last executing test programs: 1m14.193820045s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) lseek(r1, 0x3, 0x2) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0\x00', 0x3a) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="7105b8080300009e011302070605fd01a5efdd1dbabdc192618d"], 0xbb) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r7, &(0x7f0000000180), 0x1000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000000227bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='`\x00\x00\x00\x00@\x00\x00\x00\x00'], 0x30}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r9 = io_uring_setup(0x599b, &(0x7f0000000040)={0x0, 0x23e, 0x40, 0xfffffffe, 0xc0, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) setns(0xc9, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000001080)=""/4096, 0x1000) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x0, 0x0, 0x0) 1m11.0647555s ago: executing program 2 (id=20): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) mq_open(&(0x7f0000000a80)='\'\xf5@$*\x00', 0x40, 0xb, &(0x7f0000000ac0)={0x8, 0xffff, 0x1, 0x6}) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m10.999457166s ago: executing program 2 (id=22): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xf27b, 0x8000, 0x0, 0x22c}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6344, 0x4000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x77b1, 0x80000, 0x3, 0x274}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb90c, 0x10, 0x3, 0x70}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3abd, 0x8, 0x2, 0x40}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001300)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x800}, 0x0, 0x0, '\x00', {0x6, 0x337, 0x0, &(0x7f0000000300)=@buf_max_buf="f7a2a25979db921805acf66577579f9852b00b7028785b5f4a8cd9fbdfafb8575da6802aae2e1efb7a2768453c2b1c1e5e7b841432e1505eab1e598dbca44dab06505c1a6219a7b33f4fbc8ae5ff594485fd885453ce295939634ea2e1873761bfbb07edebe6b0c4e78ed4cdbfb2bb91bed89c32796cfbeb0f53e46f9359e9f1e6b3264cec934c7c7feedabf8ec5b0e90584af75dca796415ad1778b1fede136524a711620659445be0f505b2418ab8606e3a293531cfc5641a5251f3466b24f35781bb714df01473eb5e5c14835dce0a11fd484f32f1d0cc2086e11f7ce79a2ed37f7670ecb126022cc93ac4aa8c91f8984a99c9d26bbce383796725d8c463df9c0960dce0880b04d8c628503ae76aec000fda9d849bb4bdc87b040c468614975d25d63c1d7c5545331a0b3f02ab12d64ca4fba48d0c4967126c1a0b1dee5ebd0a540f2629370ae4a9011f9e0afa44aac79975d625b42b55aff0685dc55306c1e34c21da65658dd04715cbf7356c333b867a46c2002464871c19b1e4695b980d41146cc863fb069e844a9ae0025d8f181b45e71e0c6d0b394c4841dc6a10fe02d7bbe67f135a63be9872ac02c62c4c861f372bde3d66e70d0502c2298f1c479accd06b721ef96c242045bbecc04681bf6515e1b7c410b63a8c686f984ac66d283b2079a38f381e13071bad48bdcb4ed0d917a37615fc8617d0adbd914ecb7859d98a8e9de0b835e6400b16c1928f97c14f45d9edd6162377e932ad63ae23ce0c6086cbdd28489f1755b7cb6c14383bc89e1fbe5109d592ddf676eaa7ecd8fe6711ba651702128d9006087b884a434873841c6e5f5e0fe4bf2c673882ed28b9ced4ed31038f573476151647ddd7cee831d29a5ea9501b5a36add6d3b6f2cad21d93992529a3ffec170d906d74963b418fb582679add79d5c8741d165534dd0df41decec18a88791003514e6a1d20e694ddb6cf12361b8fdf9f382a0c4863c4838368e05ea3949a56ffa51decd45482825249ff7f231cdaa5152773ee18b6f54ecf1c9e4aaec9bd8b52828514be35956c573227e441cf35dbb3a8fddac16c1206377ea79a9df6a58670cd65fff2bf72bd69402cfb06da62c504891fe5d3cc772ef530ac727ddea8a1ec6355730b16c3de009b8d60edf0914bfae36d74853ae671f480480ab023fd7cfa7214b85247ec186b1bb844782bf0611197d3e444cae12e47ce4e95ed75904cd7554c7736a4804c9ceaf8ab5af44050cf129229e63fc563557a8d67c25a5609d40b915e66205911eb28f4da235fd56fe7317ab8b52f4e84bd3c4a880c1d86e8ec983bb215f8977c58d93c311ccd3dd40f09d62bc04d8c04c9a0d476688ef89451fbf89d620b967deb28d50160eadd0b179ac364828ed45794981586bfd485c3e9bed67313f0a877032e8d7e117f7d524fd6a04cb6cd15c3e7169a1919e80a1f63de68293c853474faaa3b8b700b6675d69df0fef1b6391f8b6ff74deb9c9ca5c95f48ecea3be86d80534c29b389415167735dda1f72e946900835c5546ed1c1bdb4b7f8503928f3026eb8a96978847b86d54b28a409cd89b113049650fc8a5461c304ed0c3e47f622a46d2cf650ac0ee0012b86597385475409a8cb30e3e5b6ab4bc8536d6afb4e45515f9e041b87357042b5102bf506cb2d927a64fc4b38d5d06ee9fe5ceab687c584223f680b6878ae60206a84a09485cb2ce9742790149f267487b4a7aed1aa2e6e8b69781e316271be3767c9102d6fb67d7b6f405eab4de41e710dc736a6d0afbb12c25e5c300d05bb2329c1e4cfe955d2f018078b8f80a39d41bd6c9c62f379b728d034a9c7aa578deab08c0109b8dddb08df200a62661af489c55273398b688bef1b69c542b1cc3d4e60a3e08ab88a1e9efbf3701494d4ed871b10b4de4178b8ec7694894a8469ba8e786563405f71aa08559f0efff549ecd53de717c737c9dd0e0b71b2c18ede80a9d7ba846c3d27cf17eb0a9ff299723575369d1c5186e2e16995bbc12fdf9918bf4e8e53dbefcf8d5b10c1029882a884fb0858170e71e6e5d6f390ecac4a6da4522ec83e18fe56141a10b5f95740cdfbd7570f05ed306fc4d7446968e0e4b1b89e6ef36d122724bcd64dc4ce27066d031c9d8723221898aa579ece15ce927f5ed6273c16bb640cfa441ee0e4441ca5416d3821596128c392040ce545609f8a7ac8010bf9a12b934d2e905e2d3d19a6502b4dbc237ef4e0b2dc68c9fe157a00dd580c5327cbce247d12aeefef892c6fa2b162514b588de6179daf7a70c2636a743a3ee92677c65712d1065e9fa9ad62d2e3cbfe9ad73a0aad3679610684d59239eac6f4203652a7c12af9a70e588bee266d9312a2f1ed9073f8ca744cf0590ccf1094a88762e18e17a6bd038d83ec9451111087b647de5d8837c589467d1e57f4ac9f1226a0bf84eb7c26ef1a400e0d71915e6c10353ba3c340106062083742f88131ca954d413a188f08284e1e8b2f7a0c0bd8efbb5778845adb694c049749231347938eee4fab130f53e907eb9e01685c3311f39d81e82f3aac29495df37cc6acf2d9b5de2d54ac062b9cfae48713112e70b0dca3cf9a1fb7a6ae908fafd8ddb7f45ee99335715b211cc7754bfa9872ea1f42f9f77a8a3640700a1ffc8ee793cb72462135ae60d630a43b0af06601ac32a7db4c19f17e7fe206af2649013a4d8370cc0753b516128d5683c36d9ec91cfe3d3a2eac9fdd96dc94bfeac024c93c8710749d5a7c0b2f6eeb3b89e0c54794eb204987c8db9a7b8e3b474d12eda722ca7773c716b88866ded7d4883bc60b2c3194b7d95d6a9c93f6edd9b1a81f8eb6494be2d94d5c0abaae4baf52fb7a6db72f1f4e1c1b2f23a3ad4bca582eb8a4efc89a5eb3de8be4d4951bdd01ceac1b442b6c5fa2ffd53581069f4096515842539625712af1f395033fefa6818a2aee541dbbf8c6e64ef12cf16f937dde963fb28021ddc203c88b716c7c74d597fdb3f57b3f1880022ce0c9faf0329508ca586f992735fe5e0475ce5521554f3ca2cf55cbedcca849f84064e315ea9baa7ae0caae3da07c78ad3fac104133ed40ef51659b3f934bfc3467f27b5754993d6d7c2229526405fcd11cf044cb83481630c77a9fd85ccc2a4193a8dfe85cfeed4b3a81d2d446c14e1fed6c81eddaf0fa75bf8aedc9114b022066bedf3fdd585ece00f6f326b4ee2c042bc78d9efb313c9645fc4a5ceed4c6decf03842398a0ac074a7d4cd8a6b1fea947ca61b1d84d45c209b6ff5050a6923c131c991e615a2026a0c8e43d92006184c0b1a8f6b980a45fcad4b10336a66694b7d613a051aeb8cc237086e8514508206681341abeb1090e104cbd5811991a7c4de64cd5c8786de020c63c0fcd07d0ad3ff01ce3f81d340933b5a3ab1ad37f4633af7b7e6bb343b9687b48a4a2aad59ea5478f8010cf22be8c0f3a5e1a444c12ccf652bfd2c39d18cd085af92927816d8f890f42cca093d6e066416c4c5c8086085d614feb80d7fec393ede5f9927a8b18c34d1af34c65eef86c28ad205fb2cd9ed072311424f135c243fbbad065001932f31563034af728ebff332d54618d0a9b075b4d88bc5606d3cd0dbef94950d10e3defc0ac7966f49c359d955f6e8c9824d605a8feeb3aece5d42d7317665e1aa3f2f36ea79d212c52d25c9b17f06afe18b69e81a7629f3315142094dc8302704f6522c3f34d292583528fd4056c752bc413cdff72ed69adfdd8e61c0cef24fe51e20229d7962589244c339cb1cddc052f468f5c7a4975775cc9da15d60bc7154a739f2100f5dd310d8637406a89f9c7cb97b623fdee6562700d3117211e0dd8843873c79569c1500d494772792c536236897941d8d46bec467a8d776aaa61f5555d7eb69f2722a6548f80b98e438bbaeffbd938b59dc745b8a6a9c92a980df279ae11a61e5414439a5e838e06cc99670bae4a6afd41b8734a145198325132a9fae0d3df969fec1d8072a6698a248ae47aed264bbf99c4a0756f0ae356ae8d7a04a6c3e099f960fa77d39d3ebe1a86c5d98232d1c7066b222246f9118943f596c5a6549ab2e4f8e53060700e68a262d274d488ba649f5473a3cf2a36860316bdf525c5a64cb8b07363fd2936c29f2c381beb016484f8bdc651088ac69c12529cb6d73c49dd1fa9404b0ecd10bc3ca07eec5d13f0d0b8c101a2946e888672aa5f48ffb175d506fc76ae2d6642b03b9a5abed00e3b400249e2174a5815794ada9352536d715f0ddd9ea2ea25a74ae9f195a4d0dcea6ae2e18b229d33236463e230017f7ce907d75b5455f304c30e76abd9e9cc6de36abc6ce24cf557acb6883a28f11bf1170b911898d98b809ef5b2d83b075b30be5f6d9eafb06d589ffc05afa3a8c7071a972487bc0c9e1c2b43097b2b4a77d7d7048b2f233d728e6ea4bf33b9b9efe6351cbe2e562156734d72164d919e21f3dd5609eacbb33d1e6a58b974700f63943533ca93f1a940658aa4129b3b93fbcec39187a495489071409d21bacf2a0e59a901a6241099ada4a1b607116a525558e3ab7d52bf546ba2a994bfadefe30e21063df9de4553326873f5fb9e6e7316ff24633fb4fa4f94497332d53aeb3cc0fae6d2658b6d2e4ae609e2554f0ad9e1b0e8bbd4843a687cfffcb311ff3b0844f1dcdf4714ef115ade9ead5e2aadc7b8a279d86d3acb61860a26e11b4e30115c94024d2b0c792b9368d1d909ea70b26b5dcaec767d5f126703ea4856a72d988612cfe68214f33e3127e6e387bf9f9e81ffbdb75f694063b66847c450fbf5da5c1ef62c19ceca81c001943b3d273f68045ae377d431786b73efa59ea5c047717100897c43266a3d59a7a98ee39dee5d36ae53cef86b0960b324bc39328da0e157dc67bdf1821b69e5cf305b24e693525cdf20af6dc8475692be2de5ac9ed710a7f00bc7a463821fc57a0b4cf79122c36cc886a6926d81157e68ee770bb8949438bc4bdc13b218f878cb0c125e0d55d63e247fde8f2cdc76b910831c34f205e1162b8e076515d048358dbb395490eb991b35c295a048b68380e2641157bd73ad792e7880d5e3e8f9c7c9bb617c760d012097d405960d23c383a9e21bb49d3cc420ddbcd7ca151f49380f4dd439eb4cfd75707cb1c70d369072548c4ac5b7c11f1a6b079413b3bf33687a77bd6f29e4c2484088b298fb1abfd96db71d7565185b591b6574906d0b04eb11e45877e0c7a3a1305ff61af2d7d895f9a3af3e8645b66550457756b578a87ddf68c5b45ed717b92fe1f2ed14c08ef75373ef8fdd9f833892fbdfddc4ea9ec9df3144323d3cf804844715b26f16c03e2fd2c4c067a18558a1fc513a8416c27a090d0112474b9062fc4dd380a9faa969b9682dcc2e386330e72626039fc58a1a5ac78a2e9f445b3afad60b5a246a3cebde227ae74474f9ba2173bb73e59ce9ebf4d75fb0c63189ac9d91b735cf337d423bfb909b68b3cdfb06693a90043c6daa8d8b386bbe771e740899915b047d9c4835c35fd375f390ef514fc4c6b61e916e1102ea75727f7ac2944375cfde15453e8e5b920ca03b40564b8db3be1226ae28aa47c107e61883b82307dbf2ef807307d55a3a00a4784eb57016e10a0e3109ff7cdc2a6fdd24c7b52208a5e197182e11c4a3b8c1a9383335b05bfac0b795818f8c8fb016cf46a3dd1c0ad010562f5e8d6f7ed6057aafadf88d018a3b1cad6f67e7bdb562aec5d733ab70f4bc44e4cae636423f8eb329a36cc9ba3e569c12e07899158c1460819543519794ef4bf557494840742905b0"}}, &(0x7f0000001380)) r4 = syz_open_dev$ublk_bdev(&(0x7f00000013c0), 0x0, 0x161000) syz_io_uring_submit(0x0, r3, 0x0, &(0x7f0000001a00)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2004, @fd=r4, 0x3, &(0x7f0000001840)=[{&(0x7f0000001400)=""/242, 0xf2}, {&(0x7f0000001500)=""/249, 0xf9}, {&(0x7f0000001600)=""/123, 0x7b}, {&(0x7f0000001680)=""/46, 0x2e}, {&(0x7f00000016c0)=""/42, 0x2a}, {&(0x7f0000001700)=""/141, 0x8d}, {&(0x7f00000017c0)=""/15, 0xf}, {&(0x7f0000001800)=""/44, 0x2c}], 0x8, 0x17, 0x0, {0x2, 0x0, 0xb, '\x00', &(0x7f00000019c0)={0x4, 0x401, 0xd2, &(0x7f00000018c0)="f01238b98355aa94264da2edbe3122ddef419ea45e8cc6a2e230fc3f33bdb71b58a0cb80a8888213e2a66c8173be62f4f5da776eef47a904162f2a9fbf42919a3d1c5b1b6f71c8f5b7cd1e50de58841c7d13f543680b97fb3ba8642a287923c6a934ec61a94efcf69d66cbe3d24dbba753162b0a34ec89a46ab4e4b9273e307558d9e9bf377b8d72b165fdb470925b73ea849d815f89bceb81ac8e6082be91028a3fb775245fdb7e2b63d4bd6793cbfa4e64f63164b17c1a88d6546fd919a2e9982cf8955046b8d7606fccda87200e6a2211", 0x7fffffffffffffff}, 0x51cd}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001a80)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000001ac0)={0x73622a85, 0x10a, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001b00)={0xffffffffffffffff}) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000001b40)) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000001c80)={r1, &(0x7f0000001b80)='%:\x00', 0x1, &(0x7f0000001bc0)={@_ha_fsid={[0x0, 0x1000]}, {0x9, 0xfffe, 0x320a, 0x42}}, 0x5, &(0x7f0000001c00)={@_ha_fsid}, &(0x7f0000001c40)=0x9}) r7 = syz_open_dev$vcsu(&(0x7f0000001cc0), 0x10001, 0x200000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f0000001d00)={0x6, 0x8, 0x2, 0x3, 0xe, 0x0, 0x6}) syz_80211_join_ibss(&(0x7f0000001d80)='wlan1\x00', &(0x7f0000001dc0)=@default_ibss_ssid, 0x6, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) pread64$ublk_ch(r2, &(0x7f0000001e00)=@buf_max_buf, 0x1000, 0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000002e00), &(0x7f0000002e40)=0x8) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f0000002e80)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002fc0)={&(0x7f0000002ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8d, 0x8d, 0x3, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x1c, 0x1}, @datasec={0xe, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x7}, {0x5, 0x101, 0x6}, {0x2, 0xd, 0x1}], "81"}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x8cdc, 0x2, 0xe}}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x38, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000002f80)=""/6, 0xab, 0x6, 0x0, 0x5, 0x10000, @value=r7}, 0x28) sync_file_range(r9, 0x7, 0x2, 0x2) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000003000)) syz_80211_join_ibss(&(0x7f0000003040)='wlan0\x00', &(0x7f0000003080)=@default_ibss_ssid, 0x6, 0x0) pwritev2(r4, &(0x7f00000031c0)=[{&(0x7f00000030c0)="acccf13f9212acdaf89700f28dea33791773ec64ff90891de18ff1de0252fe4c30545dfdc3ec12ec3e57b6a90f5c14707e464466586e1868edf3cd5de7fbcc6437a3d608dbf7c2fc7ce19475190a8a45e58c325011a33613084acf240e31172859e07671bd0bf1b4e3838013df23ec560bec8a947194bf46397adf72e58855b849c77a9ca24606f2dc3618bedc5a35171ee731f6fff366fe136afdca08d6bf290ed07c023df9f5925a9c209ac6e531b28fa2937c720efef0cd5ad0083ec7134e1ef6e950bde80b4130baafd0baecea4138dfa4f3", 0xd4}], 0x1, 0x2, 0x400, 0xc) ioctl$VHOST_VDPA_GET_CONFIG(r7, 0x8008af73, &(0x7f0000003200)={0x0, 0xcf, ""/207}) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000003300)) syncfs(r7) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000003400)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x30, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004000) write$P9_RLOCK(r7, &(0x7f0000003440)={0x8, 0x35, 0x2, 0x2}, 0x8) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000003480)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000034c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000003600)={&(0x7f0000003500)={0x1d, r10}, 0x10, &(0x7f00000035c0)={&(0x7f0000003540)={0x2, 0x2, 0x8, {}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "22c583f05349cc77"}}, 0x48}, 0x1, 0x0, 0x0, 0x40886}, 0x80) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000003640)={@ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x31}, @local, 0x0, 0x4, 0x2, 0x400, 0x1, 0x1040000, r10}) 1m10.661637211s ago: executing program 2 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_getnetconf={0x34, 0x52, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x8001}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048840}, 0xc850) 1m10.601389798s ago: executing program 32 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_getnetconf={0x34, 0x52, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x8001}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048840}, 0xc850) 1m2.341780703s ago: executing program 4 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) 1m2.16148151s ago: executing program 4 (id=156): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r2 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='*\x00', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0xc0089364, &(0x7f0000000180)) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x61a, r1) r4 = add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="0b2f977b4bebd87e", 0x8, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r4) 1m2.100887904s ago: executing program 4 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0xa, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x120}}, 0x80) fchmod(r0, 0x0) 1m2.051030989s ago: executing program 4 (id=158): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@index_off, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x108) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) lseek(r0, 0x10001, 0x0) 1m1.971164474s ago: executing program 4 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x290081, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000180)={0x7f, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) ioctl$TIOCL_BLANKSCREEN(r3, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x8, 0x2, 0x1000, 0x5}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000040)={0x0, 0x0, 0xfffffffb}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x401064d0, &(0x7f0000000000)={0x1, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m1.609928681s ago: executing program 4 (id=160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8040, &(0x7f00000001c0)={[{@metacopy_off}], [{@subj_role}, {@dont_hash}, {@obj_type}]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c"], 0x178}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4e4}], 0x1c) (async, rerun: 64) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 64) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000040)={0x2, 0x8, "004004", 0x5a, 0x40}) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_complete(0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000002c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000000440)={0x27f0, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14b4, 0x3, 0x0, 0x1, [{0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x620}, @NFTA_SET_ELEM_KEY_END={0x1420, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "10279381e497598825693085efe4a305355580c55ad449aa987a86a7463c5a093e62dcea620c9bc0d83cae1137b8d58cea274fee93165f09f2a4ba0e875e8869149f9c7281a5d84f780ff59da2a15ae467a7723396c91eb0f4aa36f9843b8f2286b49153561a684623d76002cd4ebffee5875fcce5dcec2f92d45db7ee3ccf9ca4684cf537bdc515a1db703ef94711e34ded37420a2fda9ab7d2904acbea3061dfabe3c0887425ce026348aa109118d8cd75052a10e1228b0d2f7b8f8cd639c500aa5dcbaa56f5991542ce4894c3dea5f5d50e0f79f13ce46da3f213c66e324c43befb00ea6a2168f8c507676f62a2"}, @NFTA_DATA_VALUE={0xc5, 0x1, "aeffe35f0c6c6da4ddf2ae5969f2dd2fa9f566c4631d523a4ae0565e26b1b0edd39a630b03a6855e15291b8ed932415ab6e29711a5208fd9083a9856151b5e483bc9be1f006c94da143e1c21dfa610af081b58fe6ab80e43d94fdffae9cbf12bd8161f97261dee787dd167941f928ccc02aa659e5386b31294e58a16ed007d7bb45604bd37b3abd43d788077ec2012c8b74db0ef495161055ed5a121d34c74b7da6de0d6ea4b5208d82e8d23f668359d698b172ea85f12be952858f47d8f00467d"}, @NFTA_DATA_VALUE={0x1e, 0x1, "1da60f1f560efd62d31642dedc10b2852e6e03990b6f5272baf7"}, @NFTA_DATA_VALUE={0x7b, 0x1, "518a77487b855ed4bf79925fd622c7a8000da639c9a414a19544712117f873d36e5ab79827a77303dd97e10e30f75bd4ca0b555cc5b56da941042c833ed5c682f38ddfd4f83f4522b019afe1971a156bc252bb7c6c0d09d12b7f7a8fa3e21fd6745aa1a13f025d0f4a32e4d71ee31ab33e2a2af55608df"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xdb, 0x1, "d725b054268ec2dc31557008e3de48772b5549984931a045e66d5398e58c962451a3b43d8af32ca9831135e029e7e0fba75266bddc892285c2a4dd580f28d0405b1d2387797a0e269edebae721aae164ce3ac7d45e1d70cfece041dfa593150cb882b358f74c5d5d22b2863a4d627985e1e26cd55394bf15f8e64a0583e4bf14b12809df0768aad5a25e1bc8604c1459874150007389e876ead23056abf08160e5a008c2acd74edddbb94ebff6db01a3343799d10cc168f6510045fb4a6802ba129e563b3cb53d5856c701767d60b68d7e9fd9231c36dd"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "42deb1c35540cb8fa787f56d59de5cd951b42c3d1fe2ff07a4548194f51ce696a7256aa58b527041ed6e00c540961599b59a3e51f162976a448234a61c2225f5d8c952db9dcd50215b57b393e6bb5523f42e89cf5a2ba9680e393a3722106d6ab0f83133ca6baa0e140f970bd9948d9cffc1698e35a24c91b26d73cdb03ce4bde3fe49dd9e8787771cc407659c3ebc9d20e907cf14e34191de50a7a33c8ba14c73e2c6ad76e4d2e387a8d18fb6a5314428ca665d32595089c6529fc84c8843b28dbc96"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4938fb9d}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "39f92094210e55bc3864c822bbdd8eff68ff26b97fbee07fe026d6"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x66c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x334, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x2d0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "3498f92dafa737228ba88d67e846a3c84e87aa9fa98030f8ce82e9eda89dbd8a608384da78f972936970f569adf8"}, @NFTA_DATA_VALUE={0x3a, 0x1, "ad82c0571c2fead98b6bb990ffd959959d653968c2e0a7e992550d9df296c1201b2590d6b80528f0d3d517dc2d582ef21b17242fb6c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "d2c88d4b"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "8d9e44c516b8c9a115cff51142dc8fbe4b20313b8bbd5654500ec1612e0155d217c3582ae35cef0401b44b235a774feb12943a49f6f4b6d160396b606335d955b8f4327e93a59988adda1af17b95be9241c0686b29d07d108e088ec7ab20596dbc2c6331d2492b87380cbfe04385a3a268c0031fa8f78025faa8db0e8b93b77f3129bc0b91cc6871d65c85e64fbbc39771f5fd84b059841d29af8797f2cc5310ff4e2f7842"}, @NFTA_DATA_VALUE={0xcd, 0x1, "f0b92e524da4cd15b614faf3bbd7ae88b908577fd858c441f0578cedd949403750b0141273f1a111da6cb441e52bb0c09050b02178afd0694d45455646be02f2a26d89d54eec7de3127a4f34cf753fd59e5694c4092b02b99b208d05dd130c682c250c0f7754ae19e6e231b99e0b5ce9d9c2b721b3df16ba9d87e95325c4be804eb41d0c8407b0bd86d98b931190aa42b30ba01a183a9a3edaf37725afa0e223580900f363b63c790cf68c172df21ed0839e743467deaa689e19ac91d52cbef2675216dae96d9686f9"}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "60aa93ac8a58ae26a8f197279fc43b0f46bde6a93605b8804615bd9ac63b02bae8f076de064427b2f1359152b5d1c2574fa158f25427cb3e5ca8c165084005378e68147355ff521f649a27a45201f3ac485f4ef1b671eb7d620766681d0e1f4e114654d30a9a25fb84e3f1721e79d5f578426e79e3f8cc9192472f9ef2a0ce4cea3119c994d32dbb89ade13259d95e3f391be0b72f79fc963a87f29686116c6d6b5e98a16d8b641de2dff4cec9ba8fdbc975a5e8de944867f6a598e359378dfef2309b7f10a8619661ffbb44ad22aa669ba68002fa018fc5c02d2cfde82f12602e32"}]}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "0a842bb9a863f62269aa897351ac0c82c80ae6b1d71fb3a25717611c8fe40e690abad0a973289ef6c16c2718b1176122ccf00e989cc61bd8b9f78e22c3fc5c9d39abc9ef9b3f12c8add947b67612fb2f1ce1e4c17e5f3989e6c1f1ca81e1129742ad6cddae95c5a0653dd43e752cf0a2694c9af4e8cfcd2f8a4a48ae3adabf3f13a93bee3da140ccb3a26a34f51f6b9f01ebff786bed24bd42c52fb40534b7a90eafbbdb1ad38362b891e0fdfdfcc342283a064ef272c48752bb09aeda3c86099a19ae9d4b1660a23a0efa2b4482ba2496de8739101ffd0f486448976c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "36ce6589fe56b6fe6682a5a0b73c6359d9696f46b3271e2ce2368fe036dfdd5da38f53cf0749235d56d1"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xf229}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "3814824088bb4285fd9a1448d32710eccc456173afb9adb0331c98ec12b0f53fe9c6d143291e663f6d7c2b65c4533082740bc6b1a3e38dfe15f98ac8ea547786b1620795a986ba9ce060ad002d49d7cca39ba866425b1fdf285f06efffa98bb821ad0f3bddbad0749c1f0fb7939fdb162a7e6b2dded992358fcb4f3dfc134cd7fd6fbe4137"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xda, 0x1, "a53f4784522f1edf22d0cede20a640fa1cff75fcdfbac0a19c1daf571870b5d79213d69d87789458a645a40d0f16a6f2be24ff8d016e417d015b4c6da205d54d460c842bfa9d348f6cd405d03d3a4a28150b4a65534a8c43613ed56635117f04cae47c8b4c8d860c5b79cbf57a1f9efab954c65ed168ae4db5ea0339150a54fd4eb545c7a78c4a62d39c95cb0c781d3baa2c34b97e534ae3e1a669f59b3e2096f66ee5d2aec537ff8300d5322541491e7ebf79b892cf4ca227c8b89b573cef72bc972d182c73dfbedcc3386cfc510bcba2cd47bdd885"}, @NFTA_DATA_VALUE={0x41, 0x1, "70d3a2f95086bcf048dda2131809bc5c2368e9475b587941e72b1bbbc3d2f4616e8de9fd2ce5f9e105ff584e6c629ee0b6e7d5e2014e59bfa29ca0139f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff71}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "760c50d70441671fd9a7c1ae9fae500b66f7fe0f9d55f7b85813eff7b15f977b37770e123bdca27425cbe17de41ad554a564723e52d02866de7d78dbc6dbd87b6c7fe7f7995e0f6fcd1b9499f102cb2ef395517ee2fd9766b27e6c9b660ed8fc05a943913733ef5f384333aef4ef58a1e34047a06fe23d54762644067d29b3ed661c9e490beceae4ad58058aaa45673b80d947d62bc5477bf3a170aa6ba3cea08219f1bc92f729828c1d4be4c6af7536dd240ee099b46076bb93bb7c80444fb532f77cc2f7f6492c7b1f92ace3"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x36a2}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "522037fb6bf065098058ef6b374ad16e20dd0765a1ed0f"}, @NFTA_SET_ELEM_KEY={0x298, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "a5f4933b636bfe85e530ab870c2ce9be68a05dd3509968653f8c9fb14425fa19c544f76c1ca6321543a2a7b0a74563052ca6fa251fb9f9afff81b30ffdcd148f"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "601c273bfbb8af8cd07a6fba61ef896e57af687cbcf3b5a99ca6677924b32c675e75d0ca0ca67bd51fd5100006899e877cf33f2126a6f73cf5419c26a9fe7225e37e56478e1e5dfc72565c8a5812dcb5a96e536f91ba0e8d061d1f161368729392319b1caea5ec896c7503da742c30ffcc6f9a5d01ed99217f2db0b9e5fa75d7ab6962046c8fc458cc66f78f6a99997795bdf8de0a5292d34b623f00dbd17388c634979f33754929f544369628cebc31911f6d5f3661589011af6b13b28327f6d9e1e5b6bd888cd49b55c34f3faf8fbf3a21302ffb95d2c0716a9680f450"}, @NFTA_DATA_VALUE={0xf6, 0x1, "c1f1cea0e662acb86724c2ed2b4074f00418a70c7b3458febadbac6c8b517358f87545918b9111b93f7d83e6456ef52440a5fc41c4036acef2a522376247080a60fd3b56197ee4bbef4af832e58729be312944c4e00bc0f4ad5e8e2831c15a7aa1ffeece67ba8817194b6f1d90874df7caa70f198f6a7fdf17765ec07c59e48a4db5c8ef26bb7e95d1a624ef13d681504fa621ae8062bf2f5593bedce2941c006d11c71efad2e24dbd7cf4f6020dfd9f5d69aacc48f52029b5396d25c9b6f5f34afbb89b53a451aa3725a3e2a9a43bfd4020849afbd8a69ad15a0f6125245bd1ca35e63dc1bd3677409b41909637b5354f26"}, @NFTA_DATA_VALUE={0xb, 0x1, "753ac85403328e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, 'obj_type'}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x164, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "1d23a57f793c91ef17931d2586ad5889beb973bb6512aab8361444c0eaa22ca9f00ffeb21bc60259dbd1c0825cbf6456656a71771b72b573edf9f93c21c5147ebb3258c971a10fb15e12fb11989f6901f678a219f60f39e01c6c013ac353f5e4961257309a79"}, @NFTA_DATA_VALUE={0x20, 0x1, "362a504d37c47c83bfb68bf8f0c0e6ec658e71920f9b2072b85ce9c6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "a28497f09b526b7078a8733c7648af7a37098d0b379acc0c95951090c4db2a53cf2e08ae85df3c70edc0f06e868350384dbe349866ab75"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c8, 0x3, 0x0, 0x1, [{0x3c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1000}]}}}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "54d0106510091420963e639d6cbea0df27018411a233a9ea6281bc969d0c42e0003a64f65b99d1b47297eeb9d64a997d24f9a3568c07cc8f0cf7cc686f43c4f1ca36efc8b6efc84fe763f949600e54f8308735e4eb0450259c9e"}, @NFTA_DATA_VALUE={0x1d, 0x1, "c2569dcb44c592911d25eea8c3650b0cea187c70c070dc7701"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VALUE={0xdb, 0x1, "e349758ec370c8b6c726f9ab52609169c4c40944101c4e3c3f7cb7dfd015bf5888d3c793bb0cc38e5380d9c86b6851a441c8ba2f1b16bbdafa7e71fd8a72bccc9443b1c5b16d9fe31d6cb62529e715a7f1c7bd596205974040acca13fccd90f5d1e33a9795a0f6c56392236583b71c6f0d2a833ee48ad36253dcff52ce12af463fa0afcd2443df0d22fe225131d1e8c4cd91bed82b1f9757b4e021f46eb0e61200d022cc698b7454635214ea26a32ccdce4432348f6a108e03993e48203d2cfad53d75487a3c8acef0e1c65549027c36ebb23889f420bf"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "81d33f009d0bac93e26c5a297ef5013ab8f775b8deb0d881858fd938fa8b18c4e2412948588c13f1a70a65af4b93"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x24, 0x1, "4905ea0c45102d907a5214df363e19928ba259fff4b8d1e550943f0a2c793d41"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f6e705faa1b3c6824da28749819804fdfc1fcfe500bf19bd98113bb6432d90c5ee66d131d18dba4e8f4ab5a9dd0d44e544df18fc538d9863fb43de7ba078b9125eddaa73297b9fbbfd979c9dddbcf4c8bfac866d5c6680b4ba"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x27f0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 1m1.539636936s ago: executing program 33 (id=160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x24000080) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x8040, &(0x7f00000001c0)={[{@metacopy_off}], [{@subj_role}, {@dont_hash}, {@obj_type}]}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c"], 0x178}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4e4}], 0x1c) (async, rerun: 64) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (rerun: 64) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000040)={0x2, 0x8, "004004", 0x5a, 0x40}) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_complete(0x0, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000002c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000000440)={0x27f0, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14b4, 0x3, 0x0, 0x1, [{0x143c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x620}, @NFTA_SET_ELEM_KEY_END={0x1420, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "10279381e497598825693085efe4a305355580c55ad449aa987a86a7463c5a093e62dcea620c9bc0d83cae1137b8d58cea274fee93165f09f2a4ba0e875e8869149f9c7281a5d84f780ff59da2a15ae467a7723396c91eb0f4aa36f9843b8f2286b49153561a684623d76002cd4ebffee5875fcce5dcec2f92d45db7ee3ccf9ca4684cf537bdc515a1db703ef94711e34ded37420a2fda9ab7d2904acbea3061dfabe3c0887425ce026348aa109118d8cd75052a10e1228b0d2f7b8f8cd639c500aa5dcbaa56f5991542ce4894c3dea5f5d50e0f79f13ce46da3f213c66e324c43befb00ea6a2168f8c507676f62a2"}, @NFTA_DATA_VALUE={0xc5, 0x1, "aeffe35f0c6c6da4ddf2ae5969f2dd2fa9f566c4631d523a4ae0565e26b1b0edd39a630b03a6855e15291b8ed932415ab6e29711a5208fd9083a9856151b5e483bc9be1f006c94da143e1c21dfa610af081b58fe6ab80e43d94fdffae9cbf12bd8161f97261dee787dd167941f928ccc02aa659e5386b31294e58a16ed007d7bb45604bd37b3abd43d788077ec2012c8b74db0ef495161055ed5a121d34c74b7da6de0d6ea4b5208d82e8d23f668359d698b172ea85f12be952858f47d8f00467d"}, @NFTA_DATA_VALUE={0x1e, 0x1, "1da60f1f560efd62d31642dedc10b2852e6e03990b6f5272baf7"}, @NFTA_DATA_VALUE={0x7b, 0x1, "518a77487b855ed4bf79925fd622c7a8000da639c9a414a19544712117f873d36e5ab79827a77303dd97e10e30f75bd4ca0b555cc5b56da941042c833ed5c682f38ddfd4f83f4522b019afe1971a156bc252bb7c6c0d09d12b7f7a8fa3e21fd6745aa1a13f025d0f4a32e4d71ee31ab33e2a2af55608df"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xdb, 0x1, "d725b054268ec2dc31557008e3de48772b5549984931a045e66d5398e58c962451a3b43d8af32ca9831135e029e7e0fba75266bddc892285c2a4dd580f28d0405b1d2387797a0e269edebae721aae164ce3ac7d45e1d70cfece041dfa593150cb882b358f74c5d5d22b2863a4d627985e1e26cd55394bf15f8e64a0583e4bf14b12809df0768aad5a25e1bc8604c1459874150007389e876ead23056abf08160e5a008c2acd74edddbb94ebff6db01a3343799d10cc168f6510045fb4a6802ba129e563b3cb53d5856c701767d60b68d7e9fd9231c36dd"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "42deb1c35540cb8fa787f56d59de5cd951b42c3d1fe2ff07a4548194f51ce696a7256aa58b527041ed6e00c540961599b59a3e51f162976a448234a61c2225f5d8c952db9dcd50215b57b393e6bb5523f42e89cf5a2ba9680e393a3722106d6ab0f83133ca6baa0e140f970bd9948d9cffc1698e35a24c91b26d73cdb03ce4bde3fe49dd9e8787771cc407659c3ebc9d20e907cf14e34191de50a7a33c8ba14c73e2c6ad76e4d2e387a8d18fb6a5314428ca665d32595089c6529fc84c8843b28dbc96"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4938fb9d}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "39f92094210e55bc3864c822bbdd8eff68ff26b97fbee07fe026d6"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x66c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x334, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x2d0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2bc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "3498f92dafa737228ba88d67e846a3c84e87aa9fa98030f8ce82e9eda89dbd8a608384da78f972936970f569adf8"}, @NFTA_DATA_VALUE={0x3a, 0x1, "ad82c0571c2fead98b6bb990ffd959959d653968c2e0a7e992550d9df296c1201b2590d6b80528f0d3d517dc2d582ef21b17242fb6c8"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "d2c88d4b"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "8d9e44c516b8c9a115cff51142dc8fbe4b20313b8bbd5654500ec1612e0155d217c3582ae35cef0401b44b235a774feb12943a49f6f4b6d160396b606335d955b8f4327e93a59988adda1af17b95be9241c0686b29d07d108e088ec7ab20596dbc2c6331d2492b87380cbfe04385a3a268c0031fa8f78025faa8db0e8b93b77f3129bc0b91cc6871d65c85e64fbbc39771f5fd84b059841d29af8797f2cc5310ff4e2f7842"}, @NFTA_DATA_VALUE={0xcd, 0x1, "f0b92e524da4cd15b614faf3bbd7ae88b908577fd858c441f0578cedd949403750b0141273f1a111da6cb441e52bb0c09050b02178afd0694d45455646be02f2a26d89d54eec7de3127a4f34cf753fd59e5694c4092b02b99b208d05dd130c682c250c0f7754ae19e6e231b99e0b5ce9d9c2b721b3df16ba9d87e95325c4be804eb41d0c8407b0bd86d98b931190aa42b30ba01a183a9a3edaf37725afa0e223580900f363b63c790cf68c172df21ed0839e743467deaa689e19ac91d52cbef2675216dae96d9686f9"}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "60aa93ac8a58ae26a8f197279fc43b0f46bde6a93605b8804615bd9ac63b02bae8f076de064427b2f1359152b5d1c2574fa158f25427cb3e5ca8c165084005378e68147355ff521f649a27a45201f3ac485f4ef1b671eb7d620766681d0e1f4e114654d30a9a25fb84e3f1721e79d5f578426e79e3f8cc9192472f9ef2a0ce4cea3119c994d32dbb89ade13259d95e3f391be0b72f79fc963a87f29686116c6d6b5e98a16d8b641de2dff4cec9ba8fdbc975a5e8de944867f6a598e359378dfef2309b7f10a8619661ffbb44ad22aa669ba68002fa018fc5c02d2cfde82f12602e32"}]}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "0a842bb9a863f62269aa897351ac0c82c80ae6b1d71fb3a25717611c8fe40e690abad0a973289ef6c16c2718b1176122ccf00e989cc61bd8b9f78e22c3fc5c9d39abc9ef9b3f12c8add947b67612fb2f1ce1e4c17e5f3989e6c1f1ca81e1129742ad6cddae95c5a0653dd43e752cf0a2694c9af4e8cfcd2f8a4a48ae3adabf3f13a93bee3da140ccb3a26a34f51f6b9f01ebff786bed24bd42c52fb40534b7a90eafbbdb1ad38362b891e0fdfdfcc342283a064ef272c48752bb09aeda3c86099a19ae9d4b1660a23a0efa2b4482ba2496de8739101ffd0f486448976c"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "36ce6589fe56b6fe6682a5a0b73c6359d9696f46b3271e2ce2368fe036dfdd5da38f53cf0749235d56d1"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xf229}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3ff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x320, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "3814824088bb4285fd9a1448d32710eccc456173afb9adb0331c98ec12b0f53fe9c6d143291e663f6d7c2b65c4533082740bc6b1a3e38dfe15f98ac8ea547786b1620795a986ba9ce060ad002d49d7cca39ba866425b1fdf285f06efffa98bb821ad0f3bddbad0749c1f0fb7939fdb162a7e6b2dded992358fcb4f3dfc134cd7fd6fbe4137"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xda, 0x1, "a53f4784522f1edf22d0cede20a640fa1cff75fcdfbac0a19c1daf571870b5d79213d69d87789458a645a40d0f16a6f2be24ff8d016e417d015b4c6da205d54d460c842bfa9d348f6cd405d03d3a4a28150b4a65534a8c43613ed56635117f04cae47c8b4c8d860c5b79cbf57a1f9efab954c65ed168ae4db5ea0339150a54fd4eb545c7a78c4a62d39c95cb0c781d3baa2c34b97e534ae3e1a669f59b3e2096f66ee5d2aec537ff8300d5322541491e7ebf79b892cf4ca227c8b89b573cef72bc972d182c73dfbedcc3386cfc510bcba2cd47bdd885"}, @NFTA_DATA_VALUE={0x41, 0x1, "70d3a2f95086bcf048dda2131809bc5c2368e9475b587941e72b1bbbc3d2f4616e8de9fd2ce5f9e105ff584e6c629ee0b6e7d5e2014e59bfa29ca0139f"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffff71}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "760c50d70441671fd9a7c1ae9fae500b66f7fe0f9d55f7b85813eff7b15f977b37770e123bdca27425cbe17de41ad554a564723e52d02866de7d78dbc6dbd87b6c7fe7f7995e0f6fcd1b9499f102cb2ef395517ee2fd9766b27e6c9b660ed8fc05a943913733ef5f384333aef4ef58a1e34047a06fe23d54762644067d29b3ed661c9e490beceae4ad58058aaa45673b80d947d62bc5477bf3a170aa6ba3cea08219f1bc92f729828c1d4be4c6af7536dd240ee099b46076bb93bb7c80444fb532f77cc2f7f6492c7b1f92ace3"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x36a2}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "522037fb6bf065098058ef6b374ad16e20dd0765a1ed0f"}, @NFTA_SET_ELEM_KEY={0x298, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "a5f4933b636bfe85e530ab870c2ce9be68a05dd3509968653f8c9fb14425fa19c544f76c1ca6321543a2a7b0a74563052ca6fa251fb9f9afff81b30ffdcd148f"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "601c273bfbb8af8cd07a6fba61ef896e57af687cbcf3b5a99ca6677924b32c675e75d0ca0ca67bd51fd5100006899e877cf33f2126a6f73cf5419c26a9fe7225e37e56478e1e5dfc72565c8a5812dcb5a96e536f91ba0e8d061d1f161368729392319b1caea5ec896c7503da742c30ffcc6f9a5d01ed99217f2db0b9e5fa75d7ab6962046c8fc458cc66f78f6a99997795bdf8de0a5292d34b623f00dbd17388c634979f33754929f544369628cebc31911f6d5f3661589011af6b13b28327f6d9e1e5b6bd888cd49b55c34f3faf8fbf3a21302ffb95d2c0716a9680f450"}, @NFTA_DATA_VALUE={0xf6, 0x1, "c1f1cea0e662acb86724c2ed2b4074f00418a70c7b3458febadbac6c8b517358f87545918b9111b93f7d83e6456ef52440a5fc41c4036acef2a522376247080a60fd3b56197ee4bbef4af832e58729be312944c4e00bc0f4ad5e8e2831c15a7aa1ffeece67ba8817194b6f1d90874df7caa70f198f6a7fdf17765ec07c59e48a4db5c8ef26bb7e95d1a624ef13d681504fa621ae8062bf2f5593bedce2941c006d11c71efad2e24dbd7cf4f6020dfd9f5d69aacc48f52029b5396d25c9b6f5f34afbb89b53a451aa3725a3e2a9a43bfd4020849afbd8a69ad15a0f6125245bd1ca35e63dc1bd3677409b41909637b5354f26"}, @NFTA_DATA_VALUE={0xb, 0x1, "753ac85403328e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_LOG_PREFIX={0xc, 0x2, 0x1, 0x0, 'obj_type'}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}, {0x1b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x164, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "1d23a57f793c91ef17931d2586ad5889beb973bb6512aab8361444c0eaa22ca9f00ffeb21bc60259dbd1c0825cbf6456656a71771b72b573edf9f93c21c5147ebb3258c971a10fb15e12fb11989f6901f678a219f60f39e01c6c013ac353f5e4961257309a79"}, @NFTA_DATA_VALUE={0x20, 0x1, "362a504d37c47c83bfb68bf8f0c0e6ec658e71920f9b2072b85ce9c6"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x3b, 0x6, 0x1, 0x0, "a28497f09b526b7078a8733c7648af7a37098d0b379acc0c95951090c4db2a53cf2e08ae85df3c70edc0f06e868350384dbe349866ab75"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c8, 0x3, 0x0, 0x1, [{0x3c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1000}]}}}, @NFTA_SET_ELEM_DATA={0x264, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5e, 0x1, "54d0106510091420963e639d6cbea0df27018411a233a9ea6281bc969d0c42e0003a64f65b99d1b47297eeb9d64a997d24f9a3568c07cc8f0cf7cc686f43c4f1ca36efc8b6efc84fe763f949600e54f8308735e4eb0450259c9e"}, @NFTA_DATA_VALUE={0x1d, 0x1, "c2569dcb44c592911d25eea8c3650b0cea187c70c070dc7701"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VALUE={0xdb, 0x1, "e349758ec370c8b6c726f9ab52609169c4c40944101c4e3c3f7cb7dfd015bf5888d3c793bb0cc38e5380d9c86b6851a441c8ba2f1b16bbdafa7e71fd8a72bccc9443b1c5b16d9fe31d6cb62529e715a7f1c7bd596205974040acca13fccd90f5d1e33a9795a0f6c56392236583b71c6f0d2a833ee48ad36253dcff52ce12af463fa0afcd2443df0d22fe225131d1e8c4cd91bed82b1f9757b4e021f46eb0e61200d022cc698b7454635214ea26a32ccdce4432348f6a108e03993e48203d2cfad53d75487a3c8acef0e1c65549027c36ebb23889f420bf"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x118, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "81d33f009d0bac93e26c5a297ef5013ab8f775b8deb0d881858fd938fa8b18c4e2412948588c13f1a70a65af4b93"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x24, 0x1, "4905ea0c45102d907a5214df363e19928ba259fff4b8d1e550943f0a2c793d41"}, @NFTA_DATA_VALUE={0x5d, 0x1, "f6e705faa1b3c6824da28749819804fdfc1fcfe500bf19bd98113bb6432d90c5ee66d131d18dba4e8f4ab5a9dd0d44e544df18fc538d9863fb43de7ba078b9125eddaa73297b9fbbfd979c9dddbcf4c8bfac866d5c6680b4ba"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x27f0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 56.190241266s ago: executing program 3 (id=181): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r0}, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x880, 0x0, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x1c, r5, 0x1, 0x923, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) write$nci(r2, &(0x7f0000000940)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x8, "0f449f302c8bbcac"}, 0xb) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r5, 0x1, 0x123, 0x234}, 0x14}}, 0x0) read$nci(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) (async) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000000000/0x400000)=nil) 55.824538194s ago: executing program 3 (id=182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 6) 55.701811363s ago: executing program 3 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 55.591592214s ago: executing program 3 (id=184): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1ff, 0x4) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x9f) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r6}) setxattr(&(0x7f0000000280)='./tracefs/events/mygroup/myevent/enable\x00', &(0x7f00000002c0)=@random={'system.', 'asymmetric\x00'}, &(0x7f0000000300)='()..$/$\x00', 0x8, 0x3) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)='./tracefs/events/mygroup/myevent/enable\x00', 0x104) write(r7, &(0x7f0000000180)='1\n\x00', 0x2) file_setattr(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0xa8, 0x8, 0x6, 0xd, 0x4}, 0x18, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 55.221989244s ago: executing program 3 (id=185): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 54.370735895s ago: executing program 3 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x80}, 0x1c) listen(r0, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x40, 0x0, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/208, 0xd0) io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0xfb, 0x4, 0x4, 0x0, 0x5, {0x77359400}, {0x5, 0x1, 0x5, 0x3, 0x9, 0x40, "099ef55a"}, 0xb08, 0x4, {}, 0x0, 0x0, r2}) mount(&(0x7f0000000340)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='efivarfs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') 54.269215713s ago: executing program 34 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x80}, 0x1c) listen(r0, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x40, 0x0, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/208, 0xd0) io_uring_enter(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)=@fd={0xfb, 0x4, 0x4, 0x0, 0x5, {0x77359400}, {0x5, 0x1, 0x5, 0x3, 0x9, 0x40, "099ef55a"}, 0xb08, 0x4, {}, 0x0, 0x0, r2}) mount(&(0x7f0000000340)=@rnullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='efivarfs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') 7.210315449s ago: executing program 5 (id=830): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x203b1a58ec4e001a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) stat(&(0x7f0000004d40)='./bus\x00', &(0x7f0000004d80)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r2, 0x8001af71, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x10004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00'], 0x28}}], 0x1, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/rndis.usb0\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x3, 'pim6reg0\x00', {0x9}, 0xac}) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x2) 7.151424701s ago: executing program 5 (id=832): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000800000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0047"], 0x54}}, 0x0) 7.142533495s ago: executing program 5 (id=834): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffff, 0x8000000000000001, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1W\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000780)={{@local, 0x1}, {@host, 0x5}, 0x400, "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"}, 0x418, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r4, 0xc0104d08, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x9}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20028}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x24008084) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) read(r7, &(0x7f0000000500)=""/200, 0x12) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 7.009537217s ago: executing program 5 (id=836): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x300e9a37a8417480}, {&(0x7f0000000400)=""/215}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080), 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0xfff, 0x80000001}) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27030200bdfd28000600002fb96d", 0xe}], 0x1}, 0x1) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000780)="80fd0100c3a6fa", 0x7}], 0x1, 0xc, 0x5) (async) write(r4, &(0x7f0000000380)='100000', 0x6) (async, rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) (rerun: 32) write(r6, &(0x7f0000000200)='1', 0x1) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0xfffffffc, 0xa0, 0x10, 0x5]}}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000003c0)) (async, rerun: 64) r9 = syz_open_dev$evdev(&(0x7f0000001240), 0x2, 0x1c1000) (rerun: 64) ioctl$EVIOCSABS2F(r9, 0x401845ef, 0x0) (async) ioctl$TIOCGDEV(r8, 0x80045432, &(0x7f0000000540)) 6.941469501s ago: executing program 5 (id=837): r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000200), 0x8) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}, {&(0x7f0000000180)="86ad0cfbaf99c0fe", 0x8}], 0x2) 6.851544155s ago: executing program 5 (id=838): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="40f2ff01000000c8c126cd778308f32557e6549900515aba"], 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/user\x00') fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r3]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 4.381304522s ago: executing program 6 (id=859): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{}, {0xe, 0xc8}}}, 0xfffffffffffffc7b) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) 3.761529207s ago: executing program 6 (id=864): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x101881, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000740)) (async) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x8d, "03f5e3f8098ed688874cd05d2fc303e80c4dcf9c598f0a5ed9da702409ba41298c2f6a7f95d9af0f4d4956ed4ed62f9a7d2976116c407b2ac8f6a5599d47d23fc53a5f893e55e07261f98f62ba6ca66d09d592373872a370a9ffc1dcdcbe2ca057c0b756e39683d0c6a27804326ac42eb5394475703212cff203796cc72a3f0fefa3edd3293274fed02808a569"}, &(0x7f00000000c0)=0x95) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0xe1, 0xcb, "5c28cc22735ee41fbbf82caf7a27f6e68ceca3db436f895fab7163cdded52bdee7b451d2442d9a4ad6c91bdcb0ba6ea7fb9f178008754fe13635bcc5bce6991e384254211f7e895027851b323e4c48aed2f1810f3e23edf60ff26d5afa32ce78b209d4f3950cef1c5b9e31cd7883432891e0785b76e986a169974a0f06161ddb3248b06dd34e81a91cae6f36d94b7ed1b418537ef7c75422ba258adeda70f1157de45d488298c932105b6bb5da7df6d162ca98b86c9f5f2ffb54f64fb885f79852318a41fb70ebe3db0f44"}, 0xd3) 3.520102435s ago: executing program 6 (id=869): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x7) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x47) fallocate(r0, 0x3, 0x9100, 0x10) 3.519773428s ago: executing program 6 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x3, 0x8}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633"], 0x6f4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r6, &(0x7f0000000100)='# 1 0 0', 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x8, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x40005, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x9, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x400000016d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x8, @any, 0x629, 0x2}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 3.425867429s ago: executing program 6 (id=873): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={0xffffffffffffffff, 0x4}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/zram0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000700)="19", 0x1, 0x3fc) close(r2) write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0x430f, 0x8) 3.351388951s ago: executing program 0 (id=875): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x3, 0x4, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) mmap$qrtrtun(&(0x7f000014c000/0x400000)=nil, 0x400000, 0x1000005, 0x11, r1, 0x10001) syz_usbip_server_init(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000478000/0x1000)=nil, 0x1000}}) 3.27918877s ago: executing program 6 (id=876): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$inet(r0, 0x0, &(0x7f0000000a40)) r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000240)) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x35, &(0x7f0000000500)=[{0x2c, '\x00', @data=0x3, 0x7fffffff}]}) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000400)={0x35, &(0x7f0000000500)=[{0x2c, '\x00', @data=0x3, 0x7fffffff}]}) 2.499494139s ago: executing program 0 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x3, 0x8001, 0x0, 0x400fe02, 0x1, "4ae23ae1179c12747512740bba94224cbad08f", 0x7, 0x2}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xba) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) 2.431583499s ago: executing program 0 (id=887): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x120, 0x24, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xa}, {0x9, 0x3}, {0x3, 0xb}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x39}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x15}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040841) 2.430965831s ago: executing program 0 (id=888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="070000000107030d0000000000000000020000061400078008000140fffffff0080002400000920ebe533fcbe6b638aee0114d0f6f260bd64cca9ea7903329e90ec746b7ab2a831248a4a27b3391824372d98d9d72aa4b13a535229a9cda4dbbe9d01336fb87ca670321534a9df37253352380b817fea18c26f94beba3c5d03848dda85290b9224e6dfc61ff236cef80eab6c4c06841020b0068fc0859930f4034aa69d343bfd9eb279f1e4783f8037e5d1ec4f16ad20e0b0d86c0d32ee8ac5a8a470e19ffe5ce247a8d40267b3b10"], 0x28}, 0x1, 0x0, 0x0, 0xa053}, 0x20880) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x407, 0x100000) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xbc8a}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x41}, @IEEE802154_ATTR_LBT_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x94}, 0x200000c1) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40000005b9101, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap$xdp(&(0x7f00009c4000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, r6, 0x180000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x800, 0x6, 0x4, 0x10}, {0x0, 0x8, 0x3, 0x6}, {0x1000, 0x9, 0xde, 0x1ff}, {0x5, 0xd, 0xee, 0xad}]}) 2.248378554s ago: executing program 0 (id=892): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8002e002a00010002090400ff0306000a40"], 0x33) syz_clone(0x100000, &(0x7f0000000100)="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", 0xc00, 0x0, 0x0, 0x0) 2.171400831s ago: executing program 0 (id=893): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000100)) (async) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000100)) r1 = io_uring_setup(0x350e, &(0x7f0000000080)={0x0, 0x10, 0x1000, 0x0, 0x2c0}) mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/trace\x00', 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xc02) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) (async) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) recvmmsg$unix(r5, 0x0, 0x0, 0x40, 0x0) (async) recvmmsg$unix(r5, 0x0, 0x0, 0x40, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$hidraw(&(0x7f0000002d80), 0x0, 0x8000) (async) r6 = syz_open_dev$hidraw(&(0x7f0000002d80), 0x0, 0x8000) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r6, &(0x7f0000000c00)=[{&(0x7f0000000040)=""/141, 0x8d}, {0x0}], 0x2, 0x9, 0x2) (async) preadv(r6, &(0x7f0000000c00)=[{&(0x7f0000000040)=""/141, 0x8d}, {0x0}], 0x2, 0x9, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 588.860172ms ago: executing program 1 (id=902): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140080005800010029bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'macsec0\x00', &(0x7f0000000700)=@ethtool_stats}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) socket$kcm(0x2d, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x242, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x242, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x10000004, 0x40008}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000140)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e23, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d60, 0x12d4c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007bc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d7401", 0x1ae}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f28a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d8a0d18974e26a607febe419d816e57a6ef190303200f389f9e4b5e92d4810a60107f8b", 0x138}], 0x2}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385", 0x63}, {&(0x7f00000001c0)="9c4000d5f46cd7e66289333e11a4dee94ff5b47f206474fadc397605dc5158", 0x1f}, {&(0x7f0000000440)="530ac208c64268b71e45845f063273e1595b5761724d6a33a49cda459eab75491b773a8b57cfd69d1a5566bfbfe348a6bfc7a4e800e75dd3098dda622ce254d83e0e5d619460d4546dd04066e6025afd709dfb1b18aa378e37ddcc990c57b117c731aaf33902f0d1c5", 0x69}, {&(0x7f0000000a40)="4e8e8b9f34ce25915f1fb55e4b287f6ccff58abc51bd5f8ee2c86a808fe79e8dbb78cc91bb2da592c9d08dff7dab3d3973ea2cccd3c5e10148214657451ffc6174ecc764195e10c233591b0927798b9f09aa6750b0c19e486a790673e54298d7c87796d66979112cbaf57b1af20ba6647c31d253af609c4f4d01cd9122c643eef07e7f4f9aa18f5824a12a6cffc36b9f817eee7103ebc2e155b1e2bf3f37849aa6ee8366753549f0e68615d2a7ea46", 0xaf}, {&(0x7f0000000b00)="e9d06ae97042dfd188233a02d565ef85fa09633aeebc44ac51b0c19877b9e6217e028c47ae93731fade5f22dfa10a42d28717028423f0a9a5fbceea7a4a5e7865c4e40951fb7d962b0a936a752ff66e767f495d6d2f84d4e4bc311ca1ac6d89cb787f6fa66f4f970edbb6f698ad57d6a745a0b83193255111df4c251e7ed0e10915ac0b9c257f7087b6b4185c706de58650b01f590d9c14e2fbc05347d75f3ea825b8ff6c0efe7afc978f1a8084cb51030c54fd09c44367108d8125768d6d6f0bea0b21ed1fca009b60959fb5b4adfbe9354ea6a56468d16e648887980800f", 0xdf}, {&(0x7f0000000c40)="23d61c354f87b2651a37b5aa7bc885b14238cf64e7ad0a21c13a36be2c3be71c0383ac6f290db1b64e5d", 0x2a}, {&(0x7f0000000f40)="dd42f228d66d074b96b124d05dd522bb1ed3e1190beed33c55a23517328292ac228e505923eacf7e53cc12967b7c3331098272517d017306aad85a67b5a997f792044396554511ecf0abdc30826bcf6229c824eb6619788ad9a92043774e9be366db5744f7484acbb6b8d143b36969e4ad9329658bc402b7ceef690d02f7bcd4db022f96b3480e1ed35d8f6f2d3cabe9c9dcb220f49758e3cb037e89b62ab487200e9c", 0xa3}], 0x7}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)="a0d836a14591183fc9dc3704d070377d2454d642df1cbf0bb57cc25e48297b3380194f5979814de2b3b76c5df16cc0a393c0b1deb5cf29df344d4d2a0d04b6b174a78f1963f2076c281f8134627a6c950a23034439979ddf203d35f5b9a3989410c1aecae4017d5652326185eddca46016ef89614a31f5901d73d16655564ade25463600922d352ddb68b1531fec37962ab58ad2bd78904c7e3419e6fc93be64ae4bf4a9416515d7c245d24891cad62e639413d05b2bd79a5c10f31650a49b85f74d13", 0xc3}, {&(0x7f00000003c0)="3e50ab69c00c590329f4f770a45dbe59f92de1de098a86ed9eae340e8f0d217ffa714ada96efc540ca72adc94745e186ae19238ad862efb95705c306fba7cdac92b7d2", 0x43}, {&(0x7f00000008c0)="dda04260d81a3ba5995801993bbef0d3f3c7b48c4b8e7188c0efa9bd8c90fda4a32dcad3b8d27f09ea01ec6c0ebba7f6d6963fb8880c8df2ffcdccd523fa9d4e7d9e45385c62ee531fe9a575b218de094180554d6fd852b566cd0b926012ae34bf83e630d15a307102d34e59315b30569667542d136576bf584895638cd4ef5e58f4d377e5583ea489f53276049433e1e095de61efaf33e8cb52326d4734dda86304e3458b9631d3225f2eb8b06ef826928c9f22001662036d63a621a4dcfec0d3d8066d86b96eb4285e8dfbdc216c09f6b409ce4b43741e1243653f9ebf4201597abb4f27d4009eaa749b8b10d3dca9be20a44b5989ab1a2606a877643222", 0xff}, {&(0x7f00000009c0)="64b2386f86445b92dd3d67b9b06304ad117addfc6f12e87974c0a5f13bb3313cf130bfcca7c1e13a71f69f3f486901959a8b764b9331e79fd1164c4208f521e49af669fdb41d0b63bfd4424c191e83e018b1", 0x52}], 0x4}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 481.587698ms ago: executing program 1 (id=903): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',up_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8002}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) 481.453108ms ago: executing program 1 (id=904): r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) timerfd_gettime(r3, &(0x7f0000000080)) 300.890529ms ago: executing program 1 (id=905): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r8, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x3ff, 0x0, 0x1, @multicast, 'veth0_macvtap\x00'}) r9 = signalfd(r5, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$USBDEVFS_RESET(r9, 0x5514) 241.074337ms ago: executing program 1 (id=906): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000440)={@local, 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffff, 0x8000000000000001, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1W\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000000780)={{@local, 0x1}, {@host, 0x5}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0958e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c760e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce1a4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa15b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8b00f65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e14ec82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f2400"}, 0x418, 0x4}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r4 = syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) ioctl$MEMGETREGIONINFO(r4, 0xc0104d08, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x9}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20028}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x24008084) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=907): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000000000080000000009c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x422900, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '-#*/'}], 0xa, "8b16f1bee357917a5e07cb86119ebfbee5f80d0c0fba27ba46a903d4a6bf2333eb7c9b07c87695bd4d298d861fa59b1885a8c35787741ad8bd44cffea6259cd87c0b97b3ae065454c381343e7226bc3307a5dbd9afb6535802a818206006db0d4cf5e0c2b35d02b5958fe091eafe2331fccb96a38414fe46351d4df8c3d7abe14a0826ac5e263f7b6831afee57147e36fe29ea183de9959de8aead885e3be94002a6c4719e31c68af628726f2798442b8f11bc844b48425e3aaa22678b916e01f49817"}, 0xd5) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') set_mempolicy(0xa002, &(0x7f00000001c0)=0x401, 0x200) read$FUSE(r1, 0x0, 0x2b) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) open(0x0, 0xe64c0, 0x14) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000002380)={r7, @in6={{0xa, 0x4e24, 0x9, @empty, 0x7}}, 0x5, 0x3}, 0x90) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2041, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r10, 0x401) r11 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1a6, 0x7, 0xd}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x48b}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004010) sendmmsg$alg(r1, &(0x7f0000000f80)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="aa1be1b80ec21fcc74a49b1a3b5c75375976d368667f136eb883", 0x1a}, {&(0x7f0000000040)="a8578778288f3156829632d8a9e9a1c3c4", 0x11}, {&(0x7f0000000140)="07fd49e8e87393ad0f9cef42c47b635e9522aa8a302d0e5ff221e309e61cb6f4a73e16f1f8c5ea33bd6db3e78d2656831553edd6d35244c138ca433c4655a6db76a2fbf9cd4082989117f7a0d2592324ea59c6dfff395bddd69823e713086441e8c29706f4b210e3b13a3523172a454992a1", 0x72}, {&(0x7f0000000200)="01ef2578143afa9e89df3f54add5ec78d930c1d823c4234586d9ea960ce1a6dae347911f80a0d4f85966784e3b78a62d23a0ae31ee020bea63c31b3968748d36de96b040a61fa26e7db7e5e9b37f1e9e527f9411850e81fce22e4ff7c3a78044f92f1352ec48", 0x66}, {&(0x7f0000000400)="fed0aad711980bd93dadf54bb18654bd756db3156307216008874b0f683582e49921eb75d04011d75d8056c23bd6cbbb8ba1ae26de186e9a3ce50329621f6567fadb751ad3407175d633a082c36ca8da58c0ceb82cb3bc77698b0858b31b4efd28ffee9bf58e6aa08ee5b3b67e00906bf59d603f72e445d9f1f585f66f6e9fe96a9c15bce1b7b42109aeefbf6d5ba53c55d66d8fd8f67814c877f257d825cff65f4c0ece68adf6fc3bc28a52853c1fc74bedf8673988c9909130bf7ad1767986b2b915649c7031668c80ce76a22448752078bbd808b475af4661edd9c44f16c9", 0xe0}, {&(0x7f0000000500)="738276b6f90ac18ea50b4c5bf3916f7675e547e7fd48c793f0ca6f8f3e5d6cc4acdd6d6cb00995d68bdd50d44b787e6bc6aa9b5357ada72a38332e5a2c89993019812b6eb6ab73554ed4ee612c99e735bc8b1ad5974977cab126518abac86cf53e6fe23c4797bde02b62b3ba7f1216bc2d2896603dea7acfbbbd20e2e034cf93371facc7", 0x84}, {&(0x7f00000005c0)="1d5e695c73d676508f1ff178249c7937cf547a43fe98ddfd9aaa275b57d8860191753934e9024800bec04712e4c380fcd0d3c854785b31fc148481d1bb624885e4a53e654c257a749ffba53bff3bbd748dcd8ecc91c6a2c190f46006c94b292247b61ba3d09caa9c12db439ca98d436218f15db52cadb7083a52dffc678593f89c22fcdc795b125efc0a63e877a61f82d5c8a0aad53a32e51d4b625d2018bf20ea57140ff66928f378a653b850b4412915765fd6a93bc3c7bae46dd7bff405df962c431e921d48c201a5a7b80a0466ec1974f1426c1811839ab5da2a6d552c5bfdd9332234b909c02f9cbfb3db", 0xed}, {&(0x7f00000006c0)="a928afc194b94fbceecec6346f9eebe0c6814112de584ee8e4f73f410ccfb17bfc8593ec400df861c5605f0350821dcffa0b2b46fe8a3a8c2478c296f594be8a2af3949e9be4debe1a9201b888bbf7207f943f712ed01c00b541373d4925ee51de98c08d637424680f958a0fdc8d20712a0bcd1f378763030102d9a5e0bb40af19b724ba8d3a39bf58f392f8bdb33c3321864c03f181842497134957112ffc854f7447cbd3d8a8202c64b85ae4b269a9d55b04bf7121282b4d56d42ceeb2497e9bbcce8d95a8223e571416851edc340f9fb89ba84bcab37ea0c398e2870556f3b85b7c5ae75e78cc35", 0xe9}, {&(0x7f0000002500)="b114c6f49125c14c35fd8887f880fcc227b51cc04bc748c2619125ce6c0d0a2c63e50130748778830c0d38bb83986a1a8b1d451618faaf9b3f67f17e016623adf7b84207c9d174f419daf42d1d517a359a99f9e781205db600c7f62fcb93", 0x5e}], 0x9, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000900)="629fb037d4edff6778120caf47f43464d9c4b487010dafac55c5efc5a44fccb81585fdad295d307e67bcd22452ec0ebdd63af880a00677bc3eb00c06eadac45f227e98a818e404ba5ab5e12a8eda94f04d", 0x51}, {&(0x7f0000000380)="d2a0b895a279b1be842bc1b0460734c37a1d8e7126ffffffff000000000000005cd2c366cbc46a1ee3ebb69c005d9e7718d4918fd4b20b9d09f25b8406b52b6c5b897be761dfd664c64892ee884fc4c0fb", 0x51}, {&(0x7f0000000300)="199ab1bf12623f4d01fd6dc75602d3eed17fc0ff681afd49bc5df215b537f5b5fabc74d7996c9204d0979cbd31cf968768e3a5d35bde1d", 0x37}, {&(0x7f0000000a00)="07175fd73e2c8a859e74bfc55ae0a50e17a7d45d22bed0d4f39ff070290e91fddb435b1841b98729f324c61e2db25da45c7cba14e10d2a5d8fe2f87ce88bc7f4f6c0b44391700a8725cc8a47366b3876fcc7654e3b096d6ae86ab27898ffe252fb481d4f927aa04b84a77716face19f40f92423435415c3b8a14e7045d31c925bffaf1ea4d56f2a1a9766fbf53c53cf1e6c5b9f088f29c94558b81588e32b35f2fa0465b09957c2333d9e0562e2aa9ab937aeb1c3e0815b55cdca6e17c45b513510244835f1de917e4baf9533d59b8c7ed495971ed", 0xd5}, {&(0x7f0000000b00)}, {&(0x7f0000002440)="936f734f9661d34e015f49da276b011bd7d22f64a04d675d800bcd5e1be9d990f350456d7a6cfffffffffffffffffc069fe97533a787cccf236571c3e6ed6de64ec8dcb38b45e33715b5aecf427da8ed724f74b637d3f72f6585b636bfb500a032545f764007d042795236823d064ade95b2560fdfbaa49da88740be0977a52395d8f432d6b6aa1b6d68ea8340e95a484228ee81d5cd04b544f86bf6f8b88ff96b1f4deacb250db21121bde007364d10a5", 0xb1}], 0x6, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x24000881}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d40)="150f6852d48db2c13b85b1edfc958b73af9f9f9547a32fa9344db4f73197502a8410bfe162a72b1d35c8dff1fedb95b2203cc60e397216235e43f609f8d86b576e9d77f4e844776dc56d515877a867eb22715b22ea17f59d72eff78307dbd55614a10dc1a8127ba0d5a233114be2315464c458bde8e24db7b9d3d21ec1aed79b4c479e0fa462dd5357dd2462478656f7caa0cae09f662e164c5d35cd6bf00e96fc50a530bd5acb596ae70297be56030d53fde3a7b7a8dda5fa4cb0d9144a3bd879c0b7f880fa870e7681dd9cf68e3e06be6635547f76606d7f", 0xd9}], 0x1, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=[@assoc={0x18}, @op={0x18}], 0x30, 0x10000000}], 0x4, 0x20008004) kernel console output (not intermixed with test programs): n 194252800 [ 83.539216][ T6372] total_active_anon 107593728 [ 83.541048][ T6372] total_inactive_file 114688 [ 83.542532][ T6372] total_active_file 6033408 [ 83.544435][ T6372] total_unevictable 0 [ 83.546130][ T6372] anon_cost 0 [ 83.548464][ T6372] file_cost 0 [ 83.549916][ T6372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.122,pid=6390,uid=0 [ 83.557213][ T6372] Memory cgroup out of memory: Killed process 6390 (syz.1.122) total-vm:98660kB, anon-rss:1288kB, file-rss:33668kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 83.647855][ T6924] loop6: detected capacity change from 0 to 8 [ 84.064229][ T6924] loop6: detected capacity change from 8 to 7 [ 84.071287][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.074398][ C0] buffer_io_error: 12 callbacks suppressed [ 84.074409][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.082499][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.085490][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.092368][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.095486][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.103093][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.106603][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.109923][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.113018][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.116624][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.119655][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.125220][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.128305][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.130800][ T6924] ldm_validate_partition_table(): Disk read failed. [ 84.133271][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.136283][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.139248][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.142270][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.144782][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 84.147789][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.150518][ T6924] Dev loop6: unable to read RDB block 0 [ 84.152591][ T6924] loop6: unable to read partition table [ 84.154487][ T6924] loop6: partition table beyond EOD, truncated [ 84.156830][ T6924] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·ĥžMÜ`*ÎîZ´Ç5Ħ]z(żĊ¤î4+hGËpX„Ïgm [ 84.156830][ T6924] ü òĉôĜ.BÊL_seÔ) failed (rc=-5) [ 84.213710][ T6945] capability: warning: `syz.5.228' uses deprecated v2 capabilities in a way that may be insecure [ 84.340711][ T6951] lo speed is unknown, defaulting to 1000 [ 84.349161][ T6953] netlink: 5 bytes leftover after parsing attributes in process `syz.5.230'. [ 84.451304][ T6956] netlink: 64 bytes leftover after parsing attributes in process `syz.5.232'. [ 84.528004][ T6385] syz.1.122 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 84.536676][ T6385] CPU: 3 UID: 0 PID: 6385 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 84.536695][ T6385] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.536702][ T6385] Call Trace: [ 84.536707][ T6385] [ 84.536713][ T6385] dump_stack_lvl+0x100/0x190 [ 84.536733][ T6385] dump_header+0xfb/0x606 [ 84.536748][ T6385] oom_kill_process.cold+0xd/0x330 [ 84.536761][ T6385] out_of_memory+0x340/0x14f0 [ 84.536783][ T6385] ? __pfx_out_of_memory+0x10/0x10 [ 84.536805][ T6385] mem_cgroup_out_of_memory+0xc6/0x130 [ 84.536818][ T6385] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 84.536829][ T6385] ? find_held_lock+0x2b/0x80 [ 84.536843][ T6385] ? do_raw_spin_unlock+0x145/0x1e0 [ 84.536882][ T6385] ? _raw_spin_unlock+0x28/0x50 [ 84.536902][ T6385] try_charge_memcg+0x6e5/0xdf0 [ 84.536921][ T6385] ? __pfx_try_charge_memcg+0x10/0x10 [ 84.536937][ T6385] ? find_held_lock+0x2b/0x80 [ 84.536947][ T6385] ? rcu_read_unlock+0x17/0x60 [ 84.536968][ T6385] ? rcu_read_unlock+0x17/0x60 [ 84.536984][ T6385] ? find_held_lock+0x2b/0x80 [ 84.537014][ T6385] ? rcu_read_unlock+0x17/0x60 [ 84.537039][ T6385] charge_memcg+0x187/0x1e0 [ 84.537062][ T6385] __mem_cgroup_charge+0x2b/0x1c0 [ 84.537090][ T6385] shmem_alloc_and_add_folio+0x451/0xd40 [ 84.537118][ T6385] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 84.537139][ T6385] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 84.537163][ T6385] shmem_get_folio_gfp+0x6ad/0x1910 [ 84.537180][ T6385] ? __lock_acquire+0x49f/0x1a40 [ 84.537194][ T6385] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 84.537210][ T6385] shmem_write_begin+0x1a4/0x420 [ 84.537224][ T6385] ? __pfx_shmem_write_begin+0x10/0x10 [ 84.537237][ T6385] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 84.537252][ T6385] ? lockdep_hardirqs_on+0x78/0x100 [ 84.537269][ T6385] generic_perform_write+0x292/0xa40 [ 84.537291][ T6385] ? __pfx_generic_perform_write+0x10/0x10 [ 84.537309][ T6385] ? file_update_time_flags+0x373/0x500 [ 84.537327][ T6385] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 84.537341][ T6385] shmem_file_write_iter+0x10e/0x140 [ 84.537357][ T6385] __kernel_write_iter+0x2ac/0x930 [ 84.537376][ T6385] ? __pfx___kernel_write_iter+0x10/0x10 [ 84.537395][ T6385] ? __up_read+0x333/0x980 [ 84.537412][ T6385] ? dump_user_range+0x65e/0xad0 [ 84.537433][ T6385] dump_user_range+0x3f9/0xad0 [ 84.537452][ T6385] ? __pfx_dump_user_range+0x10/0x10 [ 84.537473][ T6385] ? __pfx_writenote+0x10/0x10 [ 84.537490][ T6385] ? elf_core_dump+0x1f25/0x3d20 [ 84.537510][ T6385] elf_core_dump+0x2d68/0x3d20 [ 84.537539][ T6385] ? __pfx_elf_core_dump+0x10/0x10 [ 84.537561][ T6385] ? kasan_save_stack+0x3f/0x50 [ 84.537577][ T6385] ? kasan_save_stack+0x30/0x50 [ 84.537590][ T6385] ? kasan_save_track+0x14/0x30 [ 84.537603][ T6385] ? __kasan_kmalloc+0xaa/0xb0 [ 84.537616][ T6385] ? vfs_coredump+0x22a6/0x56f0 [ 84.537633][ T6385] ? get_signal+0x1f2a/0x21e0 [ 84.537659][ T6385] ? arch_do_signal_or_restart+0x91/0x7e0 [ 84.537679][ T6385] ? 0xffffffffff600000 [ 84.537711][ T6385] ? vfs_coredump+0x294b/0x56f0 [ 84.537726][ T6385] vfs_coredump+0x294b/0x56f0 [ 84.537748][ T6385] ? __pfx_vfs_coredump+0x10/0x10 [ 84.537766][ T6385] ? __lock_acquire+0x49f/0x1a40 [ 84.537793][ T6385] ? bpf_ksym_find+0x128/0x1c0 [ 84.537814][ T6385] ? unwind_get_return_address+0x59/0xa0 [ 84.537827][ T6385] ? arch_stack_walk+0xa6/0xf0 [ 84.537842][ T6385] ? __sigqueue_free+0xbe/0x2a0 [ 84.537853][ T6385] ? stack_trace_save+0x8e/0xc0 [ 84.537866][ T6385] ? __pfx_stack_trace_save+0x10/0x10 [ 84.537878][ T6385] ? stack_depot_save_flags+0x27/0x9d0 [ 84.537919][ T6385] ? proc_coredump_connector+0x2d3/0x4f0 [ 84.537931][ T6385] ? __pfx_proc_coredump_connector+0x10/0x10 [ 84.537946][ T6385] ? rcu_is_watching+0x12/0xc0 [ 84.537966][ T6385] get_signal+0x1f2a/0x21e0 [ 84.537987][ T6385] ? __pfx_get_signal+0x10/0x10 [ 84.538006][ T6385] arch_do_signal_or_restart+0x91/0x7e0 [ 84.538020][ T6385] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 84.538041][ T6385] irqentry_exit+0x402/0xa00 [ 84.538058][ T6385] asm_exc_page_fault+0x26/0x30 [ 84.538070][ T6385] RIP: 0033:0x7fa76e253bd7 [ 84.538080][ T6385] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 84.538091][ T6385] RSP: 002b:00007fa76f27e1a0 EFLAGS: 00010206 [ 84.538102][ T6385] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa76e39e0d9 [ 84.538108][ T6385] RDX: 00007fa76f27e1c0 RSI: 00007fa76f27e2f0 RDI: 000000000000000b [ 84.538115][ T6385] RBP: 00007fa76e435024 R08: 0000000000000000 R09: 0000000000000000 [ 84.538122][ T6385] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 84.538128][ T6385] R13: 00007fa76e626128 R14: 00007fa76e626090 R15: 00007ffec6a98738 [ 84.538143][ T6385] [ 84.699949][ T6962] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 84.731481][ T6385] memory: usage 307200kB, limit 307200kB, failcnt 90524 [ 84.733913][ T6385] memory+swap: usage 432156kB, limit 9007199254740988kB, failcnt 0 [ 84.736740][ T6385] kmem: usage 4564kB, limit 9007199254740988kB, failcnt 0 [ 84.739514][ T6385] Memory cgroup stats for /syz1: [ 84.739635][ T6385] cache 309772288 [ 84.742825][ T6385] rss 94208 [ 84.744225][ T6385] rss_huge 0 [ 84.745457][ T6385] shmem 309768192 [ 84.746671][ T6385] mapped_file 0 [ 84.748064][ T6385] dirty 0 [ 84.749419][ T6385] writeback 0 [ 84.750813][ T6385] workingset_refault_anon 9 [ 84.752260][ T6385] workingset_refault_file 51180 [ 84.754059][ T6385] swap 127954944 [ 84.755601][ T6385] swapcached 238968832 [ 84.757419][ T6385] pgpgin 297068 [ 84.758914][ T6385] pgpgout 222431 [ 84.760073][ T6385] pgfault 45244 [ 84.761230][ T6385] pgmajfault 24019 [ 84.762615][ T6385] inactive_anon 156909568 [ 84.764429][ T6385] active_anon 152985600 [ 84.765938][ T6385] inactive_file 0 [ 84.771489][ T6385] active_file 4096 [ 84.772787][ T6385] unevictable 0 [ 84.779081][ T6385] hierarchical_memory_limit 314572800 [ 84.781205][ T6385] hierarchical_memsw_limit 9223372036854771712 [ 84.783736][ T6385] total_cache 309772288 [ 84.785528][ T6385] total_rss 94208 [ 84.787014][ T6385] total_rss_huge 0 [ 84.788266][ T6385] total_shmem 309768192 [ 84.789675][ T6385] total_mapped_file 0 [ 84.791427][ T6385] total_dirty 0 [ 84.793540][ T6385] total_writeback 0 [ 84.794802][ T6385] total_workingset_refault_anon 9 [ 84.796535][ T6385] total_workingset_refault_file 51180 [ 84.798822][ T6385] total_swap 127954944 [ 84.800330][ T6385] total_swapcached 238968832 [ 84.801889][ T6385] total_pgpgin 297068 [ 84.803651][ T6385] total_pgpgout 222431 [ 84.805316][ T6385] total_pgfault 45244 [ 84.807309][ T6385] total_pgmajfault 24019 [ 84.809115][ T6385] total_inactive_anon 156909568 [ 84.811089][ T6385] total_active_anon 152985600 [ 84.813062][ T6385] total_inactive_file 0 [ 84.814799][ T6385] total_active_file 4096 [ 84.816204][ T6385] total_unevictable 0 [ 84.817673][ T6385] anon_cost 0 [ 84.819113][ T6385] file_cost 0 [ 84.820618][ T6385] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.122,pid=6424,uid=0 [ 84.837665][ T6385] Memory cgroup out of memory: Killed process 6424 (syz.1.122) total-vm:98660kB, anon-rss:1280kB, file-rss:33208kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 84.967635][ T6397] syz.1.122 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 85.013239][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 85.013258][ T6397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.013265][ T6397] Call Trace: [ 85.013270][ T6397] [ 85.013275][ T6397] dump_stack_lvl+0x100/0x190 [ 85.013296][ T6397] dump_header+0xfb/0x606 [ 85.013310][ T6397] oom_kill_process.cold+0xd/0x330 [ 85.013323][ T6397] out_of_memory+0x340/0x14f0 [ 85.013345][ T6397] ? __pfx_out_of_memory+0x10/0x10 [ 85.013366][ T6397] mem_cgroup_out_of_memory+0xc6/0x130 [ 85.013380][ T6397] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 85.013392][ T6397] ? find_held_lock+0x2b/0x80 [ 85.013405][ T6397] ? do_raw_spin_unlock+0x145/0x1e0 [ 85.013422][ T6397] ? _raw_spin_unlock+0x28/0x50 [ 85.013438][ T6397] try_charge_memcg+0x6e5/0xdf0 [ 85.013457][ T6397] ? __pfx_try_charge_memcg+0x10/0x10 [ 85.013473][ T6397] ? find_held_lock+0x2b/0x80 [ 85.013483][ T6397] ? rcu_read_unlock+0x17/0x60 [ 85.013515][ T6397] ? rcu_read_unlock+0x17/0x60 [ 85.013531][ T6397] ? find_held_lock+0x2b/0x80 [ 85.013542][ T6397] ? rcu_read_unlock+0x17/0x60 [ 85.013561][ T6397] charge_memcg+0x187/0x1e0 [ 85.013578][ T6397] __mem_cgroup_charge+0x2b/0x1c0 [ 85.013597][ T6397] shmem_alloc_and_add_folio+0x451/0xd40 [ 85.013612][ T6397] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 85.013626][ T6397] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 85.013641][ T6397] shmem_get_folio_gfp+0x6ad/0x1910 [ 85.013655][ T6397] ? __lock_acquire+0x49f/0x1a40 [ 85.013670][ T6397] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 85.013686][ T6397] shmem_write_begin+0x1a4/0x420 [ 85.013699][ T6397] ? __pfx_shmem_write_begin+0x10/0x10 [ 85.013712][ T6397] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 85.013726][ T6397] ? lockdep_hardirqs_on+0x78/0x100 [ 85.013742][ T6397] generic_perform_write+0x292/0xa40 [ 85.013763][ T6397] ? __pfx_generic_perform_write+0x10/0x10 [ 85.013782][ T6397] ? file_update_time_flags+0x373/0x500 [ 85.013800][ T6397] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 85.013814][ T6397] shmem_file_write_iter+0x10e/0x140 [ 85.013829][ T6397] __kernel_write_iter+0x2ac/0x930 [ 85.013850][ T6397] ? __pfx___kernel_write_iter+0x10/0x10 [ 85.013868][ T6397] ? __up_read+0x333/0x980 [ 85.013886][ T6397] ? dump_user_range+0x65e/0xad0 [ 85.013903][ T6397] ? __sanitizer_cov_trace_pc+0xf/0x70 [ 85.013920][ T6397] dump_user_range+0x3f9/0xad0 [ 85.013939][ T6397] ? __pfx_dump_user_range+0x10/0x10 [ 85.013961][ T6397] ? __pfx_writenote+0x10/0x10 [ 85.013978][ T6397] ? elf_core_dump+0x1f25/0x3d20 [ 85.013997][ T6397] elf_core_dump+0x2d68/0x3d20 [ 85.014022][ T6397] ? __pfx_elf_core_dump+0x10/0x10 [ 85.014039][ T6397] ? kasan_save_stack+0x3f/0x50 [ 85.014070][ T6397] ? kasan_save_stack+0x30/0x50 [ 85.014083][ T6397] ? kasan_save_track+0x14/0x30 [ 85.014096][ T6397] ? __kasan_kmalloc+0xaa/0xb0 [ 85.014109][ T6397] ? vfs_coredump+0x22a6/0x56f0 [ 85.014124][ T6397] ? get_signal+0x1f2a/0x21e0 [ 85.014139][ T6397] ? arch_do_signal_or_restart+0x91/0x7e0 [ 85.014155][ T6397] ? 0xffffffffff600000 [ 85.014186][ T6397] ? vfs_coredump+0x294b/0x56f0 [ 85.014202][ T6397] vfs_coredump+0x294b/0x56f0 [ 85.014223][ T6397] ? __pfx_vfs_coredump+0x10/0x10 [ 85.014253][ T6397] ? __lock_acquire+0x49f/0x1a40 [ 85.014281][ T6397] ? bpf_ksym_find+0x128/0x1c0 [ 85.014302][ T6397] ? unwind_get_return_address+0x59/0xa0 [ 85.014315][ T6397] ? arch_stack_walk+0xa6/0xf0 [ 85.014330][ T6397] ? __sigqueue_free+0xbe/0x2a0 [ 85.014340][ T6397] ? stack_trace_save+0x8e/0xc0 [ 85.014353][ T6397] ? __pfx_stack_trace_save+0x10/0x10 [ 85.014365][ T6397] ? stack_depot_save_flags+0x27/0x9d0 [ 85.014406][ T6397] ? proc_coredump_connector+0x2d3/0x4f0 [ 85.014418][ T6397] ? __pfx_proc_coredump_connector+0x10/0x10 [ 85.014433][ T6397] ? rcu_is_watching+0x12/0xc0 [ 85.014453][ T6397] get_signal+0x1f2a/0x21e0 [ 85.014474][ T6397] ? __pfx_get_signal+0x10/0x10 [ 85.014493][ T6397] arch_do_signal_or_restart+0x91/0x7e0 [ 85.014507][ T6397] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 85.014528][ T6397] irqentry_exit+0x402/0xa00 [ 85.014545][ T6397] asm_exc_page_fault+0x26/0x30 [ 85.014556][ T6397] RIP: 0033:0x7fa76e253bd7 [ 85.014567][ T6397] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 85.014578][ T6397] RSP: 002b:00007fa76f27e1a0 EFLAGS: 00010206 [ 85.014588][ T6397] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa76e39e0d9 [ 85.014595][ T6397] RDX: 00007fa76f27e1c0 RSI: 00007fa76f27e2f0 RDI: 000000000000000b [ 85.014602][ T6397] RBP: 00007fa76e435024 R08: 0000000000000000 R09: 0000000000000000 [ 85.014608][ T6397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.014614][ T6397] R13: 00007fa76e626128 R14: 00007fa76e626090 R15: 00007ffec6a98738 [ 85.014628][ T6397] [ 85.186796][ T6397] memory: usage 307152kB, limit 307200kB, failcnt 91262 [ 85.207461][ T6397] memory+swap: usage 431772kB, limit 9007199254740988kB, failcnt 0 [ 85.216655][ T6397] kmem: usage 4544kB, limit 9007199254740988kB, failcnt 0 [ 85.283960][ T6397] Memory cgroup stats for /syz1: [ 85.284090][ T6397] cache 308699136 [ 85.316545][ T6397] rss 1056768 [ 85.321983][ T6397] rss_huge 0 [ 85.323053][ T6397] shmem 308699136 [ 85.336081][ T6397] mapped_file 0 [ 85.337862][ T6397] dirty 0 [ 85.346135][ T6397] writeback 0 [ 85.357886][ T6397] workingset_refault_anon 9 [ 85.376684][ T6397] workingset_refault_file 51191 [ 85.386208][ T6397] swap 124919808 [ 85.387817][ T6397] swapcached 241164288 [ 85.399365][ T6397] pgpgin 305974 [ 85.400789][ T6397] pgpgout 231364 [ 85.403329][ T6397] pgfault 45703 [ 85.404496][ T6397] pgmajfault 24030 [ 85.405716][ T6397] inactive_anon 116219904 [ 85.407683][ T5738] Bluetooth: hci1: command tx timeout [ 85.409884][ T6397] active_anon 193564672 [ 85.411437][ T6397] inactive_file 0 [ 85.412969][ T6397] active_file 0 [ 85.414251][ T6397] unevictable 0 [ 85.415363][ T6397] hierarchical_memory_limit 314572800 [ 85.417067][ T6397] hierarchical_memsw_limit 9223372036854771712 [ 85.419373][ T6397] total_cache 308699136 [ 85.420938][ T6397] total_rss 1056768 [ 85.422456][ T6397] total_rss_huge 0 [ 85.423678][ T6397] total_shmem 308699136 [ 85.425007][ T6397] total_mapped_file 0 [ 85.426306][ T6397] total_dirty 0 [ 85.427963][ T6397] total_writeback 0 [ 85.429267][ T6397] total_workingset_refault_anon 9 [ 85.430929][ T6397] total_workingset_refault_file 51191 [ 85.432615][ T6397] total_swap 124919808 [ 85.434169][ T6397] total_swapcached 241164288 [ 85.435711][ T6397] total_pgpgin 305974 [ 85.437355][ T6397] total_pgpgout 231364 [ 85.438971][ T6397] total_pgfault 45703 [ 85.440816][ T6397] total_pgmajfault 24030 [ 85.442557][ T6397] total_inactive_anon 116219904 [ 85.445133][ T6397] total_active_anon 193564672 [ 85.447310][ T6397] total_inactive_file 0 [ 85.448944][ T6397] total_active_file 0 [ 85.450560][ T6397] total_unevictable 0 [ 85.452139][ T6397] anon_cost 0 [ 85.453474][ T6397] file_cost 0 [ 85.454734][ T6397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.122,pid=6392,uid=0 [ 85.459897][ T6397] Memory cgroup out of memory: Killed process 6392 (syz.1.122) total-vm:98660kB, anon-rss:1248kB, file-rss:34896kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 85.651369][ T7019] 9p: Bad value for 'rfdno' [ 85.720121][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 85.720141][ T42] audit: type=1400 audit(1786416507.137:547): avc: denied { read } for pid=7023 comm="syz.5.245" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.743585][ T42] audit: type=1400 audit(1786416507.137:548): avc: denied { open } for pid=7023 comm="syz.5.245" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.757189][ T42] audit: type=1400 audit(1786416507.157:549): avc: denied { ioctl } for pid=7023 comm="syz.5.245" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.769315][ T7024] binder: 7023:7024 ioctl c0585611 2000000005c0 returned -22 [ 85.771661][ T42] audit: type=1400 audit(1786416507.157:550): avc: denied { set_context_mgr } for pid=7023 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.780201][ T7024] binder: 7023:7024 ioctl 40046629 200000000040 returned -22 [ 85.782685][ T42] audit: type=1400 audit(1786416507.187:551): avc: denied { map } for pid=7023 comm="syz.5.245" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.785287][ T7024] binder_alloc: 7023: pid 7023 spamming oneway? 1 buffers allocated for a total size of 4096 [ 85.799289][ T6984] cgroup: fork rejected by pids controller in /syz0 [ 85.799678][ T42] audit: type=1400 audit(1786416507.197:552): avc: denied { call } for pid=7023 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.004597][ T5738] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 86.007742][ T5738] Bluetooth: Wrong link type (-22) [ 86.012294][ T42] audit: type=1400 audit(1786416507.427:553): avc: denied { write } for pid=7043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.047675][ T42] audit: type=1400 audit(1786416507.457:554): avc: denied { getopt } for pid=7042 comm="syz.5.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.064328][ T42] audit: type=1400 audit(1786416507.457:555): avc: denied { read } for pid=7042 comm="syz.5.248" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.079624][ T42] audit: type=1400 audit(1786416507.457:556): avc: denied { open } for pid=7042 comm="syz.5.248" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.254299][ T7059] syz.1.249 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.258846][ T7059] CPU: 3 UID: 0 PID: 7059 Comm: syz.1.249 Not tainted syzkaller #0 PREEMPT(full) [ 86.258869][ T7059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.258880][ T7059] Call Trace: [ 86.258886][ T7059] [ 86.258893][ T7059] dump_stack_lvl+0x100/0x190 [ 86.258923][ T7059] dump_header+0xfb/0x606 [ 86.258943][ T7059] oom_kill_process.cold+0xd/0x330 [ 86.258962][ T7059] out_of_memory+0x340/0x14f0 [ 86.258992][ T7059] ? __pfx_out_of_memory+0x10/0x10 [ 86.259023][ T7059] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.259042][ T7059] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.259059][ T7059] ? find_held_lock+0x2b/0x80 [ 86.259080][ T7059] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.259105][ T7059] ? _raw_spin_unlock+0x28/0x50 [ 86.259128][ T7059] try_charge_memcg+0x6e5/0xdf0 [ 86.259155][ T7059] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.259177][ T7059] ? find_held_lock+0x2b/0x80 [ 86.259191][ T7059] ? rcu_read_unlock+0x17/0x60 [ 86.259214][ T7059] ? rcu_read_unlock+0x17/0x60 [ 86.259238][ T7059] ? find_held_lock+0x2b/0x80 [ 86.259253][ T7059] ? rcu_read_unlock+0x17/0x60 [ 86.259281][ T7059] charge_memcg+0x187/0x1e0 [ 86.259304][ T7059] __mem_cgroup_charge+0x2b/0x1c0 [ 86.259329][ T7059] do_anonymous_page+0xb53/0x2080 [ 86.259356][ T7059] ? rcu_read_unlock+0x2d/0xb0 [ 86.259378][ T7059] __handle_mm_fault+0x1d2c/0x2a00 [ 86.259399][ T7059] ? reacquire_held_locks+0xce/0x1e0 [ 86.259420][ T7059] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.259439][ T7059] ? lock_vma_under_rcu+0x17c/0x590 [ 86.259479][ T7059] handle_mm_fault+0x37b/0xa30 [ 86.259499][ T7059] do_user_addr_fault+0x5a3/0x12f0 [ 86.259532][ T7059] exc_page_fault+0x6f/0xd0 [ 86.259554][ T7059] asm_exc_page_fault+0x26/0x30 [ 86.259570][ T7059] RIP: 0033:0x7fa76e35b284 [ 86.259586][ T7059] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 86.259600][ T7059] RSP: 002b:00007ffec6a986e0 EFLAGS: 00010246 [ 86.259615][ T7059] RAX: 00007fa76f29e000 RBX: 00007fa76f2be6c0 RCX: 00007fa76e39ded7 [ 86.259626][ T7059] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fa76f2be6c0 [ 86.259636][ T7059] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 86.259646][ T7059] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffec6a98830 [ 86.259661][ T7059] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 86.259683][ T7059] [ 86.259690][ T7059] memory: usage 307200kB, limit 307200kB, failcnt 94664 [ 86.348012][ T7059] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 86.350893][ T7059] kmem: usage 4220kB, limit 9007199254740988kB, failcnt 0 [ 86.353351][ T7059] Memory cgroup stats for /syz1: [ 86.353621][ T7059] cache 310112256 [ 86.357327][ T7059] rss 139264 [ 86.358796][ T7059] rss_huge 0 [ 86.360236][ T7059] shmem 310108160 [ 86.361825][ T7059] mapped_file 0 [ 86.363255][ T7059] dirty 0 [ 86.364497][ T7059] writeback 0 [ 86.365887][ T7059] workingset_refault_anon 9 [ 86.370625][ T7059] workingset_refault_file 51372 [ 86.372714][ T7059] swap 127868928 [ 86.374277][ T7059] swapcached 258351104 [ 86.375989][ T7059] pgpgin 324881 [ 86.377497][ T7059] pgpgout 250158 [ 86.378693][ T7059] pgfault 46898 [ 86.379855][ T7059] pgmajfault 24044 [ 86.381225][ T7059] inactive_anon 291926016 [ 86.382731][ T7059] active_anon 18022400 [ 86.384089][ T7059] inactive_file 0 [ 86.385346][ T7059] active_file 4096 [ 86.386653][ T7059] unevictable 0 [ 86.387929][ T7059] hierarchical_memory_limit 314572800 [ 86.389625][ T7059] hierarchical_memsw_limit 9223372036854771712 [ 86.391634][ T7059] total_cache 310112256 [ 86.393054][ T7059] total_rss 139264 [ 86.394305][ T7059] total_rss_huge 0 [ 86.395600][ T7059] total_shmem 310108160 [ 86.397024][ T7059] total_mapped_file 0 [ 86.398538][ T7059] total_dirty 0 [ 86.399707][ T7059] total_writeback 0 [ 86.401004][ T7059] total_workingset_refault_anon 9 [ 86.402826][ T7059] total_workingset_refault_file 51372 [ 86.404545][ T7059] total_swap 127868928 [ 86.406013][ T7059] total_swapcached 258351104 [ 86.407640][ T7059] total_pgpgin 324881 [ 86.409094][ T7059] total_pgpgout 250158 [ 86.410470][ T7059] total_pgfault 46898 [ 86.411882][ T7059] total_pgmajfault 24044 [ 86.413430][ T7059] total_inactive_anon 291926016 [ 86.415018][ T7059] total_active_anon 18022400 [ 86.416589][ T7059] total_inactive_file 0 [ 86.418635][ T7059] total_active_file 4096 [ 86.420108][ T7059] total_unevictable 0 [ 86.421510][ T7059] anon_cost 0 [ 86.422759][ T7059] file_cost 0 [ 86.423875][ T7059] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.122,pid=6385,uid=0 [ 86.430923][ T7059] Memory cgroup out of memory: Killed process 6385 (syz.1.122) total-vm:98660kB, anon-rss:1280kB, file-rss:35220kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 86.449988][ T6400] syz.1.122 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 86.478201][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.1.122 Not tainted syzkaller #0 PREEMPT(full) [ 86.478230][ T6400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.478239][ T6400] Call Trace: [ 86.478246][ T6400] [ 86.478253][ T6400] dump_stack_lvl+0x100/0x190 [ 86.478284][ T6400] dump_header+0xfb/0x606 [ 86.478306][ T6400] oom_kill_process.cold+0xd/0x330 [ 86.478326][ T6400] out_of_memory+0x340/0x14f0 [ 86.478361][ T6400] ? __pfx_out_of_memory+0x10/0x10 [ 86.478396][ T6400] mem_cgroup_out_of_memory+0xc6/0x130 [ 86.478416][ T6400] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 86.478437][ T6400] ? find_held_lock+0x2b/0x80 [ 86.478460][ T6400] ? do_raw_spin_unlock+0x145/0x1e0 [ 86.478487][ T6400] ? _raw_spin_unlock+0x28/0x50 [ 86.478511][ T6400] try_charge_memcg+0x6e5/0xdf0 [ 86.478540][ T6400] ? __pfx_try_charge_memcg+0x10/0x10 [ 86.478564][ T6400] ? find_held_lock+0x2b/0x80 [ 86.478580][ T6400] ? rcu_read_unlock+0x17/0x60 [ 86.478605][ T6400] ? rcu_read_unlock+0x17/0x60 [ 86.478630][ T6400] ? find_held_lock+0x2b/0x80 [ 86.478647][ T6400] ? rcu_read_unlock+0x17/0x60 [ 86.478675][ T6400] charge_memcg+0x187/0x1e0 [ 86.478701][ T6400] __mem_cgroup_charge+0x2b/0x1c0 [ 86.478730][ T6400] shmem_alloc_and_add_folio+0x451/0xd40 [ 86.478755][ T6400] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 86.478777][ T6400] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 86.478802][ T6400] shmem_get_folio_gfp+0x6ad/0x1910 [ 86.478826][ T6400] ? __lock_acquire+0x49f/0x1a40 [ 86.478849][ T6400] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 86.478874][ T6400] shmem_write_begin+0x1a4/0x420 [ 86.478896][ T6400] ? __pfx_shmem_write_begin+0x10/0x10 [ 86.478916][ T6400] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 86.478942][ T6400] generic_perform_write+0x292/0xa40 [ 86.478975][ T6400] ? __pfx_generic_perform_write+0x10/0x10 [ 86.479005][ T6400] ? file_update_time_flags+0x373/0x500 [ 86.479032][ T6400] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.479061][ T6400] shmem_file_write_iter+0x10e/0x140 [ 86.479086][ T6400] __kernel_write_iter+0x2ac/0x930 [ 86.479118][ T6400] ? __pfx___kernel_write_iter+0x10/0x10 [ 86.479146][ T6400] ? __up_read+0x333/0x980 [ 86.479173][ T6400] ? dump_user_range+0x65e/0xad0 [ 86.479205][ T6400] dump_user_range+0x3f9/0xad0 [ 86.479236][ T6400] ? __pfx_dump_user_range+0x10/0x10 [ 86.479270][ T6400] ? __pfx_writenote+0x10/0x10 [ 86.479297][ T6400] ? elf_core_dump+0x1f25/0x3d20 [ 86.479329][ T6400] elf_core_dump+0x2d68/0x3d20 [ 86.479366][ T6400] ? __pfx_elf_core_dump+0x10/0x10 [ 86.479389][ T6400] ? kasan_save_stack+0x3f/0x50 [ 86.479409][ T6400] ? kasan_save_stack+0x30/0x50 [ 86.479427][ T6400] ? kasan_save_track+0x14/0x30 [ 86.479446][ T6400] ? __kasan_kmalloc+0xaa/0xb0 [ 86.479466][ T6400] ? vfs_coredump+0x22a6/0x56f0 [ 86.479488][ T6400] ? get_signal+0x1f2a/0x21e0 [ 86.479509][ T6400] ? arch_do_signal_or_restart+0x91/0x7e0 [ 86.479535][ T6400] ? 0xffffffffff600000 [ 86.479588][ T6400] ? vfs_coredump+0x294b/0x56f0 [ 86.479610][ T6400] vfs_coredump+0x294b/0x56f0 [ 86.479643][ T6400] ? __pfx_vfs_coredump+0x10/0x10 [ 86.479669][ T6400] ? __lock_acquire+0x49f/0x1a40 [ 86.479710][ T6400] ? bpf_ksym_find+0x128/0x1c0 [ 86.479745][ T6400] ? unwind_get_return_address+0x59/0xa0 [ 86.479764][ T6400] ? arch_stack_walk+0xa6/0xf0 [ 86.479788][ T6400] ? __sigqueue_free+0xbe/0x2a0 [ 86.479804][ T6400] ? stack_trace_save+0x8e/0xc0 [ 86.479823][ T6400] ? __pfx_stack_trace_save+0x10/0x10 [ 86.479843][ T6400] ? stack_depot_save_flags+0x27/0x9d0 [ 86.479915][ T6400] ? proc_coredump_connector+0x2d3/0x4f0 [ 86.479935][ T6400] ? __pfx_proc_coredump_connector+0x10/0x10 [ 86.479960][ T6400] ? rcu_is_watching+0x12/0xc0 [ 86.479992][ T6400] get_signal+0x1f2a/0x21e0 [ 86.480041][ T6400] ? __pfx_get_signal+0x10/0x10 [ 86.480072][ T6400] arch_do_signal_or_restart+0x91/0x7e0 [ 86.480092][ T6400] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.480118][ T6400] irqentry_exit+0x402/0xa00 [ 86.480137][ T6400] asm_exc_page_fault+0x26/0x30 [ 86.480149][ T6400] RIP: 0033:0x7fa76e253bd7 [ 86.480160][ T6400] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 86.480172][ T6400] RSP: 002b:00007fa76f27e1a0 EFLAGS: 00010206 [ 86.480183][ T6400] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fa76e39e0d9 [ 86.480190][ T6400] RDX: 00007fa76f27e1c0 RSI: 00007fa76f27e2f0 RDI: 000000000000000b [ 86.480197][ T6400] RBP: 00007fa76e435024 R08: 0000000000000000 R09: 0000000000000000 [ 86.480203][ T6400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 86.480209][ T6400] R13: 00007fa76e626128 R14: 00007fa76e626090 R15: 00007ffec6a98738 [ 86.480223][ T6400] [ 86.480252][ T6400] memory: usage 307200kB, limit 307200kB, failcnt 94875 [ 86.487213][ T2322] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.503577][ T6400] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 86.657194][ T2322] usb 10-1: Using ep0 maxpacket: 8 [ 86.658101][ T6400] kmem: usage 4212kB, limit 9007199254740988kB, failcnt 0 [ 86.666918][ T2322] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 86.668726][ T6400] Memory cgroup stats for [ 86.671262][ T2322] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.672737][ T6400] /syz1: [ 86.672875][ T6400] cache 287469568 [ 86.680142][ T2322] usb 10-1: config 0 has no interface number 0 [ 86.681718][ T6400] rss 143360 [ 86.689454][ T2322] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 86.689497][ T2322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.691489][ T6400] rss_huge 0 [ 86.710411][ T6400] shmem 285552640 [ 86.711569][ T2322] usb 10-1: config 0 descriptor?? [ 86.711931][ T6400] mapped_file 364544 [ 86.711939][ T6400] dirty 0 [ 86.717220][ T6400] writeback 0 [ 86.718648][ T6400] workingset_refault_anon 9 [ 86.720471][ T6400] workingset_refault_file 51555 [ 86.722456][ T6400] swap 112844800 [ 86.723915][ T6400] swapcached 258613248 [ 86.725553][ T6400] pgpgin 327841 [ 86.726981][ T6400] pgpgout 258645 [ 86.729040][ T6400] pgfault 46936 [ 86.730475][ T6400] pgmajfault 24046 [ 86.732197][ T6400] inactive_anon 31432704 [ 86.734042][ T6400] active_anon 254263296 [ 86.735737][ T6400] inactive_file 0 [ 86.737435][ T6400] active_file 1871872 [ 86.739174][ T2322] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 86.743685][ T6400] unevictable 0 [ 86.745286][ T6400] hierarchical_memory_limit 314572800 [ 86.747499][ T6400] hierarchical_memsw_limit 9223372036854771712 [ 86.749994][ T6400] total_cache 287469568 [ 86.752282][ T6400] total_rss 143360 [ 86.754040][ T6400] total_rss_huge 0 [ 86.755608][ T6400] total_shmem 285552640 [ 86.757528][ T6400] total_mapped_file 364544 [ 86.759316][ T6400] total_dirty 0 [ 86.760803][ T6400] total_writeback 0 [ 86.762361][ T6400] total_workingset_refault_anon 9 [ 86.764416][ T6400] total_workingset_refault_file 51555 [ 86.766629][ T6400] total_swap 112844800 [ 86.783033][ T6400] total_swapcached 258613248 [ 86.785766][ T6400] total_pgpgin 327841 [ 86.787075][ T6400] total_pgpgout 258645 [ 86.788983][ T6400] total_pgfault 46936 [ 86.790289][ T6400] total_pgmajfault 24046 [ 86.792185][ T6400] total_inactive_anon 31432704 [ 86.794093][ T6400] total_active_anon 254263296 [ 86.802891][ T2322] IPVS: starting estimator thread 0... [ 86.806057][ T6400] total_inactive_file 0 [ 86.807548][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.256'. [ 86.810850][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.256'. [ 86.812148][ T6400] total_active_file 1871872 [ 86.815758][ T6400] total_unevictable 0 [ 86.817775][ T6400] anon_cost 0 [ 86.819202][ T6400] file_cost 0 [ 86.820665][ T6400] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.122,pid=6373,uid=0 [ 86.827176][ T6400] Memory cgroup out of memory: Killed process 6373 (syz.1.122) total-vm:98660kB, anon-rss:1280kB, file-rss:35220kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 86.846844][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.256'. [ 86.855622][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.6.256'. [ 86.859080][ T5806] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.862029][ T5806] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.865289][ T5806] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.881499][ T5806] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.917218][ T7091] IPVS: using max 42 ests per chain, 100800 per kthread [ 86.936093][ T2322] usb 10-1: USB disconnect, device number 2 [ 87.029781][ T7116] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 87.142328][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.186085][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.267875][ T5699] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 87.360399][ T1036] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 87.420981][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 87.425829][ T5699] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 87.432692][ T5699] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 87.440926][ T5699] usb 5-1: config 100 has no interface number 0 [ 87.445812][ T5699] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 87.457458][ T5699] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 60252, setting to 8 [ 87.464525][ T5699] usb 5-1: config 100 interface 173 has no altsetting 0 [ 87.474309][ T5699] usb 5-1: string descriptor 0 read error: -22 [ 87.482110][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.502774][ T7114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.508635][ T7114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 87.515470][ T1036] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.521231][ T5699] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 87.532069][ T7129] netlink: 28 bytes leftover after parsing attributes in process `syz.6.264'. [ 87.533427][ T1036] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.537575][ T7129] netlink: 'syz.6.264': attribute type 7 has an invalid length. [ 87.543717][ T7129] netlink: 'syz.6.264': attribute type 8 has an invalid length. [ 87.544533][ T1036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 87.548603][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.264'. [ 87.552670][ T5699] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 87.555832][ T1036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25455, setting to 1024 [ 87.561650][ T1036] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.571275][ T7129] ip6gretap0: entered promiscuous mode [ 87.572703][ T1036] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.577403][ T1036] usb 6-1: Manufacturer: syz [ 87.581695][ T7129] ip6gretap0: left promiscuous mode [ 87.582084][ T1036] usb 6-1: config 0 descriptor?? [ 87.593652][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.6.264'. [ 87.749668][ T7114] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 87.793857][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.267'. [ 87.819426][ T41] usb 5-1: USB disconnect, device number 8 [ 87.862290][ T41] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 87.866265][ T41] metro_usb 5-1:100.173: device disconnected [ 87.886059][ T7155] net_ratelimit: 231 callbacks suppressed [ 87.886079][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.988087][ T7166] uhci_hcd 0000:00:1d.0: remove, state 4 [ 87.991497][ T7166] usb usb1: USB disconnect, device number 1 [ 88.025426][ T7166] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 88.382045][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.277'. [ 88.425547][ T7215] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 88.430435][ T7215] bond1 (unregistering): Released all slaves [ 88.551052][ T7123] SELinux: policydb magic number 0x65642f2e does not match expected magic number 0xf97cff8c [ 88.555771][ T7123] SELinux: failed to load policy [ 88.560264][ T7228] size and base must be multiples of 4 kiB [ 88.562190][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.5.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.562210][ T7228] Tainted: [L]=SOFTLOCKUP [ 88.562214][ T7228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.562222][ T7228] Call Trace: [ 88.562233][ T7228] [ 88.562238][ T7228] dump_stack_lvl+0x100/0x190 [ 88.562340][ T7228] mtrr_add.cold+0x74/0x87 [ 88.562355][ T7228] mtrr_ioctl+0x25a/0xcf0 [ 88.562381][ T7228] ? __pfx_mtrr_ioctl+0x10/0x10 [ 88.562407][ T7228] ? __pfx_mtrr_ioctl+0x10/0x10 [ 88.562423][ T7228] proc_reg_unlocked_ioctl+0x229/0x320 [ 88.562445][ T7228] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 88.562461][ T7228] __x64_sys_ioctl+0x18e/0x210 [ 88.562487][ T7228] do_syscall_64+0x115/0x870 [ 88.562536][ T7228] ? clear_bhb_loop+0x70/0xc0 [ 88.562553][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.562567][ T7228] RIP: 0033:0x7ffb2859e0d9 [ 88.562578][ T7228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.562591][ T7228] RSP: 002b:00007ffb294c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.562610][ T7228] RAX: ffffffffffffffda RBX: 00007ffb28826090 RCX: 00007ffb2859e0d9 [ 88.562619][ T7228] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 88.562627][ T7228] RBP: 00007ffb28635024 R08: 0000000000000000 R09: 0000000000000000 [ 88.562635][ T7228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.562642][ T7228] R13: 00007ffb28826128 R14: 00007ffb28826090 R15: 00007ffff4fb9388 [ 88.562656][ T7228] [ 88.562865][ T7226] SELinux: policydb magic number 0x65642f2e does not match expected magic number 0xf97cff8c [ 88.625417][ T7226] SELinux: failed to load policy [ 88.628379][ T5738] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 88.631943][ T5738] Bluetooth: Wrong link type (-22) [ 88.731420][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.6.284'. [ 88.771938][ T7247] overlayfs: failed to resolve './file2': -2 [ 88.897236][ T5730] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 89.070528][ T5730] usb 10-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 89.076141][ T5730] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 89.080447][ T5730] usb 10-1: can't read configurations, error -71 [ 89.130692][ T2322] IPVS: starting estimator thread 0... [ 89.227204][ T7269] IPVS: using max 43 ests per chain, 103200 per kthread [ 89.418210][ T7279] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 89.422718][ T7279] Error validating options; rc = [-22] [ 89.727575][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.070508][ T1036] usbhid 6-1:0.0: can't add hid device: -71 [ 90.074295][ T1036] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 90.079396][ T1036] usb 6-1: USB disconnect, device number 2 [ 90.213047][ T7292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.219765][ T7293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.851723][ T7255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.857882][ T7293] __nla_validate_parse: 1 callbacks suppressed [ 91.857908][ T7293] netlink: 260 bytes leftover after parsing attributes in process `syz.1.296'. [ 91.921652][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 91.921682][ T42] audit: type=1400 audit(1786416513.337:591): avc: denied { read } for pid=7313 comm="syz.5.299" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 91.933856][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 91.933878][ T7321] netlink: 14 bytes leftover after parsing attributes in process `syz.0.302'. [ 91.950763][ T42] audit: type=1400 audit(1786416513.337:592): avc: denied { open } for pid=7313 comm="syz.5.299" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 91.961155][ T42] audit: type=1400 audit(1786416513.337:593): avc: denied { write } for pid=7316 comm="syz.6.300" name="usb_gadget" dev="configfs" ino=5802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.971194][ T42] audit: type=1400 audit(1786416513.337:594): avc: denied { write } for pid=7316 comm="syz.6.300" name="functions" dev="configfs" ino=17012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.988585][ T42] audit: type=1400 audit(1786416513.357:595): avc: denied { mounton } for pid=7316 comm="syz.6.300" path="/27/my_configfs" dev="configfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.998670][ T42] audit: type=1400 audit(1786416513.407:596): avc: denied { create } for pid=7325 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 92.016968][ T42] audit: type=1400 audit(1786416513.427:597): avc: denied { map } for pid=7325 comm="syz.0.304" path="/dev/video3" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.081042][ T42] audit: type=1400 audit(1786416513.497:598): avc: denied { setopt } for pid=7335 comm="syz.0.306" lport=60210 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.093807][ T42] audit: type=1400 audit(1786416513.497:599): avc: denied { write } for pid=7335 comm="syz.0.306" path="socket:[18852]" dev="sockfs" ino=18852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.108674][ T42] audit: type=1400 audit(1786416513.497:600): avc: denied { read } for pid=7337 comm="syz.1.307" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 92.111607][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.303'. [ 92.256344][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 92.257035][ T7348] lo speed is unknown, defaulting to 1000 [ 92.516772][ T7371] overlayfs: conflicting options: nfs_export=on,index=off [ 92.528529][ T7371] overlay: filesystem on ./bus not supported [ 92.870821][ T7406] batadv_slave_1: entered promiscuous mode [ 92.875373][ T7408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1052 sclass=netlink_route_socket pid=7408 comm=syz.6.324 [ 92.884598][ T7408] befs: (nbd6): unable to read superblock [ 92.905337][ T7408] veth1_macvtap: left promiscuous mode [ 92.997398][ T7405] batadv_slave_1: left promiscuous mode [ 93.164233][ T7426] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 93.167653][ T7426] netlink: 220 bytes leftover after parsing attributes in process `syz.0.328'. [ 93.203323][ T7426] vlan2: entered allmulticast mode [ 93.217584][ T7426] macsec0: entered allmulticast mode [ 93.221196][ T5438] veth1_macvtap: entered promiscuous mode [ 93.274534][ T7437] syzkaller0: entered promiscuous mode [ 93.276663][ T7437] syzkaller0: entered allmulticast mode [ 93.509992][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 93.542471][ T7453] team0: Port device team_slave_0 removed [ 93.605063][ T7456] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 93.720804][ T7465] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 93.793025][ T7467] netlink: 256 bytes leftover after parsing attributes in process `syz.5.338'. [ 93.797618][ T7467] unsupported nlmsg_type 40 [ 94.357378][ T5699] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 94.507944][ T5699] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 94.512941][ T5699] usb 10-1: config 0 has an invalid interface number: 11 but max is 0 [ 94.515760][ T5699] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.519146][ T5699] usb 10-1: config 0 has no interface number 0 [ 94.521249][ T5699] usb 10-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 94.525254][ T5699] usb 10-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.530211][ T5699] usb 10-1: config 0 interface 11 has no altsetting 0 [ 94.532438][ T5699] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.541530][ T5699] usb 10-1: config 0 descriptor?? [ 94.543799][ T7483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 94.550603][ T5699] keyspan 10-1:0.11: Keyspan 2 port adapter converter detected [ 94.553543][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 87 [ 94.559210][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 81 [ 94.562157][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 82 [ 94.564645][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 1 [ 94.567318][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 2 [ 94.570029][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 85 [ 94.572914][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 5 [ 94.583292][ T5699] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 94.591614][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 83 [ 94.595007][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 84 [ 94.598760][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 3 [ 94.602132][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 4 [ 94.604653][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 86 [ 94.609910][ T5699] keyspan 10-1:0.11: found no endpoint descriptor for endpoint 6 [ 94.616742][ T5699] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 94.776795][ T7483] syzkaller0: entered promiscuous mode [ 94.779570][ T7483] syzkaller0: entered allmulticast mode [ 94.785600][ T5730] usb 10-1: USB disconnect, device number 5 [ 94.796086][ T5730] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 94.804193][ T5730] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 94.810593][ T5730] keyspan 10-1:0.11: device disconnected [ 95.054496][ T5738] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 95.058416][ T5738] Bluetooth: Wrong link type (-22) [ 95.405360][ T7536] netlink: 'syz.6.356': attribute type 5 has an invalid length. [ 95.481751][ T7542] netlink: 'syz.6.359': attribute type 1 has an invalid length. [ 95.561251][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 95.565026][ T5742] Bluetooth: Wrong link type (-22) [ 95.614616][ T7556] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 95.627371][ T7555] bridge_slave_0: left allmulticast mode [ 95.629864][ T7555] bridge_slave_0: left promiscuous mode [ 95.634289][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.644753][ T7559] CUSE: info not properly terminated [ 95.645687][ T7555] bridge_slave_1: left allmulticast mode [ 95.652365][ T7555] bridge_slave_1: left promiscuous mode [ 95.654459][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.672680][ T7555] bond0: (slave bond_slave_0): Releasing backup interface [ 95.700021][ T7555] bond0: (slave bond_slave_1): Releasing backup interface [ 95.714302][ T7555] team0: Port device team_slave_0 removed [ 95.720020][ T7555] team0: Port device team_slave_1 removed [ 95.721524][ T7567] usb3503 0-0008: unknown mode is requested [ 95.723637][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.723862][ T7567] usb3503 0-0008: usb3503_probe: probed in standby mode [ 95.726420][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.740349][ T7567] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 95.742695][ T7555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.745534][ T7555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.750211][ T7555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.766930][ T7556] team0: Port device xfrm0 added [ 95.769334][ T7557] tipc: Started in network mode [ 95.772982][ T7557] tipc: Node identity e62c61929673, cluster identity 4711 [ 95.776114][ T7557] tipc: Enabled bearer , priority 0 [ 95.791988][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.367'. [ 95.820578][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.912723][ T7590] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 95.915978][ T7590] netlink: 'syz.6.371': attribute type 5 has an invalid length. [ 95.920987][ T7590] ipt_REJECT: TCP_RESET invalid for non-tcp [ 95.971297][ T7594] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 95.993538][ T7594] cramfs: wrong magic [ 95.995867][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 95.998855][ T5742] Bluetooth: Wrong link type (-22) [ 96.191271][ T7628] 9pnet_virtio: no channels available for device syz [ 96.201168][ T7628] pimreg: entered allmulticast mode [ 96.465197][ T6258] hid-generic 0005:07C0:05DF.0002: item fetching failed at offset 0/1 [ 96.469882][ T6258] hid-generic 0005:07C0:05DF.0002: probe with driver hid-generic failed with error -22 [ 96.518644][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 96.520805][ T5742] Bluetooth: Wrong link type (-22) [ 96.584125][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.387'. [ 96.654775][ T7652] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.659409][ T7652] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 96.662728][ T7652] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 96.770854][ T5730] tipc: Node number set to 1885299090 [ 96.972499][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 96.972528][ T42] audit: type=1400 audit(1786416518.387:631): avc: denied { write } for pid=7670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.037397][ T42] audit: type=1400 audit(1786416518.457:632): avc: denied { write } for pid=7673 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.117199][ T41] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 97.287195][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 97.295001][ T41] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.302005][ T41] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 97.305644][ T41] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 97.308999][ T41] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 97.314230][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.316753][ T41] usb 5-1: Product: syz [ 97.318618][ T41] usb 5-1: Manufacturer: syz [ 97.320128][ T41] usb 5-1: SerialNumber: syz [ 97.323830][ T7667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.327361][ T5742] Bluetooth: hci1: command 0x0405 tx timeout [ 97.558611][ T42] audit: type=1400 audit(1786416518.977:633): avc: denied { write } for pid=7679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.607290][ T41] cdc_ncm 5-1:1.0: bind() failure [ 97.619132][ T41] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 97.623379][ T41] cdc_ncm 5-1:1.1: bind() failure [ 97.633737][ T5806] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.639683][ T42] audit: type=1400 audit(1786416519.057:634): avc: denied { write } for pid=7687 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.675132][ T41] usb 5-1: USB disconnect, device number 9 [ 97.675347][ T7691] ŞŞŞŞŞŞ: renamed from vlan0 (while UP) [ 97.690219][ T42] audit: type=1400 audit(1786416519.107:635): avc: denied { name_bind } for pid=7689 comm="syz.1.396" src=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.700511][ T7693] netlink: 56 bytes leftover after parsing attributes in process `syz.6.397'. [ 97.728464][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.733607][ T42] audit: type=1400 audit(1786416519.147:636): avc: denied { write } for pid=7694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.733826][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.752341][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.755839][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.761571][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.777996][ T42] audit: type=1400 audit(1786416519.197:637): avc: denied { write } for pid=7701 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.793800][ T5806] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.815872][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.398'. [ 97.874990][ T5806] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.881086][ T42] audit: type=1400 audit(1786416519.297:638): avc: denied { write } for pid=7708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.898503][ T7700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1043 sclass=netlink_route_socket pid=7700 comm=syz.6.398 [ 97.931614][ T42] audit: type=1400 audit(1786416519.347:639): avc: denied { write } for pid=7717 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.001419][ T7696] lo speed is unknown, defaulting to 1000 [ 98.034653][ T5806] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.087687][ T42] audit: type=1400 audit(1786416519.507:640): avc: denied { connect } for pid=7728 comm="syz.6.402" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.178063][ T5699] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.198857][ T7741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.251833][ T7745] overlayfs: conflicting options: nfs_export=on,index=off [ 98.307174][ T5699] usb 6-1: device descriptor read/64, error -71 [ 98.491304][ T5806] team0: Port device xfrm0 removed [ 98.547183][ T5699] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 98.677331][ T5699] usb 6-1: device descriptor read/64, error -71 [ 98.720779][ T5806] bond0 (unregistering): Released all slaves [ 98.739193][ T1157] tipc: Resetting bearer [ 98.764271][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.766554][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.769381][ T7696] bridge_slave_0: entered allmulticast mode [ 98.773290][ T7696] bridge_slave_0: entered promiscuous mode [ 98.778661][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.782162][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.784658][ T7696] bridge_slave_1: entered allmulticast mode [ 98.787353][ T5699] usb usb6-port1: attempt power cycle [ 98.808568][ T7696] bridge_slave_1: entered promiscuous mode [ 98.854467][ T5806] tipc: Disabling bearer [ 98.865811][ T5806] tipc: Left network mode [ 98.873483][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.885307][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.987327][ T7696] team0: Port device team_slave_0 added [ 98.991061][ T7696] team0: Port device team_slave_1 added [ 99.011636][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.014327][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.023792][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.043200][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.046980][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.056983][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.059333][ T7760] SELinux: context truncated [ 99.062854][ T7760] SELinux: invalid ocon [ 99.077717][ T5438] 8021q: adding VLAN 0 to HW filter on device eth14 [ 99.137294][ T5699] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 99.152747][ T7696] hsr_slave_0: entered promiscuous mode [ 99.155967][ T7696] hsr_slave_1: entered promiscuous mode [ 99.162888][ T7696] debugfs: 'hsr0' already exists in 'hsr' [ 99.165251][ T7696] Cannot create hsr debugfs directory [ 99.169010][ T5699] usb 6-1: device descriptor read/8, error -71 [ 99.206266][ T5806] hsr_slave_0: left promiscuous mode [ 99.209496][ T5806] hsr_slave_1: left promiscuous mode [ 99.214967][ T7760] SELinux: failed to load policy [ 99.221119][ T5806] veth1_macvtap: left promiscuous mode [ 99.223622][ T5806] veth0_macvtap: left promiscuous mode [ 99.225971][ T5806] veth1_vlan: left promiscuous mode [ 99.228473][ T5806] veth0_vlan: left promiscuous mode [ 99.343352][ T7793] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 99.417317][ T5699] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 99.447879][ T5699] usb 6-1: device descriptor read/8, error -71 [ 99.521524][ T7804] tmpfs: Bad value for 'mpol' [ 99.557631][ T5699] usb usb6-port1: unable to enumerate USB device [ 99.619307][ T5438] 8021q: adding VLAN 0 to HW filter on device eth15 [ 99.818489][ T5742] Bluetooth: hci3: command tx timeout [ 99.895442][ T7818] lo speed is unknown, defaulting to 1000 [ 100.220067][ T7836] syz.0.422 (7836): drop_caches: 0 [ 100.283607][ T7842] input: syz0 as /devices/virtual/input/input8 [ 100.413992][ T7849] (syz.0.424,7849,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 100.423876][ T7847] (syz.0.424,7847,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 100.436408][ T7696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.442528][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.445472][ T7696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.452500][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.456528][ T7696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.473277][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.482932][ T7696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.494347][ T7696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.565916][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.579650][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.585429][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.588420][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.601295][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.604285][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.817477][ T7876] syzkaller0: entered promiscuous mode [ 100.819240][ T7876] syzkaller0: entered allmulticast mode [ 100.905793][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.082697][ T7896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.431'. [ 101.098923][ T7696] veth0_vlan: entered promiscuous mode [ 101.106210][ T7696] veth1_vlan: entered promiscuous mode [ 101.125665][ T7696] veth0_macvtap: entered promiscuous mode [ 101.130154][ T7696] veth1_macvtap: entered promiscuous mode [ 101.139250][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.147163][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.177233][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.189052][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.200887][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.217669][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.242326][ T7898] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 101.266205][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.268906][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.287273][ T7210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.290557][ T7210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.349254][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 101.352935][ T5742] Bluetooth: Wrong link type (-22) [ 101.513365][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.438'. [ 101.713619][ T7917] pimreg: entered allmulticast mode [ 101.717713][ T7917] pimreg: left allmulticast mode [ 101.804057][ T7919] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6165 sclass=netlink_xfrm_socket pid=7919 comm=syz.5.441 [ 101.863246][ T7926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.883361][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 101.889968][ T5742] Bluetooth: Wrong link type (-22) [ 101.891984][ T5742] Bluetooth: hci0: link tx timeout [ 101.894673][ T5742] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 101.900308][ T5738] Bluetooth: hci3: command tx timeout [ 101.956058][ T7933] netlink: 'syz.0.445': attribute type 2 has an invalid length. [ 101.958565][ T7933] netlink: 46 bytes leftover after parsing attributes in process `syz.0.445'. [ 102.228306][ T41] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.312852][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 102.315846][ T5742] Bluetooth: Wrong link type (-22) [ 102.318075][ T5742] Bluetooth: hci2: link tx timeout [ 102.321542][ T5742] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 102.377237][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 102.379592][ T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.383819][ T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.387214][ T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.390997][ T41] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.394755][ T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.399496][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.406077][ T41] usbtmc 5-1:16.0: bulk endpoints not found [ 102.574290][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 102.585046][ T7971] netlink: 3 bytes leftover after parsing attributes in process `syz.1.458'. [ 102.610718][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 102.610738][ T42] audit: type=1400 audit(1786416524.027:683): avc: denied { unlink } for pid=6696 comm="syz-executor" name="file0" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.648724][ T7977] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.652807][ T7977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.658191][ T7977] IPv6: NLM_F_CREATE should be set when creating new route [ 102.664536][ T7977] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.667713][ T7977] IPv6: NLM_F_CREATE should be set when creating new route [ 102.757564][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 102.760462][ T5086] Bluetooth: Wrong link type (-22) [ 102.835761][ T7989] netlink: 'syz.5.465': attribute type 1 has an invalid length. [ 102.854486][ T7989] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 102.857796][ T7984] Falling back ldisc for ttyS3. [ 102.898264][ T42] audit: type=1400 audit(1786416524.317:684): avc: denied { ioctl } for pid=7993 comm="syz.6.467" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.932308][ T7996] netlink: 'syz.5.468': attribute type 39 has an invalid length. [ 102.975129][ T56] usb 5-1: USB disconnect, device number 10 [ 103.013712][ T8001] input: syz0 as /devices/virtual/input/input9 [ 103.029936][ T42] audit: type=1400 audit(1786416524.447:685): avc: denied { mmap_zero } for pid=8000 comm="syz.6.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 103.082743][ T42] audit: type=1326 audit(1786416524.497:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.1.472" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa76e39e0d9 code=0x0 [ 103.126077][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 103.129869][ T5086] Bluetooth: Wrong link type (-22) [ 103.132242][ T5086] Bluetooth: hci0: link tx timeout [ 103.134003][ T5086] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 103.215375][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 103.218384][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 103.223796][ T8019] netlink: 'syz.1.472': attribute type 12 has an invalid length. [ 103.322889][ T8025] cgroup: name respecified [ 103.325062][ T8024] cgroup: name respecified [ 103.596372][ T8039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8039 comm=syz.6.481 [ 103.604113][ T8039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8039 comm=syz.6.481 [ 103.640986][ T8028] mmap: syz.0.478 (8028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.674538][ T5086] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 103.679407][ T5086] Bluetooth: Wrong link type (-22) [ 103.764660][ T8045] overlayfs: workdir and upperdir must reside under the same mount [ 103.774595][ T42] audit: type=1400 audit(1786416525.187:687): avc: denied { read } for pid=8044 comm="syz.6.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.874764][ T8049] KVM: debugfs: duplicate directory 8049-6 [ 103.878187][ T8049] bridge_slave_1: default FDB implementation only supports local addresses [ 103.967411][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.967487][ T5739] Bluetooth: hci3: command tx timeout [ 104.192353][ T8063] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 104.229929][ T42] audit: type=1400 audit(1786416525.647:688): avc: denied { write } for pid=8062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.259117][ T5738] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 104.260558][ T8070] Invalid logical block size (1069) [ 104.261776][ T5738] Bluetooth: Wrong link type (-22) [ 104.262475][ T5738] Bluetooth: hci2: link tx timeout [ 104.272300][ T5738] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 104.292945][ T42] audit: type=1400 audit(1786416525.707:690): avc: denied { write } for pid=8072 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.302598][ T42] audit: type=1400 audit(1786416525.707:689): avc: denied { ioctl } for pid=8073 comm="syz.1.493" path="socket:[24744]" dev="sockfs" ino=24744 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 104.322682][ T8076] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 104.325668][ T8076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.340015][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 104.344401][ T42] audit: type=1400 audit(1786416525.757:691): avc: denied { getopt } for pid=8078 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.367414][ T5738] Bluetooth: hci2: command 0x0406 tx timeout [ 104.402574][ T42] audit: type=1400 audit(1786416525.817:692): avc: denied { write } for pid=8081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.581846][ T8095] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.586178][ T8096] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 104.652628][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 104.654833][ T5742] Bluetooth: Wrong link type (-22) [ 105.005795][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 105.008414][ T847] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 105.010238][ T5742] Bluetooth: Wrong link type (-22) [ 105.057472][ T8127] zram: Cannot change disksize for initialized device [ 105.158055][ T847] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 105.161136][ T847] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 105.164438][ T847] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 105.167636][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.171231][ T847] usb 5-1: config 0 has no interfaces? [ 105.175011][ T847] usb 5-1: config index 1 descriptor too short (expected 28277, got 36) [ 105.178150][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.183813][ T847] usb 5-1: config 0 has no interfaces? [ 105.186631][ T847] usb 5-1: config index 2 descriptor too short (expected 28277, got 36) [ 105.190109][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.193985][ T847] usb 5-1: config 0 has no interfaces? [ 105.197076][ T847] usb 5-1: config index 3 descriptor too short (expected 28277, got 36) [ 105.201143][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.205122][ T847] usb 5-1: config 0 has no interfaces? [ 105.208919][ T847] usb 5-1: config index 4 descriptor too short (expected 28277, got 36) [ 105.212309][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.216100][ T847] usb 5-1: config 0 has no interfaces? [ 105.219225][ T847] usb 5-1: config index 5 descriptor too short (expected 28277, got 36) [ 105.222622][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.226594][ T847] usb 5-1: config 0 has no interfaces? [ 105.230035][ T847] usb 5-1: config index 6 descriptor too short (expected 28277, got 36) [ 105.233477][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.238510][ T847] usb 5-1: config 0 has no interfaces? [ 105.241579][ T847] usb 5-1: config index 7 descriptor too short (expected 28277, got 36) [ 105.244854][ T847] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.249044][ T847] usb 5-1: config 0 has no interfaces? [ 105.251259][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.261716][ T847] usb 5-1: config 0 descriptor?? [ 105.404603][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 105.406870][ T5742] Bluetooth: Wrong link type (-22) [ 105.508402][ T8107] xt_bpf: check failed: parse error [ 105.511954][ T847] usb 5-1: string descriptor 0 read error: -71 [ 105.522243][ T847] usb 5-1: USB disconnect, device number 11 [ 105.608386][ T8168] lo speed is unknown, defaulting to 1000 [ 105.713489][ T8175] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 105.720303][ T8175] overlayfs: missing 'lowerdir' [ 105.735607][ T8175] binder: 8174:8175 ioctl 40046210 0 returned -14 [ 105.829531][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 105.832436][ T5742] Bluetooth: Wrong link type (-22) [ 106.049105][ T5742] Bluetooth: hci3: command tx timeout [ 106.161838][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 106.165417][ T5742] Bluetooth: Wrong link type (-22) [ 106.421013][ T8242] lapbether: lapb_data_request error - 4 [ 106.540725][ T8248] netlink: 19 bytes leftover after parsing attributes in process `syz.6.554'. [ 106.567474][ T9] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 106.604904][ T8257] vers=1.0 (cifs) not permitted when mounting with smb3 [ 106.604904][ T8257] [ 106.612338][ T8257] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 106.632153][ T8261] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 106.676326][ T8264] netlink: 180 bytes leftover after parsing attributes in process `syz.0.559'. [ 106.680142][ T8264] netlink: 180 bytes leftover after parsing attributes in process `syz.0.559'. [ 106.730896][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 106.738926][ T9] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=42.26 [ 106.745691][ T9] usb 10-1: config 0 has no interfaces? [ 106.752706][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.757415][ T9] usb 10-1: Product: syz [ 106.759148][ T9] usb 10-1: Manufacturer: syz [ 106.761085][ T9] usb 10-1: SerialNumber: syz [ 106.780684][ T9] usb 10-1: config 0 descriptor?? [ 106.884936][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 106.952080][ T8287] binder_alloc: 8286: binder_alloc_buf size 24560 failed, no address space [ 106.955105][ T8287] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 106.977337][ T50] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 107.138146][ T50] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.142762][ T50] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.146279][ T50] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.150625][ T50] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.154261][ T50] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 107.158906][ T50] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 107.164986][ T50] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.168436][ T50] usb 11-1: Product: syz [ 107.170259][ T50] usb 11-1: Manufacturer: syz [ 107.177707][ T50] cdc_wdm 11-1:1.0: skipping garbage [ 107.179789][ T50] cdc_wdm 11-1:1.0: skipping garbage [ 107.186382][ T50] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 107.188917][ T50] cdc_wdm 11-1:1.0: Unknown control protocol [ 107.347996][ T8296] [ 107.385131][ T9] usb 11-1: USB disconnect, device number 2 [ 107.385724][ T8271] cdc_wdm 11-1:1.0: Error submitting int urb - -19 [ 107.560354][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 107.564170][ T8314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.574'. [ 107.576941][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8314 comm=syz.0.574 [ 107.648117][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.577'. [ 107.856658][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 107.859514][ T5742] Bluetooth: Wrong link type (-22) [ 107.977220][ T8353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33384 sclass=netlink_route_socket pid=8353 comm=syz.0.588 [ 108.097164][ T8369] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 108.100473][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.103207][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.110260][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.112717][ T8369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.117190][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.119839][ T8369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.124721][ T8369] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.130806][ T8369] bridge_slave_1: left allmulticast mode [ 108.133146][ T8369] bridge_slave_1: left promiscuous mode [ 108.135146][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.140822][ T8369] bridge_slave_0: left allmulticast mode [ 108.142933][ T8369] bridge_slave_0: left promiscuous mode [ 108.145023][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.156098][ T8369] bond0: (slave bridge0): Releasing backup interface [ 108.323202][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 108.326038][ T5742] Bluetooth: Wrong link type (-22) [ 108.328789][ T5742] Bluetooth: hci0: link tx timeout [ 108.382022][ T8380] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 108.385137][ T8380] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.395768][ T8380] vhci_hcd vhci_hcd.0: Device attached [ 108.399808][ T8381] vhci_hcd: connection closed [ 108.404049][ T5807] vhci_hcd vhci_hcd.0: stop threads [ 108.408659][ T5807] vhci_hcd vhci_hcd.0: release socket [ 108.410878][ T5807] vhci_hcd vhci_hcd.0: disconnect device [ 108.952679][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 108.952699][ T42] audit: type=1400 audit(1786416530.367:713): avc: denied { getopt } for pid=8394 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.974063][ T50] usb 10-1: USB disconnect, device number 6 [ 109.022333][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 109.025233][ T5742] Bluetooth: Wrong link type (-22) [ 109.118570][ T8412] __nla_validate_parse: 4 callbacks suppressed [ 109.118590][ T8412] netlink: 108 bytes leftover after parsing attributes in process `syz.0.606'. [ 109.125635][ T42] audit: type=1326 audit(1786416530.537:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.138966][ T42] audit: type=1326 audit(1786416530.537:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.149627][ T8412] (syz.0.606,8412,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 109.154091][ T8412] (syz.0.606,8412,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 109.167192][ T42] audit: type=1326 audit(1786416530.537:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.182064][ T42] audit: type=1326 audit(1786416530.537:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.192365][ T42] audit: type=1326 audit(1786416530.537:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.201933][ T42] audit: type=1326 audit(1786416530.587:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.212134][ T42] audit: type=1326 audit(1786416530.587:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.226638][ T42] audit: type=1326 audit(1786416530.587:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.243824][ T42] audit: type=1326 audit(1786416530.587:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8402 comm="syz.5.603" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb260b9e0d9 code=0x7ffc0000 [ 109.284842][ T5742] Bluetooth: hci0: link tx timeout [ 109.335221][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.339120][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.432061][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 109.434744][ T5742] Bluetooth: Wrong link type (-22) [ 109.874034][ T8475] fuse: Bad value for 'fd' [ 109.969557][ T56] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 110.065685][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 110.068429][ T5742] Bluetooth: Wrong link type (-22) [ 110.147202][ T56] usb 10-1: Using ep0 maxpacket: 8 [ 110.160507][ T56] usb 10-1: New USB device found, idVendor=1b3d, idProduct=0100, bcdDevice=c4.f6 [ 110.171422][ T56] usb 10-1: config 1 has an invalid interface number: 140 but max is 2 [ 110.175402][ T56] usb 10-1: config 1 has an invalid interface number: 110 but max is 2 [ 110.182141][ T8492] macvlan2: entered promiscuous mode [ 110.184183][ T56] usb 10-1: config 1 has an invalid interface number: 45 but max is 2 [ 110.189398][ T56] usb 10-1: config 1 has an invalid interface number: 207 but max is 2 [ 110.192825][ T56] usb 10-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 110.196469][ T56] usb 10-1: config 1 has no interface number 0 [ 110.198934][ T56] usb 10-1: config 1 has no interface number 1 [ 110.200408][ T8496] macvlan3: entered promiscuous mode [ 110.200918][ T56] usb 10-1: config 1 has no interface number 2 [ 110.205196][ T56] usb 10-1: config 1 has no interface number 3 [ 110.207143][ T56] usb 10-1: config 1 interface 140 altsetting 1 endpoint 0x5 has an invalid bInterval 254, changing to 11 [ 110.210614][ T56] usb 10-1: config 1 interface 140 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 110.214798][ T56] usb 10-1: config 1 interface 110 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 110.227188][ T56] usb 10-1: config 1 interface 110 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 110.237433][ T56] usb 10-1: too many endpoints for config 1 interface 45 altsetting 90: 102, using maximum allowed: 30 [ 110.246226][ T56] usb 10-1: config 1 interface 45 altsetting 90 endpoint 0x2 has an invalid bInterval 58, changing to 9 [ 110.255835][ T56] usb 10-1: config 1 interface 45 altsetting 90 has a duplicate endpoint with address 0x5, skipping [ 110.260542][ T56] usb 10-1: config 1 interface 45 altsetting 90 has a duplicate endpoint with address 0x3, skipping [ 110.264943][ T56] usb 10-1: config 1 interface 45 altsetting 90 has a duplicate endpoint with address 0xE, skipping [ 110.269835][ T56] usb 10-1: config 1 interface 45 altsetting 90 has an invalid descriptor for endpoint zero, skipping [ 110.276879][ T56] usb 10-1: config 1 interface 45 altsetting 90 has a duplicate endpoint with address 0x5, skipping [ 110.286098][ T56] usb 10-1: config 1 interface 45 altsetting 90 has 11 endpoint descriptors, different from the interface descriptor's value: 102 [ 110.294351][ T56] usb 10-1: config 1 interface 207 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 110.299277][ T56] usb 10-1: config 1 interface 207 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 110.304092][ T56] usb 10-1: config 1 interface 207 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 110.310025][ T56] usb 10-1: config 1 interface 207 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 110.314841][ T56] usb 10-1: config 1 interface 207 altsetting 9 has an endpoint descriptor with address 0x3C, changing to 0xC [ 110.320520][ T56] usb 10-1: config 1 interface 207 altsetting 9 bulk endpoint 0xC has invalid maxpacket 8 [ 110.324898][ T56] usb 10-1: config 1 interface 140 has no altsetting 0 [ 110.330798][ T8502] zram: Cannot change disksize for initialized device [ 110.339227][ T56] usb 10-1: config 1 interface 110 has no altsetting 0 [ 110.344859][ T56] usb 10-1: config 1 interface 45 has no altsetting 0 [ 110.350022][ T56] usb 10-1: config 1 interface 207 has no altsetting 0 [ 110.358613][ T56] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.361989][ T56] usb 10-1: Manufacturer: î‰äŠá ë‘§ê½’áĞ–ä¨şìžï‡ğîĤµï€žçİ˘í„ğċµˆ [ 110.365269][ T56] usb 10-1: SerialNumber: Ğ [ 110.586679][ T56] ftdi_sio 10-1:1.140: FTDI USB Serial Device converter detected [ 110.589880][ T56] ftdi_sio ttyUSB0: unknown device type: 0xc4f6 [ 110.598055][ T56] ftdi_sio 10-1:1.110: FTDI USB Serial Device converter detected [ 110.601528][ T56] ftdi_sio ttyUSB1: unknown device type: 0xc4f6 [ 110.606060][ T56] ftdi_sio 10-1:1.45: FTDI USB Serial Device converter detected [ 110.610632][ T56] ftdi_sio ttyUSB2: unknown device type: 0xc4f6 [ 110.627972][ T56] ftdi_sio 10-1:1.207: FTDI USB Serial Device converter detected [ 110.634102][ T56] ftdi_sio ttyUSB3: unknown device type: 0xc4f6 [ 110.637420][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 110.644600][ T56] usb 10-1: USB disconnect, device number 7 [ 110.655713][ T56] ftdi_sio 10-1:1.140: device disconnected [ 110.661420][ T56] ftdi_sio 10-1:1.110: device disconnected [ 110.668795][ T56] ftdi_sio 10-1:1.45: device disconnected [ 110.672678][ T56] ftdi_sio 10-1:1.207: device disconnected [ 110.758198][ T5742] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 110.861337][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 110.863624][ T5742] Bluetooth: Wrong link type (-22) [ 110.865537][ T5742] Bluetooth: hci0: link tx timeout [ 110.867258][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 111.019382][ T10] usb 11-1: Using ep0 maxpacket: 8 [ 111.024044][ T10] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 111.030641][ T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.035098][ T10] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.039269][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 111.042234][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.048717][ T10] usb 11-1: config 0 descriptor?? [ 111.271931][ T8542] syz_tun: left allmulticast mode [ 111.273646][ T8542] syz_tun: left promiscuous mode [ 111.275324][ T8542] bridge0: port 3(syz_tun) entered disabled state [ 111.285079][ T8542] bridge_slave_0: left allmulticast mode [ 111.286890][ T8542] bridge_slave_0: left promiscuous mode [ 111.289322][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.294416][ T8542] bridge_slave_1: left allmulticast mode [ 111.296099][ T8542] bridge_slave_1: left promiscuous mode [ 111.298757][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.308137][ T8542] bond0: (slave bond_slave_0): Releasing backup interface [ 111.320294][ T8542] bond0: (slave bond_slave_1): Releasing backup interface [ 111.334666][ T8542] team0: Port device team_slave_1 removed [ 111.337202][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.339961][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.344531][ T8542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.348279][ T8542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.353003][ T8542] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.377830][ T8543] team0: Port device xfrm0 added [ 111.384951][ T8542] tipc: Started in network mode [ 111.387320][ T8542] tipc: Node identity 668d91d4b621, cluster identity 4711 [ 111.390010][ T8542] tipc: Enabled bearer , priority 0 [ 111.460476][ T8553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 111.463074][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 111.468864][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 111.471616][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 111.474220][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 111.476773][ T10] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 111.486412][ T10] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 111.509730][ T8553] kvm: pic: non byte read [ 111.623455][ T8557] netlink: 44 bytes leftover after parsing attributes in process `syz.5.646'. [ 111.624256][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.5.646'. [ 111.670215][ T10] usb 11-1: USB disconnect, device number 3 [ 111.691670][ T8560] zram: Cannot change disksize for initialized device [ 111.919329][ T8571] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 111.934511][ T8571] netlink: 68 bytes leftover after parsing attributes in process `syz.5.651'. [ 112.062000][ T8588] syzkaller0: entered promiscuous mode [ 112.063891][ T8588] syzkaller0: entered allmulticast mode [ 112.125186][ T8592] zram: Cannot change disksize for initialized device [ 112.248222][ T8598] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.250759][ T8598] IPv6: NLM_F_CREATE should be set when creating new route [ 112.317216][ T24] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 112.389774][ T2322] tipc: Node number set to 3500970452 [ 112.417450][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 112.477312][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 112.480061][ T24] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.484732][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.489388][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.493143][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.502009][ T24] hub 10-1:1.0: bad descriptor, ignoring hub [ 112.504475][ T24] hub 10-1:1.0: probe with driver hub failed with error -5 [ 112.507811][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 112.509931][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 112.512109][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 112.514187][ T24] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 112.807698][ T847] usb 10-1: USB disconnect, device number 8 [ 112.925180][ T8631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'. [ 113.007236][ T2322] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.071274][ T8636] lo speed is unknown, defaulting to 1000 [ 113.110557][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'. [ 113.138563][ T847] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 113.167297][ T2322] usb 5-1: Using ep0 maxpacket: 8 [ 113.170636][ T2322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.175536][ T2322] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 113.179261][ T2322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.183301][ T2322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.187346][ T2322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.191426][ T2322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.196718][ T2322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.287254][ T847] usb 10-1: Using ep0 maxpacket: 8 [ 113.293313][ T847] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.299635][ T847] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.304519][ T847] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.307405][ T847] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.312375][ T847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.323989][ T847] hub 10-1:1.0: bad descriptor, ignoring hub [ 113.328162][ T847] hub 10-1:1.0: probe with driver hub failed with error -5 [ 113.331551][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 113.333267][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 113.335108][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 113.336754][ T847] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 113.413146][ T2322] usb 5-1: GET_CAPABILITIES returned 0 [ 113.415529][ T2322] usbtmc 5-1:16.0: can't read capabilities [ 113.525821][ T8588] nftables ruleset with unbound chain [ 113.617901][ T8659] i2c i2c-0: Failed to register i2c client usb3503 at 0x08 (-16) [ 113.624273][ T56] usb 5-1: USB disconnect, device number 12 [ 113.637439][ T2322] usb 10-1: USB disconnect, device number 9 [ 114.399542][ T8678] befs: (nullb0): No write support. Marking filesystem read-only [ 114.403058][ T8678] befs: (nullb0): invalid magic header [ 114.527703][ T8680] zram: Cannot change disksize for initialized device [ 114.826386][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 116.528534][ T8655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.611298][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 116.611326][ T42] audit: type=1400 audit(1786416538.027:760): avc: denied { write } for pid=8692 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.614467][ T8693] netlink: 'syz.6.694': attribute type 1 has an invalid length. [ 116.659704][ T8693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.668897][ T8710] Invalid source name [ 116.670394][ T8710] UBIFS error (pid: 8710): cannot open "ubifs", error -22 [ 116.688579][ T8693] bond2: (slave geneve2): making interface the new active one [ 116.702911][ T8693] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 116.766902][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 116.769572][ T5742] Bluetooth: Wrong link type (-22) [ 116.811941][ T8722] netlink: 'syz.6.702': attribute type 1 has an invalid length. [ 116.815290][ T8722] netlink: 224 bytes leftover after parsing attributes in process `syz.6.702'. [ 116.834916][ T8722] FAT-fs (nullb0): bogus number of reserved sectors [ 116.839043][ T8722] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 116.851050][ T8727] netlink: 'syz.6.702': attribute type 1 has an invalid length. [ 116.851349][ T8722] FAT-fs (nullb0): bogus number of reserved sectors [ 116.856650][ T8722] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 116.867253][ T8727] netlink: 224 bytes leftover after parsing attributes in process `syz.6.702'. [ 116.870549][ T8724] netlink: 'syz.0.703': attribute type 16 has an invalid length. [ 116.870602][ T8724] netlink: 'syz.0.703': attribute type 17 has an invalid length. [ 117.041891][ T8741] CUSE: info not properly terminated [ 117.046732][ T42] audit: type=1400 audit(1786416538.457:761): avc: denied { read append } for pid=8736 comm="syz.6.706" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.055908][ T8724] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 117.060504][ T42] audit: type=1400 audit(1786416538.457:762): avc: denied { open } for pid=8736 comm="syz.6.706" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.088907][ T10] lo speed is unknown, defaulting to 1000 [ 117.097385][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.100619][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.103847][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.108807][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.139580][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.709'. [ 117.149450][ T8745] bond0: entered promiscuous mode [ 117.156197][ T8745] bond_slave_0: entered promiscuous mode [ 117.159220][ T8745] bond_slave_1: entered promiscuous mode [ 117.167647][ T8745] gretap0: entered promiscuous mode [ 117.174584][ T8745] hsr1: entered promiscuous mode [ 117.178347][ T8746] veth1_to_hsr: entered allmulticast mode [ 117.673871][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.682161][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.686338][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.717739][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.736411][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.751566][ T8772] netlink: 112 bytes leftover after parsing attributes in process `syz.1.717'. [ 117.929972][ T42] audit: type=1400 audit(1786416539.347:763): avc: denied { relabelfrom } for pid=8783 comm="syz.5.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 117.933849][ T8786] usbcore.quirks: string doesn't fit in 127 chars. [ 117.938011][ T42] audit: type=1400 audit(1786416539.347:764): avc: denied { relabelto } for pid=8783 comm="syz.5.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 117.943717][ T8784] openvswitch: netlink: Actions may not be safe on all matching packets [ 117.947928][ T42] audit: type=1400 audit(1786416539.347:765): avc: denied { mount } for pid=8785 comm="syz.0.721" name="/" dev="hugetlbfs" ino=26131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.951632][ T8786] syzkaller0: entered promiscuous mode [ 117.960512][ T42] audit: type=1400 audit(1786416539.347:766): avc: denied { remount } for pid=8785 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.970430][ T8786] syzkaller0: entered allmulticast mode [ 118.020676][ T8788] bond1: invalid ARP target 0.0.0.0 specified for addition [ 118.023019][ T8788] bond1: option arp_ip_target: invalid value (0) [ 118.026578][ T8788] bond1 (unregistering): Released all slaves [ 118.029919][ T5742] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 118.037441][ T5742] Bluetooth: Wrong link type (-22) [ 118.091655][ T8794] kAFS: unparsable volume name [ 118.094050][ T42] audit: type=1400 audit(1786416539.507:767): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 118.470607][ T8816] binder: 8815:8816 ioctl 80087601 200000000400 returned -22 [ 118.568215][ T42] audit: type=1400 audit(1786416539.987:768): avc: denied { audit_read } for pid=8821 comm="syz.1.737" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.602540][ T42] audit: type=1400 audit(1786416540.017:769): avc: denied { module_request } for pid=8821 comm="syz.1.737" kmod="bt-proto-8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 118.657726][ T8828] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 118.661491][ T8828] bond2: entered allmulticast mode [ 118.663823][ T8827] bond2: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 118.699204][ T8832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.778427][ T8832] Console: switching to colour dummy device 80x25 [ 118.996352][ T8855] binder: 8854:8855 ioctl c0306201 0 returned -14 [ 119.050518][ T8862] overlayfs: failed to resolve './file2': -2 [ 119.324505][ T8884] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 119.356321][ T8887] sit0: entered allmulticast mode [ 119.627293][ T50] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 119.797731][ T50] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 119.808631][ T50] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 119.822422][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.841416][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.860094][ T50] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 119.893036][ T50] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 119.919445][ T50] usb 5-1: Manufacturer: syz [ 119.934270][ T8948] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 119.963995][ T8948] netlink: 'syz.1.759': attribute type 29 has an invalid length. [ 119.988772][ T50] usb 5-1: config 0 descriptor?? [ 120.063138][ T8943] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 120.068570][ T8943] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 120.122673][ T8936] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 120.125087][ T8936] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.129744][ T8936] vhci_hcd vhci_hcd.0: Device attached [ 120.134789][ T8958] vhci_hcd: connection closed [ 120.137357][ T8944] vhci_hcd vhci_hcd.6: stop threads [ 120.140735][ T8944] vhci_hcd vhci_hcd.6: release socket [ 120.142535][ T8944] vhci_hcd vhci_hcd.6: disconnect device [ 120.177278][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.182749][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.189213][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.193814][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.200769][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.206527][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.215422][ T8961] binder_alloc: binder_alloc_mmap_handler: 8960 200000ffd000-200001000000 already mapped failed -16 [ 120.220366][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 120.223295][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 120.241547][ T50] usb 5-1: USB disconnect, device number 13 [ 120.366964][ T8981] netlink: 'syz.5.768': attribute type 1 has an invalid length. [ 120.370082][ T8981] netlink: 'syz.5.768': attribute type 2 has an invalid length. [ 120.623338][ T9003] xt_hashlimit: size too large, truncated to 1048576 [ 120.784980][ T9012] __nla_validate_parse: 61 callbacks suppressed [ 120.784993][ T9012] netlink: 32 bytes leftover after parsing attributes in process `syz.5.775'. [ 120.865918][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 120.880770][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 121.123268][ T9042] f2fs: Unknown parameter 'usrquotaê˙˙˙' [ 121.231762][ T9051] 9pnet_fd: Insufficient options for proto=fd [ 121.961774][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 122.012143][ T5742] Bluetooth: hci0: unexpected event for opcode 0x204e [ 122.012303][ T9074] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 122.034040][ T9074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.051393][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.069722][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 122.069752][ T42] audit: type=1400 audit(1786416799.488:783): avc: denied { block_suspend } for pid=9072 comm="syz.0.797" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.082194][ T9077] i2c i2c-1: dtv_property_process_set: SET cmd 0x6a850a89 undefined [ 122.087657][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.6.798'. [ 122.179127][ T42] audit: type=1400 audit(1786416799.598:784): avc: denied { name_bind } for pid=9081 comm="syz.5.800" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.246296][ T9092] geneve3: entered promiscuous mode [ 122.258204][ T42] audit: type=1400 audit(1786416799.678:785): avc: denied { create } for pid=9085 comm="syz.6.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 122.352088][ T9104] netlink: 778 bytes leftover after parsing attributes in process `syz.0.806'. [ 122.353608][ T9105] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 122.393734][ T9107] raw_sendmsg: syz.6.807 forgot to set AF_INET. Fix it! [ 122.400131][ T42] audit: type=1400 audit(1786416799.818:786): avc: denied { accept } for pid=9110 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.413038][ T9112] netlink: 'syz.0.809': attribute type 3 has an invalid length. [ 122.416260][ T9112] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 122.419679][ T9112] netlink: 224 bytes leftover after parsing attributes in process `syz.0.809'. [ 122.423269][ T9112] NCSI netlink: No device for ifindex 0 [ 122.452639][ T42] audit: type=1400 audit(1786416799.868:787): avc: denied { write } for pid=9114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.504746][ T42] audit: type=1400 audit(1786416799.918:788): avc: denied { write } for pid=9118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.519154][ T42] audit: type=1400 audit(1786416799.928:789): avc: denied { append } for pid=9125 comm="syz.0.811" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 122.534932][ T9129] netlink: 'syz.6.812': attribute type 10 has an invalid length. [ 122.563892][ T9129] team0: Port device veth0 added [ 122.619679][ T42] audit: type=1400 audit(1786416800.038:790): avc: denied { write } for pid=9132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.655457][ T42] audit: type=1400 audit(1786416800.068:791): avc: denied { name_connect } for pid=9125 comm="syz.0.811" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 122.695136][ T42] audit: type=1400 audit(1786416800.108:792): avc: denied { write } for pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.787173][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 122.890641][ T9147] ip6gre2: entered promiscuous mode [ 122.893012][ T9147] ip6gre2: entered allmulticast mode [ 122.898670][ T8944] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.904896][ T8944] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.929262][ T2322] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 122.967002][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 122.979068][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 122.983036][ T9] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 122.988106][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.992843][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.999247][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.003381][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.007693][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.011933][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.016207][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.021220][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.025624][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 123.028466][ T9] usb 6-1: SerialNumber: syz [ 123.034267][ T9] usb 6-1: config 0 descriptor?? [ 123.039907][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 123.230460][ T2322] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 123.252286][ T9131] input: syz0 as /devices/virtual/input/input11 [ 123.531070][ T5742] Bluetooth: hci1: link tx timeout [ 123.533011][ T5742] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.647329][ T2322] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 123.664898][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.683421][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.867235][ T8937] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.874159][ T8937] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.879782][ T8937] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.886416][ T9195] netlink: 132 bytes leftover after parsing attributes in process `syz.6.826'. [ 123.897623][ T8937] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.963811][ T9202] trusted_key: encrypted_key: insufficient parameters specified [ 124.038338][ T5742] Bluetooth: hci1: link tx timeout [ 124.041981][ T5742] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.135923][ T9193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 124.138065][ T9193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.152266][ T9193] vhci_hcd vhci_hcd.0: Device attached [ 124.158389][ T9218] vhci_hcd: connection closed [ 124.159136][ T8945] vhci_hcd vhci_hcd.0: stop threads [ 124.162446][ T8945] vhci_hcd vhci_hcd.0: release socket [ 124.164431][ T8945] vhci_hcd vhci_hcd.0: disconnect device [ 124.617337][ T9176] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 124.778176][ T9176] usb 10-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 124.782845][ T9176] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.787183][ T9176] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.802897][ T9176] as10x_usb: device has been detected [ 124.805372][ T9176] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 124.821476][ T9176] usb 10-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 124.859317][ T9176] as10x_usb: error during firmware upload part1 [ 124.861872][ T9176] Registered device Abilis Systems DVB-Titan [ 125.347228][ T2322] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 125.497377][ T2322] usb 11-1: Using ep0 maxpacket: 8 [ 125.500115][ T2322] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 125.503796][ T2322] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 125.506299][ T2322] usb 11-1: config 0 has no interface number 0 [ 125.508301][ T2322] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.512001][ T2322] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 125.515570][ T2322] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.519014][ T2322] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.523940][ T2322] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.528318][ T2322] usb 11-1: config 0 descriptor?? [ 125.537050][ T2322] ldusb 11-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 125.561733][ T5121] bcm5974 6-1:0.0: could not read from device [ 125.567373][ T5742] Bluetooth: hci1: command 0x0405 tx timeout [ 125.581780][ T5121] bcm5974 6-1:0.0: could not read from device [ 125.591238][ T9] usb 6-1: USB disconnect, device number 7 [ 125.606475][ T9243] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 125.612218][ T5121] bcm5974 6-1:0.0: could not read from device [ 125.734492][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.742967][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.955193][ T6258] usb 11-1: USB disconnect, device number 4 [ 125.963768][ T6258] ldusb 11-1:0.55: LD USB Device #1 now disconnected [ 125.997678][ T5738] Bluetooth: hci0: link tx timeout [ 126.238493][ T9283] overlayfs: unescaped trailing colons in lowerdir mount option. [ 126.687265][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 126.705628][ T9293] binder: BINDER_SET_CONTEXT_MGR already set [ 126.708464][ T9293] binder: 9291:9293 ioctl 4018620d 200000000100 returned -16 [ 126.728942][ T9292] syzkaller0: entered promiscuous mode [ 126.731390][ T9292] syzkaller0: entered allmulticast mode [ 126.739097][ T9292] binder_alloc: binder_alloc_mmap_handler: 9291 200000ffd000-200001000000 already mapped failed -16 [ 126.832120][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 126.835738][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 126.838401][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 126.931125][ T2322] vcan0 speed is unknown, defaulting to 1000 [ 126.936079][ T9295] infiniband syz1: set active [ 126.939562][ T9295] infiniband syz1: added vcan0 [ 126.958611][ T9295] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 126.964765][ T9295] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 126.971910][ T9295] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 127.003147][ T9295] RDS/IB: syz1: added [ 127.006576][ T9295] smc: adding ib device syz1 with port count 1 [ 127.009714][ T9295] smc: ib device syz1 port 1 has no pnetid [ 127.010468][ T5738] Bluetooth: hci0: link tx timeout [ 127.029219][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 127.039783][ T50] vcan0 speed is unknown, defaulting to 1000 [ 127.138651][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 127.151009][ T9302] ceph: No source [ 127.152541][ T9302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8960 sclass=netlink_route_socket pid=9302 comm=syz.0.861 [ 127.225153][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 127.327055][ T9295] vcan0 speed is unknown, defaulting to 1000 [ 127.676743][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 127.676757][ T42] audit: type=1400 audit(1786416805.088:809): avc: denied { ioctl } for pid=9316 comm="syz.1.868" path="socket:[31041]" dev="sockfs" ino=31041 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.688326][ T42] audit: type=1400 audit(1786416805.108:810): avc: denied { ioctl } for pid=9316 comm="syz.1.868" path="socket:[31042]" dev="sockfs" ino=31042 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 127.702557][ T9320] fuse: Bad value for 'fd' [ 127.764607][ T42] audit: type=1400 audit(1786416805.178:811): avc: denied { read } for pid=9324 comm="syz.6.870" dev="nsfs" ino=4026533126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.775445][ T42] audit: type=1400 audit(1786416805.178:812): avc: denied { open } for pid=9324 comm="syz.6.870" path="net:[4026533126]" dev="nsfs" ino=4026533126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.791027][ T42] audit: type=1400 audit(1786416805.208:813): avc: denied { write } for pid=9331 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 127.939517][ T42] audit: type=1400 audit(1786416805.358:814): avc: denied { append } for pid=9341 comm="syz.6.876" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 127.998692][ T9343] binder: BINDER_SET_CONTEXT_MGR already set [ 128.002787][ T9343] binder: 9341:9343 ioctl 4018620d 200000000100 returned -16 [ 128.009114][ T9343] binder: BINDER_SET_CONTEXT_MGR already set [ 128.011822][ T42] audit: type=1400 audit(1786416805.428:815): avc: denied { call } for pid=9341 comm="syz.6.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.012059][ T9344] binder: 9341:9344 ioctl c018620c 200000000240 returned -22 [ 128.020647][ T9343] binder: 9341:9343 ioctl 4018620d 200000004a80 returned -16 [ 128.024803][ T42] audit: type=1400 audit(1786416805.428:816): avc: denied { transfer } for pid=9341 comm="syz.6.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.089757][ T42] audit: type=1800 audit(1786416805.508:817): pid=9348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.878" name="file0" dev="overlay" ino=1222 res=0 errno=0 [ 128.141612][ T9339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 128.144418][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.150969][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 128.156978][ T9352] vhci_hcd: connection closed [ 128.160380][ T8945] vhci_hcd vhci_hcd.0: stop threads [ 128.164619][ T8945] vhci_hcd vhci_hcd.0: release socket [ 128.166786][ T8945] vhci_hcd vhci_hcd.0: disconnect device [ 128.200788][ T42] audit: type=1400 audit(1786416805.618:818): avc: denied { write } for pid=9354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.379673][ T9362] jffs2: notice: (9362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 128.995075][ T5738] Bluetooth: Wrong link type (-71) [ 128.996882][ T5738] Bluetooth: hci0: link tx timeout [ 130.389891][ T9435] 9p: Could not find request transport: Zirtio [ 130.528748][ T9440] futex_wake_op: syz.1.900 tries to shift op by -1; fix this program [ 130.700309][ T2322] IPVS: starting estimator thread 0... [ 130.745590][ T9450] fuse: Unknown parameter 'up_id' [ 130.788860][ T9448] IPVS: using max 43 ests per chain, 103200 per kthread [ 131.260643][ T847] usb 10-1: USB disconnect, device number 10 [ 131.263649][ T9342] ================================================================== [ 131.266196][ T9342] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 131.268815][ T9342] Read of size 4 at addr ffff88802da5463c by task syz.6.876/9342 [ 131.271344][ T9342] [ 131.273081][ T9342] CPU: 3 UID: 0 PID: 9342 Comm: syz.6.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.273099][ T9342] Tainted: [L]=SOFTLOCKUP [ 131.273103][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.273116][ T9342] Call Trace: [ 131.273134][ T9342] [ 131.273139][ T9342] dump_stack_lvl+0x100/0x190 [ 131.273168][ T9342] print_report+0x13d/0x4b0 [ 131.273191][ T9342] ? __virt_addr_valid+0x239/0x430 [ 131.273213][ T9342] ? dvb_frontend_release+0x4f3/0x5d0 [ 131.273229][ T9342] kasan_report+0xdf/0x1c0 [ 131.273253][ T9342] ? dvb_frontend_release+0x4f3/0x5d0 [ 131.273268][ T9342] dvb_frontend_release+0x4f3/0x5d0 [ 131.273283][ T9342] ? __pfx_dvb_frontend_release+0x10/0x10 [ 131.273299][ T9342] __fput+0x3ff/0xb50 [ 131.273320][ T9342] task_work_run+0x150/0x240 [ 131.273343][ T9342] ? __pfx_task_work_run+0x10/0x10 [ 131.273356][ T9342] ? do_raw_spin_unlock+0x145/0x1e0 [ 131.273380][ T9342] do_exit+0x951/0x2ae0 [ 131.273392][ T9342] ? __pfx_do_exit+0x10/0x10 [ 131.273401][ T9342] ? do_raw_spin_lock+0x128/0x260 [ 131.273417][ T9342] ? find_held_lock+0x2b/0x80 [ 131.273427][ T9342] ? get_signal+0x7e0/0x21e0 [ 131.273444][ T9342] do_group_exit+0xd5/0x2a0 [ 131.273455][ T9342] get_signal+0x1ec7/0x21e0 [ 131.273471][ T9342] ? putname+0xb1/0x110 [ 131.273484][ T9342] ? __pfx_get_signal+0x10/0x10 [ 131.273499][ T9342] ? putname+0xb6/0x110 [ 131.273512][ T9342] arch_do_signal_or_restart+0x91/0x7e0 [ 131.273532][ T9342] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 131.273547][ T9342] ? __x64_sys_openat+0x12d/0x210 [ 131.273563][ T9342] exit_to_user_mode_loop+0x139/0x6f0 [ 131.273589][ T9342] ? rcu_is_watching+0x12/0xc0 [ 131.273608][ T9342] do_syscall_64+0x666/0x870 [ 131.273655][ T9342] ? clear_bhb_loop+0x70/0xc0 [ 131.273668][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.273679][ T9342] RIP: 0033:0x7f2538f5e90e [ 131.273689][ T9342] Code: Unable to access opcode bytes at 0x7f2538f5e8e4. [ 131.273708][ T9342] RSP: 002b:00007f25371f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.273721][ T9342] RAX: 0000000000000004 RBX: 00007f25371f66c0 RCX: 00007f2538f5e90e [ 131.273728][ T9342] RDX: 0000000000000400 RSI: 00007f25371f5c00 RDI: ffffffffffffff9c [ 131.273735][ T9342] RBP: 00007f25371f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 131.273741][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 131.273748][ T9342] R13: 00007f2539226038 R14: 00007f2539225fa0 R15: 00007ffde24fe068 [ 131.273759][ T9342] [ 131.273763][ T9342] [ 131.276011][ T847] Unregistered device Abilis Systems DVB-Titan [ 131.277565][ T9342] Allocated by task 1: [ 131.277583][ T9342] kasan_save_stack+0x30/0x50 [ 131.277599][ T9342] kasan_save_track+0x14/0x30 [ 131.277611][ T9342] __kasan_kmalloc+0xaa/0xb0 [ 131.277623][ T9342] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 131.277634][ T9342] dvb_register_device+0x1d6/0x1e20 [ 131.277651][ T9342] dvb_register_frontend+0x552/0x820 [ 131.277665][ T9342] vidtv_bridge_probe+0x44b/0xa30 [ 131.277688][ T9342] platform_probe+0x106/0x1d0 [ 131.277706][ T9342] really_probe+0x241/0xa60 [ 131.277719][ T9342] __driver_probe_device+0x20e/0x450 [ 131.280852][ T847] as10x_usb: device has been disconnected [ 131.282609][ T9342] driver_probe_device+0x4a/0x140 [ 131.282626][ T9342] __driver_attach+0x21f/0x5b0 [ 131.282638][ T9342] bus_for_each_dev+0x13e/0x1d0 [ 131.282648][ T9342] bus_add_driver+0x305/0x5b0 [ 131.282658][ T9342] driver_register+0x1e2/0x360 [ 131.282672][ T9342] vidtv_bridge_init+0x52/0x80 [ 131.282712][ T9342] do_one_initcall+0x11d/0x700 [ 131.282728][ T9342] kernel_init_freeable+0x6ea/0x7b0 [ 131.282758][ T9342] kernel_init+0x1f/0x1e0 [ 131.282775][ T9342] ret_from_fork+0x72b/0xd50 [ 131.282790][ T9342] ret_from_fork_asm+0x1a/0x30 [ 131.282806][ T9342] [ 131.391372][ T9342] Freed by task 9342: [ 131.392850][ T9342] kasan_save_stack+0x30/0x50 [ 131.394483][ T9342] kasan_save_track+0x14/0x30 [ 131.395974][ T9342] kasan_save_free_info+0x3b/0x70 [ 131.397676][ T9342] __kasan_slab_free+0x5f/0x80 [ 131.399281][ T9342] kfree+0x22b/0x6c0 [ 131.400568][ T9342] dvb_device_put.part.0+0x57/0x90 [ 131.402205][ T9342] dvb_generic_release+0xe2/0x160 [ 131.403845][ T9342] dvb_frontend_release+0x13d/0x5d0 [ 131.405494][ T9342] __fput+0x3ff/0xb50 [ 131.406764][ T9342] task_work_run+0x150/0x240 [ 131.408230][ T9342] do_exit+0x951/0x2ae0 [ 131.409565][ T9342] do_group_exit+0xd5/0x2a0 [ 131.411014][ T9342] get_signal+0x1ec7/0x21e0 [ 131.412459][ T9342] arch_do_signal_or_restart+0x91/0x7e0 [ 131.414235][ T9342] exit_to_user_mode_loop+0x139/0x6f0 [ 131.416079][ T9342] do_syscall_64+0x666/0x870 [ 131.417586][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.419608][ T9342] [ 131.420445][ T9342] The buggy address belongs to the object at ffff88802da54600 [ 131.420445][ T9342] which belongs to the cache kmalloc-256 of size 256 [ 131.424810][ T9342] The buggy address is located 60 bytes inside of [ 131.424810][ T9342] freed 256-byte region [ffff88802da54600, ffff88802da54700) [ 131.429753][ T9342] [ 131.430707][ T9342] The buggy address belongs to the physical page: [ 131.433147][ T9342] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2da54 [ 131.436488][ T9342] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.439710][ T9342] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.442479][ T9342] page_type: f5(slab) [ 131.443786][ T9342] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 131.446639][ T9342] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 131.449902][ T9342] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 131.453241][ T9342] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 131.456545][ T9342] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 131.459851][ T9342] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 131.463152][ T9342] page dumped because: kasan: bad access detected [ 131.465619][ T9342] page_owner tracks the page as allocated [ 131.467724][ T9342] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14398771168, free_ts 0 [ 131.474409][ T9342] post_alloc_hook+0xfd/0x120 [ 131.475916][ T9342] get_page_from_freelist+0xf48/0x3530 [ 131.477646][ T9342] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 131.479508][ T9342] new_slab+0xa2/0x640 [ 131.480802][ T9342] refill_objects+0xe3/0x410 [ 131.482262][ T9342] __pcs_replace_empty_main+0x376/0x680 [ 131.484012][ T9342] __kmalloc_cache_noprof+0x479/0x6c0 [ 131.485697][ T9342] bus_add_driver+0x92/0x5b0 [ 131.487160][ T9342] driver_register+0x1e2/0x360 [ 131.488682][ T9342] usb_register_driver+0x21c/0x3e0 [ 131.490320][ T9342] do_one_initcall+0x11d/0x700 [ 131.491846][ T9342] kernel_init_freeable+0x6ea/0x7b0 [ 131.493539][ T9342] kernel_init+0x1f/0x1e0 [ 131.495072][ T9342] ret_from_fork+0x72b/0xd50 [ 131.496604][ T9342] ret_from_fork_asm+0x1a/0x30 [ 131.498102][ T9342] page_owner free stack trace missing [ 131.499755][ T9342] [ 131.500521][ T9342] Memory state around the buggy address: [ 131.502488][ T9342] ffff88802da54500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.505542][ T9342] ffff88802da54580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.508586][ T9342] >ffff88802da54600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.511659][ T9342] ^ [ 131.513959][ T9342] ffff88802da54680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.517019][ T9342] ffff88802da54700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 131.520025][ T9342] ================================================================== [ 131.526564][ T9342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.529396][ T9342] CPU: 3 UID: 0 PID: 9342 Comm: syz.6.876 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.533505][ T9342] Tainted: [L]=SOFTLOCKUP [ 131.535171][ T9342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.539031][ T9342] Call Trace: [ 131.540337][ T9342] [ 131.541492][ T9342] dump_stack_lvl+0x100/0x190 [ 131.543336][ T9342] vpanic+0x552/0x970 [ 131.544887][ T9342] ? __pfx_vpanic+0x10/0x10 [ 131.546647][ T9342] ? rcu_is_watching+0x12/0xc0 [ 131.548501][ T9342] ? dvb_frontend_release+0x4f3/0x5d0 [ 131.550598][ T9342] panic+0xd1/0xe0 [ 131.552050][ T9342] ? __pfx_panic+0x10/0x10 [ 131.553807][ T9342] ? dvb_frontend_release+0x4f3/0x5d0 [ 131.555868][ T9342] ? preempt_schedule_common+0x42/0xc0 [ 131.557987][ T9342] ? check_panic_on_warn+0x1f/0x90 [ 131.559961][ T9342] check_panic_on_warn.cold+0x19/0x34 [ 131.562040][ T9342] end_report.part.0+0x3a/0x90 [ 131.563908][ T9342] kasan_report.cold+0xe/0x18 [ 131.565746][ T9342] ? dvb_frontend_release+0x4f3/0x5d0 [ 131.567884][ T9342] dvb_frontend_release+0x4f3/0x5d0 [ 131.569904][ T9342] ? __pfx_dvb_frontend_release+0x10/0x10 [ 131.572111][ T9342] __fput+0x3ff/0xb50 [ 131.573687][ T9342] task_work_run+0x150/0x240 [ 131.575478][ T9342] ? __pfx_task_work_run+0x10/0x10 [ 131.577476][ T9342] ? do_raw_spin_unlock+0x145/0x1e0 [ 131.579484][ T9342] do_exit+0x951/0x2ae0 [ 131.581113][ T9342] ? __pfx_do_exit+0x10/0x10 [ 131.582903][ T9342] ? do_raw_spin_lock+0x128/0x260 [ 131.584867][ T9342] ? find_held_lock+0x2b/0x80 [ 131.586682][ T9342] ? get_signal+0x7e0/0x21e0 [ 131.588480][ T9342] do_group_exit+0xd5/0x2a0 [ 131.590248][ T9342] get_signal+0x1ec7/0x21e0 [ 131.592024][ T9342] ? putname+0xb1/0x110 [ 131.593656][ T9342] ? __pfx_get_signal+0x10/0x10 [ 131.595546][ T9342] ? putname+0xb6/0x110 [ 131.597169][ T9342] arch_do_signal_or_restart+0x91/0x7e0 [ 131.599297][ T9342] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 131.601668][ T9342] ? __x64_sys_openat+0x12d/0x210 [ 131.603623][ T9342] exit_to_user_mode_loop+0x139/0x6f0 [ 131.605697][ T9342] ? rcu_is_watching+0x12/0xc0 [ 131.607558][ T9342] do_syscall_64+0x666/0x870 [ 131.609364][ T9342] ? clear_bhb_loop+0x70/0xc0 [ 131.611199][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.613501][ T9342] RIP: 0033:0x7f2538f5e90e [ 131.615223][ T9342] Code: Unable to access opcode bytes at 0x7f2538f5e8e4. [ 131.617883][ T9342] RSP: 002b:00007f25371f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.621077][ T9342] RAX: 0000000000000004 RBX: 00007f25371f66c0 RCX: 00007f2538f5e90e [ 131.624198][ T9342] RDX: 0000000000000400 RSI: 00007f25371f5c00 RDI: ffffffffffffff9c [ 131.627285][ T9342] RBP: 00007f25371f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 131.630330][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 131.633408][ T9342] R13: 00007f2539226038 R14: 00007f2539225fa0 R15: 00007ffde24fe068 [ 131.636454][ T9342] [ 131.639806][ T9342] Kernel Offset: disabled [ 131.641488][ T9342] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:49:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc90020ab7cd8 RCX=ffffffff91c45301 RDX=ffffc90020ab7ce0 RSI=ffffc90020ab7ca8 RDI=ffffc90020ab6fb0 RBP=0000000000000001 RSP=ffffc90020ab6f10 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c894 R12=ffffc90020ab6ff0 R13=ffffc90020ab6fa0 R14=ffffc90020ab7cd8 R15=ffffc90020ab6fd4 RIP=ffffffff8bbadba0 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c287504 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffe00 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a92b9aa70c6699e 38dde815a7959ba6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c211081ed774b05d 4fc1db18d9aaad79 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ef8ec87258b382a 5874b21cb76ab296 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b3c33ed0c0d24a9 04f94031735e6ecf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009800 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000050a880010000 a6402a0080010000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000050bf000050bf 000050c080010000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 99786000000050bf 8001000089570e00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000050bf2da72e00 b0cdac005ca94c00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd81f037a43a4448 eb6279352f6ea310 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0f64c4be0c12525 137473d8ffd61a21 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 64746d2f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 47574e0c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e5f25f8 00007fa76e5f25c8 00007fa76e5f2600 00007fa76e5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f86c597da7b6e0a6 f57d88cec9056151 12aef056a4d07e7c bd04e33ddd411ad5 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff7fd8c2e13917 fd289598d721507d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c39c6e5a68bf86c 597da7b6e0a6f57d 88cec905615112ae f056a4d07e7cbd04 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660682f329d565ec 3f594d63e210f359 60141db1f813ab69 462748eba1960739 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888033dccd90 RBX=ffff88802dea8110 RCX=0000000000000000 RDX=dffffc0000000000 RSI=ffffffff84d44a3e RDI=ffff888033dccda4 RBP=0000000000000002 RSP=ffffc90003617cf8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888056698bc0 R13=1ffff920006c2fa3 R14=0000000000000000 R15=0000000000000010 RIP=ffffffff84d44a66 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555777b4500 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc81c3ed158 CR3=000000003e297000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec6a98aa0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f746961 775f6f692e716662 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec6a98c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec6a98c26 00007ffec6a98c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b9c4f98 RBP=ffffffff9b9c4f98 RSP=ffffc90004be7270 R8 =0000000000000001 R9 =0000000000000000 R10=ffffffff912193d7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e6048a RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc0fed3f80 CR3=000000002cb1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0fed3bc0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f746e657261702e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0fed4e36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0fed4e36 00007ffc0fed4e3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb260c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb260c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb260c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb260c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc9000d457458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b6ea1ee R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002f07f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007061747663 616d5f3068746576 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec6a98c26 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec6a98c26 00007ffec6a98c2c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e4357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa76e5f25f8 00007fa76e5f25c8 00007fa76e5f2600 00007fa76e5f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000