork rejected by pids controller in /syz5 [ 194.177114][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.812412][T11553] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 194.867223][T11553] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 194.879335][ T5731] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 194.954680][ T5800] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.004533][T11559] netlink: 'syz.4.1496': attribute type 2 has an invalid length. [ 195.012786][T11559] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.034835][ T5732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.038623][ T5732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.048190][ T5732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.055210][ T5732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.061281][ T5732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.078584][T11559] bridge0: entered promiscuous mode [ 195.083834][T11559] bridge0: entered allmulticast mode [ 195.192662][ T5800] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.236518][T11571] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 195.292516][T11571] bridge1: entered promiscuous mode [ 195.298063][T11571] bond1: (slave bridge1): making interface the new active one [ 195.306136][T11571] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 195.314296][T11571] bridge2: entered promiscuous mode [ 195.317656][T11571] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 195.374916][ T5800] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.376598][T11586] overlayfs: conflicting options: nfs_export=on,index=off [ 195.589169][ T5800] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.618144][T11614] binder: 11613:11614 ioctl c0306201 200000000440 returned -14 [ 195.693952][T11561] vcan0 speed is unknown, defaulting to 1000 [ 195.743169][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1510'. [ 195.796365][T11624] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input21 [ 195.916998][ T42] kauditd_printk_skb: 320 callbacks suppressed [ 195.917012][ T42] audit: type=1400 audit(195.843:3074): avc: denied { read } for pid=11631 comm="syz.4.1514" dev="nsfs" ino=4026533845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 195.930845][ T42] audit: type=1400 audit(195.843:3075): avc: denied { open } for pid=11631 comm="syz.4.1514" path="net:[4026533845]" dev="nsfs" ino=4026533845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 195.955895][ T42] audit: type=1400 audit(195.843:3076): avc: denied { create } for pid=11631 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.971878][ T42] audit: type=1400 audit(195.873:3077): avc: denied { create } for pid=11631 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.985525][ T42] audit: type=1400 audit(195.873:3078): avc: denied { bind } for pid=11631 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 195.987238][ T5800] bridge_slave_1: left allmulticast mode [ 195.993232][ T42] audit: type=1400 audit(195.883:3079): avc: denied { bind } for pid=11631 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.002287][ T5800] bridge_slave_1: left promiscuous mode [ 196.002437][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.010047][ T42] audit: type=1400 audit(195.933:3080): avc: denied { prog_load } for pid=11634 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.028247][ T5800] bridge_slave_0: left allmulticast mode [ 196.030644][ T5800] bridge_slave_0: left promiscuous mode [ 196.031649][ T42] audit: type=1400 audit(195.933:3081): avc: denied { read } for pid=11636 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.033905][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.039928][ T42] audit: type=1400 audit(195.933:3082): avc: denied { bpf } for pid=11634 comm="syz.4.1515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.061525][ T42] audit: type=1400 audit(195.933:3083): avc: denied { read open } for pid=11636 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.131143][T11648] xt_policy: neither incoming nor outgoing policy selected [ 196.142504][T11644] overlayfs: failed lookup in lower (newroot/116, name='bus', err=-40): overlapping layers [ 196.212748][T11654] GUP no longer grows the stack in syz.0.1518 (11654): 200000004000-20000000a000 (200000002000) [ 196.229465][T11654] CPU: 0 UID: 0 PID: 11654 Comm: syz.0.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.229502][T11654] Tainted: [L]=SOFTLOCKUP [ 196.229510][T11654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 196.229522][T11654] Call Trace: [ 196.229531][T11654] [ 196.229539][T11654] dump_stack_lvl+0x100/0x190 [ 196.229572][T11654] gup_vma_lookup.cold+0x83/0x96 [ 196.229620][T11654] __get_user_pages+0x241/0x32a0 [ 196.229665][T11654] ? find_held_lock+0x2b/0x80 [ 196.229692][T11654] ? mtree_load+0x311/0xa90 [ 196.229727][T11654] ? __pfx___get_user_pages+0x10/0x10 [ 196.229763][T11654] get_user_pages_remote+0x3d2/0xb10 [ 196.229792][T11654] ? mas_root_expand+0x6e0/0x750 [ 196.229818][T11654] ? __pfx_get_user_pages_remote+0x10/0x10 [ 196.229853][T11654] __access_remote_vm+0x3bb/0x890 [ 196.229884][T11654] ? __pfx___access_remote_vm+0x10/0x10 [ 196.229906][T11654] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 196.229925][T11654] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 196.229948][T11654] proc_pid_cmdline_read+0x552/0x9a0 [ 196.229968][T11654] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 196.229989][T11654] ? rw_verify_area+0xce/0x6d0 [ 196.230015][T11654] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 196.230032][T11654] vfs_readv+0x5d8/0x8d0 [ 196.230063][T11654] ? __pfx_vfs_readv+0x10/0x10 [ 196.230111][T11654] ? __fget_files+0x21f/0x3d0 [ 196.230139][T11654] ? do_preadv+0x1ac/0x270 [ 196.230164][T11654] do_preadv+0x1ac/0x270 [ 196.230183][T11654] ? __pfx_do_preadv+0x10/0x10 [ 196.230203][T11654] do_syscall_64+0x115/0x870 [ 196.230216][T11654] ? clear_bhb_loop+0x70/0xc0 [ 196.230230][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.230242][T11654] RIP: 0033:0x7f668979e0d9 [ 196.230253][T11654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.230264][T11654] RSP: 002b:00007f668a61c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 196.230277][T11654] RAX: ffffffffffffffda RBX: 00007f6689a25fa0 RCX: 00007f668979e0d9 [ 196.230285][T11654] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 196.230292][T11654] RBP: 00007f6689835024 R08: 00000000fffffff9 R09: 0000000000000000 [ 196.230300][T11654] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 196.230308][T11654] R13: 00007f6689a26038 R14: 00007f6689a25fa0 R15: 00007fff0cb591c8 [ 196.230323][T11654] [ 196.374469][ T5800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.379062][ T5800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.386121][ T5800] bond0 (unregistering): Released all slaves [ 196.391168][ T5800] bond1 (unregistering): Released all slaves [ 196.406364][ T5436] 8021q: adding VLAN 0 to HW filter on device eth10 [ 196.613784][T11664] syzkaller1: entered promiscuous mode [ 196.615669][T11664] syzkaller1: entered allmulticast mode [ 196.710804][ T5436] 8021q: adding VLAN 0 to HW filter on device eth12 [ 196.876207][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1525'. [ 197.040386][ T5436] 8021q: adding VLAN 0 to HW filter on device eth11 [ 197.107551][ T5800] hsr_slave_0: left promiscuous mode [ 197.110606][ T5800] hsr_slave_1: left promiscuous mode [ 197.116200][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.119254][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.121611][ T5732] Bluetooth: hci5: command tx timeout [ 197.128520][ T5800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.130936][ T5800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.137426][ T5800] veth1_macvtap: left promiscuous mode [ 197.139522][ T5800] veth0_macvtap: left promiscuous mode [ 197.142192][ T5800] veth1_vlan: left promiscuous mode [ 197.144220][ T5800] veth0_vlan: left promiscuous mode [ 197.283505][ T5800] team0 (unregistering): Port device team_slave_1 removed [ 197.293725][ T5800] team0 (unregistering): Port device team_slave_0 removed [ 197.541510][T11682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.554036][T11682] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.558290][T11682] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.563820][T11682] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 197.568178][T11682] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 197.570401][T11682] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 197.585310][T11682] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 197.931695][T11730] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 197.990210][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.999406][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.006077][T11561] bridge_slave_0: entered allmulticast mode [ 198.038429][T11561] bridge_slave_0: entered promiscuous mode [ 198.068160][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.080349][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.090195][T11561] bridge_slave_1: entered allmulticast mode [ 198.100611][T11561] bridge_slave_1: entered promiscuous mode [ 198.137302][ T5800] IPVS: stop unused estimator thread 0... [ 198.140659][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.148080][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.176554][T11561] team0: Port device team_slave_0 added [ 198.180577][T11561] team0: Port device team_slave_1 added [ 198.208541][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.210900][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.221920][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.228590][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.230726][T11755] Cannot find add_set index 65532 as target [ 198.232759][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.244824][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.257880][T11755] kvm: apic: phys broadcast and lowest prio [ 198.284465][T11561] hsr_slave_0: entered promiscuous mode [ 198.287930][T11561] hsr_slave_1: entered promiscuous mode [ 198.290996][T11561] debugfs: 'hsr0' already exists in 'hsr' [ 198.294528][T11561] Cannot create hsr debugfs directory [ 198.424006][T11760] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 198.449775][T11760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.497390][T11760] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.499858][T11760] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 198.503936][T11760] bond3: (slave gre1): Error -95 calling set_mac_address [ 198.521236][T11762] gretap1: entered promiscuous mode [ 198.568163][T11763] SELinux: policydb magic number 0xdd864803 does not match expected magic number 0xf97cff8c [ 198.575882][T11763] SELinux: failed to load policy [ 198.882732][ T5732] Bluetooth: hci4: command 0x040f tx timeout [ 199.601585][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.611588][ T5732] Bluetooth: hci5: command 0x040f tx timeout [ 200.897924][T11730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.921696][ T42] kauditd_printk_skb: 260 callbacks suppressed [ 200.921726][ T42] audit: type=1400 audit(200.843:3344): avc: denied { read } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.925065][T11561] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 200.936096][ T42] audit: type=1400 audit(200.843:3345): avc: denied { write } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.959734][ T42] audit: type=1400 audit(200.883:3346): avc: denied { read write } for pid=10962 comm="syz-executor" name="loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.969963][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.974314][ T42] audit: type=1400 audit(200.893:3347): avc: denied { open } for pid=10962 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.984756][T11561] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.998043][ T42] audit: type=1400 audit(200.893:3348): avc: denied { ioctl } for pid=10962 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.026312][ T42] audit: type=1400 audit(200.953:3349): avc: denied { create } for pid=11789 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 201.027458][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.041544][ T42] audit: type=1400 audit(200.963:3350): avc: denied { create } for pid=11789 comm="syz.4.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 201.042326][ T5732] Bluetooth: hci4: unexpected event for opcode 0x1804 [ 201.053899][T11561] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.059145][ T42] audit: type=1400 audit(200.983:3351): avc: denied { read } for pid=11789 comm="syz.4.1543" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.063345][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.070276][T11561] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.074581][ T42] audit: type=1400 audit(200.983:3352): avc: denied { open } for pid=11789 comm="syz.4.1543" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.087102][ T42] audit: type=1400 audit(200.983:3353): avc: denied { ioctl } for pid=11789 comm="syz.4.1543" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.103774][T11561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.189702][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.196329][T11806] random: crng reseeded on system resumption [ 201.197483][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1545'. [ 201.204469][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.218789][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.221976][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.242937][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.246518][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.358421][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 201.362525][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1547'. [ 201.459623][T11824] netlink: 'syz.7.1546': attribute type 1 has an invalid length. [ 201.463124][T11824] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1546'. [ 201.681749][ T5732] Bluetooth: hci5: command 0x040f tx timeout [ 201.681807][ T5731] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.738376][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.799123][T11850] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1551'. [ 201.982947][T11561] veth0_vlan: entered promiscuous mode [ 201.984957][T11861] kvm: emulating exchange as write [ 201.993546][T11561] veth1_vlan: entered promiscuous mode [ 202.023398][T11561] veth0_macvtap: entered promiscuous mode [ 202.030304][T11561] veth1_macvtap: entered promiscuous mode [ 202.042261][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.049416][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.058796][ T5800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.061656][ T5800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.124891][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.198279][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.208705][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.219170][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.283397][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.290066][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.581380][T11906] xt_hashlimit: size too large, truncated to 1048576 [ 202.742268][T11921] sg_read: process 11 (syz.5.1564) changed security contexts after opening file descriptor, this is not allowed. [ 202.794899][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 202.885254][T11928] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 203.046625][T11932] binder: 11931:11932 ioctl 4018620d 0 returned -22 [ 203.605800][T11956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.667446][T11964] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 203.695698][T11964] exFAT-fs (nbd0): unable to read boot sector [ 203.698272][T11964] exFAT-fs (nbd0): failed to read boot sector [ 203.702820][T11964] exFAT-fs (nbd0): failed to recognize exfat type [ 203.761822][ T5731] Bluetooth: hci5: command 0x040f tx timeout [ 203.761876][ T5732] Bluetooth: hci0: command 0x0c1a tx timeout [ 203.896825][T11972] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 203.917091][T11972] UDC core: g1: couldn't find an available UDC or it's busy [ 203.957366][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.961097][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.191510][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 204.256885][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 204.341991][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.346719][ T10] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.351030][ T10] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 204.354308][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.365285][T11978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 204.371892][ T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.416910][T11996] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1589'. [ 204.422745][T11997] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1589'. [ 204.569962][ T10] usb 10-1: USB disconnect, device number 4 [ 205.007557][T12004] Bluetooth: MGMT ver 1.23 [ 205.009485][T12004] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 205.243633][T12010] syzkaller1: entered promiscuous mode [ 205.245932][T12010] syzkaller1: entered allmulticast mode [ 205.361694][ T5807] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 205.492319][ T5807] usb 10-1: device descriptor read/64, error -71 [ 205.731696][ T5807] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 205.851612][ T5732] Bluetooth: hci5: command 0x040f tx timeout [ 205.871529][ T5807] usb 10-1: device descriptor read/64, error -71 [ 205.981756][ T5807] usb usb10-port1: attempt power cycle [ 206.236725][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 206.240068][T12018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.275472][ T42] kauditd_printk_skb: 328 callbacks suppressed [ 206.275492][ T42] audit: type=1400 audit(206.203:3682): avc: denied { create } for pid=12019 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.286353][ T42] audit: type=1400 audit(206.203:3683): avc: denied { bind } for pid=12019 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.294996][ T42] audit: type=1400 audit(206.203:3684): avc: denied { write } for pid=12019 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 206.303068][ T42] audit: type=1400 audit(206.203:3685): avc: denied { read } for pid=12019 comm="syz.0.1597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.312491][ T42] audit: type=1400 audit(206.203:3686): avc: denied { open } for pid=12019 comm="syz.0.1597" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.321524][ T42] audit: type=1400 audit(206.203:3687): avc: denied { ioctl } for pid=12019 comm="syz.0.1597" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.321879][ T5807] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 206.350997][ T42] audit: type=1400 audit(206.273:3688): avc: denied { write } for pid=12019 comm="syz.0.1597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 206.363796][ T5807] usb 10-1: device descriptor read/8, error -71 [ 206.367290][ T42] audit: type=1400 audit(206.293:3689): avc: denied { mounton } for pid=12019 comm="syz.0.1597" path="/465/dev" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.368254][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 206.374522][ T42] audit: type=1400 audit(206.293:3690): avc: denied { mount } for pid=12019 comm="syz.0.1597" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 206.377722][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 206.387751][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xffbb instead [ 206.390995][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6f6b instead [ 206.394272][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 206.397518][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 206.400793][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 206.404256][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 206.407638][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 206.410904][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 206.414444][T12020] jffs2: Further such events for this erase block will not be printed [ 206.417314][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 206.421361][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 206.425639][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xffbb instead [ 206.429580][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6f6b instead [ 206.434010][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 206.438165][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 206.442540][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 206.446761][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 206.451641][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 206.455873][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 206.460030][T12020] jffs2: Further such events for this erase block will not be printed [ 206.464087][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 206.468280][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 206.472622][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xffbb instead [ 206.476828][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x6f6b instead [ 206.481018][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 206.486549][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 206.490839][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xffbb instead [ 206.495476][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x6f6b instead [ 206.499597][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 206.503785][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 206.508043][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xffbb instead [ 206.508057][ T42] audit: type=1400 audit(206.433:3691): avc: denied { search } for pid=12023 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.512773][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x6f6b instead [ 206.512832][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 206.512849][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 206.512865][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xffbb instead [ 206.512883][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x6f6b instead [ 206.512929][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 206.512946][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 206.512963][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xffbb instead [ 206.512981][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x6f6b instead [ 206.513025][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 206.513041][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 206.513057][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xffbb instead [ 206.513074][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x6f6b instead [ 206.513119][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 206.582297][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 206.586284][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xffbb instead [ 206.590371][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x6f6b instead [ 206.594441][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 206.598394][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 206.602733][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xffbb instead [ 206.607096][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x6f6b instead [ 206.611308][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 206.616239][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 206.620557][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xffbb instead [ 206.624704][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x6f6b instead [ 206.628904][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 206.633446][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 206.637134][ T5807] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 206.637305][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xffbb instead [ 206.644299][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x6f6b instead [ 206.648455][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 206.653307][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 206.657518][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xffbb instead [ 206.662031][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x6f6b instead [ 206.666649][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 206.670495][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 206.674460][ T5807] usb 10-1: device descriptor read/8, error -71 [ 206.675311][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xffbb instead [ 206.681586][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x6f6b instead [ 206.686049][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 206.690264][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 206.694204][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xffbb instead [ 206.698472][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x6f6b instead [ 206.703138][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 206.707339][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 206.711622][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xffbb instead [ 206.715121][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x6f6b instead [ 206.719365][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 206.724169][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 206.728454][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xffbb instead [ 206.733141][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x6f6b instead [ 206.737411][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 206.741714][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 206.745876][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xffbb instead [ 206.750030][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x6f6b instead [ 206.754074][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 206.758815][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 206.763487][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xffbb instead [ 206.767640][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x6f6b instead [ 206.771980][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 206.776120][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 206.780301][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xffbb instead [ 206.784658][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x6f6b instead [ 206.788897][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 206.791743][ T5807] usb usb10-port1: unable to enumerate USB device [ 206.793516][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 206.799966][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xffbb instead [ 206.808274][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x6f6b instead [ 206.812623][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 206.816829][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 206.821089][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xffbb instead [ 206.825530][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x6f6b instead [ 206.829279][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 206.833636][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 206.837789][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xffbb instead [ 206.842146][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x6f6b instead [ 206.846404][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 206.850637][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 206.854785][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xffbb instead [ 206.859542][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x6f6b instead [ 206.868478][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 206.872791][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 206.876975][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xffbb instead [ 206.881146][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x6f6b instead [ 206.885829][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 206.890029][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 206.894334][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xffbb instead [ 206.898391][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x6f6b instead [ 206.902762][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 206.906451][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 206.910040][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xffbb instead [ 206.914401][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x6f6b instead [ 206.917738][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 206.921875][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 206.926051][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xffbb instead [ 206.930214][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x6f6b instead [ 206.934553][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 206.938713][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 206.943296][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xffbb instead [ 206.947273][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x6f6b instead [ 206.951544][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 206.955712][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 206.960463][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xffbb instead [ 206.964900][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x6f6b instead [ 206.968109][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 206.971314][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 206.974867][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xffbb instead [ 206.978052][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x6f6b instead [ 206.981277][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 206.984539][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 206.987700][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xffbb instead [ 206.990900][T12020] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x6f6b instead [ 206.994155][T12020] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 206.997012][T12020] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 207.105698][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.109187][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.922016][ T5732] Bluetooth: hci5: command 0x040f tx timeout [ 208.154082][T12050] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 208.168036][T12046] xt_CT: No such helper "netbios-ns" [ 208.262705][ T1163] Bluetooth: (null): Invalid header checksum [ 208.287362][T12054] CUSE: info not properly terminated [ 208.292833][T12054] Bluetooth: (null): Too short H5 packet [ 208.489431][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1609'. [ 208.493425][T12064] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12064 comm=syz.0.1609 [ 208.527328][T12064] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1609'. [ 208.628034][T12069] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 208.631373][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 209.304100][T12087] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 209.308004][T12087] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.310896][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.355545][T12089] CUSE: info not properly terminated [ 209.359765][T11541] Bluetooth: (null): Too short H5 packet [ 209.364466][T11541] Bluetooth: (null): Invalid header checksum [ 209.370084][T12089] Bluetooth: (null): Too short H5 packet [ 209.424625][T12094] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 209.444867][T12094] bond10: option mode: invalid value (10) [ 209.449287][T12094] bond10 (unregistering): Released all slaves [ 209.791582][ T3260] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 209.809052][T12112] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 209.811852][T12113] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 209.821165][T12112] 8021q: adding VLAN 0 to HW filter on device bond10 [ 209.826257][T12113] bond1: (slave veth0_to_bond): Releasing backup interface [ 209.833137][T12113] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 209.920618][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 209.933721][T12122] 8021q: adding VLAN 0 to HW filter on device bond11 [ 209.951578][ T3260] usb 10-1: Using ep0 maxpacket: 16 [ 209.955235][ T3260] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 209.972627][ T3260] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.976454][ T3260] usb 10-1: config 0 has no interfaces? [ 209.980997][ T3260] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.986391][ T3260] usb 10-1: Product: syz [ 209.988121][ T3260] usb 10-1: Manufacturer: syz [ 209.990068][ T3260] usb 10-1: SerialNumber: syz [ 210.000129][ T3260] usb 10-1: config 0 descriptor?? [ 210.217644][ T40] usb 10-1: USB disconnect, device number 9 [ 210.358036][T12148] libceph: Failed to parse secret: -22 [ 210.360763][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 210.444197][T12152] bond12: Removing last ns target with arp_interval on [ 210.552600][ T5436] veth1_vlan: left promiscuous mode [ 211.113651][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 211.150138][T12191] netlink: 'syz.0.1644': attribute type 2 has an invalid length. [ 211.153288][T12191] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1644'. [ 211.159537][T12191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.164126][T12191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.272204][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 211.276428][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.487317][ T10] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 211.739873][ T42] kauditd_printk_skb: 226 callbacks suppressed [ 211.739893][ T42] audit: type=1400 audit(211.663:3918): avc: denied { ioctl } for pid=12188 comm="syz.5.1643" path="/dev/raw-gadget" dev="devtmpfs" ino=848 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.310957][ T42] audit: type=1400 audit(212.233:3919): avc: denied { read write } for pid=5723 comm="syz-executor" name="loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.320475][ T42] audit: type=1400 audit(212.233:3920): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.330576][ T42] audit: type=1400 audit(212.233:3921): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.410813][ T42] audit: type=1400 audit(212.333:3922): avc: denied { mount } for pid=12201 comm="syz.0.1646" name="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 212.420245][ T42] audit: type=1400 audit(212.343:3923): avc: denied { search } for pid=12201 comm="syz.0.1646" name="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.427962][ T42] audit: type=1400 audit(212.343:3924): avc: denied { search } for pid=12201 comm="syz.0.1646" name="dlm" dev="configfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.435889][ T42] audit: type=1400 audit(212.343:3925): avc: denied { write search } for pid=12201 comm="syz.0.1646" name="dlm" dev="configfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.443906][ T42] audit: type=1400 audit(212.343:3926): avc: denied { add_name } for pid=12201 comm="syz.0.1646" name="cluster1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 212.450224][ T42] audit: type=1400 audit(212.343:3927): avc: denied { create } for pid=12201 comm="syz.0.1646" name="cluster1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 212.747055][T12219] program syz.0.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.777390][T12219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.871221][T12222] tmpfs: Bad value for 'mpol' [ 212.932970][T12228] binder: 12226:12228 ioctl c400941b 200000000640 returned -22 [ 213.879806][T12239] CUSE: info not properly terminated [ 213.884637][T12239] Bluetooth: (null): Too short H5 packet [ 214.034965][T12242] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.1657'. [ 214.847557][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1658'. [ 214.975098][T12251] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 215.160157][T12255] binder: 12254:12255 ioctl c0306201 2000000004c0 returned -14 [ 215.165159][T12255] binder: 12254:12255 ioctl c0306201 2000000001c0 returned -14 [ 215.169071][T12255] binder: 12254:12255 ioctl c0306201 200000000480 returned -14 [ 215.714044][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.718104][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.824639][T12264] CUSE: info not properly terminated [ 215.829143][T12264] Bluetooth: (null): Too short H5 packet [ 216.110294][T12271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.969622][ T9757] usb 10-1: USB disconnect, device number 10 [ 216.981874][ T42] kauditd_printk_skb: 147 callbacks suppressed [ 216.981896][ T42] audit: type=1400 audit(216.903:4075): avc: denied { unmount } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 217.064478][ T42] audit: type=1400 audit(216.993:4076): avc: denied { read } for pid=12279 comm="syz.5.1671" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.074354][ T42] audit: type=1400 audit(216.993:4077): avc: denied { open } for pid=12279 comm="syz.5.1671" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.084181][ T42] audit: type=1400 audit(216.993:4078): avc: denied { ioctl } for pid=12279 comm="syz.5.1671" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.094980][ T42] audit: type=1400 audit(217.003:4079): avc: denied { create } for pid=12279 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.111476][ T42] audit: type=1400 audit(217.003:4080): avc: denied { setopt } for pid=12279 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.117578][ T42] audit: type=1400 audit(217.003:4081): avc: denied { write } for pid=12279 comm="syz.5.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.129370][ T42] audit: type=1400 audit(217.053:4082): avc: denied { execute } for pid=12281 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 217.137248][ T42] audit: type=1400 audit(217.053:4083): avc: denied { execute_no_trans } for pid=12281 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 217.149732][ T42] audit: type=1400 audit(217.063:4084): avc: denied { execmem } for pid=12281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 217.204876][ T5731] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 217.218086][ T5731] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 217.220839][T12285] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 217.224249][T12285] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 217.224273][ T5731] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 217.230259][ T5731] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.235221][ T5731] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.290003][T12288] CUSE: info not properly terminated [ 217.298875][T12288] Bluetooth: (null): Too short H5 packet [ 217.312481][T11541] Bluetooth: (null): Invalid header checksum [ 217.410485][T12297] netlink: 'syz.5.1675': attribute type 15 has an invalid length. [ 217.435576][T12282] vcan0 speed is unknown, defaulting to 1000 [ 217.711619][ T5731] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.717507][ T5731] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.724015][ T5731] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.738899][ T5731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.745377][ T5731] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.895434][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.898638][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.904569][T12282] bridge_slave_0: entered allmulticast mode [ 217.908656][T12282] bridge_slave_0: entered promiscuous mode [ 217.913625][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.917149][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.920432][T12282] bridge_slave_1: entered allmulticast mode [ 217.924877][T12282] bridge_slave_1: entered promiscuous mode [ 217.974519][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.992680][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.034531][T12282] team0: Port device team_slave_0 added [ 218.038891][T12282] team0: Port device team_slave_1 added [ 218.040641][T12311] vcan0 speed is unknown, defaulting to 1000 [ 218.067359][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.070289][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.080304][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.086496][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.089249][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.099705][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.146913][T12282] hsr_slave_0: entered promiscuous mode [ 218.150179][T12282] hsr_slave_1: entered promiscuous mode [ 218.153324][T12282] debugfs: 'hsr0' already exists in 'hsr' [ 218.155720][T12282] Cannot create hsr debugfs directory [ 218.241203][T12343] CUSE: info not properly terminated [ 218.245726][T11541] Bluetooth: (null): Too short H5 packet [ 218.247960][ T1163] Bluetooth: (null): Invalid header checksum [ 218.470892][T12282] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.484629][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.504609][T12282] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.509091][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.520669][T12282] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.526191][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.529086][T12282] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.534878][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.556953][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.559316][T12282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.561760][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.564011][T12282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.567980][T12353] block nbd5: shutting down sockets [ 218.666144][T12366] random: crng reseeded on system resumption [ 218.688404][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.690827][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.693532][T12311] bridge_slave_0: entered allmulticast mode [ 218.696507][T12311] bridge_slave_0: entered promiscuous mode [ 218.700528][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.703715][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.703871][T12311] bridge_slave_1: entered allmulticast mode [ 218.709630][T12311] bridge_slave_1: entered promiscuous mode [ 218.738967][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.745795][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.784528][T12311] team0: Port device team_slave_0 added [ 218.789344][T12311] team0: Port device team_slave_1 added [ 218.806291][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.810010][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.842874][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.845754][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.856448][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.862441][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.865152][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.875271][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.895093][T12282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.941150][T12311] hsr_slave_0: entered promiscuous mode [ 218.948507][T12311] hsr_slave_1: entered promiscuous mode [ 218.951664][T12311] debugfs: 'hsr0' already exists in 'hsr' [ 218.953946][T12311] Cannot create hsr debugfs directory [ 219.024722][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.040416][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.043353][T11541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.070569][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.073429][T11541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.282052][ T5732] Bluetooth: hci6: command tx timeout [ 219.307229][T12311] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 219.311585][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.312728][ T1157] Bluetooth: (null): Invalid header checksum [ 219.315034][T12311] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.325554][T12382] CUSE: info not properly terminated [ 219.328592][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.334314][T12311] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.343527][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.347489][T12311] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.366621][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.396448][T12393] block2mtd: parameter too long [ 219.418661][ T5732] Bluetooth: hci5: ISO packet for unknown connection handle 201 [ 219.473859][T12399] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1694'. [ 219.485865][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.500761][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.506978][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.509439][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.529881][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.532923][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.564047][T12311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.607714][T12282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.612773][T12408] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1696'. [ 219.619661][T12408] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1696'. [ 219.661616][ T5807] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 219.737121][T12422] gfs2: gfs2 mount does not exist [ 219.741324][T12422] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1697'. [ 219.761631][ T5732] Bluetooth: hci7: command tx timeout [ 219.814840][ T5807] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 219.815439][T12282] veth0_vlan: entered promiscuous mode [ 219.819083][ T5807] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.821659][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.833415][T12282] veth1_vlan: entered promiscuous mode [ 219.850062][T12282] veth0_macvtap: entered promiscuous mode [ 219.855309][T12282] veth1_macvtap: entered promiscuous mode [ 219.864406][T12282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.870190][T12282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.909059][ T5828] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.952989][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.955853][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.958228][ T5828] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.994186][T11541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.996676][T11541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.048012][ T5807] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 220.058057][T12311] veth0_vlan: entered promiscuous mode [ 220.071551][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.077646][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.084802][T12311] veth1_vlan: entered promiscuous mode [ 220.116346][T12311] veth0_macvtap: entered promiscuous mode [ 220.124200][T12311] veth1_macvtap: entered promiscuous mode [ 220.140182][T12311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.160585][T12311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.223211][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.229211][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.288490][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.290929][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.301328][ T5835] usb 10-1: USB disconnect, device number 11 [ 220.358406][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.361789][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.382476][ T5800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.386246][ T5800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.529041][T12447] CUSE: info not properly terminated [ 220.532760][ T1162] Bluetooth: (null): Too short H5 packet [ 220.535120][ T1162] Bluetooth: (null): Invalid header checksum [ 220.689200][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1703'. [ 220.698261][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1704'. [ 221.057704][T12486] CUSE: info not properly terminated [ 221.064645][ T1157] Bluetooth: (null): Too short H5 packet [ 221.067922][ T1157] Bluetooth: (null): Invalid header checksum [ 221.362011][ T5731] Bluetooth: hci6: command tx timeout [ 221.372133][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1717'. [ 221.503563][T12518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12518 comm=syz.8.1720 [ 221.645321][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1721'. [ 221.650055][T12522] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 221.661936][ T1162] Bluetooth: (null): Invalid header checksum [ 221.665183][T12528] CUSE: info not properly terminated [ 221.671107][T12528] Bluetooth: (null): Too short H5 packet [ 221.772279][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 221.775653][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 221.778858][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xffbb instead [ 221.782957][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6f6b instead [ 221.786961][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 221.790317][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 221.794879][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 221.799571][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 221.804396][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 221.807943][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 221.811348][T12536] jffs2: Further such events for this erase block will not be printed [ 221.814454][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 221.817831][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 221.821252][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xffbb instead [ 221.824520][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6f6b instead [ 221.827842][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 221.831837][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 221.834158][T12543] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1729'. [ 221.836327][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 221.839373][T12546] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1730'. [ 221.848834][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 221.851662][ T5731] Bluetooth: hci7: command tx timeout [ 221.853518][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 221.853556][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 221.853574][T12536] jffs2: Further such events for this erase block will not be printed [ 221.853853][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 221.853873][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 221.853893][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xffbb instead [ 221.853912][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x6f6b instead [ 221.853954][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 221.881898][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 221.885563][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xffbb instead [ 221.889315][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x6f6b instead [ 221.895493][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 221.907597][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 221.912929][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xffbb instead [ 221.919110][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x6f6b instead [ 221.928493][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 221.932100][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 221.935404][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xffbb instead [ 221.938677][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x6f6b instead [ 221.943190][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 221.946467][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 221.950062][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xffbb instead [ 221.953661][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x6f6b instead [ 221.956820][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 221.960082][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 221.965150][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xffbb instead [ 221.968485][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x6f6b instead [ 221.972284][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 221.975931][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 221.979224][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xffbb instead [ 221.982761][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x6f6b instead [ 221.987175][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 221.991630][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 221.992557][ T42] kauditd_printk_skb: 298 callbacks suppressed [ 221.992575][ T42] audit: type=1400 audit(221.923:4383): avc: denied { mount } for pid=12552 comm="syz.5.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 221.994962][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xffbb instead [ 222.014375][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.016935][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x6f6b instead [ 222.017809][ T42] audit: type=1400 audit(221.943:4384): avc: denied { unmount } for pid=11561 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 222.030904][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 222.035762][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 222.040186][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xffbb instead [ 222.044660][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x6f6b instead [ 222.048987][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 222.053315][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 222.057556][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xffbb instead [ 222.069361][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x6f6b instead [ 222.074835][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 222.081165][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 222.086344][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xffbb instead [ 222.091120][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x6f6b instead [ 222.095710][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 222.100405][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 222.100470][ T42] audit: type=1400 audit(222.023:4385): avc: denied { map_create } for pid=12558 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.104888][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xffbb instead [ 222.104913][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x6f6b instead [ 222.104966][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 222.104982][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 222.104998][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xffbb instead [ 222.105016][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x6f6b instead [ 222.113786][T12559] tipc: Started in network mode [ 222.119964][T12557] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 222.121042][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 222.121063][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 222.121079][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xffbb instead [ 222.121097][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x6f6b instead [ 222.121142][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 222.121158][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 222.121174][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xffbb instead [ 222.121192][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x6f6b instead [ 222.121237][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 222.121253][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 222.123795][T12559] tipc: Node identity ac14140f, cluster identity 4711 [ 222.124173][T12559] tipc: New replicast peer: 255.255.255.255 [ 222.127529][T12559] tipc: Enabled bearer , priority 10 [ 222.130039][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xffbb instead [ 222.138198][T12557] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 222.164022][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x6f6b instead [ 222.170996][ T42] audit: type=1400 audit(222.023:4386): avc: denied { map_read map_write } for pid=12558 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.180084][T12566] openvswitch: netlink: Message has 8 unknown bytes. [ 222.186702][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 222.196018][ T42] audit: type=1400 audit(222.023:4387): avc: denied { execheap } for pid=12558 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 222.233122][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 222.239174][T12557] CIFS mount error: No usable UNC path provided in device string! [ 222.239174][T12557] [ 222.243147][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xffbb instead [ 222.243171][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x6f6b instead [ 222.247932][T12557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.260523][ T42] audit: type=1400 audit(222.023:4388): avc: denied { execmem } for pid=12558 comm="syz.9.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 222.268247][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 222.268273][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 222.276615][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xffbb instead [ 222.279886][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x6f6b instead [ 222.283168][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 222.286360][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 222.289570][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xffbb instead [ 222.294748][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x6f6b instead [ 222.295078][ T42] audit: type=1400 audit(222.223:4389): avc: denied { read write } for pid=11561 comm="syz-executor" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.298026][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 222.307657][ T42] audit: type=1400 audit(222.223:4390): avc: denied { open } for pid=11561 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.310895][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 222.321319][ T42] audit: type=1400 audit(222.223:4391): avc: denied { ioctl } for pid=11561 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.324537][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xffbb instead [ 222.339935][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x6f6b instead [ 222.344669][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 222.348039][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 222.353281][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xffbb instead [ 222.356567][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x6f6b instead [ 222.359783][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 222.363234][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 222.366686][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xffbb instead [ 222.369946][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x6f6b instead [ 222.373325][ T1157] Bluetooth: (null): Invalid header checksum [ 222.373923][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 222.380404][ T42] audit: type=1400 audit(222.303:4392): avc: denied { create } for pid=12571 comm="syz.9.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.382319][T12568] CUSE: info not properly terminated [ 222.393317][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 222.397211][T12568] Bluetooth: (null): Too short H5 packet [ 222.399083][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xffbb instead [ 222.404318][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x6f6b instead [ 222.408713][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 222.412547][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 222.420874][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xffbb instead [ 222.431614][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x6f6b instead [ 222.434964][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 222.438208][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 222.441662][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xffbb instead [ 222.444847][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x6f6b instead [ 222.448013][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 222.451238][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 222.454492][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xffbb instead [ 222.457759][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x6f6b instead [ 222.461130][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 222.464787][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 222.468039][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xffbb instead [ 222.471279][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x6f6b instead [ 222.483958][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 222.487286][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 222.490592][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xffbb instead [ 222.494265][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x6f6b instead [ 222.497479][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 222.500761][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 222.504318][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xffbb instead [ 222.507505][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x6f6b instead [ 222.517015][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 222.523928][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 222.532494][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xffbb instead [ 222.539221][T12536] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x6f6b instead [ 222.546027][T12536] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 222.551044][T12578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.552481][T12536] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 222.558864][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.656711][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.658437][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.663670][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.750962][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.756371][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.758560][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.760836][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.763184][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.765427][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.767505][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.769845][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.772657][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.775217][T12593] tc action pedit offset must be on 32 bit boundaries [ 222.777601][T12593] 0: reclassify loop, rule prio 0, protocol 800 [ 222.910432][T12608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.919776][T12608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.926562][T12608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.938998][T12607] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.963903][T12611] CUSE: info not properly terminated [ 222.969895][T12611] Bluetooth: (null): Too short H5 packet [ 222.977248][ T7621] Bluetooth: (null): Invalid header checksum [ 223.125245][T12625] syzkaller0: entered promiscuous mode [ 223.127100][T12625] syzkaller0: entered allmulticast mode [ 223.156954][ T1162] nvmet: connect request for invalid subsystem testnqn! [ 223.160631][T12627] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 223.172973][T12629] (syz.8.1755,12629,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 223.175335][T12629] (syz.8.1755,12629,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 223.177576][T12629] (syz.8.1755,12629,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 223.180317][T12629] (syz.8.1755,12629,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 223.261649][ T5807] tipc: Node number set to 2886997007 [ 223.284161][T12632] ntfs3(sr0): Primary boot signature is not NTFS. [ 223.288094][T12637] overlay: ./file0 is not a directory [ 223.288619][T12632] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 223.319955][T12636] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 223.322090][T12636] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.331698][T12636] vhci_hcd vhci_hcd.0: Device attached [ 223.336988][T12639] vhci_hcd: unknown pdu 2 [ 223.337195][T12636] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 223.339502][ T5800] vhci_hcd vhci_hcd.9: stop threads [ 223.344616][ T5800] vhci_hcd vhci_hcd.9: release socket [ 223.346497][ T5800] vhci_hcd vhci_hcd.9: disconnect device [ 223.420423][T12652] CUSE: info not properly terminated [ 223.428243][ T1157] Bluetooth: (null): Too short H5 packet [ 223.430158][ T1157] Bluetooth: (null): Invalid header checksum [ 223.441812][ T5731] Bluetooth: hci6: command tx timeout [ 223.461167][ T5829] hid_parser_main: 98 callbacks suppressed [ 223.461190][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.465989][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.468500][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.471018][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.474132][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.476680][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.479175][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.481637][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.483940][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.486182][ T5829] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 223.492830][ T5829] hid-generic 0000:0000:0004.0006: hidraw1: HID v0.03 Device [syz0] on syz0 [ 223.546446][T12658] ip6gre1: entered promiscuous mode [ 223.549406][T12658] ip6gre1: entered allmulticast mode [ 223.578075][T12657] fido_id[12657]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.786403][T12682] xt_hashlimit: size too large, truncated to 1048576 [ 223.789012][T12681] xt_hashlimit: size too large, truncated to 1048576 [ 223.894982][ T1162] Bluetooth: (null): Invalid header checksum [ 223.898777][T12687] CUSE: info not properly terminated [ 223.921560][ T5731] Bluetooth: hci7: command 0x040f tx timeout [ 224.010498][T12690] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 224.206266][T12710] fuse: Unknown parameter 'd?0x0000000000000005' [ 224.221847][T12711] dummy0: entered allmulticast mode [ 224.334249][ T7621] Bluetooth: (null): Invalid header checksum [ 224.338042][T12722] CUSE: info not properly terminated [ 224.510646][T12731] __nla_validate_parse: 3 callbacks suppressed [ 224.510669][T12731] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1786'. [ 224.699743][T12751] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1792'. [ 224.710701][T12751] binder: 12750:12751 ioctl c0306201 2000000003c0 returned -14 [ 224.715734][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 224.718622][T12751] binder: 12750:12751 ioctl c004510e 200000000180 returned -22 [ 224.724052][T12751] binder: BINDER_SET_CONTEXT_MGR already set [ 224.725863][T12751] binder: 12750:12751 ioctl 4018620d 200000000480 returned -16 [ 224.871152][T12757] CUSE: info not properly terminated [ 224.876020][ T1157] Bluetooth: (null): Too short H5 packet [ 224.879101][ T1157] Bluetooth: (null): Invalid header checksum [ 225.000245][T12759] qnx6: unable to set blocksize [ 225.001613][ T5835] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 225.073037][T12764] overlay: filesystem on ./bus not supported [ 225.182582][ T5835] usb 10-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 225.190848][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.195641][ T5835] usb 10-1: Product: ㊤騷莸쒱욈淙偞쇇璶ល왫殌ᕢ⋓㇧겝滷핆윱虘纱ᆳ↦䟄蛼흉逈ꡭ婣㏫엵ῂ䝓 [ 225.203369][ T5835] usb 10-1: Manufacturer: 翝ஃ瑛ᾀ揃ျ䘀詺㷦냩J [ 225.206384][ T5835] usb 10-1: SerialNumber: ᐌ [ 225.264892][T12772] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 225.266889][T12773] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 225.268801][T12773] syzkaller1: owner set to 805 [ 225.377402][T12778] CUSE: info not properly terminated [ 225.381325][T12778] Bluetooth: (null): Too short H5 packet [ 225.383427][ T1162] Bluetooth: (null): Invalid header checksum [ 225.430526][ T5835] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 225.476742][T12784] Invalid ELF header len 18 [ 225.492032][ T5835] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 225.522506][ T5731] Bluetooth: hci6: command tx timeout [ 225.526209][ T8316] udevd[8316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.701537][T11877] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 225.775345][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.779493][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.780587][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.789448][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.803686][ T5829] usb 10-1: USB disconnect, device number 12 [ 225.851499][T11877] usb 13-1: Using ep0 maxpacket: 8 [ 225.853791][T11877] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 225.859547][T11877] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 225.863832][T11877] usb 13-1: config 0 has no interface number 0 [ 225.865879][T11877] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 225.869260][T11877] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 225.874329][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1808'. [ 225.879871][T11877] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.884314][T11877] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.889440][T11877] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.900092][T11877] usb 13-1: config 0 descriptor?? [ 225.915773][T11877] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 226.002310][ T5731] Bluetooth: hci7: command 0x040f tx timeout [ 226.039797][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1810'. [ 226.044662][T12802] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1810'. [ 226.151159][T12813] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 226.156529][T12813] netlink: 'syz.0.1814': attribute type 2 has an invalid length. [ 226.184789][ T75] Bluetooth: (null): Invalid header checksum [ 226.199731][ T5829] usb 13-1: USB disconnect, device number 2 [ 226.202956][T12815] CUSE: info not properly terminated [ 226.217485][T12815] Bluetooth: (null): Too short H5 packet [ 226.249831][ T5829] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 226.277309][T12825] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1818'. [ 226.285370][T12822] 9pnet_virtio: no channels available for device syz [ 226.672523][T12842] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 226.682316][T12842] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 226.751071][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1825'. [ 226.759464][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1825'. [ 226.774588][T12847] Sensor A: ================= START STATUS ================= [ 226.776989][T12847] Sensor A: Test Pattern: 75% Colorbar [ 226.778708][T12847] Sensor A: Show Information: All [ 226.780320][T12847] Sensor A: Vertical Flip: false [ 226.783110][T12847] Sensor A: Horizontal Flip: false [ 226.784892][T12847] Sensor A: Brightness: 128 [ 226.786478][T12847] Sensor A: Contrast: 128 [ 226.787850][T12847] Sensor A: Hue: 0 [ 226.789099][T12847] Sensor A: Saturation: 128 [ 226.790568][T12847] Sensor A: Pixel Rate: 160000000 [ 226.793282][T12847] Sensor A: Horizontal Blanking: 800 [ 226.795007][T12847] Sensor A: Vertical Blanking: 4 [ 226.796625][T12847] Sensor A: ================== END STATUS ================== [ 226.869008][T12853] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1827'. [ 226.931754][ T75] Bluetooth: (null): Invalid header checksum [ 226.951130][T12856] Bluetooth: (null): Too short H5 packet [ 227.002782][ T42] kauditd_printk_skb: 316 callbacks suppressed [ 227.002803][ T42] audit: type=1400 audit(226.933:4709): avc: denied { ioctl } for pid=12861 comm="syz.0.1831" path="/dev/sg1" dev="devtmpfs" ino=726 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 227.010031][T12862] trusted_key: encrypted_key: insufficient parameters specified [ 227.118746][ T42] audit: type=1400 audit(227.043:4710): avc: denied { create } for pid=12863 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.126060][ T42] audit: type=1400 audit(227.053:4711): avc: denied { create } for pid=12863 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.132676][ T42] audit: type=1400 audit(227.063:4712): avc: denied { bind } for pid=12863 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.134324][T12864] tmpfs: Invalid uid '0x00000000ffffffff' [ 227.138927][ T42] audit: type=1400 audit(227.063:4713): avc: denied { ioctl } for pid=12863 comm="syz.5.1833" path="socket:[54466]" dev="sockfs" ino=54466 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 227.150073][ T42] audit: type=1400 audit(227.063:4714): avc: denied { getopt } for pid=12863 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.167611][ T42] audit: type=1400 audit(227.063:4715): avc: denied { mounton } for pid=12863 comm="syz.5.1833" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 227.175394][T12866] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.188606][ T42] audit: type=1400 audit(227.113:4716): avc: denied { ioctl } for pid=12865 comm="syz.5.1834" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54471 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.200603][ T42] audit: type=1400 audit(227.123:4717): avc: denied { write } for pid=12865 comm="syz.5.1834" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.202754][ T3260] net_ratelimit: 31 callbacks suppressed [ 227.202780][ T3260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.214471][ T42] audit: type=1400 audit(227.123:4718): avc: denied { open } for pid=12865 comm="syz.5.1834" path="/dev/ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 227.233295][T12868] 9p: Bad value for 'rfdno' [ 227.244649][T12868] team0: No ports can be present during mode change [ 227.390720][T12877] tmpfs: Bad value for 'mpol' [ 227.524865][T12883] Bluetooth: (null): Too short H5 packet [ 227.747814][T12896] sctp: [Deprecated]: syz.5.1844 (pid 12896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.747814][T12896] Use struct sctp_sack_info instead [ 227.757196][T12896] SELinux: truncated policydb string identifier [ 227.759370][T12896] SELinux: failed to load policy [ 227.906041][T12894] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.908100][T12894] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 227.910175][T12894] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 227.913126][T12894] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 227.915107][T12894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.919021][T12894] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 227.928324][T12894] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 227.930344][T12894] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 227.979840][T12894] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 228.111582][T12913] sctp: [Deprecated]: syz.0.1849 (pid 12913) Use of int in max_burst socket option deprecated. [ 228.111582][T12913] Use struct sctp_assoc_value instead [ 228.137842][T12915] Bluetooth: (null): Too short H5 packet [ 228.155061][ T75] Bluetooth: (null): Invalid header checksum [ 228.251790][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.260921][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.272453][ T3260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.662518][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 228.665368][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 228.668112][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xffbb instead [ 228.671458][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6f6b instead [ 228.674659][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 228.677479][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 228.680295][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 228.683339][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 228.686218][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 228.689076][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 228.691966][T12933] jffs2: Further such events for this erase block will not be printed [ 228.694701][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 228.697562][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 228.700388][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xffbb instead [ 228.704478][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6f6b instead [ 228.707348][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 228.710209][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 228.713062][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 228.716448][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 228.719462][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 228.722226][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.722832][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.725089][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 228.725101][T12933] jffs2: Further such events for this erase block will not be printed [ 228.725314][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 228.725324][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 228.725334][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xffbb instead [ 228.725345][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x6f6b instead [ 228.725371][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 228.725381][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 228.725391][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xffbb instead [ 228.725402][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x6f6b instead [ 228.725428][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 228.725437][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 228.725447][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xffbb instead [ 228.725458][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x6f6b instead [ 228.725483][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 228.725493][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 228.725503][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xffbb instead [ 228.725514][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x6f6b instead [ 228.725539][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 228.725549][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 228.725559][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xffbb instead [ 228.725569][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x6f6b instead [ 228.725596][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 228.725605][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 228.725615][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xffbb instead [ 228.725630][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x6f6b instead [ 228.725656][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 228.725666][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 228.725676][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xffbb instead [ 228.725687][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x6f6b instead [ 228.725713][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 228.725722][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 228.725732][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xffbb instead [ 228.725743][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x6f6b instead [ 228.725769][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 228.725779][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 228.725788][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xffbb instead [ 228.725799][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x6f6b instead [ 228.725835][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 228.725844][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 228.725854][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xffbb instead [ 228.725865][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x6f6b instead [ 228.725890][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 228.725900][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 228.725910][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xffbb instead [ 228.725921][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x6f6b instead [ 228.725947][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 228.725956][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 228.725967][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xffbb instead [ 228.725977][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x6f6b instead [ 228.726003][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 228.726013][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 228.726023][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xffbb instead [ 228.726034][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x6f6b instead [ 228.726060][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 228.726070][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 228.726080][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xffbb instead [ 228.726090][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x6f6b instead [ 228.726116][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 228.726126][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 228.726136][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xffbb instead [ 228.726146][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x6f6b instead [ 228.726172][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 228.726182][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 228.726192][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xffbb instead [ 228.726203][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x6f6b instead [ 228.726229][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 228.726238][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 228.726248][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xffbb instead [ 228.726259][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x6f6b instead [ 228.726284][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 228.726294][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 228.726304][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xffbb instead [ 228.726315][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x6f6b instead [ 228.726340][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 228.726350][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 228.726360][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xffbb instead [ 228.726370][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x6f6b instead [ 228.726397][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 228.726406][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 228.726416][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xffbb instead [ 228.726427][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x6f6b instead [ 228.726453][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 228.726463][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 228.726473][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xffbb instead [ 228.726484][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x6f6b instead [ 228.726510][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 228.726519][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 228.726529][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xffbb instead [ 228.726540][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x6f6b instead [ 228.726565][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 228.726575][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 228.726585][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xffbb instead [ 228.726596][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x6f6b instead [ 228.726631][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 228.726641][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 228.726651][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xffbb instead [ 228.726662][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x6f6b instead [ 228.726687][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 228.726697][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 228.726707][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xffbb instead [ 228.726718][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x6f6b instead [ 228.726744][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 228.726753][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 228.726763][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xffbb instead [ 228.726774][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x6f6b instead [ 228.726800][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 228.726809][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 228.726819][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xffbb instead [ 228.726830][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x6f6b instead [ 228.726856][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 228.726866][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 228.726876][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xffbb instead [ 228.726925][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x6f6b instead [ 228.726953][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 228.726962][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 228.726972][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xffbb instead [ 228.726983][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x6f6b instead [ 228.727009][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 228.727019][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 228.727029][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xffbb instead [ 228.727039][T12933] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x6f6b instead [ 228.727060][T12933] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 228.727066][T12933] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 229.031945][ T1163] Bluetooth: (null): Invalid header checksum [ 229.042459][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.131142][T12943] Bluetooth: (null): Too short H5 packet [ 229.168834][ T1163] Bluetooth: (null): Invalid header checksum [ 229.176984][T12936] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 229.268243][T12954] 9pnet_virtio: no channels available for device syz [ 229.292200][ T3260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.317507][T12954] ================================================================== [ 229.317526][T12954] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 229.317618][T12954] Write of size 8 at addr ffffc90005449000 by task syz.0.1864/12954 [ 229.317628][T12954] [ 229.317657][T12954] CPU: 2 UID: 0 PID: 12954 Comm: syz.0.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.317675][T12954] Tainted: [L]=SOFTLOCKUP [ 229.317680][T12954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.317693][T12954] Call Trace: [ 229.317704][T12954] [ 229.317711][T12954] dump_stack_lvl+0x100/0x190 [ 229.317761][T12954] print_report+0x13d/0x4b0 [ 229.317795][T12954] ? _raw_spin_lock_irqsave+0x52/0x60 [ 229.317831][T12954] ? sys_imageblit+0x19fb/0x1d60 [ 229.317844][T12954] kasan_report+0xdf/0x1c0 [ 229.317889][T12954] ? sys_imageblit+0x19fb/0x1d60 [ 229.317903][T12954] sys_imageblit+0x19fb/0x1d60 [ 229.317919][T12954] ? __pfx_sys_imageblit+0x10/0x10 [ 229.317934][T12954] ? prb_read_valid+0x78/0xa0 [ 229.317967][T12954] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 229.318012][T12954] soft_cursor+0x524/0xa10 [ 229.318024][T12954] ? atomic_notifier_call_chain+0x10/0x1c0 [ 229.318044][T12954] ? fb_get_color_depth+0x120/0x250 [ 229.318061][T12954] bit_cursor+0xd3a/0x14e0 [ 229.318074][T12954] ? __pfx_bit_cursor+0x10/0x10 [ 229.318087][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.318112][T12954] ? get_color+0x1da/0x450 [ 229.318128][T12954] ? __pfx_bit_cursor+0x10/0x10 [ 229.318139][T12954] fbcon_cursor+0x43c/0x5e0 [ 229.318159][T12954] ? add_softcursor+0x230/0x290 [ 229.318179][T12954] set_cursor+0x1db/0x250 [ 229.318191][T12954] con_write+0x89/0xb0 [ 229.318206][T12954] do_output_char+0x63b/0x850 [ 229.318223][T12954] __process_echoes+0x21c/0xb10 [ 229.318240][T12954] n_tty_receive_buf_common+0x462/0x1930 [ 229.318260][T12954] ? do_raw_spin_lock+0x128/0x260 [ 229.318281][T12954] tty_ldisc_receive_buf+0xaa/0x1a0 [ 229.318294][T12954] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 229.318313][T12954] paste_selection+0x4c6/0x730 [ 229.318326][T12954] ? __pfx_paste_selection+0x10/0x10 [ 229.318337][T12954] ? rcu_is_watching+0x12/0xc0 [ 229.318357][T12954] ? __pfx_default_wake_function+0x10/0x10 [ 229.318381][T12954] ? bpf_lsm_capable+0x9/0x10 [ 229.318403][T12954] ? security_capable+0x80/0x260 [ 229.318431][T12954] tioclinux+0x5a7/0x640 [ 229.318446][T12954] vt_ioctl+0x145d/0x3150 [ 229.318465][T12954] ? __pfx_vt_ioctl+0x10/0x10 [ 229.318482][T12954] ? find_held_lock+0x2b/0x80 [ 229.318495][T12954] ? tomoyo_path_number_perm+0x188/0x580 [ 229.318515][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.318530][T12954] ? __pfx_vt_ioctl+0x10/0x10 [ 229.318549][T12954] tty_ioctl+0x26a/0x1640 [ 229.318563][T12954] ? __pfx_tty_ioctl+0x10/0x10 [ 229.318578][T12954] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.318600][T12954] ? __fget_files+0x215/0x3d0 [ 229.318620][T12954] ? hook_file_ioctl_common+0x140/0x440 [ 229.318635][T12954] ? selinux_file_ioctl+0x13b/0x290 [ 229.318653][T12954] ? selinux_file_ioctl+0xb6/0x290 [ 229.318671][T12954] ? __pfx_tty_ioctl+0x10/0x10 [ 229.318686][T12954] __x64_sys_ioctl+0x18e/0x210 [ 229.318705][T12954] do_syscall_64+0x115/0x870 [ 229.318719][T12954] ? clear_bhb_loop+0x70/0xc0 [ 229.318733][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.318747][T12954] RIP: 0033:0x7f668979e0d9 [ 229.318758][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.318769][T12954] RSP: 002b:00007f668a61c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.318788][T12954] RAX: ffffffffffffffda RBX: 00007f6689a25fa0 RCX: 00007f668979e0d9 [ 229.318795][T12954] RDX: 0000200000000080 RSI: 000000000000541c RDI: 0000000000000004 [ 229.318802][T12954] RBP: 00007f6689835024 R08: 0000000000000000 R09: 0000000000000000 [ 229.318809][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.318816][T12954] R13: 00007f6689a26038 R14: 00007f6689a25fa0 R15: 00007fff0cb591c8 [ 229.318826][T12954] [ 229.318831][T12954] [ 229.318834][T12954] The buggy address belongs to a vmalloc virtual mapping [ 229.318845][T12954] Memory state around the buggy address: [ 229.318851][T12954] ffffc90005448f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.318860][T12954] ffffc90005448f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.318867][T12954] >ffffc90005449000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.318874][T12954] ^ [ 229.318879][T12954] ffffc90005449080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.318887][T12954] ffffc90005449100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 229.318894][T12954] ================================================================== [ 229.319007][T12954] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 229.319018][T12954] CPU: 2 UID: 0 PID: 12954 Comm: syz.0.1864 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.319035][T12954] Tainted: [L]=SOFTLOCKUP [ 229.319040][T12954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.319047][T12954] Call Trace: [ 229.319051][T12954] [ 229.319055][T12954] dump_stack_lvl+0x100/0x190 [ 229.319070][T12954] vpanic+0x552/0x970 [ 229.319082][T12954] ? __pfx_vpanic+0x10/0x10 [ 229.319093][T12954] ? mark_held_locks+0x40/0x70 [ 229.319108][T12954] ? sys_imageblit+0x19fb/0x1d60 [ 229.319121][T12954] panic+0xd1/0xe0 [ 229.319132][T12954] ? __pfx_panic+0x10/0x10 [ 229.319146][T12954] ? sys_imageblit+0x19fb/0x1d60 [ 229.319160][T12954] ? preempt_schedule_common+0x42/0xc0 [ 229.319175][T12954] check_panic_on_warn.cold+0x19/0x34 [ 229.319187][T12954] end_report.part.0+0x3a/0x90 [ 229.319204][T12954] kasan_report.cold+0xe/0x18 [ 229.319220][T12954] ? sys_imageblit+0x19fb/0x1d60 [ 229.319235][T12954] sys_imageblit+0x19fb/0x1d60 [ 229.319251][T12954] ? __pfx_sys_imageblit+0x10/0x10 [ 229.319266][T12954] ? prb_read_valid+0x78/0xa0 [ 229.319282][T12954] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 229.319301][T12954] soft_cursor+0x524/0xa10 [ 229.319313][T12954] ? atomic_notifier_call_chain+0x10/0x1c0 [ 229.319326][T12954] ? fb_get_color_depth+0x120/0x250 [ 229.319343][T12954] bit_cursor+0xd3a/0x14e0 [ 229.319356][T12954] ? __pfx_bit_cursor+0x10/0x10 [ 229.319369][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.319383][T12954] ? get_color+0x1da/0x450 [ 229.319399][T12954] ? __pfx_bit_cursor+0x10/0x10 [ 229.319410][T12954] fbcon_cursor+0x43c/0x5e0 [ 229.319440][T12954] ? add_softcursor+0x230/0x290 [ 229.319453][T12954] set_cursor+0x1db/0x250 [ 229.319466][T12954] con_write+0x89/0xb0 [ 229.319480][T12954] do_output_char+0x63b/0x850 [ 229.319496][T12954] __process_echoes+0x21c/0xb10 [ 229.319514][T12954] n_tty_receive_buf_common+0x462/0x1930 [ 229.319533][T12954] ? do_raw_spin_lock+0x128/0x260 [ 229.319552][T12954] tty_ldisc_receive_buf+0xaa/0x1a0 [ 229.319565][T12954] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 229.319584][T12954] paste_selection+0x4c6/0x730 [ 229.319596][T12954] ? __pfx_paste_selection+0x10/0x10 [ 229.319608][T12954] ? rcu_is_watching+0x12/0xc0 [ 229.319625][T12954] ? __pfx_default_wake_function+0x10/0x10 [ 229.319643][T12954] ? bpf_lsm_capable+0x9/0x10 [ 229.319655][T12954] ? security_capable+0x80/0x260 [ 229.319670][T12954] tioclinux+0x5a7/0x640 [ 229.319684][T12954] vt_ioctl+0x145d/0x3150 [ 229.319702][T12954] ? __pfx_vt_ioctl+0x10/0x10 [ 229.319719][T12954] ? find_held_lock+0x2b/0x80 [ 229.319731][T12954] ? tomoyo_path_number_perm+0x188/0x580 [ 229.319749][T12954] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 229.319764][T12954] ? __pfx_vt_ioctl+0x10/0x10 [ 229.319782][T12954] tty_ioctl+0x26a/0x1640 [ 229.319796][T12954] ? __pfx_tty_ioctl+0x10/0x10 [ 229.319810][T12954] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 229.319831][T12954] ? __fget_files+0x215/0x3d0 [ 229.319842][T12954] ? hook_file_ioctl_common+0x140/0x440 [ 229.319857][T12954] ? selinux_file_ioctl+0x13b/0x290 [ 229.319874][T12954] ? selinux_file_ioctl+0xb6/0x290 [ 229.319892][T12954] ? __pfx_tty_ioctl+0x10/0x10 [ 229.319906][T12954] __x64_sys_ioctl+0x18e/0x210 [ 229.319923][T12954] do_syscall_64+0x115/0x870 [ 229.319935][T12954] ? clear_bhb_loop+0x70/0xc0 [ 229.319949][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.319960][T12954] RIP: 0033:0x7f668979e0d9 [ 229.319969][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.319980][T12954] RSP: 002b:00007f668a61c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.319991][T12954] RAX: ffffffffffffffda RBX: 00007f6689a25fa0 RCX: 00007f668979e0d9 [ 229.319998][T12954] RDX: 0000200000000080 RSI: 000000000000541c RDI: 0000000000000004 [ 229.320006][T12954] RBP: 00007f6689835024 R08: 0000000000000000 R09: 0000000000000000 [ 229.320013][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.320020][T12954] R13: 00007f6689a26038 R14: 00007f6689a25fa0 R15: 00007fff0cb591c8 [ 229.320030][T12954] [ 229.320672][T12954] Kernel Offset: disabled VM DIAGNOSIS: 04:32:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff888035890000 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7cff97bc80 ffffffff 00c00000 GS =0000 ffff8880d5bde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f668a5d9ff8 CR3=000000002d6c0000 CR4=00350ef0 DR0=000000000000000c DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd 0000000500001500 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a3b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88801f292540 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5cde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feaed5d0000 CR3=000000003275d000 CR4=00350ef0 DR0=000000000000000c DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0004000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561f1b7c7600 0000561f1b7c7600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd45e66b40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6661203078302051 5620657461636f6c 6572206f7420656c 62616e55203a4445 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6b636568632065 7361656c70202c6e 6f69746172756769 666e6f6320746e65 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 747369736e6f636e 69206e6120687469 77207466656c206e 6565622065766168 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2079616d20305f65 76616c735f656764 6972622065636166 7265746e49202e79 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646165726c612064 657474696d6d6f63 207365676e616863 20656d6f73206874 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a35370 RDI=ffffffff9bc05ec0 RBP=ffffffff9bc05e80 RSP=ffffc900047bee10 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff3780c2a R15=dffffc0000000000 RIP=ffffffff85a35397 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f668a61c6c0 ffffffff 00c00000 GS =0000 ffff8880d5dde000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f668a61bff8 CR3=000000005e255000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc0905c66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc0905c66 00007ffdc0905c6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 13e2187ca9aa3d44 ca5197de1f498912 dadb54a643abd480 e995440000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d3f25f8 00007f1c5d3f25c8 00007f1c5d3f2600 00007f1c5d3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81ae1923 RDX=ffff88801f6ba540 RSI=ffffffff81ae196b RDI=ffffffff94893e00 RBP=0000000000000000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff29127c0 R10=ffffffff94893e07 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae196c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ede000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd1e811ff8 CR3=0000000036129000 CR4=00350ef0 DR0=ffffffffffffffff DR1=20000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc0905c66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc0905c66 00007ffdc0905c6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1c5d235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000