last executing test programs: 1m8.232462115s ago: executing program 2 (id=1147): r0 = syz_open_dev$dmmidi(&(0x7f00000002c0), 0x20, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000300)={0xffffffff, 0xb, 0x0, 0x86, 0x80, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$cgroup_devices(r1, &(0x7f00000001c0)={'c', ' *:* ', 'wm\x00'}, 0x9) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x5, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000002280)=0x0) r7 = io_uring_setup(0x258d, &(0x7f0000000300)={0x0, 0x4008272, 0x1000, 0x3, 0x3c2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) r8 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9, 0x0, r7}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r7], 0x1) faccessat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x45, 0x200) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_READ_MULTISHOT={0x31, 0x20, 0x0, @fd, 0x4, 0x0, 0x0, 0x10, 0x1, {0x1, 0x0, 0x8, '\x00', &(0x7f0000001540)={0xb00, 0x6, 0x0, 0x0, 0x5371}, 0x1}}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000032c0)=@newtaction={0xf80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xf6c, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xd, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1ac, 0x4, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'raw\x00', 0x7, 0x4, "4070d816b2e2b86206153d2099337b573c937fa2ca34882b17113ed3c465520b806c3d96367add9babdeb611d80920dbbac392f8caf0b228c5a13589c930e501809c55c053b1ff"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_HOOK={0x8}]}, {0xe0, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f284c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597bdcb2587daefceb71ed044485c59611f3816c6f62c9b60fdb165fe02e8f3eaeb57"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x97c, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x951, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xf80}, 0x1, 0x0, 0x0, 0x8004}, 0x880) io_uring_enter(r3, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x281, 0x6, 0x40000002, 0x4, 0xd, "d206000094f3ffffd51930f9000100"}) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r10, 0x8008ae9d, &(0x7f00000003c0)) write(r9, &(0x7f0000000200)="da137593077ff471621bd7234925105cf9cf", 0x12) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x6) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$TCGETA(r10, 0x5405, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000080)={0x1000000, 0x2, 0xf, 0x0, 0xb7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) write$char_usb(r11, &(0x7f00000022c0)="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", 0x1000) 1m8.183852559s ago: executing program 2 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r0 = syz_clone(0x0, 0x0, 0xfffffffffffffdd5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xff01, &(0x7f0000000100)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x8000, 0x8001, 0x80, r4}, &(0x7f00000019c0)=0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x4, 0x0, 0x5, 0x1, 0x0, @local, @local, {[@rr={0x7, 0x7, 0x70, [@remote]}]}}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000640)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f00000007c0)='active', 0x6) 1m8.076197743s ago: executing program 2 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0xdd3, 0x2]}, 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4b", 0xa}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512", 0x11}], 0x3) 1m7.952729651s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000700), 0x8080, &(0x7f0000000100)={[{@memory_hugetlb_accounting}]}) write$binfmt_script(r0, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m7.911566127s ago: executing program 2 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x2000000000000084, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200100}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_usb_connect(0x4, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r5, &(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r3], 0x341) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x8, 0x1}, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) ptrace(0x10, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x5, 0x39, 0x0, &(0x7f0000000240)="2129d0525a329c4686d51ffc9a780e11f9db16557e559885e3d3ba0b3abdcb32f19fa2d19cc9ca512b0df6a4523f5ce39dcd5c9194250a66f7", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x4c) r9 = creat(&(0x7f0000000340)='./file0\x00', 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB="18510000", @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="0bb78a238823fb7a60350e117578007a26945fbf6391e32419cbbb3bdb5c694eeb11e0baf25070a7edc23c8f1c34ad96a60d43e8faea5085d3bb0fb1694751", @ANYBLOB="0000000000000000186d00001000000000830000010000001801000020646c2500000000002020200000f8ffffffb7000008000000b70300007f000000850000000600000018470000fdffffff0000000000000000180100002020644d62074643b0687c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000001000008500000006000000f5dacef800"], &(0x7f0000000880)='syzkaller\x00', 0x30000000, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x10, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000900)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2091f, r9, 0x0, &(0x7f0000000080)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], 0xffffffffffffffff, 0x10, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0041007532573522af860000000014002b800a000100", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0xc900}, 0x24008040) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.031496079s ago: executing program 2 (id=1154): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe9a0b44183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004acf313aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4e1f2d088a24b51f1c4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e65"], &(0x7f0000000640)={0x0, 0x2, [0x994, 0xc34, 0xf62, 0x94e]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp={0x8, 0xe00}, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000014c0)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90d56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002495104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b790bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3f51edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa452eff104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee6100040000378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000f2ffffff3811fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb960900000000000000f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3060c2cb10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100e55119d7cd2d74e7367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1ccdf95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af0f565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eafdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", 0x1000}}, 0x1006) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x13) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r8, 0x0, 0x0) 1m7.006154293s ago: executing program 32 (id=1154): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x994, 0xc34, 0xf62, 0x94e]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp={0x8, 0xe00}, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x13) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r8, 0x0, 0x0) 9.39324949s ago: executing program 4 (id=1403): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84553bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e4a83765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10500b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c7dcd6b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f4f1fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffffffffffc, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0xfffffffd, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffffffffe, 0x4, 0x0, 0x7, 0x80000000, 0x122, 0x4000, 0x10000, r3, r4, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f0000006180)=ANY=[@ANYBLOB="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", @ANYBLOB="884bd478941a356f71b61769d96747dd633d82ade33d2c8e4e0157efb7bce523ff73253db415f62c5cdaa4545d9bf6c17929f2ade72bdc2d6e", @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESHEX=0x0, @ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="bf461791c9519946a3d2a19aca84244ed44695c1790d7e51319ffc0cc9ede667542d71ed8f974a216779466a6913b4095444ef97b47e50875525818102426fed20452014994f9609d7344a5f27da217f25e57751cedb844e37a3f469d40bdc259ea8a692ca34e66ef666296a8ffd3ed4aa4e072cf2c5777f19d057ab3c4ee97ed5e3220d14f25dca5e2c87b2477ab5cf1fd8c0cb8ba3ce29"], 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./ttyUSB0\x00', 0x81b6, 0xbc00) r6 = syz_io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000004c0)='./ttyUSB0\x00', 0x0, 0x802, 0x12345}) io_uring_enter(r6, 0x1, 0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) io_submit(r10, 0x3, &(0x7f0000002800)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, r11, &(0x7f0000000080)="84", 0x1, 0x9, 0x0, 0x4}, 0x0, 0x0]) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x401}, 0x20008091) 8.284558786s ago: executing program 4 (id=1413): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x6, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @generic={0x0, 0x0, 0x1, 0x2, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1, 0x4]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="64f18761ed069bfd64d8a83927034c30c2cdd8fba7806fa0586976a4eb8e3e633762e08094e0c897b8951c90481747225b5582", &(0x7f0000000400)="dade483405354293e62df61ce6de7781288f9bb92dcddf51a8e15c447a9819b85c79031c8c3fa6504aef3ee660eb86875aaed577b9e3b047bad78575554cc09f866d31f627256c25ed8c519cfe0d5f62baa6a4903c02cd032dc1eb64051689f7993727ba45043de397a7fb451e12e58b8665bbf5b6882a5964b87220288c8b3bf666c671239e684c23e132fd15773b99da6827cb6cdf95ac3d62825953bc07c5b59017a28011b087721db9d7abfe9f54554ee5975371ece602edab37779767a8be699eea61521b04350a7a73ba06a5e9f5c9b24d3b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, 0x0, 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x6, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x9, 0xfffffff7, 0x1, 0x2, 0x1, 0x8f2c, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0x10001, 0x4, 0x9, 0xe, 0x0, 0xf9, 0x9, 0x4ade, 0x3, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x8, 0x8, 0x0, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x4, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x7, 0x3, 0x417, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x10000, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x7, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x400, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x2, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0xfd, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r6, 0xe) 6.618216538s ago: executing program 3 (id=1421): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="00247500000075114c375b5837ca0f10f9a41b97ebbe73e496a662ed5e9779c038c7f1410591179efdd29e4004f6b102d1e2009a3aa16272a02d658b4d4d4df2212a607dc8712503338c3a7c9525113023a098784a51fa68f2566a3821c12d08bca2641c9f403778153044b4c2b31c0ce322710e3800fa4ae8a9ea"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f00000007c0)=ANY=[@ANYBLOB="000f32000000050f32000303100b20100a05050100000f761505000000cf00000000529d049b0000000f3ffe0100ff00000a1003020b00060f0500b52c46ee5ac4c3daaab812f26dbfe5478889f630687e6c0b07dc530d4a3ad1179d77c1862281e55cfa2a37c9ec1175e5eed12fb1ec71b72c3173b22bca133afed00accf5dc05b8bdab0e9c72cd24f5deaa56ebee7f1edd63fa577f1d99bb1f375ab3fe5324e13898207ec9bc7bcb9fade1cb5b96572ce06bca262b10216eeec594a54c3218387c31f279af8e2098b18b0fa8e73236f9885fb20dae2731eeeb648bcf75cf1e52fd67472cde715356b0fb5dba1306c6f588f7f74a45840604245975e26d49"], &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x18, 0x5c, 0xd, "a663bed0", "c50f8812"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0xcc, 0xd6, 0x1, 0x1, 0x1}}}, &(0x7f0000000740)={0x44, &(0x7f0000000340)={0x40, 0x1, 0x31, "930a489735f94af46dc31d97f3197a88219af983711c2654a1558115669931583f0e2baef78326845b9ae443d85dfe3444"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x800, 0x8}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000500)={0x40, 0xb, 0x2, "27df"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "9c99"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x10}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0046686, 0x0) 6.181032086s ago: executing program 4 (id=1423): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0x0) r3 = open(0x0, 0x400001, 0x100) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000800)=0x7, 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xa) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x7ffffffc, 0x401, {}, {0xee00}, 0x6, 0x2}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x1}]}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@rnullb, r5, &(0x7f00000001c0)={0x1, 0xffffffff, 0x6, 0x6c360bc3, 0x800, 0xfff, 0xffffffffffff1b82, 0x4527, 0x3}) write(0xffffffffffffffff, &(0x7f0000000000)="bc5154f23facdd5dd02bc92c72", 0xd) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 5.161673987s ago: executing program 4 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c1f000ee30e4f337200", @ANYRES16=r1, @ANYBLOB="0900fdffffff000000001c00000018000180140002006e657464657673696d30000000000000"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8000, 0x10, 0x3, 0x5, {{0x2f, 0x4, 0x1, 0x10, 0xbc, 0x65, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x26, [@private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x4e, 0x1, 0x4, [{@multicast1, 0x5}, {@remote, 0x3}, {@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xe}, {@empty, 0x4}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x2}]}, @generic={0x83, 0x11, "53163ffe4831318617ba02c0d60041"}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0xb5, 0x1, 0x2, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x101}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x10001}, {@empty}, {@private=0xa010100, 0x4}, {@private=0xa010101, 0x6}, {@multicast2, 0x98a}, {@remote}]}, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/195, 0x41100, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x3}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xcef4, 0x4, 0xf0, 0xf}, {0xff0c, 0x2, 0x3d, 0x6}, {0x6, 0xc, 0x4, 0x400}, {0x0, 0xff, 0xfa, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r5, 0xffffffffffffffff, &(0x7f00000003c0)) 4.972222374s ago: executing program 0 (id=1430): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48e, 0x0, 0x40}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1b7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', r5, &(0x7f00000003c0)='./sys\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') 4.911707521s ago: executing program 4 (id=1431): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x6, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @generic={0x0, 0x0, 0x1, 0x2, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1, 0x4]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="64f18761ed069bfd64d8a83927034c30c2cdd8fba7806fa0586976a4eb8e3e633762e08094e0c897b8951c90481747225b5582", &(0x7f0000000400)="dade483405354293e62df61ce6de7781288f9bb92dcddf51a8e15c447a9819b85c79031c8c3fa6504aef3ee660eb86875aaed577b9e3b047bad78575554cc09f866d31f627256c25ed8c519cfe0d5f62baa6a4903c02cd032dc1eb64051689f7993727ba45043de397a7fb451e12e58b8665bbf5b6882a5964b87220288c8b3bf666c671239e684c23e132fd15773b99da6827cb6cdf95ac3d62825953bc07c5b59017a28011b087721db9d7abfe9f54554ee5975371ece602edab37779767a8be699eea61521b04350a7a73ba06a5e9f5c9b24d3b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, 0x0, 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x6, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x9, 0xfffffff7, 0x1, 0x2, 0x1, 0x8f2c, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0x10001, 0x4, 0x9, 0xe, 0x0, 0xf9, 0x9, 0x4ade, 0x3, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x8, 0x8, 0x0, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x4, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x7, 0x3, 0x417, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x10000, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x7, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x400, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x2, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0xfd, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r6, 0xe) 4.811673142s ago: executing program 0 (id=1432): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001d8004000080"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap(&(0x7f00006a0000/0x1000)=nil, 0x1000, 0x800000, 0x10, r0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x98, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1b, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x60}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x80000) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x36) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 3.567306088s ago: executing program 3 (id=1435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x800) 3.391320247s ago: executing program 3 (id=1436): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpgid(0x0) r3 = open(0x0, 0x400001, 0x100) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000800)=0x7, 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xa) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000180)={0x7ffffffc, 0x401, {}, {0xee00}, 0x6, 0x2}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0x1}]}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@rnullb, r5, &(0x7f00000001c0)={0x1, 0xffffffff, 0x6, 0x6c360bc3, 0x800, 0xfff, 0xffffffffffff1b82, 0x4527, 0x3}) write(0xffffffffffffffff, &(0x7f0000000000)="bc5154f23facdd5dd02bc92c72", 0xd) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 3.390762846s ago: executing program 1 (id=1437): r0 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc470, 0x200, 0x2, 0x20003cb}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x810, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x288, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x261, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x15, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1a"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x6b, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed527c8ada6bd87dc42f8543857"}, {0xdd, 0x40, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41c"}, {0xdd, 0xd1, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee9"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x23, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4f"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}}) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=@updpolicy={0x2bc, 0x19, 0x985, 0x70bd27, 0x25dfdbff, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e24, 0x8, 0x4e23, 0x2, 0xa, 0x80, 0x20, 0x73}, {0x8, 0x65, 0x6, 0x2, 0x7, 0x9, 0x7, 0xffffffffffffffff}, {0x100000000, 0x433, 0x3, 0x19b}, 0x1, 0x6e6bb5, 0x1, 0x1, 0x2, 0x1}, [@coaddr={0x14, 0xe, @in6=@empty}, @lastused={0xc, 0xf, 0x5}, @algo_crypt={0xdc, 0x2, {{'ecb(twofish)\x00'}, 0x4a0, "8fd984fc7f7b908d3889f29d99b6522a2699f83273faebe6148bcba0a307e14340a6f69d22a47c0f844207f223d3c3603bbd9ff51f3ece0c99f38b1a13721d4a2e43f4c22309abcf5d1d87bff4f61610dcb564be55adba520b86b772dd6ca4ac26b016387bf91449af57c79c8a04630f69b2ca8b87c7ffc4075a9c8e6cf7e3fbc1166fa7b745fe43d0f1b7ae03256b8ca90c3657"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xd}}, @sec_ctx={0x26, 0x8, {0x22, 0x8, 0x0, 0x7, 0x1a, "6be94bf3410d724489f4fb04404c6a527797ec9d606747c7080c"}}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in6=@local, 0x0, 0x2}}, @algo_crypt={0x6a, 0x2, {{'ctr-serpent-avx\x00'}, 0x110, "6c9c896b06d82fa7414ed143553ad50867567dacb57d775934532174115ad76d0dfd"}}, @policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x2}, @proto={0x5, 0x19, 0x2b}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) 3.389545577s ago: executing program 0 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0xb4, 0x1a, 0x1, 0x70bd21, 0x25dfdbff, {0x3}, [@generic="9fd405c73d6d6a49d3930627b30c0022f62944e3c3f207e33effd4c28cf178bb1d0c07ee13778c42aaf508dd49ab3a546620fb687845f75a99e3485acf0135a50844f92f8f08575dc0cce71c0e945c270df605ee5588fe65e8d8f90489b6b2b9933a2925f1fe12027d423d1421e1dbfca6eb808e7e244000b1b815ebdfc9af1c87ab586bca86bac4d01c6a48a70e5532765d552ffff537f127e6793b8c2c98"]}, 0xb4}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0xfff2, 0x5}, {0xffe0, 0x1}, {0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}}, 0x8080) 3.27973793s ago: executing program 0 (id=1439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="a6", 0x1, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) 3.279389249s ago: executing program 0 (id=1440): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x84000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x1000, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) r5 = semget$private(0x0, 0x2, 0xe6) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000002400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xea, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x1, 0xc24300) request_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)='logon\x00', r4) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1f4, 0xffffffffffffffff, &(0x7f0000000340)={0x10000001}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x1, @local}}, 0x1e) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1fb69, 0x51267}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) 3.111123228s ago: executing program 1 (id=1441): syslog(0x2, &(0x7f0000000600)=""/25, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x3, 0x1, 0x0, 0x2, 0x0, 0xad, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x3ff}) r5 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000140)={0xcf4a, 0x19, 0x6, 0x3ff, 0x46, "00ee038000"}) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x800003, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(r7, 0x200) dup3(r6, r5, 0x0) 2.451557289s ago: executing program 3 (id=1442): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5']) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x50) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)=0x0) tkill(r4, 0x18) 2.222200815s ago: executing program 4 (id=1443): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x6, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2}, @generic={0x0, 0x0, 0x1, 0x2, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x400}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={[0x1, 0x4]}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000180)="64f18761ed069bfd64d8a83927034c30c2cdd8fba7806fa0586976a4eb8e3e633762e08094e0c897b8951c90", &(0x7f0000000400)="dade483405354293e62df61ce6de7781288f9bb92dcddf51a8e15c447a9819b85c79031c8c3fa6504aef3ee660eb86875aaed577b9e3b047bad78575554cc09f866d31f627256c25ed8c519cfe0d5f62baa6a4903c02cd032dc1eb64051689f7993727ba45043de397a7fb451e12e58b8665bbf5b6882a5964b87220288c8b3bf666c671239e684c23e132fd15773b99da6827cb6cdf95ac3d62825953bc07c5b59017a28011b087721db9d7abfe9f54554ee5975371ece602edab37779767a8be699eea61521b04350a7a73ba06a5e9f5c9b24d3b"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r2, 0x0, 0x0, 0x4040040) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x6, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x9, 0xfffffff7, 0x1, 0x2, 0x1, 0x8f2c, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0x10001, 0x4, 0x9, 0xe, 0x0, 0xf9, 0x9, 0x4ade, 0x3, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x8, 0x8, 0x0, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x4, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x6, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x7, 0x10000, 0x8, 0x7, 0x3, 0x417, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x10000, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x7, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x400, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x2, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0xfd, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r6, 0xe) 1.564379176s ago: executing program 3 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) 1.432423286s ago: executing program 1 (id=1445): bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x20006d19, 0x0) r1 = socket$inet(0xa, 0x0, 0x82) tee(r0, r0, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x1c8}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r7}}, 0x18) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) socket$netlink(0x10, 0x3, 0x13) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x404, 0x218, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000000), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="75003303c738", @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x4, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="bde69a03bfb8", @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0xffffffff}}}, {{@arp={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, 0xffffffff, 0xffffff00, 0xb, 0x2, {@mac=@remote, {[0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x9, 0x5, 0xa3f, 0x7, 0xffff, 'batadv_slave_0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x10}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0xffffffff}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) munlockall() sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="bcda19b567e42a3322f4997fa38d35b5f36d48a3a1f98dd8339609c324b9a675ef1c44b7ec7ff36256a96c78ffc66f14e4f23a323f9a9706453cb2e5d36ed2a3e16131ce6bfe31131f6633a1aef989ebaeaebfbd32c5afb72a725f2a0fad2e5ef3a87b0c34909b3892b27d60b52322a03f72fc524519be3388a55231b43fcf2c306b29eaae53afd777d3be6b058efbf084a4cdc74cb3c9fdacec4d130d676cfe8f895862", 0xa4, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x71e}, 0x1c) 1.416417604s ago: executing program 3 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) r4 = socket(0x27, 0x80000, 0xfffffff4) mmap$xdp(&(0x7f0000ac1000/0x2000)=nil, 0x2000, 0x7000008, 0x6e073, r4, 0x100000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r7, &(0x7f0000000140)='1\x00', 0x1) 1.171499915s ago: executing program 1 (id=1447): mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x121c060, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x2000008, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast2}}}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@mark={{0x10, 0x1, 0x4f, 0x3}}], 0x10}, 0x8040) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000004380)=""/4096, 0x1000}, 0x40000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001580)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x80000000}}, 0x4, 0x4, 0xf, 0xe, 0x1}, &(0x7f0000001640)=0x98) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x1) read$FUSE(r2, &(0x7f0000002340)={0x2020}, 0x208b) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004a40)={0x2020}, 0x2020) modify_ldt$write(0x1, &(0x7f0000000080)={0xfff, 0x8000000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={r5, 0x58, &(0x7f0000001480)}, 0x10) mount(&(0x7f0000000100)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='minix\x00', 0x3020, &(0x7f0000000280)='{-\x00') syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$SNDCTL_SEQ_CTRLRATE(r5, 0xc0045103, &(0x7f00000000c0)=0x800) 248.072332ms ago: executing program 1 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x19, 0x1, 0x32}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000004c0)={0xfa00000000000000, 0x7000, 0x1008000009, 0x0, 0x2}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x40001, 0x0, {[0x9, 0x81, 0x7ff, 0x10, 0x7, 0x10001, 0xfffffffffffffff8, 0x7]}}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3) 110.735078ms ago: executing program 0 (id=1449): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000340), 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4, r5}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00021221", 0x4}], 0x3) 0s ago: executing program 1 (id=1450): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x20000000) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x4e24, 0x2, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000280)={0x4, 0x1, 0x1}) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000080)) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/infiniband_srp/srp-syz0-1/add_target\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='id_ext=0,ioc_guid=0,dest=0.0.0.0:3260\x00', 0x25) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 381.841698][T13804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.940174][T13818] overlayfs: failed to resolve './bus': -2 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 382.826144][ T5813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.981026][ T5813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.078255][ T5813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.221925][ T5813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.274356][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.286222][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.293031][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.296896][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.299683][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.647050][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.665783][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.670235][ T5813] bond0 (unregistering): Released all slaves [ 383.676000][ T5813] bond1 (unregistering): Released all slaves [ 383.691579][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 383.772229][ T5813] tipc: Disabling bearer [ 383.804330][ T5813] tipc: Left network mode [ 383.981478][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.136039][ T5813] hsr_slave_0: left promiscuous mode [ 384.142671][ T5813] hsr_slave_1: left promiscuous mode [ 384.145106][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.147560][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.156087][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.159318][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.163832][ T5813] batman_adv: batadv0: Interface deactivated: dummy0 [ 384.166827][ T5813] batman_adv: batadv0: Removing interface: dummy0 [ 384.185347][ T5813] veth1_macvtap: left promiscuous mode [ 384.188225][ T5813] veth0_macvtap: left promiscuous mode [ 384.190143][ T5813] veth1_vlan: left promiscuous mode [ 384.192432][ T5813] veth0_vlan: left promiscuous mode [ 384.422511][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 384.561415][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 384.867592][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 385.135436][T13960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.286797][T13850] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.300093][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.307518][T13850] bridge_slave_0: entered allmulticast mode [ 385.318331][T13850] bridge_slave_0: entered promiscuous mode [ 385.327987][T13850] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.337127][T13850] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.340633][ T5748] Bluetooth: hci0: command tx timeout [ 385.347494][T13850] bridge_slave_1: entered allmulticast mode [ 385.358105][T13850] bridge_slave_1: entered promiscuous mode [ 385.409518][T13850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.423933][T13850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.484606][T13850] team0: Port device team_slave_0 added [ 385.504201][T13850] team0: Port device team_slave_1 added [ 385.577102][T13850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.582807][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.599550][T13850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.607768][T13850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.609994][T13850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.618692][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.652713][T13850] hsr_slave_0: entered promiscuous mode [ 385.655178][T13850] hsr_slave_1: entered promiscuous mode [ 385.914335][T13850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.919942][T13850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.923390][T13850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.932202][T13850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.940619][T13850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.951237][T13850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.963078][T13850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.974260][T13850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.974789][T14218] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 386.024041][T13850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.041282][T13850] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.046469][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.048913][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.055490][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 386.055500][ T42] audit: type=1326 audit(1786333597.826:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.066088][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.068397][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.079407][ T42] audit: type=1326 audit(1786333597.846:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.099859][ T42] audit: type=1326 audit(1786333597.846:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.114998][ T42] audit: type=1326 audit(1786333597.846:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.121887][ T42] audit: type=1326 audit(1786333597.846:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.129136][ T42] audit: type=1326 audit(1786333597.866:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.136220][ T42] audit: type=1326 audit(1786333597.866:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.144028][ T42] audit: type=1326 audit(1786333597.866:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.154793][ T42] audit: type=1326 audit(1786333597.866:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.162700][ T42] audit: type=1326 audit(1786333597.866:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.3.1164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 386.357537][T13850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.551164][T13850] veth0_vlan: entered promiscuous mode [ 386.565972][T13850] veth1_vlan: entered promiscuous mode [ 386.589255][T13850] veth0_macvtap: entered promiscuous mode [ 386.595056][T13850] veth1_macvtap: entered promiscuous mode [ 386.604522][T13850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.614251][T13850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.631744][ T5586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.651192][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.668880][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.745184][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.750589][ T5586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.753188][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.775236][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.778696][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.152909][T14268] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 387.224388][T14269] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.430618][ T5748] Bluetooth: hci0: command tx timeout [ 387.724546][T14272] fuse: Bad value for 'fd' [ 387.950844][T14279] i2c i2c-0: new_device: Missing parameters [ 387.964355][T14279] comedi comedi3: s526: I/O base address or length out of range [ 388.129354][T14286] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 389.510614][ T5748] Bluetooth: hci0: command tx timeout [ 389.692895][T14304] fuse: Bad value for 'fd' [ 391.240569][ T5844] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 391.580507][ T5844] usb 9-1: Using ep0 maxpacket: 32 [ 391.583097][ T5750] Bluetooth: hci0: command tx timeout [ 392.107158][ T5844] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.136136][ T5844] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 392.155621][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.158888][ T5844] usb 9-1: Product: syz [ 392.160648][ T5844] usb 9-1: Manufacturer: syz [ 392.162469][ T5844] usb 9-1: SerialNumber: syz [ 392.167852][ T5844] usb 9-1: config 0 descriptor?? [ 392.210913][T14326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.429475][T14364] fuse: Bad value for 'fd' [ 394.128285][T14382] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.132318][ T9] usb 9-1: USB disconnect, device number 2 [ 395.652175][T14435] fuse: Bad value for 'fd' [ 396.066954][T14470] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 396.644694][T14441] tracefs: Bad value for 'gid' [ 396.673025][T14441] tracefs: Bad value for 'gid' [ 397.050532][T14515] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 398.015373][T14526] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 399.363423][T14557] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 400.613708][T14589] tracefs: Bad value for 'gid' [ 400.618118][T14589] tracefs: Bad value for 'gid' [ 401.066837][T14622] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 402.321129][T14624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.497977][T14643] overlayfs: failed to decode file handle (len=8, type=251, flags=0, err=-22) [ 403.210636][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 403.316269][T14662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.370637][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 403.380998][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.390741][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.402053][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.408644][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.413184][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.416558][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.421453][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.427516][ T9] usb 9-1: Manufacturer: syz [ 403.432089][ T9] usb 9-1: config 0 descriptor?? [ 403.690557][ T9] rc_core: IR keymap rc-hauppauge not found [ 403.692616][ T9] Registered IR keymap rc-empty [ 403.694622][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.710812][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.714356][ T5844] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 403.745898][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 403.752667][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input25 [ 403.760807][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.791085][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.821974][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.841475][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.871754][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.890921][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.895000][ T5844] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 403.902605][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 403.910151][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 403.920656][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 403.923918][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 403.931760][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.937262][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.942053][ T5844] usb 6-1: Product: syz [ 403.943393][ T5844] usb 6-1: Manufacturer: syz [ 403.950613][ T5844] usb 6-1: SerialNumber: syz [ 403.956802][ T5844] usb 6-1: config 0 descriptor?? [ 403.962124][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 403.990581][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 404.020594][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 404.052910][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.055840][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.179616][ T5844] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 404.330105][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 404.341734][T14699] ipvlan0: entered allmulticast mode [ 404.344138][T14699] syz_tun: entered allmulticast mode [ 404.456686][ T41] usb 6-1: USB disconnect, device number 17 [ 404.503379][T14717] binder: 14711:14717 unknown command 1074553621 [ 404.506123][T14717] binder: 14711:14717 ioctl c0306201 800007c0 returned -22 [ 404.684450][T14727] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 404.694232][T14727] CIFS: Attempting to mount //127.0.0.1/share [ 404.708356][T14727] CIFS: VFS: Error connecting to socket. Aborting operation. [ 404.711325][T14727] CIFS: VFS: cifs_mount failed w/return code = -111 [ 405.801391][T14741] 9p: Bad value for 'rfdno' [ 405.970678][ T844] usb 9-1: USB disconnect, device number 3 [ 406.162710][ T41] libceph: connect (1)[c::]:6789 error -101 [ 406.167203][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 406.227033][T14751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 406.246297][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 406.253650][T14751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 406.258808][T14751] FAULT_INJECTION: forcing a failure. [ 406.258808][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 406.270097][T14751] CPU: 0 UID: 0 PID: 14751 Comm: syz.3.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.270118][T14751] Tainted: [L]=SOFTLOCKUP [ 406.270122][T14751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 406.270129][T14751] Call Trace: [ 406.270133][T14751] [ 406.270138][T14751] dump_stack_lvl+0x100/0x190 [ 406.270158][T14751] should_fail_ex.cold+0x5/0xa [ 406.270171][T14751] should_failslab+0xc2/0x120 [ 406.270189][T14751] kmem_cache_alloc_noprof+0x91/0x6a0 [ 406.270203][T14751] ? __pfx_map_id_range_down+0x10/0x10 [ 406.270220][T14751] ? security_inode_alloc+0x3b/0x2c0 [ 406.270236][T14751] security_inode_alloc+0x3b/0x2c0 [ 406.270249][T14751] inode_init_always_gfp+0xc77/0xfb0 [ 406.270264][T14751] alloc_inode+0x8e/0x250 [ 406.270279][T14751] new_inode+0x22/0x1c0 [ 406.270294][T14751] __debugfs_create_file+0x105/0x4f0 [ 406.270325][T14751] debugfs_create_file_full+0x41/0x60 [ 406.270341][T14751] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 406.270353][T14751] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 406.270382][T14751] ? lockdep_init_map_type+0x5c/0x250 [ 406.270395][T14751] ? __pfx_macvlan_setup+0x10/0x10 [ 406.270425][T14751] alloc_netdev_mqs+0x314/0x15c0 [ 406.270449][T14751] rtnl_create_link+0xc13/0xf80 [ 406.270477][T14751] rtnl_newlink+0x13bd/0x2380 [ 406.270499][T14751] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.270514][T14751] ? rcu_is_watching+0x12/0xc0 [ 406.270529][T14751] ? kasan_quarantine_put+0x104/0x240 [ 406.270548][T14751] ? kfree_skbmem+0x19a/0x210 [ 406.270560][T14751] ? kmem_cache_free+0x127/0x6b0 [ 406.270578][T14751] ? find_held_lock+0x2b/0x80 [ 406.270596][T14751] ? find_held_lock+0x2b/0x80 [ 406.270608][T14751] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 406.270624][T14751] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 406.270641][T14751] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.270657][T14751] rtnetlink_rcv_msg+0x95e/0xe90 [ 406.270674][T14751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.270694][T14751] ? ref_tracker_free+0x37e/0x6c0 [ 406.270705][T14751] netlink_rcv_skb+0x159/0x420 [ 406.270727][T14751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.270744][T14751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.270762][T14751] ? netlink_deliver_tap+0x1ae/0xcc0 [ 406.270776][T14751] netlink_unicast+0x585/0x850 [ 406.270790][T14751] ? __pfx_netlink_unicast+0x10/0x10 [ 406.270806][T14751] netlink_sendmsg+0x8b0/0xda0 [ 406.270820][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.270834][T14751] ? apparmor_socket_sendmsg+0x15b/0x270 [ 406.270848][T14751] ____sys_sendmsg+0xa4d/0xbe0 [ 406.270860][T14751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.270874][T14751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.270891][T14751] ___sys_sendmsg+0x190/0x1e0 [ 406.270905][T14751] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.270923][T14751] ? find_held_lock+0x2b/0x80 [ 406.270945][T14751] __sys_sendmsg+0x160/0x210 [ 406.270962][T14751] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.270981][T14751] ? __pfx_ksys_write+0x10/0x10 [ 406.270994][T14751] __do_fast_syscall_32+0xe7/0x970 [ 406.271014][T14751] ? lockdep_hardirqs_on+0x78/0x100 [ 406.271030][T14751] do_fast_syscall_32+0x32/0x70 [ 406.271047][T14751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 406.271062][T14751] RIP: 0023:0xf7fc5fec [ 406.271077][T14751] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 406.271082][T14751] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 406.271093][T14751] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000080000280 [ 406.271099][T14751] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.271106][T14751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 406.271111][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.271117][T14751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 406.271131][T14751] [ 406.394813][T14751] debugfs: out of free dentries, can not create file 'netdev@ffff88802b7ee700' [ 406.406840][T14751] macvlan1: entered allmulticast mode [ 406.408612][T14751] bond0: entered allmulticast mode [ 406.410851][T14751] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 406.432081][ T41] libceph: connect (1)[c::]:6789 error -101 [ 406.434434][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 406.684952][T14788] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 406.939746][T14768] ceph: No mds server is up or the cluster is laggy [ 406.942411][ T41] libceph: connect (1)[c::]:6789 error -101 [ 406.944513][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 407.166418][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc468 instead [ 407.172716][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa94c instead [ 407.181977][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6f0c instead [ 407.192059][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x19ed instead [ 407.204508][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x9219 instead [ 407.214627][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6021 instead [ 407.226874][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa60b instead [ 407.246584][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5969 instead [ 407.266564][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7396 instead [ 407.278907][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xb30b instead [ 407.290190][T14793] jffs2: Further such events for this erase block will not be printed [ 407.299925][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd937 instead [ 407.313279][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xc19c instead [ 407.323435][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xc71f instead [ 407.334833][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x232d instead [ 407.345840][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xcc06 instead [ 407.358284][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x55c0 instead [ 407.368976][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2d6b instead [ 407.390367][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x69e4 instead [ 407.402992][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x229c instead [ 407.418064][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5a3b instead [ 407.431673][T14793] jffs2: Further such events for this erase block will not be printed [ 407.444005][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xde4d instead [ 407.458344][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xd166 instead [ 407.477478][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xec85 instead [ 407.488778][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x9b59 instead [ 407.502259][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xc0ac instead [ 407.510116][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x6225 instead [ 407.529400][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x24e4 instead [ 407.547614][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x94cf instead [ 407.559943][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x8994 instead [ 407.566028][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x2d90 instead [ 407.572343][T14793] jffs2: Further such events for this erase block will not be printed [ 407.575597][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xd663 instead [ 407.578857][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0f07 instead [ 407.582800][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x1195 instead [ 407.586492][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xefab instead [ 407.591459][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x4b65 instead [ 407.595155][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x5399 instead [ 407.599008][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe170 instead [ 407.603012][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x6019 instead [ 407.606913][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xf367 instead [ 407.611266][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x47a0 instead [ 407.615288][T14793] jffs2: Further such events for this erase block will not be printed [ 407.618798][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4bf9 instead [ 407.622983][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x8235 instead [ 407.626272][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1f8f instead [ 407.630091][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x15ee instead [ 407.634013][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x77b6 instead [ 407.637622][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x75c9 instead [ 407.640885][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5dca instead [ 407.644231][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xeef5 instead [ 407.648250][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x62e0 instead [ 407.652122][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xbe63 instead [ 407.655426][T14793] jffs2: Further such events for this erase block will not be printed [ 407.658257][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xfb0f instead [ 407.661757][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x27cc instead [ 407.665652][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x1901 instead [ 407.668893][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xcd40 instead [ 407.676933][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x16e7 instead [ 407.686111][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x4209 instead [ 407.691442][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0f45 instead [ 407.700760][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4cf3 instead [ 407.705558][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x590f instead [ 407.720012][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x153f instead [ 407.726236][T14793] jffs2: Further such events for this erase block will not be printed [ 407.730377][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x94bd instead [ 407.739660][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x69e9 instead [ 407.745415][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x5b88 instead [ 407.753307][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x69f7 instead [ 407.760877][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x296c instead [ 407.769023][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x8b6d instead [ 407.782115][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4a49 instead [ 407.788985][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x67f7 instead [ 407.796524][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xea2a instead [ 407.804916][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x7154 instead [ 407.812178][T14793] jffs2: Further such events for this erase block will not be printed [ 407.818184][T14795] tracefs: Bad value for 'gid' [ 407.820221][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x21bf instead [ 407.823781][T14795] tracefs: Bad value for 'gid' [ 407.826790][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xf418 instead [ 407.834671][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbea7 instead [ 407.842678][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xf55c instead [ 407.857187][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1055 instead [ 407.869204][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x628e instead [ 407.894574][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x103c instead [ 407.933984][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2284 instead [ 407.958283][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x9f1b instead [ 407.976787][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x1ecf instead [ 407.993423][T14793] jffs2: Further such events for this erase block will not be printed [ 408.000242][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xd589 instead [ 408.009702][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x67c6 instead [ 408.017837][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x7058 instead [ 408.050838][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xd0ac instead [ 408.064242][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x7e1f instead [ 408.082655][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x819f instead [ 408.105812][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8cfb instead [ 408.135531][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xbd58 instead [ 408.161210][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xa55e instead [ 408.183366][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xda84 instead [ 408.210871][T14793] jffs2: Further such events for this erase block will not be printed [ 408.216461][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xdd71 instead [ 408.230633][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x6252 instead [ 408.242620][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xca0d instead [ 408.248496][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x4073 instead [ 408.255011][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x205e instead [ 408.259404][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x30be instead [ 408.264318][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1262 instead [ 408.268490][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xbed0 instead [ 408.272982][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x9694 instead [ 408.278486][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdad0 instead [ 408.285080][T14793] jffs2: Further such events for this erase block will not be printed [ 408.288689][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x1bca instead [ 408.303178][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0576 instead [ 408.311685][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x150c instead [ 408.322589][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xe04f instead [ 408.330882][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xe257 instead [ 408.339879][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x8403 instead [ 408.345783][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf138 instead [ 408.350111][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x2a19 instead [ 408.363251][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x8750 instead [ 408.367746][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xd534 instead [ 408.372350][T14793] jffs2: Further such events for this erase block will not be printed [ 408.376033][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xd12a instead [ 408.381733][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa80b instead [ 408.386101][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x7fa3 instead [ 408.390113][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1f41 instead [ 408.397353][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x666c instead [ 408.402382][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb75e instead [ 408.408827][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x80ad instead [ 408.417180][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6f6c instead [ 408.426384][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xca80 instead [ 408.435467][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x0e7e instead [ 408.444513][T14793] jffs2: Further such events for this erase block will not be printed [ 408.451071][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xb7ae instead [ 408.464098][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xb4cf instead [ 408.473989][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5fa instead [ 408.481592][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x6706 instead [ 408.492337][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc6c9 instead [ 408.499045][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x7629 instead [ 408.507383][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf4ba instead [ 408.518513][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xe8f4 instead [ 408.523449][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4830 instead [ 408.530669][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x50a6 instead [ 408.537666][T14793] jffs2: Further such events for this erase block will not be printed [ 408.546066][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2290 instead [ 408.549325][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xdf9e instead [ 408.553450][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x84d8 instead [ 408.556757][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x1a0e instead [ 408.560143][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x8564 instead [ 408.563992][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5ed2 instead [ 408.567467][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xddfd instead [ 408.570874][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x419e instead [ 408.574247][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xfada instead [ 408.577441][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x24af instead [ 408.580754][T14793] jffs2: Further such events for this erase block will not be printed [ 408.583655][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xab9c instead [ 408.587743][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x5191 instead [ 408.591135][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xf52a instead [ 408.594412][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xd644 instead [ 408.597733][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x635e instead [ 408.605248][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x2940 instead [ 408.609023][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xdea3 instead [ 408.613820][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x5a17 instead [ 408.617143][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x5d6e instead [ 408.622011][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x7539 instead [ 408.625365][T14793] jffs2: Further such events for this erase block will not be printed [ 408.628199][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x97f4 instead [ 408.631892][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xbe0e instead [ 408.635242][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x1efc instead [ 408.638551][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8fe7 instead [ 408.642558][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4f16 instead [ 408.645917][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd2e7 instead [ 408.649234][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xcaea instead [ 408.652666][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x906e instead [ 408.656004][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x2cbc instead [ 408.659372][T14793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xae6b instead [ 408.662730][T14793] jffs2: Further such events for this erase block will not be printed [ 408.665712][T14793] jffs2: notice: (14793) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 408.671432][T14793] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 408.830745][ T844] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 408.960604][ T844] usb 8-1: device descriptor read/64, error -71 [ 408.980582][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 409.140674][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 409.143026][ T9] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 409.146837][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.150215][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.155735][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.158275][ T9] usb 9-1: Product: syz [ 409.159621][ T9] usb 9-1: Manufacturer: syz [ 409.161293][ T9] usb 9-1: SerialNumber: syz [ 409.200600][ T844] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 409.330856][ T844] usb 8-1: device descriptor read/64, error -71 [ 409.436316][T14880] bond4: Removing last arp target with arp_interval on [ 409.441350][ T844] usb usb8-port1: attempt power cycle [ 409.454125][T14880] netlink: 'syz.0.1248': attribute type 27 has an invalid length. [ 409.476591][T14880] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.479262][T14880] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.512033][T14916] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 409.559524][T14880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.568815][T14880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.683501][T14880] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 409.714221][T14880] bond2: left promiscuous mode [ 409.724002][ T9] usb 9-1: USB disconnect, device number 4 [ 409.735286][T14880] bridge1: left promiscuous mode [ 409.770846][ T5586] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.771556][T14916] can0: slcan on ptm0. [ 409.775207][ T5586] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.781236][ T5586] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.786635][ T5586] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.790758][ T844] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 409.811842][ T844] usb 8-1: device descriptor read/8, error -71 [ 409.891057][T14880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.895752][T14880] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.905177][T14880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.930851][T14880] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.933186][T14880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.936849][T14880] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.939129][T14880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.948220][T14880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.952307][T14880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.966290][T14880] veth1_macvtap: left promiscuous mode [ 409.968579][T14880] veth0_macvtap: left promiscuous mode [ 409.971467][T14880] veth0_macvtap: entered promiscuous mode [ 409.974144][T14880] veth1_macvtap: entered promiscuous mode [ 409.979373][T14880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.982378][T14880] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.985155][T14880] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.987812][T14880] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.994802][T14880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.998401][T14880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.005390][T14880] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 410.009895][T14880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.015857][T14880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.022645][ T5940] bond_slave_0: entered promiscuous mode [ 410.025292][ T5940] bond_slave_1: entered promiscuous mode [ 410.050739][ T844] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 410.053282][ T5586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.073590][ T844] usb 8-1: device descriptor read/8, error -71 [ 410.080961][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.084068][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.086862][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.182914][T14878] can0 (unregistered): slcan off ptm0. [ 410.183440][ T844] usb usb8-port1: unable to enumerate USB device [ 410.554225][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 411.385817][T14978] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 411.403544][T14978] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.406092][T14978] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.413493][T14978] bond_slave_0: left promiscuous mode [ 411.416424][T14978] bond_slave_1: left promiscuous mode [ 411.444215][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.448317][T14978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.521138][ T5586] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.524202][ T5586] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.527238][ T5586] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.534301][ T5586] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.580563][ T9] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 411.624681][T14982] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 411.744159][ T9] usb 9-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 411.757084][ T9] usb 9-1: config 6 has an invalid interface number: 7 but max is 0 [ 411.769808][ T9] usb 9-1: config 6 has no interface number 0 [ 411.778523][ T9] usb 9-1: config 6 interface 7 has no altsetting 0 [ 411.788196][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.795472][ T9] usb 9-1: Product: syz [ 411.800006][ T9] usb 9-1: Manufacturer: syz [ 411.805899][ T9] usb 9-1: SerialNumber: syz [ 412.056294][ T9] usb 9-1: USB disconnect, device number 5 [ 412.370503][ T5843] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 412.530681][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 412.534289][ T5843] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 412.539998][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.542992][ T5843] usb 8-1: Product: syz [ 412.544402][ T5843] usb 8-1: Manufacturer: syz [ 412.545921][ T5843] usb 8-1: SerialNumber: syz [ 412.550795][ T5843] usb 8-1: config 0 descriptor?? [ 412.598161][T15018] FAULT_INJECTION: forcing a failure. [ 412.598161][T15018] name failslab, interval 1, probability 0, space 0, times 0 [ 412.602253][T15018] CPU: 2 UID: 0 PID: 15018 Comm: syz.4.1258 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.602271][T15018] Tainted: [L]=SOFTLOCKUP [ 412.602275][T15018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 412.602282][T15018] Call Trace: [ 412.602285][T15018] [ 412.602290][T15018] dump_stack_lvl+0x100/0x190 [ 412.602308][T15018] should_fail_ex.cold+0x5/0xa [ 412.602321][T15018] should_failslab+0xc2/0x120 [ 412.602337][T15018] __kmalloc_noprof+0xfc/0x820 [ 412.602351][T15018] ? rcu_is_watching+0x12/0xc0 [ 412.602364][T15018] ? tomoyo_realpath_from_path+0xb6/0x690 [ 412.602384][T15018] tomoyo_realpath_from_path+0xb6/0x690 [ 412.602402][T15018] tomoyo_path_number_perm+0x23c/0x580 [ 412.602415][T15018] ? tomoyo_path_number_perm+0x22e/0x580 [ 412.602430][T15018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 412.602444][T15018] ? get_pid_task+0x106/0x250 [ 412.602469][T15018] ? find_held_lock+0x2b/0x80 [ 412.602488][T15018] ? __fget_files+0x215/0x3d0 [ 412.602498][T15018] ? hook_file_ioctl_common+0x140/0x440 [ 412.602511][T15018] ? __fget_files+0x215/0x3d0 [ 412.602524][T15018] ? __fget_files+0x21f/0x3d0 [ 412.602536][T15018] security_file_ioctl_compat+0xd3/0x230 [ 412.602550][T15018] __ia32_compat_sys_ioctl+0xc2/0x360 [ 412.602569][T15018] __do_fast_syscall_32+0xe7/0x970 [ 412.602586][T15018] ? lockdep_hardirqs_on+0x78/0x100 [ 412.602601][T15018] do_fast_syscall_32+0x32/0x70 [ 412.602618][T15018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 412.602631][T15018] RIP: 0023:0xf70befec [ 412.602645][T15018] Code: Unable to access opcode bytes at 0xf70befc2. [ 412.602650][T15018] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 412.602661][T15018] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 412.602668][T15018] RDX: 00000000800003c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 412.602674][T15018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.602680][T15018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.602686][T15018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 412.602698][T15018] [ 412.602703][T15018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.779524][ T5843] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.804329][ T5843] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 412.811451][ T5843] usb 8-1: USB disconnect, device number 25 [ 413.474530][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'. [ 413.481312][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 413.484225][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'. [ 413.491934][T15047] macvlan2: entered allmulticast mode [ 413.493984][T15047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 413.576997][T15052] tipc: Enabled bearer , priority 1 [ 413.586884][T15052] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 413.589410][T15052] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 413.593495][T15052] udc dummy_udc.0: failed to start g1: -22 [ 413.595437][T15052] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 413.607089][T15052] UDC core: g1: couldn't find an available UDC or it's busy [ 413.612702][T15051] tipc: Resetting bearer [ 413.627016][T15051] tipc: Disabling bearer [ 414.081662][ T5843] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 414.251579][ T5843] usb 8-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 414.258577][ T5843] usb 8-1: config 6 has an invalid interface number: 7 but max is 0 [ 414.262350][ T5843] usb 8-1: config 6 has no interface number 0 [ 414.266472][ T5843] usb 8-1: config 6 interface 7 has no altsetting 0 [ 414.272963][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.277789][ T5843] usb 8-1: Product: syz [ 414.281260][ T5843] usb 8-1: Manufacturer: syz [ 414.284950][ T5843] usb 8-1: SerialNumber: syz [ 414.575683][ T5843] usb 8-1: USB disconnect, device number 26 [ 415.103489][T15089] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 416.214249][T15089] bond4: entered promiscuous mode [ 416.245159][T15089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.462595][T15149] program syz.4.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.568811][T15152] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 416.609842][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1273'. [ 417.107871][T15177] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 418.474586][T15202] fuse: Bad value for 'group_id' [ 418.483474][T15202] fuse: Bad value for 'group_id' [ 419.500676][ T5940] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 419.651386][ T5940] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 419.660328][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 419.667895][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 419.678656][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.685205][ T5940] usb 9-1: Product: syz [ 419.689100][ T5940] usb 9-1: Manufacturer: syz [ 419.694645][ T5940] usb 9-1: SerialNumber: syz [ 419.704453][ T5940] usb 9-1: config 0 descriptor?? [ 419.714677][ T5940] hub 9-1:0.0: bad descriptor, ignoring hub [ 419.720390][ T5940] hub 9-1:0.0: probe with driver hub failed with error -5 [ 419.733009][ T5940] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input26 [ 421.309681][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.328583][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.334339][T15269] 9p: Could not find request transport: ersion=9p2000.u [ 421.417314][ T844] IPVS: starting estimator thread 0... [ 421.428870][T15267] 9p: Bad value for 'rfdno' [ 421.511418][T15284] IPVS: using max 44 ests per chain, 105600 per kthread [ 421.821019][ T5940] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 421.970964][ T5940] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 421.977511][ T5940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.985983][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.991977][ T5940] usb 6-1: Product: syz [ 421.994417][ T5940] usb 6-1: Manufacturer: syz [ 421.997869][ T5940] usb 6-1: SerialNumber: syz [ 422.579575][ T5940] snd-usb-caiaq 6-1:1.0: invalid EPs [ 422.588825][ T5940] usb 6-1: unable to init card! (ret=-22) [ 422.597989][ T5940] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 422.617440][ T5940] usb 9-1: USB disconnect, device number 6 [ 422.634537][T15316] sctp: [Deprecated]: syz.4.1302 (pid 15316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.634537][T15316] Use struct sctp_sack_info instead [ 422.661048][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1302'. [ 422.820130][T15316] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 422.919681][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc468 instead [ 422.934294][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa94c instead [ 422.941006][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.943070][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6f0c instead [ 422.957867][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x19ed instead [ 422.967692][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x9219 instead [ 422.982804][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6021 instead [ 422.997049][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa60b instead [ 423.010633][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5969 instead [ 423.022921][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7396 instead [ 423.035175][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xb30b instead [ 423.048042][T15330] jffs2: Further such events for this erase block will not be printed [ 423.055675][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd937 instead [ 423.065948][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xc19c instead [ 423.074581][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xc71f instead [ 423.088752][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x232d instead [ 423.100648][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xcc06 instead [ 423.100824][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.109652][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x55c0 instead [ 423.109672][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2d6b instead [ 423.109683][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x69e4 instead [ 423.109694][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x229c instead [ 423.109704][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5a3b instead [ 423.109715][T15330] jffs2: Further such events for this erase block will not be printed [ 423.112338][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xde4d instead [ 423.170052][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xd166 instead [ 423.183409][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xec85 instead [ 423.196158][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 423.202551][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x9b59 instead [ 423.212018][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xc0ac instead [ 423.215507][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x6225 instead [ 423.219548][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x24e4 instead [ 423.223106][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x94cf instead [ 423.226516][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x8994 instead [ 423.232609][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x2d90 instead [ 423.235995][T15330] jffs2: Further such events for this erase block will not be printed [ 423.245630][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xd663 instead [ 423.249408][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0f07 instead [ 423.256090][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x1195 instead [ 423.262998][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xefab instead [ 423.269484][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x4b65 instead [ 423.276320][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x5399 instead [ 423.289858][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe170 instead [ 423.299140][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x6019 instead [ 423.308858][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xf367 instead [ 423.316431][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x47a0 instead [ 423.323038][T15330] jffs2: Further such events for this erase block will not be printed [ 423.329308][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4bf9 instead [ 423.339579][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x8235 instead [ 423.348318][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1f8f instead [ 423.358468][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x15ee instead [ 423.365376][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x77b6 instead [ 423.372855][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x75c9 instead [ 423.379352][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5dca instead [ 423.387515][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xeef5 instead [ 423.394616][T15360] 9p: Bad value for 'rfdno' [ 423.396236][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x62e0 instead [ 423.404027][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xbe63 instead [ 423.410651][T15330] jffs2: Further such events for this erase block will not be printed [ 423.416954][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xfb0f instead [ 423.425482][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x27cc instead [ 423.432621][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x1901 instead [ 423.439439][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xcd40 instead [ 423.451720][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x16e7 instead [ 423.462089][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x4209 instead [ 423.473513][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0f45 instead [ 423.484335][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4cf3 instead [ 423.494478][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x590f instead [ 423.502364][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x153f instead [ 423.510085][T15330] jffs2: Further such events for this erase block will not be printed [ 423.517445][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x94bd instead [ 423.528027][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x69e9 instead [ 423.536407][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x5b88 instead [ 423.548776][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x69f7 instead [ 423.561895][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x296c instead [ 423.572401][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x8b6d instead [ 423.580883][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.584712][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4a49 instead [ 423.584732][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x67f7 instead [ 423.584745][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xea2a instead [ 423.584759][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x7154 instead [ 423.584772][T15330] jffs2: Further such events for this erase block will not be printed [ 423.585088][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x21bf instead [ 423.585104][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xf418 instead [ 423.585115][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbea7 instead [ 423.585126][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xf55c instead [ 423.585138][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1055 instead [ 423.585149][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x628e instead [ 423.585160][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x103c instead [ 423.585172][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2284 instead [ 423.585183][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x9f1b instead [ 423.585195][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x1ecf instead [ 423.585206][T15330] jffs2: Further such events for this erase block will not be printed [ 423.585483][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xd589 instead [ 423.585495][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x67c6 instead [ 423.585506][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x7058 instead [ 423.585518][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xd0ac instead [ 423.585529][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x7e1f instead [ 423.585540][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x819f instead [ 423.585552][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8cfb instead [ 423.585563][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xbd58 instead [ 423.585575][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xa55e instead [ 423.585586][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xda84 instead [ 423.585597][T15330] jffs2: Further such events for this erase block will not be printed [ 423.586450][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xdd71 instead [ 423.691022][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x6252 instead [ 423.704410][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xca0d instead [ 423.716250][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x4073 instead [ 423.725786][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x205e instead [ 423.733649][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x30be instead [ 423.740696][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1262 instead [ 423.747799][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xbed0 instead [ 423.759147][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x9694 instead [ 423.766742][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdad0 instead [ 423.774798][T15330] jffs2: Further such events for this erase block will not be printed [ 423.781099][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x1bca instead [ 423.787657][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0576 instead [ 423.796499][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x150c instead [ 423.809053][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xe04f instead [ 423.815175][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xe257 instead [ 423.818683][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x8403 instead [ 423.823951][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf138 instead [ 423.827239][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x2a19 instead [ 423.834813][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x8750 instead [ 423.839087][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xd534 instead [ 423.846288][T15330] jffs2: Further such events for this erase block will not be printed [ 423.853635][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xd12a instead [ 423.861854][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa80b instead [ 423.863658][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 423.870534][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x7fa3 instead [ 423.875339][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1f41 instead [ 423.881628][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1308'. [ 423.884760][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x666c instead [ 423.897387][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb75e instead [ 423.903914][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x80ad instead [ 423.907464][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6f6c instead [ 423.911117][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.913301][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xca80 instead [ 423.920855][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x0e7e instead [ 423.927663][T15330] jffs2: Further such events for this erase block will not be printed [ 423.940798][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xb7ae instead [ 423.947973][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xb4cf instead [ 423.957297][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5fa instead [ 423.979830][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x6706 instead [ 423.995533][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc6c9 instead [ 424.005648][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x7629 instead [ 424.012245][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf4ba instead [ 424.019476][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xe8f4 instead [ 424.032700][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4830 instead [ 424.045429][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x50a6 instead [ 424.058780][T15330] jffs2: Further such events for this erase block will not be printed [ 424.069146][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2290 instead [ 424.080194][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xdf9e instead [ 424.092477][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x84d8 instead [ 424.097937][T15394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.104273][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x1a0e instead [ 424.113893][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x8564 instead [ 424.123915][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5ed2 instead [ 424.132174][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xddfd instead [ 424.137451][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x419e instead [ 424.143199][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.146194][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xfada instead [ 424.154127][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x24af instead [ 424.157405][T15330] jffs2: Further such events for this erase block will not be printed [ 424.160180][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xab9c instead [ 424.164304][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x5191 instead [ 424.167583][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xf52a instead [ 424.172916][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xd644 instead [ 424.176314][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x635e instead [ 424.179548][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x2940 instead [ 424.184755][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xdea3 instead [ 424.188105][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x5a17 instead [ 424.195413][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x5d6e instead [ 424.201893][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x7539 instead [ 424.208232][T15330] jffs2: Further such events for this erase block will not be printed [ 424.224173][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x97f4 instead [ 424.233116][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xbe0e instead [ 424.245519][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x1efc instead [ 424.249783][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8fe7 instead [ 424.257031][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4f16 instead [ 424.260602][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd2e7 instead [ 424.264071][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xcaea instead [ 424.267411][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x906e instead [ 424.271911][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x2cbc instead [ 424.275220][T15330] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xae6b instead [ 424.278402][T15330] jffs2: Further such events for this erase block will not be printed [ 424.281644][T15330] jffs2: notice: (15330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 424.437656][T15422] 9p: Bad value for 'rfdno' [ 424.749333][ T5844] usb 6-1: USB disconnect, device number 18 [ 425.248295][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.939663][T15458] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 426.113834][T15455] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 426.300642][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.080076][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.284211][T15481] 9p: Bad value for 'rfdno' [ 427.340840][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.724315][T15514] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 428.060763][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.491610][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.871171][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 428.871184][ T42] audit: type=1326 audit(1786333640.646:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 428.911885][ T42] audit: type=1326 audit(1786333640.656:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 428.945030][ T42] audit: type=1326 audit(1786333640.656:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 428.982070][ T42] audit: type=1326 audit(1786333640.656:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 428.999461][T15541] devpts: Bad value for 'gid' [ 429.005909][ T42] audit: type=1326 audit(1786333640.656:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.032834][ T42] audit: type=1326 audit(1786333640.666:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.051421][T15541] devpts: Bad value for 'gid' [ 429.061726][ T42] audit: type=1326 audit(1786333640.666:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.092589][ T42] audit: type=1326 audit(1786333640.676:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.117900][ T42] audit: type=1326 audit(1786333640.676:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.150314][ T42] audit: type=1326 audit(1786333640.676:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.3.1333" exe="/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 429.207855][T15541] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'. [ 429.452611][T15551] 9p: Bad value for 'rfdno' [ 429.500630][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.731881][T15568] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1337'. [ 429.987315][T15584] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 430.109871][T15592] netlink: 'syz.1.1344': attribute type 21 has an invalid length. [ 430.109894][T15592] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.109947][T15592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.109996][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 430.110019][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 430.110031][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 430.115242][T15592] netlink: 'syz.1.1344': attribute type 21 has an invalid length. [ 430.115294][T15592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.540925][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.083088][T15601] tmpfs: Unknown parameter 'quotaÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 431.100665][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.173948][T15601] binder: 15600:15601 ioctl c0306201 0 returned -14 [ 431.223247][T15601] loop2: detected capacity change from 0 to 7 [ 431.258413][T15601] Dev loop2: unable to read RDB block 7 [ 431.274672][T15601] loop2: unable to read partition table [ 431.297156][T15601] loop2: partition table beyond EOD, truncated [ 431.309602][T15601] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.562635][T15630] FAULT_INJECTION: forcing a failure. [ 431.562635][T15630] name failslab, interval 1, probability 0, space 0, times 0 [ 431.574857][T15630] CPU: 0 UID: 0 PID: 15630 Comm: syz.3.1349 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.574879][T15630] Tainted: [L]=SOFTLOCKUP [ 431.574883][T15630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 431.574890][T15630] Call Trace: [ 431.574894][T15630] [ 431.574899][T15630] dump_stack_lvl+0x100/0x190 [ 431.574918][T15630] should_fail_ex.cold+0x5/0xa [ 431.574931][T15630] should_failslab+0xc2/0x120 [ 431.574948][T15630] __kmalloc_noprof+0xfc/0x820 [ 431.574962][T15630] ? tomoyo_encode2+0xfb/0x3c0 [ 431.574980][T15630] tomoyo_encode2+0xfb/0x3c0 [ 431.574997][T15630] tomoyo_encode+0x29/0x50 [ 431.575012][T15630] tomoyo_realpath_from_path+0x18c/0x690 [ 431.575031][T15630] tomoyo_path_number_perm+0x23c/0x580 [ 431.575045][T15630] ? tomoyo_path_number_perm+0x22e/0x580 [ 431.575059][T15630] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.575073][T15630] ? get_pid_task+0x106/0x250 [ 431.575098][T15630] ? find_held_lock+0x2b/0x80 [ 431.575112][T15630] ? __fget_files+0x215/0x3d0 [ 431.575122][T15630] ? hook_file_ioctl_common+0x140/0x440 [ 431.575135][T15630] ? __fget_files+0x215/0x3d0 [ 431.575147][T15630] ? __fget_files+0x21f/0x3d0 [ 431.575159][T15630] security_file_ioctl_compat+0xd3/0x230 [ 431.575181][T15630] __ia32_compat_sys_ioctl+0xc2/0x360 [ 431.575207][T15630] __do_fast_syscall_32+0xe7/0x970 [ 431.575228][T15630] ? lockdep_hardirqs_on+0x78/0x100 [ 431.575244][T15630] do_fast_syscall_32+0x32/0x70 [ 431.575260][T15630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.575274][T15630] RIP: 0023:0xf7fc5fec [ 431.575288][T15630] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 431.575294][T15630] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 431.575305][T15630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008020640d [ 431.575312][T15630] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.575318][T15630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.575324][T15630] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 431.575330][T15630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.575343][T15630] [ 431.575357][T15630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.646313][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.658957][T15622] 9p: Bad value for 'rfdno' [ 432.064305][T15641] openvswitch: netlink: Key 6 has unexpected len 97 expected 2 [ 432.079652][T15647] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 432.661540][ T5940] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 432.701066][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.726871][T15666] 9p: Bad value for 'rfdno' [ 432.827120][ T5940] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 432.839360][ T5940] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 432.853730][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.860094][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.884672][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 432.902881][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.914063][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.944680][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 432.962017][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.977742][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 432.997339][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.013497][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.021581][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.037011][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.051264][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.059029][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.061373][T15676] dyndbg: bad flag-op , at start of [ 433.088129][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.096642][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.100273][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.105663][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.111204][T15676] dyndbg: flags parse failed [ 433.113537][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.117175][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.121598][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.124301][T15676] dyndbg: bad flag-op /, at start of / [ 433.128657][T15676] dyndbg: flags parse failed [ 433.131788][ T5940] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.135337][ T5940] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 433.141846][ T5940] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.181421][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.181432][ T5940] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 433.190318][ T5940] usb 8-1: Product: syz [ 433.197641][ T5940] usb 8-1: Manufacturer: syz [ 433.204406][ T5940] usb 8-1: SerialNumber: syz [ 433.216600][ T5940] usb 8-1: config 0 descriptor?? [ 433.271286][ T5940] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 433.568760][ C2] usb 8-1: yurex_control_callback - control failed: -2 [ 433.745502][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.830039][ T5940] usb 8-1: USB disconnect, device number 27 [ 433.849559][ T5940] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 434.141463][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.273291][T15589] Set syz1 is full, maxelem 65536 reached [ 434.780758][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.375495][T15735] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 435.823634][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.304182][T15802] overlay: ./file0 is not a directory [ 436.414601][T15800] Bluetooth: MGMT ver 1.23 [ 436.862214][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.904172][T15830] FAULT_INJECTION: forcing a failure. [ 436.904172][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 436.920808][T15830] CPU: 0 UID: 0 PID: 15830 Comm: syz.4.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.920829][T15830] Tainted: [L]=SOFTLOCKUP [ 436.920833][T15830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 436.920840][T15830] Call Trace: [ 436.920845][T15830] [ 436.920849][T15830] dump_stack_lvl+0x100/0x190 [ 436.920867][T15830] should_fail_ex.cold+0x5/0xa [ 436.920881][T15830] should_failslab+0xc2/0x120 [ 436.920897][T15830] __kvmalloc_node_noprof+0x116/0x970 [ 436.920911][T15830] ? nla_strdup+0xc3/0x150 [ 436.920923][T15830] ? nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 436.920953][T15830] nf_tables_addchain.constprop.0+0x9be/0x1ca0 [ 436.920969][T15830] ? nft_chain_lookup+0x59c/0xa60 [ 436.920985][T15830] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 436.921030][T15830] ? nla_strcmp+0xff/0x130 [ 436.921043][T15830] ? nft_table_lookup.part.0+0x1e3/0x230 [ 436.921057][T15830] nf_tables_newchain+0x17c3/0x2d30 [ 436.921072][T15830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.921090][T15830] ? __nla_validate_parse+0x1e7/0x28b0 [ 436.921104][T15830] ? __pfx_nf_tables_newchain+0x10/0x10 [ 436.921115][T15830] ? __pfx___nla_validate_parse+0x10/0x10 [ 436.921133][T15830] ? __nla_parse+0x40/0x60 [ 436.921146][T15830] nfnetlink_rcv_batch+0x1410/0x2880 [ 436.921170][T15830] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 436.921185][T15830] ? find_held_lock+0x2b/0x80 [ 436.921200][T15830] ? __local_bh_enable_ip+0x9e/0x120 [ 436.921214][T15830] ? lockdep_hardirqs_on+0x78/0x100 [ 436.921230][T15830] ? __dev_queue_xmit+0xa12/0x4970 [ 436.921262][T15830] ? __nla_parse+0x40/0x60 [ 436.921275][T15830] nfnetlink_rcv+0x3bd/0x440 [ 436.921290][T15830] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 436.921308][T15830] netlink_unicast+0x585/0x850 [ 436.921323][T15830] ? __pfx_netlink_unicast+0x10/0x10 [ 436.921339][T15830] netlink_sendmsg+0x8b0/0xda0 [ 436.921353][T15830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.921367][T15830] ? apparmor_socket_sendmsg+0x15b/0x270 [ 436.921381][T15830] ____sys_sendmsg+0xa4d/0xbe0 [ 436.921397][T15830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.921410][T15830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.921427][T15830] ___sys_sendmsg+0x190/0x1e0 [ 436.921440][T15830] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.921458][T15830] ? find_held_lock+0x2b/0x80 [ 436.921479][T15830] __sys_sendmsg+0x160/0x210 [ 436.921495][T15830] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.921514][T15830] ? __pfx_ksys_write+0x10/0x10 [ 436.921527][T15830] __do_fast_syscall_32+0xe7/0x970 [ 436.921543][T15830] ? lockdep_hardirqs_on+0x78/0x100 [ 436.921558][T15830] do_fast_syscall_32+0x32/0x70 [ 436.921574][T15830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 436.921592][T15830] RIP: 0023:0xf70befec [ 436.921606][T15830] Code: Unable to access opcode bytes at 0xf70befc2. [ 436.921610][T15830] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 436.921621][T15830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 436.921628][T15830] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 436.921634][T15830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 436.921639][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.921645][T15830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.921658][T15830] [ 437.183789][T15838] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 437.186355][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.383384][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xc468 instead [ 437.396526][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xa94c instead [ 437.404145][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6f0c instead [ 437.415138][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x19ed instead [ 437.426000][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x9219 instead [ 437.434464][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x6021 instead [ 437.445190][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa60b instead [ 437.459368][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5969 instead [ 437.476012][T15854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1389'. [ 437.493487][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x7396 instead [ 437.504467][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xb30b instead [ 437.521400][T15853] jffs2: Further such events for this erase block will not be printed [ 437.533177][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xd937 instead [ 437.546840][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xc19c instead [ 437.557421][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0xc71f instead [ 437.567694][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x232d instead [ 437.580158][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xcc06 instead [ 437.590151][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x55c0 instead [ 437.600664][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2d6b instead [ 437.612177][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x69e4 instead [ 437.626915][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x229c instead [ 437.639518][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x5a3b instead [ 437.655342][T15853] jffs2: Further such events for this erase block will not be printed [ 437.665837][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xde4d instead [ 437.680885][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xd166 instead [ 437.691093][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xec85 instead [ 437.700264][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x9b59 instead [ 437.711624][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xc0ac instead [ 437.721201][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x6225 instead [ 437.732344][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x24e4 instead [ 437.754334][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x94cf instead [ 437.782603][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x8994 instead [ 437.797254][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x2d90 instead [ 437.811738][T15853] jffs2: Further such events for this erase block will not be printed [ 437.821252][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xd663 instead [ 437.832713][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0f07 instead [ 437.842382][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x1195 instead [ 437.852669][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xefab instead [ 437.863602][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x4b65 instead [ 437.876391][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x5399 instead [ 437.886646][T15857] usb usb8: usbfs: process 15857 (syz.0.1390) did not claim interface 0 before use [ 437.894297][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xe170 instead [ 437.902749][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.913490][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x6019 instead [ 437.926361][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xf367 instead [ 437.941313][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x47a0 instead [ 437.954260][T15853] jffs2: Further such events for this erase block will not be printed [ 437.957186][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4bf9 instead [ 437.966295][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x8235 instead [ 437.970519][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x1f8f instead [ 437.974295][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x15ee instead [ 437.985923][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x77b6 instead [ 437.989354][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x75c9 instead [ 437.992806][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5dca instead [ 437.996191][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xeef5 instead [ 437.999601][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x62e0 instead [ 438.003854][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xbe63 instead [ 438.007475][T15853] jffs2: Further such events for this erase block will not be printed [ 438.012552][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xfb0f instead [ 438.015972][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x27cc instead [ 438.019354][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x1901 instead [ 438.023071][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xcd40 instead [ 438.026481][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x16e7 instead [ 438.029867][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x4209 instead [ 438.033395][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0f45 instead [ 438.036770][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4cf3 instead [ 438.040229][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x590f instead [ 438.044664][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x153f instead [ 438.048025][T15853] jffs2: Further such events for this erase block will not be printed [ 438.051112][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x94bd instead [ 438.054514][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x69e9 instead [ 438.058189][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x5b88 instead [ 438.061867][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x69f7 instead [ 438.065253][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x296c instead [ 438.068674][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x8b6d instead [ 438.072118][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4a49 instead [ 438.075833][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x67f7 instead [ 438.079134][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xea2a instead [ 438.082502][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x7154 instead [ 438.085903][T15853] jffs2: Further such events for this erase block will not be printed [ 438.089532][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x21bf instead [ 438.099353][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xf418 instead [ 438.103000][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbea7 instead [ 438.107162][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xf55c instead [ 438.110561][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x1055 instead [ 438.113834][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x628e instead [ 438.117033][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x103c instead [ 438.120234][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2284 instead [ 438.123528][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x9f1b instead [ 438.126809][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x1ecf instead [ 438.130034][T15853] jffs2: Further such events for this erase block will not be printed [ 438.133160][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xd589 instead [ 438.136429][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x67c6 instead [ 438.139685][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x7058 instead [ 438.143196][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xd0ac instead [ 438.146491][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x7e1f instead [ 438.150037][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x819f instead [ 438.153708][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x8cfb instead [ 438.156965][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xbd58 instead [ 438.160185][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xa55e instead [ 438.163559][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0xda84 instead [ 438.166986][T15853] jffs2: Further such events for this erase block will not be printed [ 438.169837][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xdd71 instead [ 438.173194][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x6252 instead [ 438.176420][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xca0d instead [ 438.180210][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x4073 instead [ 438.190634][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x205e instead [ 438.194832][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x30be instead [ 438.198865][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x1262 instead [ 438.202495][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xbed0 instead [ 438.212085][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x9694 instead [ 438.223241][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xdad0 instead [ 438.230618][T15853] jffs2: Further such events for this erase block will not be printed [ 438.237072][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x1bca instead [ 438.270559][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0576 instead [ 438.273870][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x150c instead [ 438.277949][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xe04f instead [ 438.285359][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xe257 instead [ 438.292784][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x8403 instead [ 438.299847][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xf138 instead [ 438.314222][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x2a19 instead [ 438.323618][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x8750 instead [ 438.336677][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xd534 instead [ 438.346586][T15853] jffs2: Further such events for this erase block will not be printed [ 438.355087][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xd12a instead [ 438.369710][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xa80b instead [ 438.381897][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x7fa3 instead [ 438.395505][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x1f41 instead [ 438.407877][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x666c instead [ 438.417821][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb75e instead [ 438.429860][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x80ad instead [ 438.442490][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x6f6c instead [ 438.458186][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0xca80 instead [ 438.475514][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x0e7e instead [ 438.496674][T15853] jffs2: Further such events for this erase block will not be printed [ 438.509194][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xb7ae instead [ 438.518830][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xb4cf instead [ 438.530168][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5fa instead [ 438.537640][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x6706 instead [ 438.940667][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.131566][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc6c9 instead [ 439.134783][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x7629 instead [ 439.138075][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xf4ba instead [ 439.151693][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0xe8f4 instead [ 439.156620][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4830 instead [ 439.163104][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x50a6 instead [ 439.168025][T15853] jffs2: Further such events for this erase block will not be printed [ 439.181456][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2290 instead [ 439.197618][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xdf9e instead [ 439.211912][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x84d8 instead [ 439.216767][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x1a0e instead [ 439.220721][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x8564 instead [ 439.226392][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x5ed2 instead [ 439.240847][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xddfd instead [ 439.257167][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x419e instead [ 439.271911][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xfada instead [ 439.285569][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x24af instead [ 439.296500][T15853] jffs2: Further such events for this erase block will not be printed [ 439.306856][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xab9c instead [ 439.318719][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x5191 instead [ 439.328845][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xf52a instead [ 439.338965][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xd644 instead [ 439.352240][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x635e instead [ 439.363566][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x2940 instead [ 439.374691][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xdea3 instead [ 439.392041][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x5a17 instead [ 439.407246][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x5d6e instead [ 439.421283][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x7539 instead [ 439.434506][T15853] jffs2: Further such events for this erase block will not be printed [ 439.448622][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x97f4 instead [ 439.465056][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xbe0e instead [ 439.488065][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x1efc instead [ 439.500735][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x8fe7 instead [ 439.512401][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4f16 instead [ 439.521855][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xd2e7 instead [ 439.529625][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xcaea instead [ 439.535968][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x906e instead [ 439.542275][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x2cbc instead [ 439.550539][T15853] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xae6b instead [ 439.553968][T15853] jffs2: Further such events for this erase block will not be printed [ 439.558417][T15853] jffs2: notice: (15853) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 439.568203][T15853] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 439.662050][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.664167][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.981518][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.230070][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.821355][T15932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.951797][ T42] kauditd_printk_skb: 188 callbacks suppressed [ 440.951813][ T42] audit: type=1400 audit(1786333652.726:1587): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15952 comm="syz.4.1403" [ 440.969479][T15913] tracefs: Bad value for 'gid' [ 440.984314][T15913] tracefs: Bad value for 'gid' [ 441.022379][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.034489][T15959] tmpfs: Unknown parameter 'quo' [ 441.133149][T15965] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 441.464919][T15976] fuse: Unknown parameter 'gr+š' [ 441.579984][T15976] bond0: entered allmulticast mode [ 441.588476][T15976] bond_slave_0: entered allmulticast mode [ 441.597127][T15976] bond_slave_1: entered allmulticast mode [ 441.831812][ T5940] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 441.925149][T16005] scsi_dev_info_list_add_str: bad dev info string '¼QTò?¬Ý]Ð+É,r' '' '' [ 442.001269][ T5940] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 442.009556][ T5940] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 442.014374][ T5940] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 442.023335][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 442.030120][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 442.035097][ T5940] usb 6-1: Product: syz [ 442.037838][ T5940] usb 6-1: Manufacturer: syz [ 442.043351][ T5940] usb 6-1: SerialNumber: syz [ 442.056571][ T5940] usb 6-1: config 0 descriptor?? [ 442.060971][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.067449][ T5940] hub 6-1:0.0: bad descriptor, ignoring hub [ 442.074066][ T5940] hub 6-1:0.0: probe with driver hub failed with error -5 [ 442.088694][ T5940] usb 6-1: selecting invalid altsetting 0 [ 442.178276][T16009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.182213][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.480250][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'. [ 442.572958][ T5844] usb 6-1: USB disconnect, device number 19 [ 442.620381][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.746169][T16047] 9p: Bad value for 'rfdno' [ 442.780957][ T5843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.786016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.939336][T16057] kvm: pic: single mode not supported [ 442.953011][T16057] kvm: pic: single mode not supported [ 442.974388][T16057] kvm: pic: non byte read [ 442.997974][T16057] kvm: pic: non byte write [ 443.008446][T16062] batadv_slave_1: entered promiscuous mode [ 443.021960][T16057] kvm: pic: non byte write [ 443.032030][ T5940] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 443.037874][T16057] kvm: pic: non byte write [ 443.050933][T16057] kvm: pic: non byte write [ 443.056546][T16057] kvm: pic: non byte write [ 443.060286][T16057] kvm: pic: non byte write [ 443.063996][T16057] kvm: pic: non byte write [ 443.069383][T16057] kvm: pic: non byte write [ 443.079484][T16057] kvm: pic: non byte write [ 443.081574][T16057] kvm: pic: non byte write [ 443.101256][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.147379][T16056] batadv_slave_1: left promiscuous mode [ 443.182280][ T5940] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.193495][ T5940] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 443.200075][ T5940] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 443.213280][ T5940] usb 6-1: config 0 interface 0 has no altsetting 0 [ 443.223232][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.230273][ T5940] usb 6-1: Product: syz [ 443.235807][ T5940] usb 6-1: Manufacturer: syz [ 443.243461][ T5940] usb 6-1: SerialNumber: syz [ 443.265117][ T5940] usb 6-1: config 0 descriptor?? [ 443.273681][ T5940] hub 6-1:0.0: bad descriptor, ignoring hub [ 443.278996][ T5940] hub 6-1:0.0: probe with driver hub failed with error -5 [ 443.289390][ T5940] usb 6-1: selecting invalid altsetting 0 [ 443.577997][T16097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 443.682768][ T9] usb 6-1: USB disconnect, device number 20 [ 443.853145][T16109] FAULT_INJECTION: forcing a failure. [ 443.853145][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 443.871984][T16109] CPU: 2 UID: 0 PID: 16109 Comm: syz.0.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.872008][T16109] Tainted: [L]=SOFTLOCKUP [ 443.872011][T16109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 443.872018][T16109] Call Trace: [ 443.872023][T16109] [ 443.872027][T16109] dump_stack_lvl+0x100/0x190 [ 443.872045][T16109] should_fail_ex.cold+0x5/0xa [ 443.872058][T16109] should_failslab+0xc2/0x120 [ 443.872074][T16109] __kmalloc_cache_noprof+0x91/0x6c0 [ 443.872087][T16109] ? cryptomgr_notify+0xa4/0xb40 [ 443.872100][T16109] cryptomgr_notify+0xa4/0xb40 [ 443.872111][T16109] ? down_read+0x13b/0x4c0 [ 443.872131][T16109] notifier_call_chain+0x99/0x3f0 [ 443.872150][T16109] blocking_notifier_call_chain+0x69/0xa0 [ 443.872171][T16109] crypto_alg_mod_lookup+0x1e2/0x5d0 [ 443.872189][T16109] crypto_has_alg+0x22/0x80 [ 443.872204][T16109] ima_inode_setxattr+0x45c/0x5f0 [ 443.872217][T16109] security_inode_setxattr+0x299/0x560 [ 443.872233][T16109] __vfs_setxattr_locked+0xad/0x2b0 [ 443.872249][T16109] vfs_setxattr+0x14a/0x390 [ 443.872262][T16109] ? __pfx_vfs_setxattr+0x10/0x10 [ 443.872273][T16109] ? mnt_get_write_access+0x52/0x2f0 [ 443.872289][T16109] ? mnt_get_write_access+0x52/0x2f0 [ 443.872305][T16109] do_setxattr+0x145/0x180 [ 443.872317][T16109] filename_setxattr+0x167/0x1d0 [ 443.872330][T16109] ? __pfx_filename_setxattr+0x10/0x10 [ 443.872343][T16109] ? do_getname+0x191/0x390 [ 443.872358][T16109] path_setxattrat+0x1ff/0x3b0 [ 443.872370][T16109] ? __pfx_path_setxattrat+0x10/0x10 [ 443.872384][T16109] ? rcu_read_lock_any_held+0x6a/0xa0 [ 443.872399][T16109] ? find_held_lock+0x2b/0x80 [ 443.872424][T16109] ? fput+0x79/0x100 [ 443.872437][T16109] ? ksys_write+0x1ac/0x250 [ 443.872448][T16109] __ia32_sys_setxattr+0xc4/0x140 [ 443.872460][T16109] ? __do_fast_syscall_32+0x98/0x970 [ 443.872476][T16109] ? lockdep_hardirqs_on+0x78/0x100 [ 443.872490][T16109] __do_fast_syscall_32+0xe7/0x970 [ 443.872506][T16109] ? lockdep_hardirqs_on+0x78/0x100 [ 443.872521][T16109] do_fast_syscall_32+0x32/0x70 [ 443.872537][T16109] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 443.872551][T16109] RIP: 0023:0xf7f64fec [ 443.872566][T16109] Code: Unable to access opcode bytes at 0xf7f64fc2. [ 443.872571][T16109] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e2 [ 443.872582][T16109] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 00000000800000c0 [ 443.872588][T16109] RDX: 00000000800002c0 RSI: 0000000000000002 RDI: 0000000000000000 [ 443.872594][T16109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.872600][T16109] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 443.872606][T16109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 443.872620][T16109] [ 443.875372][ T42] audit: type=1800 audit(1786333655.646:1588): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.1422" name="/newroot/364" dev="tmpfs" ino=2121 res=0 errno=0 [ 443.967550][ T5940] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 444.122141][ T5940] usb 8-1: Using ep0 maxpacket: 32 [ 444.124622][ T5940] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 444.128437][ T5940] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 444.132026][ T5940] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 444.137407][ T5940] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.146320][ T41] net_ratelimit: 3 callbacks suppressed [ 444.146334][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.209298][ T5940] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 444.224850][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.227597][ T5940] usb 8-1: Product: syz [ 444.228987][ T5940] usb 8-1: Manufacturer: syz [ 444.230731][ T5940] usb 8-1: SerialNumber: syz [ 444.343226][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 444.389883][ T5940] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input31 [ 444.490726][ T5940] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 444.502223][ T5940] (id 0x00) [ 444.570915][ T5940] rc_core: IR keymap rc-imon-pad not found [ 444.576235][ T5940] Registered IR keymap rc-empty [ 444.581602][ T5940] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 444.600070][ T5940] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 444.691696][ T5940] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 444.709147][ T5940] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input32 [ 444.727422][ T5940] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:28> initialized [ 444.978332][T16146] 9pnet_fd: Insufficient options for proto=fd [ 445.034851][T16153] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 445.037359][T16153] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1428'. [ 445.076100][T16149] 9p: Bad value for 'rfdno' [ 445.180864][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.314579][T16165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.317277][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.341912][ T9909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.660572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.666088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.216801][T16169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.221589][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.300821][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.596044][ T9] usb 8-1: USB disconnect, device number 28 [ 446.909347][T16217] 9p: Bad value for 'rfdno' [ 447.261224][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.090529][ T5940] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 449.160667][ C2] net_ratelimit: 4 callbacks suppressed [ 449.163813][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.169834][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.250561][ T5940] usb 8-1: Using ep0 maxpacket: 32 [ 449.255575][ T5940] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 449.265785][ T5940] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.273434][ T5940] usb 8-1: config 0 has no interface number 0 [ 449.284266][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.288534][ T5940] usb 8-1: Product: syz [ 449.292225][ T5940] usb 8-1: Manufacturer: syz [ 449.296079][ T5940] usb 8-1: SerialNumber: syz [ 449.305887][ T5940] usb 8-1: config 0 descriptor?? [ 449.315818][ T5940] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 449.322432][ T5940] usb 8-1: selecting invalid altsetting 1 [ 449.326483][ T5940] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 449.353106][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.400741][ T5940] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 449.418723][ T5940] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 449.426784][ T5940] usb 8-1: media controller created [ 449.478878][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.594883][ T9909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.668358][T16275] kvm: apic: phys broadcast and lowest prio [ 450.210230][T16275] ================================================================== [ 450.212913][T16275] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 450.215539][T16275] Read of size 8 at addr ffff8880254b1038 by task syz.3.1446/16275 [ 450.218601][T16275] [ 450.219870][T16275] CPU: 0 UID: 0 PID: 16275 Comm: syz.3.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.219891][T16275] Tainted: [L]=SOFTLOCKUP [ 450.219896][T16275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.219905][T16275] Call Trace: [ 450.219910][T16275] [ 450.219915][T16275] dump_stack_lvl+0x100/0x190 [ 450.219934][T16275] print_report+0x13d/0x4b0 [ 450.219966][T16275] ? __virt_addr_valid+0x239/0x430 [ 450.219985][T16275] ? __release_resource+0x276/0x2c0 [ 450.220000][T16275] kasan_report+0xdf/0x1c0 [ 450.220020][T16275] ? __release_resource+0x276/0x2c0 [ 450.220036][T16275] __release_resource+0x276/0x2c0 [ 450.220054][T16275] release_resource+0x26/0x40 [ 450.220069][T16275] pci_remove_bus_device+0x2d3/0x3b0 [ 450.220084][T16275] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 450.220100][T16275] remove_store+0x123/0x140 [ 450.220115][T16275] ? __pfx_remove_store+0x10/0x10 [ 450.220130][T16275] ? find_held_lock+0x2b/0x80 [ 450.220143][T16275] ? sysfs_file_kobj+0xe4/0x290 [ 450.220160][T16275] ? sysfs_file_kobj+0xe4/0x290 [ 450.220194][T16275] ? __pfx_remove_store+0x10/0x10 [ 450.220211][T16275] dev_attr_store+0x58/0x80 [ 450.220235][T16275] ? __pfx_dev_attr_store+0x10/0x10 [ 450.220255][T16275] sysfs_kf_write+0xf2/0x150 [ 450.220273][T16275] kernfs_fop_write_iter+0x3e0/0x5f0 [ 450.220288][T16275] ? __pfx_sysfs_kf_write+0x10/0x10 [ 450.220307][T16275] vfs_write+0x6ac/0x1050 [ 450.220319][T16275] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 450.220333][T16275] ? __pfx_vfs_write+0x10/0x10 [ 450.220343][T16275] ? find_held_lock+0x2b/0x80 [ 450.220360][T16275] ksys_write+0x12a/0x250 [ 450.220370][T16275] ? __pfx_ksys_write+0x10/0x10 [ 450.220382][T16275] __do_fast_syscall_32+0xe7/0x970 [ 450.220400][T16275] do_fast_syscall_32+0x32/0x70 [ 450.220418][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.220438][T16275] RIP: 0023:0xf7fc5fec [ 450.220452][T16275] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 450.220472][T16275] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 450.220491][T16275] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000140 [ 450.220504][T16275] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.220514][T16275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.220526][T16275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 450.220536][T16275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.220550][T16275] [ 450.220554][T16275] [ 450.305139][T16275] Allocated by task 6891: [ 450.306533][T16275] kasan_save_stack+0x30/0x50 [ 450.308066][T16275] kasan_save_track+0x14/0x30 [ 450.309613][T16275] __kasan_kmalloc+0xaa/0xb0 [ 450.311033][T16275] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 450.313418][T16275] kmemdup_noprof+0x29/0x60 [ 450.315274][T16275] platform_device_add_resources+0x37/0x100 [ 450.317205][T16275] dwc2_pci_probe+0x1d3/0x360 [ 450.318775][T16275] local_pci_probe+0xdd/0x1b0 [ 450.320301][T16275] pci_call_probe+0x176/0x800 [ 450.321833][T16275] pci_device_probe+0x1cd/0x370 [ 450.323819][T16275] really_probe+0x241/0xa60 [ 450.325385][T16275] __driver_probe_device+0x20e/0x450 [ 450.327121][T16275] device_driver_attach+0xd1/0x220 [ 450.328732][T16275] bind_store+0xf4/0x190 [ 450.330104][T16275] drv_attr_store+0x74/0xb0 [ 450.331586][T16275] sysfs_kf_write+0xf2/0x150 [ 450.333302][T16275] kernfs_fop_write_iter+0x3e0/0x5f0 [ 450.334995][T16275] vfs_write+0x6ac/0x1050 [ 450.336384][T16275] ksys_write+0x12a/0x250 [ 450.337768][T16275] __do_fast_syscall_32+0xe7/0x970 [ 450.339380][T16275] do_fast_syscall_32+0x32/0x70 [ 450.340906][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.342909][T16275] [ 450.343679][T16275] Freed by task 16275: [ 450.345028][T16275] kasan_save_stack+0x30/0x50 [ 450.346536][T16275] kasan_save_track+0x14/0x30 [ 450.348026][T16275] kasan_save_free_info+0x3b/0x70 [ 450.349614][T16275] __kasan_slab_free+0x5f/0x80 [ 450.351121][T16275] kfree+0x22b/0x6c0 [ 450.352387][T16275] platform_device_release+0x8a/0xb0 [ 450.354054][T16275] device_release+0xd2/0x270 [ 450.355575][T16275] kobject_put+0x1f7/0x640 [ 450.357006][T16275] put_device+0x1f/0x30 [ 450.358321][T16275] platform_device_unregister+0x45/0x50 [ 450.360075][T16275] dwc2_pci_remove+0x55/0xd0 [ 450.361549][T16275] pci_device_remove+0xb2/0x1d0 [ 450.363121][T16275] device_remove+0xcb/0x180 [ 450.364604][T16275] device_release_driver_internal+0x44e/0x620 [ 450.366599][T16275] pci_stop_bus_device+0x120/0x160 [ 450.368303][T16275] pci_stop_and_remove_bus_device+0x58/0xa0 [ 450.370165][T16275] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 450.372238][T16275] remove_store+0x123/0x140 [ 450.373781][T16275] dev_attr_store+0x58/0x80 [ 450.375265][T16275] sysfs_kf_write+0xf2/0x150 [ 450.376756][T16275] kernfs_fop_write_iter+0x3e0/0x5f0 [ 450.378433][T16275] vfs_write+0x6ac/0x1050 [ 450.379803][T16275] ksys_write+0x12a/0x250 [ 450.381173][T16275] __do_fast_syscall_32+0xe7/0x970 [ 450.382814][T16275] do_fast_syscall_32+0x32/0x70 [ 450.384374][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.386444][T16275] [ 450.387258][T16275] The buggy address belongs to the object at ffff8880254b1000 [ 450.387258][T16275] which belongs to the cache kmalloc-128 of size 128 [ 450.391637][T16275] The buggy address is located 56 bytes inside of [ 450.391637][T16275] freed 128-byte region [ffff8880254b1000, ffff8880254b1080) [ 450.395961][T16275] [ 450.396779][T16275] The buggy address belongs to the physical page: [ 450.398828][T16275] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880254b1c00 pfn:0x254b1 [ 450.402077][T16275] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 450.404792][T16275] page_type: f5(slab) [ 450.406148][T16275] raw: 00fff00000000200 ffff88801bc42a00 ffffea0000aa32d0 ffffea000001fd90 [ 450.408849][T16275] raw: ffff8880254b1c00 0000000800100009 00000000f5000000 0000000000000000 [ 450.411557][T16275] page dumped because: kasan: bad access detected [ 450.413636][T16275] page_owner tracks the page as allocated [ 450.415486][T16275] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (kworker/u32:3), ts 50735448757, free_ts 50040859128 [ 450.422084][T16275] post_alloc_hook+0xfd/0x120 [ 450.423634][T16275] get_page_from_freelist+0xf48/0x3530 [ 450.425434][T16275] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 450.427365][T16275] new_slab+0xa2/0x640 [ 450.428676][T16275] refill_objects+0xe3/0x410 [ 450.430165][T16275] __pcs_replace_empty_main+0x376/0x680 [ 450.431985][T16275] __kmalloc_cache_noprof+0x479/0x6c0 [ 450.433915][T16275] __hw_addr_create+0x57/0x220 [ 450.435515][T16275] __hw_addr_add_ex+0x32b/0x650 [ 450.437103][T16275] dev_mc_add+0xb6/0x110 [ 450.438503][T16275] igmp6_group_added+0x3e4/0x4c0 [ 450.440101][T16275] __ipv6_dev_mc_inc+0x701/0xbd0 [ 450.441713][T16275] addrconf_dad_work+0x276/0x1360 [ 450.443725][T16275] process_one_work+0xa23/0x1940 [ 450.445359][T16275] worker_thread+0x5ef/0xe50 [ 450.446936][T16275] kthread+0x370/0x450 [ 450.448254][T16275] page last free pid 5740 tgid 5740 stack trace: [ 450.450272][T16275] __free_frozen_pages+0x79f/0x1090 [ 450.452089][T16275] qlist_free_all+0x47/0xf0 [ 450.454005][T16275] kasan_quarantine_reduce+0x1a0/0x1f0 [ 450.456304][T16275] __kasan_slab_alloc+0x69/0x90 [ 450.458328][T16275] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 450.460676][T16275] kmalloc_reserve+0x148/0x350 [ 450.462694][T16275] __alloc_skb+0x185/0x710 [ 450.464206][T16275] netlink_ack+0x117/0xb80 [ 450.465637][T16275] netlink_rcv_skb+0x333/0x420 [ 450.467150][T16275] netlink_unicast+0x585/0x850 [ 450.468679][T16275] netlink_sendmsg+0x8b0/0xda0 [ 450.470331][T16275] __sys_sendto+0x48b/0x4e0 [ 450.471817][T16275] __ia32_compat_sys_socketcall+0x59a/0x770 [ 450.473694][T16275] do_int80_emulation+0x14b/0x720 [ 450.475277][T16275] asm_int80_emulation+0x1a/0x20 [ 450.476826][T16275] [ 450.477628][T16275] Memory state around the buggy address: [ 450.479370][T16275] ffff8880254b0f00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 450.481853][T16275] ffff8880254b0f80: 00 00 06 fc fc fc fc fc fa fb fb fb fc fc fc fc [ 450.484332][T16275] >ffff8880254b1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.486827][T16275] ^ [ 450.488699][T16275] ffff8880254b1080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 450.491175][T16275] ffff8880254b1100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 450.494136][T16275] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 450.497206][T16275] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 450.499649][T16275] CPU: 0 UID: 0 PID: 16275 Comm: syz.3.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.503425][T16275] Tainted: [L]=SOFTLOCKUP [ 450.505193][T16275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 450.508698][T16275] Call Trace: [ 450.509760][T16275] [ 450.510713][T16275] dump_stack_lvl+0x100/0x190 [ 450.512268][T16275] vpanic+0x552/0x970 [ 450.513564][T16275] ? __pfx_vpanic+0x10/0x10 [ 450.515015][T16275] ? mark_held_locks+0x40/0x70 [ 450.516526][T16275] ? irqentry_exit+0x24d/0xa00 [ 450.518068][T16275] ? __release_resource+0x276/0x2c0 [ 450.519698][T16275] panic+0xd1/0xe0 [ 450.520881][T16275] ? __pfx_panic+0x10/0x10 [ 450.522347][T16275] check_panic_on_warn.cold+0x19/0x34 [ 450.524512][T16275] end_report.part.0+0x3a/0x90 [ 450.526245][T16275] kasan_report.cold+0xe/0x18 [ 450.527744][T16275] ? __release_resource+0x276/0x2c0 [ 450.529415][T16275] __release_resource+0x276/0x2c0 [ 450.531159][T16275] release_resource+0x26/0x40 [ 450.532721][T16275] pci_remove_bus_device+0x2d3/0x3b0 [ 450.534381][T16275] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 450.536390][T16275] remove_store+0x123/0x140 [ 450.537815][T16275] ? __pfx_remove_store+0x10/0x10 [ 450.539381][T16275] ? find_held_lock+0x2b/0x80 [ 450.541029][T16275] ? sysfs_file_kobj+0xe4/0x290 [ 450.542609][T16275] ? sysfs_file_kobj+0xe4/0x290 [ 450.544148][T16275] ? __pfx_remove_store+0x10/0x10 [ 450.545728][T16275] dev_attr_store+0x58/0x80 [ 450.547162][T16275] ? __pfx_dev_attr_store+0x10/0x10 [ 450.549111][T16275] sysfs_kf_write+0xf2/0x150 [ 450.550813][T16275] kernfs_fop_write_iter+0x3e0/0x5f0 [ 450.552535][T16275] ? __pfx_sysfs_kf_write+0x10/0x10 [ 450.554200][T16275] vfs_write+0x6ac/0x1050 [ 450.555565][T16275] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 450.557391][T16275] ? __pfx_vfs_write+0x10/0x10 [ 450.558868][T16275] ? find_held_lock+0x2b/0x80 [ 450.560337][T16275] ksys_write+0x12a/0x250 [ 450.561797][T16275] ? __pfx_ksys_write+0x10/0x10 [ 450.563547][T16275] __do_fast_syscall_32+0xe7/0x970 [ 450.565177][T16275] do_fast_syscall_32+0x32/0x70 [ 450.566694][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 450.568654][T16275] RIP: 0023:0xf7fc5fec [ 450.569944][T16275] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 450.577089][T16275] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 450.579766][T16275] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000140 [ 450.582646][T16275] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.585200][T16275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 450.587679][T16275] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 450.590141][T16275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 450.592674][T16275] [ 450.594283][T16275] Kernel Offset: disabled [ 450.595634][T16275] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:47:42 Registers: info registers vcpu 0 CPU#0 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f305 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc90003f37530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b6e3229 R15=ffffffff85a0f2a0 RIP=ffffffff85a0f32f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000c000 CR3=0000000072d3d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c362540 RSI=ffffffff81b53ece RDI=ffff88801c362540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f724ea06 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc900043a7f48 RCX=0000000000000814 RDX=0000000000000000 RSI=ffffffff8c3fe500 RDI=0000000000000014 RBP=ffffc900043a7f38 RSP=ffffc900043a7f00 R8 =0000000000000000 R9 =fffffbfff224375a R10=ffffffff9121bad7 R11=0000000000000000 R12=ffff888025114a80 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b6abc8 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005584f5d42000 CR3=000000005fe34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b53eaa RDX=ffff88801c702540 RSI=ffffffff81b53ece RDI=ffff88801c702540 RBP=0000000000000003 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=0000000000000000 RIP=ffffffff81b53ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5404ff4 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000