last executing test programs: 4m30.951324463s ago: executing program 1 (id=1857): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x20, r1, 0x301, 0x0, 0x25dfdbfa, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (fail_nth: 7) 4m30.871448422s ago: executing program 1 (id=1858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040fe1b1"], 0x7) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) pipe(&(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0), 0x14) 4m30.811041777s ago: executing program 1 (id=1860): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x76}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0xf0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='rpc_pipefs\x00', 0x12b6c3, 0x108) r4 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127b\f\x00\x00.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r5 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) 4m29.860994028s ago: executing program 1 (id=1871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x554e, 0x2, 0x3, 0x9a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000000c0)) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/kernel/security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/security/apparmor/.replace\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c65000705", 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m28.887474677s ago: executing program 1 (id=1881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd29, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8553}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 4m28.291290798s ago: executing program 1 (id=1883): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x440e, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0xffffffff, 0x263, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000140), 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xa78}}, './file1\x00'}) bind$x25(r4, &(0x7f0000000080), 0x12) connect$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000009c0)="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", 0x1000, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000026c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000044) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000019c0)={r7, 0x50, 0x72}, &(0x7f0000001a00)={'enc=', 'pkcs1', ' hash=', {'sha512_mb\x00'}}, &(0x7f0000001a80)="5f9dcff5cc2f585f68b091bc1d1a7feef8496c82b77d8904b8a61267067d4e2b8b43d38eaacc34f661d58c761f440af57d844e3484aaa62b72c3f7d500f943a57497d31411a96a1bfbf692ad0ea1670c", &(0x7f0000001b00)=""/114) 4m28.226394107s ago: executing program 32 (id=1883): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x440e, &(0x7f0000000300)={0x0, 0x0, 0x8000, 0xffffffff, 0x263, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={0x0}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, &(0x7f0000000140), 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x300, 0x140) r3 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xa78}}, './file1\x00'}) bind$x25(r4, &(0x7f0000000080), 0x12) connect$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000480)=""/214, 0xd6}], 0x1) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000009c0)="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", 0x1000, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000026c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000044) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000019c0)={r7, 0x50, 0x72}, &(0x7f0000001a00)={'enc=', 'pkcs1', ' hash=', {'sha512_mb\x00'}}, &(0x7f0000001a80)="5f9dcff5cc2f585f68b091bc1d1a7feef8496c82b77d8904b8a61267067d4e2b8b43d38eaacc34f661d58c761f440af57d844e3484aaa62b72c3f7d500f943a57497d31411a96a1bfbf692ad0ea1670c", &(0x7f0000001b00)=""/114) 3m31.827926371s ago: executing program 2 (id=2443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002a000000850000000f0000009500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="0000000000000000caee8fedca77", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3m31.738111031s ago: executing program 2 (id=2444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002a000000850000000f0000009500"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="0000000000000000caee8fedca77", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (fail_nth: 2) 3m31.530558021s ago: executing program 2 (id=2454): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x19, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) 3m31.451324235s ago: executing program 2 (id=2447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x554e, 0x2, 0x3, 0x9a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000000c0)) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/kernel/security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/security/apparmor/.replace\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c65000705", 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m30.592872547s ago: executing program 2 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001800)={&(0x7f0000000380)=@in={0x2, 0x4e22, @multicast1}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="b2853f2b5164a46bc10f31372fcd8c7eb9f83fcb4416766ce91d6d6668c08458e86c8dd9c403464d8df39adc15b64ab9b5d2dc685fd01e2eb927f0c95e251845a59eaad026fccf309248637bd42ddf215a35b08479499a9cc3116f7c22f53d473c114bfd8b9ac0f7bb199d1cf02b", 0x6e}], 0x2}, 0x1) r1 = openat(r0, &(0x7f0000000140)='./dev/mapper/control\x00', 0x246441, 0x28) ioctl(r1, 0xc138fd10, &(0x7f0000000180)="0400000000000000000000007e01") mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) setns(0xc9, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x3e9, 0x4, 0x70bd2d, 0x25dfdbfe, {0x6b, 0x0, 0x0, r2, 0x5, 0x2, 0x9, 0x94, 0x0, 0x8000, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x20044000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1e, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20) read$FUSE(r3, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x2, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000000800)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffb, 0x2, 0x0, '\x00', {0x2fff, 0x0, 0x8000000001010000, 0x906, r8, r9, 0xc000, '\x00', 0x6, 0x27efc00800000, 0x20000000081, 0x3, {0xa, 0xc}, {0x6, 0x3}, {0x5, 0x1}, {0xffffffffe, 0x7f}, 0x80008001, 0x6, 0xfff, 0xc}}}}) read$FUSE(r1, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) lstat(&(0x7f0000004a40)='./dev\x00', &(0x7f0000004a80)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = syz_open_dev$sndpcmc(&(0x7f0000006b40), 0x7, 0x8000) sendmsg$unix(r0, &(0x7f0000006c40)={&(0x7f0000000240)=@file={0x141205222b49c306, './dev/mapper/control\x00'}, 0x6e, &(0x7f00000029c0)=[{&(0x7f00000002c0)="50f0bd02c30aa573434d4c84089144c1abd14b1a7677109c54de29ee11b07b854af3bbcc421d6d1e624af9079db008fa056ad825cdac24f9808c19296bad703ac7b4ba5b6b1ed6fb7684dc1b00064ad8c3703449cfa5b89efea2be49beb970743f8a63b2e21feea127f7d5e515daafe9410d5b157fe6f2e4c95b0ae3badc3168d21e7e4d30038bdb246f0fb83306c847a2b559872d95", 0x96}, {&(0x7f0000001840)="20d643e2d84967a0f9da8c78f4ab9fd1aff9c8a5b393d0d404d0f2f812c9ff7a12332dce56ea16951ed7d6a6c8b7d055580b72f54bd370d0cfe1828090e81238bdf9cf439267734149cd9c7b81f01e9b23fc6155cad5ef9683099842876963d1945bd76873c9dede9846b0690884b76fb2d8c809080588a3b8ac92f037314129da2f53237dc794e41fa487a362604216f652cc67f23d3c063c96d309d1b4a4444e0f192f27aa2e720640f3924aed6dbade6bf50842076cff7f265e540974dea941cc9a9da5a784afbfa7bd65b97ff96c150059ee22f77e789970f211d56003208f975c80362214b60d3e0ba7f2543254413e8c12f52e88a6f9ff3d8f7f33ddb7af5cbb0831089c61cc12022b27b44cccda4ab7146ca6ac9d813114ea3b75807fd6e2f2c85be4cc4dc765017d5d7c0cd90ef6eca40399055dc601d4984d0099f1da098c5042866346a442fde65bbc36cf62cb4a3228170eac3a06e4f068696ba204cfed65cec755eff9b5d12f376ce4e062ad599d4acc1855f687fdd7873a5d1a34006781684e6d3bb98276df491fca56b436a9262745187cc3441c28a0c151526e6ff4b37e4f2c6e1d20c7f34160d1d132d49648afa19457c9774c94b4807c6d996421a3ebd8585cbc81e968fa7cb82bf6c6d52be1675256fbda1e357556d3d89604120a6aa741723365b30f7ef4c24e1996340d8831277e8e330cb8ccebd5bf6d6aa93a8230f63d61546a5b657aa96293cb5cc15209cc0d9515e2a7e4c6b2ef8a24097184e1e53601341433d8dc9c7855bcf7cc774425d9a9dde4e76f414667e4f2b0c8d56c6b24db1432d82329250901933c93198928199f2c6f93cbeaba57a6a5ad237b90b80887c67fd89b083b1b9ccd74a1f99e9c59c0ecade4f937e7f7138f7bb0876062372dcd2dc58f578fb625a7f6b355d91f3d1c3c0307c75c578750837a3b8d9a86614a60c09e18bf5c744fd0c4bf886ee5b078b6624f5ca431652c093c0a128d7f2c9e79e154186cef2f46616d29a9747c10094e71219a3ba6935b49e953f2764c71fa827e8095b76dc92a636b0548a6ae7e09076f84c42338105d33c65bb7b7a42dbf82c557a539a6b32a6373eb41ee2f7563bfa974cf4423eb2e2d680168d7b88cb4537a9c26de33c7efe4132b6803597fa7f346e994dcfc2c0fb23c2eee8bfa3317b585d73ca29687a57004a5f75e13642419a3b10b00e0d565bc9c6d9bb6eaf52ca258964718b795a15eba19ca272e3a399bb0bb4e1c8712fd8e95d085c5ec63bec1690b600511f6ed00337f498dbd283802657bc629496ac0b2f83839b820c47f1a225fc3fe2bba529bb5a3539c47c0682e502808836160443d369387dd5edf6549e69abc4185931285a787d72ae376b49c51688f76862430ade2d67816af3593802ebb4065925aca046f11980af20fb617aa1e42e60adc391e16ea547415cc9ed1fbb0e595f46be5f47b75fd4b0f6da50c1679d722a73f174c075fc4994becf74d28a3f1886f19b104584969bb2eb467d289f0f2fab6c9cb01ee7dd3aa768de45a03c5de562b16c343bfc55f160a8966246d51c3126104f24faa87d5ee9b74b98e74092cb56274a0c17eef7768c3800a0e493c5dfa0742baabcf3ffab05e2f6f4dcf8997eb94ddcef45b0c15ab9e9540a3a9d94da66df5e89dc909ecb4b2993c6bda89a4ec324afdfc4511c262d2c0f0eeaeee497e55d15f00be31330ca4cf87e807ec30439efd2db9de2f3223371ecb132edfd1a33999228e352fe739611043e162e1c01e2daccb276137b09753cc719687f51898ece2de4440fdac1e6c3c6f76b5c3dd9e5b5aacfdde9f5839248d820120575516fb207522ff8d037c78ade787612fe5c651eda08575b1d340aa543b696fc2de971bca639a574bbfb52d2937e5531ea860c4e12d370736248128809454dfc7e817678949899f777c0344c90b2c7b138a69c58c67663aec760564ff346202444d50a091a108c3e7c62ff578d485aa701a90c2f726ced73743542f0523b53763669417a3900b23499810deb64ac57ae67ce32e1265ed43c067ff19d6b2e01de68a84c198079a6ae1c7ad57fe624885f5060014f7301a1a88596246de6a37a35508b8559c8cc38963f51e86f5e0351e8fe5e2992799550e7fbca5619a13a95c290a0a89ed5fc35f9af0d05bd3e794f54bf343523f7d94e79399f3dfd46bc09fbd463fff9f97e291657db71989d7689cdc99daaa0da61ca9d6b7e6f22c4939eff0a66ceb829b835cedc883763dd46925af2770f2e5cfd3acef56b2c4e340e2049505b33cfe0044215baa394dc7518f05c45ddc824d7dc4ff9cc38b71e9d522a5523531a8ddd86fc5ff85c2f25b4c5c05f3ccbd695195fa512da2f4e45c4a5d769d6bd15a8df9144baae2b9e1145f277a15ba91abdae650d08360a29945dbb8163ef8dde72162107419ae0374d26527e9499bedf8615a8589e14a8b2e620cac84e2ef0e42cfa2ff591538b791b62b3ac13b409d952491e7cf9f0e94b4c799890f6c3652d881c5625ffb346f3e9e05ed3201153d5487eaa4d522fcc2904bc195833fca4815b2403cc61b9f3dc266bd72adcf01e53d2d597512c388b4d6e49d05486e7fd374cd9cdc4b910f19f7360eac1bb00fd419b7a9fcbb0d841c4fe8d35c5e3d481453d12a0fd0580ec2ef3459f5a5e234610de8fcdee37a95cfc6d0c971e75ada58fdf7707c5202183b39597036528b19871f49624e2099402f162dc5bb1fe48be888cdecec4611e2cf1d1b419e7c1efd30b287c5004b6f2c0b3a75683fef632c221af46485c74c86a46ba47156cba1a8bd6a4f879cfceb1e1302a834686b37993c7e9a691d6c4f11400303e7b71d9f72b105699d7a379c6967bdb56c639e28d05840262fb43167afed4bff8d146f8b4f64653d6f0823c6fa4d46f17e22d4bc86d6d55b2155869dd053c1f393478a893fdf3f45cc5ac4207de61b2d9e61c8b5875782caf0e3d908e10faab61abb942d5119fa0d23ab5b083671b30ae06bd526bb98c1787b0996acdde0ef367dc9a852819b54d06512a3694bee975af4f8b2ec213300a4cb8d436132ae589e39664d81358566a4131a5209e90b6883936026f8f80509bacdbf3be81cb66ceb97ea6b47557dce58a099dc9cc4a7b35efd463482d2392eb2cbe65bf5a979d28b056d034c40ae6f98b964228ad8f88e41c717a901d3509a42be4d9c82ad106e4f053a5c38f5038e1495bb4b0f44f59c4e615e548870cc3ffe7de92419564b7b1ddce77958b97b332776ff37910a483226b7a45267693686c74ee321d2c96f20ab18676b70aa7f372fe1aa37d128feb5cd9f18297a9782aee245266ffdd70f9c4768609c09531d7b13b1bf82e89c96d743402927ca80299bc07082a69078750fb9f8126cea630f1fac1d502b936f6e2bb0cb0008739a974e940c2c2d43a70e5454cda1c8b4d25f60591ade50cc160892f5a381d5cd54a95203805fab6223e042762fae1136cd12bcb3b788ccc0046c9f4048f527b45ca84ef86770f1eb5eb3db0c53a22869e3df222a90af61f0c4704a9cfdecc7dea43ea6df140b673bc51152ff7719a3c388f39afd90dfe7dcb1c33e330b251fe7217dd07b01dbcd2ddf6211deecde7c51b9225405fec959502490c0e45ccb4aa67ad47098ad3d4cbe3676eda47d8345fa25d3850e644ace40e5cc175513849f05ac2819a14d4efa49112b029d85bcb79c2c9deb4b5c7cc2d96595c508ab06886d619343aac7e32731d5e7956457b0b5772fe6670ac89348a1ddbe668ddbcccff3c1396b4002a4eefce63061bff7568a4852dadd1befd14cab2ac33cf3b59557500b5429503cf3e631dcc1bfadb138af27e74fb775aedc67e2d4d7eb22e204d4ccce8f8a37bc4e35aaa1f3a21c09f148a850b078b40a0bda3dd9f60dd005068e499ce484eeb7d411939e1d0e83034b6dfd630be2b9f9671550462d95e5609e129cc892ae67bcccc703931eafd51e776c7464efd57114de7791d592c00e2421604f8be7d420eb59bf02caf71bc6515f188a55ea6c29fccfc725b7c4b7b4bb2784194bc015445b01cc7b50541b1d8f6fbd94083a3dae5d985d3e3eae7a63fbd94428696c9b693481951824e1b2a1ef245f42e895bbbaaaff743279070e4d08aa171eadb6adb5edea651210fe697ff5473c7972f8694ceb397517fb9cfe01d721d121ca00bc22415ece24bbc60ba553529eaa6e8667db10bfdb83c8b30400d7d9032f50820f27f7546cdf57e390e4354eef38dcee3ba888e8e1a419cca46e1c1164e2409f4585e0384e824b2d4bdb72ceba61a9fd3e9ecd07a0279c3113b204d819c2a7b50e6318a5ca383189a4c49471d4dfae844565f0898dcc6f335ef8cb452cc81db2e83de205c9d644b19f14b04c8a442eae1265d04d4a8472159419b2193dbcc8fbca8134630a8d3709c32fce5eea0d0ce6bda62342de7e3f8e872742af57df12d9b53f8a2ac63ca14f8c6741782bfe4abd7199338dd1baa8e4c50e6d3acada17592d69f7f7bdaba867ab8bd14ea53df133c41200bc2a4bde27537d04944de9a28b9ab69be5828643fd3a83bd8fbdfebfb64c189f043733b980cfb6abdcbf003eb2312fbe38f0b06a5e175cb08c513315b88cd7bb3ff54a9ebe716cb10442b072482f3e4c76e4c8d57b8c9cc4a659b6bc1dba34562ce3784688210070ca1ec6b5d34e7b92b4397ce85bdec5ebb4ff00115e2bbc4080879e101dab86c9693ea36e39bb01b326332ec0124f67e913ee7c799666f348bc42a2cc5281a41b3f962729b39cc939e1e0e8a1819897642017a1c7abb5c3e949b451baccef24cde0fab2a0ba4d7a73eb46719cef63a69eae23bbcee74aca1e01bc9bcf625eb188a2c7b7e51fde5df3f2909cb1c4ab166e85c420c584822a39be1c746f5f1b67b35667f0fd07781f13cd387b9ffa45e3edc2295524e03af74ff824c134bd60355c02b7266a5a208199351c5b146b22bfdb0b1fa896fa6cdc2e336a6ab879ab2007c8aafee9c36e7ac221520548073e66b4ee7eb4a9db951a77c18edf65d37c63bd96c824b7793ffc9325509f3f512d75530f758c4c1dae5e3a6e370230ed5bb69feee4508220862211ac60df82a001e0d5b8a11b91aae144e994ca4cfb64806c794df52f1cbf1b472b973f8ed0172df472d6a0402567516ad1da097c19b5339d707de2be57d50ece69b482e5da5e918396a2c0a937e51f3e0301b7b6a5fbe82eecca77416eb7252ccfe7d7004c6e770ffe13e6f665f784aeaa3d7603b145de5d30ac428d1b8f05b78e444b547e338ee9c69d6374d6baae9b62f14b780a2721879244a13b2eda20c5221535c511c124a2ae880002e4dcf4530f6befc540da7a8ff9a6e63602c46463d4ecde12d164057d6eac059c32add56f37ec6c312d9b8542fb01d72140439230fffa47d1dc9f5639f37b9488db0392de00ca58091f0f07d9511310b43e7e4c6d972a1ea260474a0b42f022fa090ff8426206f7fe9ef30db2e517691463c0e82dbbce5d9fc787014513d304b24cd6f372730f108516f2189ebe919c561373e2e41e0b57f2d8f87a1f516f7df41d82924e4ef152920286e55aecd4462ee2f3e7d364372f77c8f563d142db47f1d7d5aa6de9118aa453ce12924f953a10a902c1be8f8b2618844add427e474d0a39d053ef01429506206d575ccac050042e24352186a863e8686dcdc036b6ff6f2379a43ec6deb104287073ad44753fe521c239e7459f08a18aebf0e915bec6abba84ee9d22f0604e72edccb8d3d59c02a3aacde8", 0x1000}, {&(0x7f0000002840)="0b2b737f72052456fb027a3be12823bc7c8e3dd4b33caaa2ffe2fb842b131d266d7541cfe2e570bca6aeab5b7ba00195d71b0c6751d4ecee0bbd778abb63b40c4006dc5ac1a064cb12eff8db60ef49adc27344ebbfdbdcf7bb2b8cd38797c4ae50d743676bae331e", 0x68}, {&(0x7f00000028c0)="d21d52550d87e034ae190d35c00015a3a4a3fbafd0d5330467ba138ef0d7d9c337d1682f832bdb4961dc1f370a63b0f21cd605289f5abb81c28568efd55f77fb6c9298990740cdb8e74dc06105a5e0489ebca384287065b2f0edff8a6a88e94e6339223d5f08e3509cb98baef76e2748a573269edffd729f7f71c02b6ba5dda671e425bca2bae768492195584ce13bc03c7ce16e45de8201d79256374973bd51462fda87e972324dfa11b6a66085d522405df75ee9ce3db3df823b3cac87dbd64f94", 0xc2}], 0x4, &(0x7f0000006b80)=ANY=[@ANYBLOB="100000000100baa5786fac5b", @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r9, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="180000000100000001000000", @ANYRES32=r13, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1], 0x8c, 0x1}, 0x20) r14 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000400)) sendmsg$nl_route_sched(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x800, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0x6, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) acct(&(0x7f0000000000)='./bus\x00') 3m30.131111317s ago: executing program 2 (id=2459): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x10000004) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a1) recvmsg(r0, 0x0, 0x10140) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4050) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m30.043156205s ago: executing program 33 (id=2459): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x10000004) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x1a1) recvmsg(r0, 0x0, 0x10140) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x4050) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m27.94135202s ago: executing program 3 (id=2475): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0xc000, 0x1000007, 0x12, r3, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000340)=@phonet={0x23, 0x1, 0x8}, 0x80, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$ttyS3(0xffffff9c, &(0x7f0000000180), 0x2c0540, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x4210) r5 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x1, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000300), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000100)={0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x100, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0xc, 0x2a}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) socket$rds(0x15, 0x5, 0x0) 3m27.738842977s ago: executing program 3 (id=2476): mount(0x0, 0x0, &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mprotect(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) set_mempolicy(0x1, &(0x7f0000000000), 0x104) 3m27.678813772s ago: executing program 3 (id=2477): pipe(&(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80000) r6 = timerfd_create(0x1, 0x0) read(r6, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r6, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) ptrace(0x10, 0x0) ptrace$poke(0x13, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 3m26.620883451s ago: executing program 3 (id=2479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x554e, 0x2, 0x3, 0x9a}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)) ioctl$FS_IOC_GETFLAGS(r2, 0x80046601, &(0x7f00000000c0)) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{}, {}, {0xe, 0x1, "24fcaa8fc05a"}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/kernel/security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/security/apparmor/.replace\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c65000705", 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m25.628381065s ago: executing program 3 (id=2486): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x101400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0xfffffffd, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='s\x05b6ou', &(0x7f00000002c0)='c:::\x14\xb2\xda\xa4\xa9x\x03\x00\x00\xedR\x00\xc6\x80tpS\xd4.\x93(PL\xdc\xa1\x8cNi\x8a\xe1\tcV\xdd\x9d\xcd\x9f\x19\xe5$\xddJG\xbcOn[\x0f\xd5\xe5\xddO\x02\xb3Ag\x96\r\x00\xa99\x19\x9b\x87\a\xd5`\xf8m\\\xfb\xcd\xc6\xa8.V\xc2\xa5\x83\x1b;#\\b\xe6h\xa3\xbb}`\xdf\xfa\x15\xfa\x8d\xbc4i\xe9\xc70?=\xeav\'\xc3m\x83\x19o\x83,2f\x1e\xfb\xaa\xa3\x1b\x7f\x16\xff\xd4\x95\x85x\xe1,U\xfe\x1cb\xf6\xe7\xe8\aJ\x14u5\xe9\xf9\x84\b\xfc\xefz\xc4X+\xdb*2,\xe9\xf7\xdb`', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0x1) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0xfffff91b, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400041, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x8, 0x4, 0x20001e5b, 0x3, 0xe64, 0x3, 0x6, 0x0, 0x0, 0x201]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 3m24.086139407s ago: executing program 3 (id=2497): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3ac, 0xec, 0xec, 0xfeffffff, 0xec, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@ecn={{0x24}, {0x20, 0x31, 0x1, 0x4}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @gre_key=0x6, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @multicast2, @port=0x4e21}}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffff00, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0xe, @remote, @empty, @icmp_id=0x64, @gre_key=0xa}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x408) 3m23.584970616s ago: executing program 34 (id=2497): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3ac, 0xec, 0xec, 0xfeffffff, 0xec, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@ecn={{0x24}, {0x20, 0x31, 0x1, 0x4}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010100, @empty, @gre_key=0x6, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @local, @multicast2, @gre_key, @gre_key=0x8001}}}}, {{@ip={@rand_addr=0x64010101, @rand_addr, 0x0, 0xffffffff, 'lo\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @multicast2, @port=0x4e21}}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffff00, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0xe, @remote, @empty, @icmp_id=0x64, @gre_key=0xa}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x408) 5.810487354s ago: executing program 4 (id=3476): setns(0xc9, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x14) (async) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000119078000000000000000000004e200064907802000000030000000100000056805c734ee222c29de4125f81f60900000000000000cd24e0a1ac2291500733467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb3db3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000240)={0x8, 0x8, {0x0}, {0xee01}, 0x1, 0x1}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_io_uring_setup(0x40e2, &(0x7f0000000300)={0x0, 0x9142, 0x10000, 0x0, 0x53}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40000, 0x0, {0x0, 0x0, 0x9d}}) io_uring_enter(r7, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) 5.640222639s ago: executing program 4 (id=3477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfd, {0x21, 0x0, 0x600}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x4040814) 5.639701393s ago: executing program 4 (id=3478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x49d, 0xfff, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x18, 0x3, 0x46d, 0xa07, 0x0, 0x0, "0600ff0900a10185021901292015002501750195408102c0"}}, 0x130) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) write$UHID_INPUT2(r6, &(0x7f0000000200), 0x6) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="26f66f24e064753ce4804b2572aef52eba25aa5b11e8adb8f2099b96a818e2a6c80be6dd0f5a9643f6225e57d3ef52c938305637fabcb522ba34ac24b7efc6bc92b4644d00"/79, @ANYRES16=r5, @ANYBLOB="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"/1866], 0x750}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) 4.69059397s ago: executing program 5 (id=3484): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x38, 0x0, "88bc9122e98953"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 4.560450916s ago: executing program 5 (id=3485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="cd92"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="0900ffffffff8eff80ec00310800401200480065000009029078ac1414bb0a0101024424f4337f00000100000003ac1414bb00000006e000000200000005ac1414aaffffffffe10556f11b00000014029078ac1414aa"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x1d, 0x3, 0x0) write(r3, &(0x7f0000000200)="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", 0xfec4) 4.338322493s ago: executing program 4 (id=3487): setitimer(0x2, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) unshare(0x6a040000) (async) syz_usb_disconnect(0xffffffffffffffff) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x8, 0x40020b, 0x6, 0xa, 0x2]}, &(0x7f0000000140)=0x50) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="90294837876a5a168b3a5a42cd2028d36dbbe89ebe16ff0f000000000000fbafa4", @ANYRES16=r2, @ANYBLOB="010825bd7000fedbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000280050800500020002000000110001003203597dfac48362427a40c8940000000800030005ac0f00"], 0x50}}, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ioctl$TCXONC(r0, 0x540a, 0x1) 4.260440818s ago: executing program 4 (id=3488): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0xc}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) syz_io_uring_setup(0x6db7, &(0x7f0000000300)={0x0, 0xb789, 0x1, 0x3, 0x1080004f}, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000280)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000840)={0x2, @pix={0x0, 0x4000, 0x4f565559, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') socket(0x2, 0x80805, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x589b83, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x204450, 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r6, 0xffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 4.259973711s ago: executing program 5 (id=3489): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x1e, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x1f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x0, 0x0, 0x6}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40904}, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async, rerun: 64) r0 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x7) wait4(r4, 0x0, 0x0, 0x0) tkill(r4, 0x3) (async, rerun: 64) tgkill(r0, r3, 0x1f) (async, rerun: 64) recvmmsg$unix(r1, &(0x7f0000007000)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000500)=""/73, 0x49}], 0x1, &(0x7f00000005c0)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f00000016c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xb4}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000006f00)=[{&(0x7f0000001800)=""/36, 0x24}, {&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000004d40)=""/73, 0x49}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/68, 0x44}, {&(0x7f0000005e40)=""/179, 0xb3}, {&(0x7f0000005f00)=""/4096, 0x1000}], 0x8, &(0x7f0000006f40)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xac}}], 0x3, 0x40002042, &(0x7f0000007080)={0x77359400}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x4000) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r5, 0x40046f41, &(0x7f0000000440)=0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7c5bfddbdf25130000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20008010) 4.137977057s ago: executing program 4 (id=3490): memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffd, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) prlimit64(0x0, 0x2, &(0x7f0000000380)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x990ed, &(0x7f0000000540)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x284042, 0xe0) r2 = shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000043000/0x4000)=nil, 0x3000) shmctl$SHM_UNLOCK(r2, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x46002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4.128146326s ago: executing program 5 (id=3492): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)) 3.980584396s ago: executing program 5 (id=3493): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) 3.972898194s ago: executing program 5 (id=3494): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7b1a040000000000850000008a00000079a1f8ff0000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x890c}], 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000840000000200000016001400290000000e000002", @ANYRES32=r4], 0x1c, 0x2400e044}, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000540)={r4, 0xd5, "cd6540f88f2bd811a29349b8790bc8445f19dee16bb99f04edee96d215daa007d4f0b2ea5bd7bc50eece519aefab04ed03e49443cceacbff1b5b08fcfe2c3a6c9a22fb967c10c10ac7f575da4b2690414aa4a89b454981b4ace46a5d9be793e99af44f3afc9d0f3604b38c82d58c9cc559299b9ece14b92957c8da66e66186a82252d11e354d13d3631d2c03608d052cab4c3d0f648932befe0ee0d4e9b6ec877fb1b0743125878f4ebc984967af077748c9f9479ffcb012ef1e2978456a683b38846fae897c7d327ce71a9ba0eb385217623a8483"}, &(0x7f0000000640)=0xdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r5, 0x0, 0x1fdc) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r6, r6, &(0x7f0000000500)=0xffffefdfbffffff4, 0x7) r7 = syz_io_uring_setup(0x3bd7, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) sync_file_range(r7, 0x4, 0x5, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregs(0xe, r8, 0x7, &(0x7f0000000100)=""/229) 2.552583315s ago: executing program 6 (id=3501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x1f000000, {0x0, 0x84}}}, 0x5c}}, 0x0) 2.40827307s ago: executing program 6 (id=3503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) fchdir(r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300cfbd31600eace5383825d6a175e4db0256dd13049d3d3c7d01526821045f68f6872c43cfaf52070e2f070000000000000014d5a580b87fefefb1d69541739157a446ca6e8a17bc0689daa03615b068ae9d13fd3a47e4447d1e21563b2df0e625cfd61b8bbf1104cdb2662824605a0744af46054054d6edc9717e652b034d84900d56f15a8b3914c06e4443c4ed4162a91bf59e47820040a786b3aa08510f8bb4fca782970cd8b64ddbb53d38b94fd4f219f06785fe941009bd7753689b847ed88f6d5b07d4797e77f466ebd000574043", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="800000000802000802110000000000020202020202810882848b960c12182404060708fbfff1062a010100"/56], 0x41) unshare(0x22020600) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fedbdf252e0000000c00990000280000120000000400d0000a00c8005050505050500000050019010e0000001e00940002001d0200000000000000020006000500000008000100000003000010009d00"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 1.210075916s ago: executing program 0 (id=3508): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={r1, @empty, @broadcast}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 1.106418444s ago: executing program 0 (id=3509): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="06000000cb237e4f91d0481cfd76256b52d4a3744a3ecb6ce6528af0a1e472b85a05787225f0edc645b610bcf50db4142d6cedc939d281da631c4a80218f6d8f2be77b1fb65db69a8950f60edbcd6fc14c443df6a703ad954121fc56f336fcd72cb7fa4776fad754fa64624f12fe468234a99fc67e323205bf32e8d775403fe5074086b277cc465b7defe3a416f0115c3387587adac3ad2f3bb0f0356abefbe5254427810cea42e193a9c86d9b072fe27fe1e8d966c9bf2fa6170f75794e0a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000000000000e0000000400018004000280"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x9, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x5) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x875, 0xed}]}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x215e87}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 1.020144065s ago: executing program 6 (id=3510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000005c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e21, 0x1, @empty, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5e00}}], 0x1, 0xc0) 973.343107ms ago: executing program 6 (id=3511): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00001f10008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 709.466038ms ago: executing program 0 (id=3512): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000110400000000000000000000000000000d03000000000000000000000400000000000000000000000503000000000000"], 0x0, 0x52}, 0x28) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0xc4, r1, 0x204, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, &(0x7f0000000540), 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x1, @empty, @empty, {[], {0x0, 0x4e21, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70bd27, 0x25dfdbfc, {0x2, 0x10, 0xa0, 0x7, 0xfd, 0x2, 0x36, 0xa, 0xc00}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x81) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x84, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x68, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x50, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xb90}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb}, @NL80211_ATTR_SCAN_SSIDS={0x18, 0x2d, 0x0, 0x1, [{0x14, 0x0, @random="47f4f9953838aff32786693da65b72ec"}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0xd}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x84}}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010002fffffffdffffff1d08000008000300", @ANYRES32=r7, @ANYBLOB="dc002f800c00020000000000000000000800010000000000c4000380050002000300000005000200020000000c00050005000000000000000c0005000300000000000000080001"], 0xf8}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0) read(r9, &(0x7f0000000500)=""/200, 0xc8) read$FUSE(r9, &(0x7f0000003200)={0x2020}, 0x278) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'lo\x00'}) 390.313311ms ago: executing program 6 (id=3513): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x4, 0x20000008d}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001002"], 0x0, 0x56}, 0x20) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030400000000fcdbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2010000000000000240012800b00010067656e65766500001400028005c01fe8b4290d05b61b0009ffffec00"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000001840)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000080)="f9da9187bb08ee602cbe2cb3ab56c1d404da75dc0d", 0x15}, {&(0x7f0000000100)="89d297e8b567bc0518bc186d764bd54814c3658e8ee2304a758debb75948bfa596ca7b7d30ede2c90deaa36122a40f2f00f43be228a3b0df54c2e6c53790385bdae958193b299c1b2e6b2d97", 0x4c}, {&(0x7f0000000180)="bada888cb4a4758d2fb1f63c3f872268ab0475bae56c7611a95176a769a8f877ab94fb0e019b212d78", 0x29}, {&(0x7f00000001c0)="596a3a25c1379d337b55f1a28506acbf11553f5dba10dcb973fdece390468ee3b3ae3ebce50e18639b9b9b9a63af", 0x2e}, {&(0x7f0000000640)="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", 0xf80}, {&(0x7f0000001640)="bbcc5cfc7104f8402b8f122a2476535423a6", 0x12}, {&(0x7f0000001680)="4d798aeb19252de23294af804fc1fad74c6fa02e97db05fed3e852b88c1db0c18640c5c12ceaa35c4125134ae87853763c8fd54816ef180a9f11b40faa26af16ca719b014ab5b0d0b97d51d33b9ebe02fed0f936f72256af682ab1d657be8fe2fcee7dcfa10deabde3d89a7076ff5fdfa9367965ad9c55e27c3c35a1010a8f511cbf3d9f203cad7fe6e4e7e5c4631a07aecc37c4d89b133e63b1420ee557d944c7f7413a6f814f978c7653626061a2cab1977391945b46c7f77566471532", 0xbe}], 0x7, &(0x7f0000001800)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r5, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x10}}], 0x28}, 0x4040000) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x97156000) 227.913299ms ago: executing program 0 (id=3514): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x38, 0x0, "88bc9122e98953"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 60.135872ms ago: executing program 0 (id=3515): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x400, 0xedea0d, 0x1, 0x10, 0x2, 0x1, 0x1}, 0x1c) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) r0 = socket$l2tp(0x2, 0x2, 0x73) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r1, 0x0) syz_clone3(&(0x7f0000000380)={0x40c00, &(0x7f0000000140)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0xb1}, &(0x7f0000000200)=""/200, 0xc8, &(0x7f0000000300)=""/59, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}, 0x58) r4 = pidfd_getfd(r2, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f00000008c0)={0x0, 0x6, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000006c0)=[{}], 0x8, 0x0, &(0x7f0000000740)=[{}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000840)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000940)={r5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, r6, 0x222, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x20008091) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc) r8 = openat2$dir(0xffffff9c, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0xc00, 0x100, 0x1}, 0x18) execveat(r8, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000ec0)={[&(0x7f0000000dc0)='0000:00:10.0\x00', &(0x7f0000000e00)='-', &(0x7f0000000e40)='netdevsim', &(0x7f0000000e80)='0000:00:10.0\x00']}, &(0x7f0000000f80)={[&(0x7f0000000f00)='wlan1\x00', &(0x7f0000000f40)='netdevsim\x00']}, 0x400) sendmsg$nl_generic(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, 0x27, 0x800, 0x70bd2c, 0x25dfdbfd, {0x1d}, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c805}, 0xc085) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000010c0)=0xfffffffc) r9 = openat$vmci(0xffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000001140)={@local, 0x2}) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000001180), &(0x7f00000011c0)=0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'gretap0\x00', &(0x7f0000001340)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x5, 0xfffffffe, {{0x11, 0x4, 0x2, 0x3d, 0x44, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x2}, @ssrr={0x89, 0x1b, 0x2d, [@multicast1, @multicast2, @local, @broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xd, "78a3789dc0eef15389ad1c"}]}}}}}) sendmsg$inet6(r4, &(0x7f0000001500)={&(0x7f0000001200)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xc2d}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001240)="9e9bd78e34ab7eaecf", 0x9}], 0x1, &(0x7f0000001400)=[@dontfrag={{0x10, 0x29, 0x3e, 0x4}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x8}}, @rthdrdstopts={{0x44, 0x29, 0x37, {0x6c, 0x5, '\x00', [@ra={0x5, 0x2, 0xa6}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x63}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x6}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@private0, r10}}}, @hopopts={{0x3c, 0x29, 0x36, {0x3b, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x12c}, @jumbo, @jumbo={0xc2, 0x4, 0x3}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r11}}}], 0xe0}, 0x4004000) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x3, &(0x7f0000001540)) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x0, 0x8, 0x10010, r9, 0x0) ioctl$COMEDI_SETWSUBD(r4, 0x6411) 59.251454ms ago: executing program 6 (id=3516): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$sysctl(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) r4 = socket(0x1e, 0x1, 0x0) accept4(r4, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80, 0x80800) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0xfffffffffffffe85) write(r3, &(0x7f0000000280)='2', 0x1) 0s ago: executing program 0 (id=3517): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/dvb_as102/parameters/fw_upload\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vidtv/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='vidtv.0', 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acl') setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x8) mount(0x0, &(0x7f00000001c0)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x4) ioprio_set$pid(0x2, 0x0, 0x2000) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x19) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) name_to_handle_at(r4, &(0x7f0000000100)='\x00', &(0x7f0000000280)=@isofs_parent={0x14, 0x2, {0x1000, 0x6, 0x0, 0x986, 0x7fff, 0x4}}, &(0x7f0000000440), 0x400) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140), 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [0x0, 0x0, 0xffffffff], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x104, 0x14c, 0x700, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@limit={{0x3c}, {0x10000000, 0x8000001, 0x0, 0x0, 0x0, 0x0, 0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x35c) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x4, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001880)={r4, &(0x7f0000000840)="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", &(0x7f0000001840)=@udp=r4, 0x2}, 0x1c) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 388.142239][T14927] eql: entered promiscuous mode [ 388.143690][T14927] eql: left allmulticast mode [ 388.151679][T14927] ifb0: entered promiscuous mode [ 388.153194][T14927] ifb0: left allmulticast mode [ 388.157418][T14927] ifb1: entered promiscuous mode [ 388.162589][T14927] ifb1: left allmulticast mode [ 388.165350][ T37] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 388.169689][T14929] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 388.181613][T14927] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 388.185938][T14927] e1000 0000:00:06.0 eth0: left allmulticast mode [ 388.191343][T14927] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 388.203808][T14927] e1000e 0000:00:02.0 eth1: left allmulticast mode [ 388.208357][T14927] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 388.210664][T14927] mac80211_hwsim hwsim0 wlan0: left allmulticast mode [ 388.762430][ T99] IPVS: starting estimator thread 0... [ 388.778719][T14954] FAULT_INJECTION: forcing a failure. [ 388.778719][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 388.789152][T14954] CPU: 1 UID: 0 PID: 14954 Comm: syz.5.3122 Not tainted syzkaller #0 PREEMPT(full) [ 388.789167][T14954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.789173][T14954] Call Trace: [ 388.789177][T14954] [ 388.789181][T14954] dump_stack_lvl+0x100/0x190 [ 388.789200][T14954] should_fail_ex.cold+0x5/0xa [ 388.789213][T14954] should_failslab+0xc2/0x120 [ 388.789224][T14954] __kmalloc_noprof+0xfc/0x820 [ 388.789254][T14954] ? rcu_is_watching+0x13/0xc0 [ 388.789269][T14954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 388.789289][T14954] tomoyo_realpath_from_path+0xb6/0x690 [ 388.789308][T14954] tomoyo_path_number_perm+0x23c/0x580 [ 388.789321][T14954] ? tomoyo_path_number_perm+0x22e/0x580 [ 388.789335][T14954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 388.789349][T14954] ? get_pid_task+0x106/0x250 [ 388.789378][T14954] ? find_held_lock+0x2b/0x80 [ 388.789394][T14954] ? __fget_files+0x215/0x3d0 [ 388.789412][T14954] ? hook_file_ioctl_common+0x140/0x440 [ 388.789425][T14954] ? __fget_files+0x215/0x3d0 [ 388.789442][T14954] ? __fget_files+0x21f/0x3d0 [ 388.789459][T14954] security_file_ioctl_compat+0xd3/0x230 [ 388.789474][T14954] __ia32_compat_sys_ioctl+0xc2/0x360 [ 388.789490][T14954] __do_fast_syscall_32+0x13a/0x8b0 [ 388.789500][T14954] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.789517][T14954] do_fast_syscall_32+0x32/0x70 [ 388.789528][T14954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.789542][T14954] RIP: 0023:0xf7f72fec [ 388.789554][T14954] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 388.789559][T14954] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 388.789569][T14954] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 388.789576][T14954] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 388.789582][T14954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.789588][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.789594][T14954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.789607][T14954] [ 388.790478][T14954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 388.871618][T14952] IPVS: using max 43 ests per chain, 103200 per kthread [ 389.247244][T14966] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 389.249678][T14966] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 389.253673][T14966] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 389.255781][T14966] lpc_ich 0000:00:00.0: No MFD cells added [ 389.752465][T14980] __nla_validate_parse: 6 callbacks suppressed [ 389.752477][T14980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3133'. [ 389.768901][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3134'. [ 390.161601][ T57] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 390.322410][ T57] usb 11-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 390.328928][ T57] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.335948][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.575955][ T57] qmi_wwan 11-1:1.0: cdc-wdm0: USB WDM device [ 390.619079][ T57] wwan wwan0: port wwan0qmi0 attached [ 390.824535][T15011] FAULT_INJECTION: forcing a failure. [ 390.824535][T15011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.831475][ T57] qmi_wwan 11-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, a6:0a:68:52:47:94 [ 390.840209][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.5.3142 Not tainted syzkaller #0 PREEMPT(full) [ 390.840225][T15011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 390.840231][T15011] Call Trace: [ 390.840236][T15011] [ 390.840240][T15011] dump_stack_lvl+0x100/0x190 [ 390.840258][T15011] should_fail_ex.cold+0x5/0xa [ 390.840272][T15011] _copy_to_user+0x32/0xd0 [ 390.840290][T15011] tomoyo_flush+0x161/0x520 [ 390.840308][T15011] tomoyo_read_control+0x123/0x540 [ 390.840318][T15011] ? tomoyo_read_control+0x115/0x540 [ 390.840329][T15011] ? __pfx_tomoyo_read+0x10/0x10 [ 390.840347][T15011] vfs_read+0x1e4/0xb40 [ 390.840363][T15011] ? __pfx_vfs_read+0x10/0x10 [ 390.840382][T15011] ? find_held_lock+0x2b/0x80 [ 390.840399][T15011] ? __fget_files+0x215/0x3d0 [ 390.840416][T15011] ? __fget_files+0x21f/0x3d0 [ 390.840435][T15011] ksys_read+0x12a/0x250 [ 390.840449][T15011] ? __pfx_ksys_read+0x10/0x10 [ 390.840462][T15011] ? ksys_write+0x1ac/0x250 [ 390.840476][T15011] ? __pfx_ksys_write+0x10/0x10 [ 390.840492][T15011] __do_fast_syscall_32+0x13a/0x8b0 [ 390.840503][T15011] ? lockdep_hardirqs_on+0x7d/0x110 [ 390.840520][T15011] do_fast_syscall_32+0x32/0x70 [ 390.840531][T15011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.840544][T15011] RIP: 0023:0xf7f72fec [ 390.840557][T15011] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 390.840562][T15011] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 390.840572][T15011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 390.840578][T15011] RDX: 0000000000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.840584][T15011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.840590][T15011] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 390.840596][T15011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.840609][T15011] [ 390.986814][ T9] usb 11-1: USB disconnect, device number 13 [ 390.990469][ T9] qmi_wwan 11-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device [ 391.043080][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 391.101594][ C3] net_ratelimit: 44803 callbacks suppressed [ 391.101611][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 391.101678][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 391.104289][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 391.107823][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 391.112097][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 391.115082][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 391.119245][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 391.122385][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 391.126473][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 391.129919][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 391.195347][T15021] fuse: fd is not a fuse device [ 391.296216][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 391.366297][T15032] syz_tun: entered allmulticast mode [ 391.376143][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3149'. [ 391.460055][T15031] syz_tun: left allmulticast mode [ 391.833964][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3153'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xaa000) [ 392.710766][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 392.720916][ T1126] ata1: failed to read log page 10h (errno=-5) [ 392.729090][ T1126] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 392.738097][ T1126] ata1.00: irq_stat 0x41000000 [ 392.739628][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 392.749112][ T1126] ata1.00: cmd 61/c0:00:8e:37:08/02:00:00:00:00/40 tag 0 ncq dma 360448 out [ 392.749112][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 392.762944][ T1126] ata1.00: status: { DRDY } [ 392.764468][ T1126] ata1.00: failed command: WRITE FPDMA QUEUED [ 392.766361][ T1126] ata1.00: cmd 61/50:f0:3e:32:08/05:00:00:00:00/40 tag 30 ncq dma 696320 out [ 392.766361][ T1126] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 392.781593][ T1126] ata1.00: status: { DRDY } [ 392.785768][ T1126] ata1.00: configured for UDMA/100 [ 392.787608][ T1126] ata1: EH complete [ 392.810866][T15067] comedi comedi1: Minor 4 specified more than once! [ 392.817479][T15065] syz_tun: entered allmulticast mode [ 392.824453][T15066] nbd: illegal input index 13872787 [ 392.835711][T15065] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3159'. [ 392.947180][T15071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3163'. [ 392.970034][T15061] syz_tun: left allmulticast mode [ 393.041608][T15076] nfs: Unknown parameter 'Rort' [ 393.453560][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3174'. [ 393.527584][T15098] syz_tun: entered allmulticast mode [ 393.547313][T15098] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3175'. [ 393.624829][T15097] syz_tun: left allmulticast mode [ 393.715043][T15103] comedi comedi1: Minor 4 specified more than once! [ 393.849436][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'. [ 393.921958][T15116] syz_tun: entered allmulticast mode [ 394.091332][T15115] syz_tun: left allmulticast mode [ 394.167980][T15121] syzkaller0: entered promiscuous mode [ 394.169691][T15121] syzkaller0: entered allmulticast mode [ 394.317768][T15127] syz_tun: entered allmulticast mode [ 394.411416][T15124] syz_tun: left allmulticast mode [ 394.534946][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 394.551602][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 394.554871][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0ddf instead [ 394.560269][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb595 instead [ 394.567368][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 394.581353][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 394.594015][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 394.614309][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 394.624088][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 394.635636][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 394.647149][T15136] jffs2: Further such events for this erase block will not be printed [ 394.655124][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 394.667304][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 394.679529][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0ddf instead [ 394.692170][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb595 instead [ 394.707882][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 394.716631][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 394.726024][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 394.736008][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 394.746233][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 394.763150][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 394.774055][T15136] jffs2: Further such events for this erase block will not be printed [ 394.782669][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 394.794959][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 394.805138][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0ddf instead [ 394.819846][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb595 instead [ 394.828894][T15145] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 394.836804][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 394.851018][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 394.861136][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0ddf instead [ 394.872806][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb595 instead [ 394.880701][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 394.886831][T15148] __nla_validate_parse: 2 callbacks suppressed [ 394.886840][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 394.893720][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 394.905331][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x0ddf instead [ 394.913977][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb595 instead [ 394.923534][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 394.935830][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 394.946623][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0ddf instead [ 394.960611][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb595 instead [ 394.982873][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 395.002932][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 395.025257][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0ddf instead [ 395.042259][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb595 instead [ 395.060325][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 395.084673][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 395.098029][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0ddf instead [ 395.116076][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb595 instead [ 395.166268][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 395.177690][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 395.185545][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0ddf instead [ 395.196634][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb595 instead [ 395.235973][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 395.254364][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 395.281149][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0ddf instead [ 395.291208][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb595 instead [ 395.312472][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 395.328860][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 395.349084][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0ddf instead [ 395.386471][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb595 instead [ 395.418386][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 395.437144][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 395.445985][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x0ddf instead [ 395.464166][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb595 instead [ 395.486798][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 395.502884][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 395.517459][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0ddf instead [ 395.540490][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb595 instead [ 395.557810][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 395.569819][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 395.595211][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0ddf instead [ 395.621271][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb595 instead [ 395.667923][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 395.684799][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 395.704032][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x0ddf instead [ 395.721795][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb595 instead [ 395.737578][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 395.767113][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 395.798418][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0ddf instead [ 395.837453][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb595 instead [ 395.857125][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 395.902824][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 395.931217][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x0ddf instead [ 395.958276][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb595 instead [ 395.999079][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 396.029430][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 396.048251][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0ddf instead [ 396.068626][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb595 instead [ 396.086695][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 396.110186][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 396.111661][ C2] net_ratelimit: 47026 callbacks suppressed [ 396.111671][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 396.111837][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 396.112019][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 396.112599][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 396.113188][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 396.113363][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 396.113948][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 396.115479][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 396.119680][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 396.122749][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 396.140808][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0ddf instead [ 396.207601][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb595 instead [ 396.227546][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 396.240203][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 396.250394][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0ddf instead [ 396.265873][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb595 instead [ 396.281026][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 396.296819][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 396.314204][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x0ddf instead [ 396.332680][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb595 instead [ 396.354658][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 396.369980][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 396.390309][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x0ddf instead [ 396.405930][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb595 instead [ 396.424158][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 396.442162][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 396.511395][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0ddf instead [ 396.521566][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb595 instead [ 396.532916][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 396.538458][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 396.551576][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x0ddf instead [ 396.556977][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb595 instead [ 396.561877][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 396.565027][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 396.568122][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0ddf instead [ 396.571277][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb595 instead [ 396.578544][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 396.581830][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 396.585004][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0ddf instead [ 396.588106][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb595 instead [ 396.591241][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 396.594715][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 396.597864][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x0ddf instead [ 396.601021][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb595 instead [ 396.604467][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 396.607883][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 396.611034][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x0ddf instead [ 396.614533][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb595 instead [ 396.617769][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 396.620980][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 396.624406][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0ddf instead [ 396.627597][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb595 instead [ 396.630846][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 396.634384][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 396.637555][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0ddf instead [ 396.640731][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb595 instead [ 396.644270][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 396.647901][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 396.651367][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x0ddf instead [ 396.656656][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb595 instead [ 396.660398][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 396.665546][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 396.669662][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0ddf instead [ 396.674330][T15136] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb595 instead [ 396.679137][T15136] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 396.684065][T15136] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 396.739325][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.815623][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.994306][T15171] syz_tun: entered allmulticast mode [ 397.002353][ T5842] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 397.010805][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3195'. [ 397.075156][T15170] syz_tun: left allmulticast mode [ 397.077469][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 397.127729][T15174] fuse: fd is not a fuse device [ 397.153650][ T5842] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 397.166566][ T5842] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.169915][ T5842] usb 11-1: Product: syz [ 397.172027][ T5842] usb 11-1: Manufacturer: syz [ 397.173788][ T5842] usb 11-1: SerialNumber: syz [ 397.176903][ T5842] usb 11-1: config 0 descriptor?? [ 397.232182][ T9] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 397.241161][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.247523][ T9] usb 10-1: Product: syz [ 397.248884][ T9] usb 10-1: Manufacturer: syz [ 397.253933][ T9] usb 10-1: SerialNumber: syz [ 397.255628][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 397.264548][ T9] usb 10-1: config 0 descriptor?? [ 397.394972][ T5883] usb 11-1: USB disconnect, device number 14 [ 397.487906][ T9] usb 10-1: USB disconnect, device number 24 [ 398.403991][T15193] syz.0.3205 (15193) used greatest stack depth: 18512 bytes left [ 398.948747][T15210] Console: switching to colour dummy device 80x25 [ 398.993405][T15212] kvm: Disabled LAPIC found during irq injection [ 399.195625][T15213] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 399.251376][T15213] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 399.256324][T15213] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 399.266641][T15213] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 399.274893][T15213] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 399.287531][T15213] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12459 usecs [ 399.350967][T15213] pci 0000:00:01.0: Adding to iommu group 1 [ 399.388196][T15213] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 399.390649][T15213] pci 0000:00:01.0: vgaarb: bridge control possible [ 399.393029][T15213] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 399.438678][T15213] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 399.444833][T15213] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 399.452797][T15213] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 399.472229][T15213] [drm] Found bochs VGA, ID 0xb0c5. [ 399.473888][T15213] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 399.599988][T15213] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 399.898437][T15213] Console: switching to colour frame buffer device 160x50 [ 400.572194][T15213] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 400.976059][T15231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.121753][ C2] net_ratelimit: 43239 callbacks suppressed [ 401.121770][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 401.122004][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 401.124282][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 401.126894][T15233] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 401.126911][T15233] Unsupported pkey algo: 106 [ 401.128028][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 401.132528][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 401.136539][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 401.138656][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 401.140394][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 401.144338][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 401.147932][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 401.245364][T15233] sctp: [Deprecated]: syz.0.3216 (pid 15233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.245364][T15233] Use struct sctp_sack_info instead [ 401.291636][ T5883] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 401.381302][T15236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3217'. [ 401.452983][ T5883] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 401.463348][ T5883] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.466999][T15240] syz.5.3217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 401.471036][ T5883] usb 11-1: Product: syz [ 401.474085][ T5883] usb 11-1: Manufacturer: syz [ 401.475621][ T5883] usb 11-1: SerialNumber: syz [ 401.481277][ T5883] usb 11-1: config 0 descriptor?? [ 401.626765][T15244] usb usb7: usbfs: process 15244 (syz.5.3217) did not claim interface 0 before use [ 401.626884][T15244] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 401.688316][ T57] usb 11-1: USB disconnect, device number 15 [ 402.409654][T15259] syzkaller0: entered promiscuous mode [ 402.411751][T15259] syzkaller0: entered allmulticast mode [ 402.777693][T15260] binder: 15258:15260 ioctl c0306201 80000640 returned -22 [ 402.781093][T15260] overlay: Unknown parameter '/' [ 402.889858][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3225'. [ 403.506234][T15278] ipt_REJECT: TCP_RESET invalid for non-tcp [ 404.580510][T15282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3229'. [ 404.653244][T15286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.659022][T15286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.662497][T15286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.738250][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.743871][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.746751][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.749742][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.753014][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.756012][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 404.758915][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 406.131669][ C2] net_ratelimit: 43647 callbacks suppressed [ 406.131683][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 406.131791][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 406.133973][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 406.137770][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 406.141238][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 406.144671][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 406.148316][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 406.152227][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 406.156454][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 406.160224][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 409.426106][T15316] ipt_REJECT: TCP_RESET invalid for non-tcp [ 410.203161][T15324] __nla_validate_parse: 17 callbacks suppressed [ 410.203176][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3242'. [ 410.370630][T15327] Invalid ELF header magic: != ELF [ 411.096421][T15341] FAULT_INJECTION: forcing a failure. [ 411.096421][T15341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.100677][T15341] CPU: 1 UID: 0 PID: 15341 Comm: syz.0.3247 Not tainted syzkaller #0 PREEMPT(full) [ 411.100692][T15341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 411.100699][T15341] Call Trace: [ 411.100703][T15341] [ 411.100707][T15341] dump_stack_lvl+0x100/0x190 [ 411.100772][T15341] should_fail_ex.cold+0x5/0xa [ 411.100785][T15341] _copy_from_user+0x2e/0xd0 [ 411.100822][T15341] video_usercopy+0x9e0/0x14c0 [ 411.100854][T15341] ? __pfx___video_do_ioctl+0x10/0x10 [ 411.100866][T15341] ? __pfx_video_usercopy+0x10/0x10 [ 411.100882][T15341] ? __fget_files+0x215/0x3d0 [ 411.100899][T15341] ? hook_file_ioctl_common+0x140/0x440 [ 411.100916][T15341] v4l2_ioctl+0x1bd/0x250 [ 411.100930][T15341] v4l2_compat_ioctl32+0x20f/0x2d0 [ 411.100946][T15341] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 411.100963][T15341] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 411.100979][T15341] __do_fast_syscall_32+0x13a/0x8b0 [ 411.101009][T15341] ? lockdep_hardirqs_on+0x7d/0x110 [ 411.101026][T15341] do_fast_syscall_32+0x32/0x70 [ 411.101037][T15341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.101051][T15341] RIP: 0023:0xf70aefec [ 411.101063][T15341] Code: Unable to access opcode bytes at 0xf70aefc2. [ 411.101067][T15341] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 411.101077][T15341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 411.101084][T15341] RDX: 00000000800016c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.101090][T15341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.101096][T15341] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 411.101102][T15341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.101114][T15341] [ 411.141579][ C2] net_ratelimit: 43289 callbacks suppressed [ 411.141592][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 411.141774][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.141922][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.142377][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 411.142849][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.143003][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.143465][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 411.143966][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.146535][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 411.148824][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 411.253512][T15347] comedi comedi1: Minor 4 specified more than once! [ 411.389054][T15355] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3254'. [ 411.449661][T15358] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 411.461687][T15359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.468044][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.481921][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.361599][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3258'. [ 414.408553][T15365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.896934][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 414.901622][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 414.906211][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0ddf instead [ 414.910481][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb595 instead [ 414.915463][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 414.919515][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 414.925222][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 414.928449][T15375] comedi comedi1: Minor 4 specified more than once! [ 414.933045][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 414.964661][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 414.990416][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 415.004092][T15374] jffs2: Further such events for this erase block will not be printed [ 415.007328][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 415.016613][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 415.061991][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0ddf instead [ 415.082788][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb595 instead [ 415.096482][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 415.105721][T15380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.110776][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 415.138502][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 415.168611][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 415.180952][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 415.203265][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 415.206835][T15380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.223283][T15374] jffs2: Further such events for this erase block will not be printed [ 415.237353][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 415.252153][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 415.281836][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0ddf instead [ 415.296675][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb595 instead [ 415.326452][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 415.357629][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 415.373579][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0ddf instead [ 415.384814][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb595 instead [ 415.390360][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 415.404386][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 415.425974][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x0ddf instead [ 415.439092][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb595 instead [ 415.467974][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 415.482913][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 415.482937][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0ddf instead [ 415.482956][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb595 instead [ 415.483006][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 415.483021][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 415.483038][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0ddf instead [ 415.485935][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb595 instead [ 415.485967][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 415.485976][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 415.485987][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0ddf instead [ 415.485998][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb595 instead [ 415.486023][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 415.486033][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 415.486043][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0ddf instead [ 415.486055][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb595 instead [ 415.486081][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 415.486091][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 415.486101][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0ddf instead [ 415.486112][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb595 instead [ 415.486138][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 415.486147][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 415.486156][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0ddf instead [ 415.486167][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb595 instead [ 415.486191][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 415.486200][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 415.486209][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x0ddf instead [ 415.486220][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb595 instead [ 415.486244][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 415.486253][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 415.486262][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0ddf instead [ 415.486273][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb595 instead [ 415.486300][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 415.486309][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 415.486319][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0ddf instead [ 415.486329][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb595 instead [ 415.486353][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 415.486362][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 415.486372][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x0ddf instead [ 415.486382][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb595 instead [ 415.486406][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 415.486415][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 415.486425][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0ddf instead [ 415.486435][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb595 instead [ 415.486458][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 415.486467][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 415.486477][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x0ddf instead [ 415.486488][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb595 instead [ 415.486512][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 415.486521][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 415.486531][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0ddf instead [ 415.486541][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb595 instead [ 415.486565][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 415.486574][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 415.486583][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0ddf instead [ 415.486594][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb595 instead [ 415.486617][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 415.486626][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 415.486636][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0ddf instead [ 415.486646][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb595 instead [ 415.486670][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 415.486679][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 415.486688][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x0ddf instead [ 415.486699][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb595 instead [ 415.486723][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 415.486733][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 415.486742][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x0ddf instead [ 415.486753][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb595 instead [ 415.486777][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 415.486786][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 415.486803][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0ddf instead [ 415.486814][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb595 instead [ 415.486840][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 415.486850][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 415.486861][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x0ddf instead [ 415.486876][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb595 instead [ 415.486911][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 415.486925][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 415.486943][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0ddf instead [ 415.488563][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb595 instead [ 415.488611][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 415.488627][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 415.488644][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0ddf instead [ 415.488661][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb595 instead [ 415.488705][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 415.488720][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 415.488736][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x0ddf instead [ 415.488754][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb595 instead [ 415.488802][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 415.488818][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 415.488834][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x0ddf instead [ 415.488853][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb595 instead [ 415.488894][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 415.488910][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 415.488924][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0ddf instead [ 415.488941][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb595 instead [ 415.488980][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 415.488995][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 415.489010][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0ddf instead [ 415.489026][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb595 instead [ 415.489067][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 415.489081][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 415.489096][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x0ddf instead [ 415.489111][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb595 instead [ 415.489150][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 415.489164][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 415.490415][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0ddf instead [ 415.490482][T15374] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb595 instead [ 415.490517][T15374] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 415.490526][T15374] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 416.151651][ C2] net_ratelimit: 45779 callbacks suppressed [ 416.151683][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.151762][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 416.151869][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.152014][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.152156][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.152238][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 416.152311][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.152373][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 416.152469][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 416.152612][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 417.598396][T15407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.841685][ T852] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 418.003290][ T852] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 418.015506][ T852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.031603][ T852] usb 10-1: Product: syz [ 418.033355][ T852] usb 10-1: Manufacturer: syz [ 418.035381][ T852] usb 10-1: SerialNumber: syz [ 418.039490][ T852] usb 10-1: config 0 descriptor?? [ 419.922407][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 419.940050][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'. [ 420.968007][T15438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.973092][T15438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.161683][ C2] net_ratelimit: 38826 callbacks suppressed [ 421.161697][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 421.161994][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 421.164148][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 421.168983][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 421.173823][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 421.178553][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 421.183143][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 421.188897][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 421.192877][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 421.197670][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 421.321568][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3277'. [ 421.330825][ T9] usb 10-1: USB disconnect, device number 25 [ 421.331636][T15430] bridge_slave_0: default FDB implementation only supports local addresses [ 421.621607][T15447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.853478][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3284'. [ 422.188251][T15466] netlink: 'syz.4.3288': attribute type 1 has an invalid length. [ 422.227398][T15441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.233722][T15441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.238682][T15441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.244744][T15441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 422.348474][T15466] bridge2: entered promiscuous mode [ 422.369942][T15466] bond3: (slave bridge2): making interface the new active one [ 422.453685][T15466] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 422.664167][T15476] wg2 speed is unknown, defaulting to 1000 [ 422.936949][T15466] netlink: 'syz.4.3288': attribute type 1 has an invalid length. [ 423.821637][ T5745] Bluetooth: hci4: command 0x0c1a tx timeout [ 423.882154][T15480] syz_tun: entered allmulticast mode [ 423.947057][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3287'. [ 423.958436][ T42] audit: type=1326 audit(1787399566.056:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15477 comm="syz.0.3291" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0 [ 424.078742][T15483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 424.291812][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 424.294055][ T5745] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.297237][ T5745] Bluetooth: hci1: command 0x0406 tx timeout [ 424.347753][T15479] syz_tun: left allmulticast mode [ 424.886864][T15501] comedi comedi1: Minor 4 specified more than once! [ 425.885602][T15514] syzkaller0: entered promiscuous mode [ 425.913722][T15514] syzkaller0: entered allmulticast mode [ 426.058508][T15526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.171555][ C2] net_ratelimit: 43383 callbacks suppressed [ 426.171568][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 426.171866][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 426.173622][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 426.177596][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 426.180815][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 426.184473][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 426.188064][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 426.192074][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 426.195338][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 426.199469][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 426.853673][T15544] lo: entered allmulticast mode [ 426.870625][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3306'. [ 426.973974][T15542] lo: left allmulticast mode [ 427.624606][T15561] wg2 speed is unknown, defaulting to 1000 [ 427.832611][T15562] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 427.834920][T15562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 427.933267][T15562] vhci_hcd vhci_hcd.0: Device attached [ 428.040614][T15565] vhci_hcd: connection closed [ 428.057658][ T5813] vhci_hcd vhci_hcd.5: stop threads [ 428.067999][ T5813] vhci_hcd vhci_hcd.5: release socket [ 428.076242][ T5813] vhci_hcd vhci_hcd.5: disconnect device [ 429.785669][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3313'. [ 430.211675][ T5842] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 430.257574][T15577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3315'. [ 430.381719][ T5842] usb 11-1: Using ep0 maxpacket: 8 [ 430.386616][ T5842] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.393323][ T5842] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.399277][ T5842] usb 11-1: config 0 has no interface number 0 [ 430.418251][ T5842] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 430.428482][ T5842] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 430.442711][ T5842] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.453695][ T5842] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.466316][ T5842] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.524499][ T5842] usb 11-1: config 0 descriptor?? [ 430.538563][ T5842] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 431.181607][ C2] net_ratelimit: 44292 callbacks suppressed [ 431.181620][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 431.181761][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 431.183606][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 431.187545][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 431.190782][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 431.194505][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 431.198076][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 431.202098][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 431.205402][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 431.209326][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 431.322569][T15594] syz_tun: entered allmulticast mode [ 431.346353][T15594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3319'. [ 431.436193][T15593] syz_tun: left allmulticast mode [ 431.554434][T15598] netlink: 'syz.5.3321': attribute type 10 has an invalid length. [ 431.720583][T15598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.741097][T15598] team0: Port device bond0 added [ 432.641468][T15611] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3320'. [ 433.236985][T15611] CIFS mount error: No usable UNC path provided in device string! [ 433.236985][T15611] [ 433.241014][T15611] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.248171][ T42] audit: type=1800 audit(1787399575.346:5403): pid=15611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3320" name="file" dev="configfs" ino=55787 res=0 errno=0 [ 433.257370][T15620] ehci-pci 0000:00:1d.7: remove, state 1 [ 433.262238][T15620] usb usb2: USB disconnect, device number 1 [ 433.264185][T15620] usb 2-1: USB disconnect, device number 2 [ 433.750237][T15620] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 433.851113][ T852] usb 11-1: USB disconnect, device number 16 [ 433.858813][ T852] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 433.984308][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3326'. [ 434.021638][ T5842] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 434.135285][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3327'. [ 434.187777][ T5842] usb 1-1: not running at top speed; connect to a high speed hub [ 434.194976][ T5842] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 434.219836][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 434.228916][ T5842] usb 1-1: Product: QEMU USB Tablet [ 434.231010][ T5842] usb 1-1: Manufacturer: QEMU [ 434.240337][ T5842] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 434.290187][ T5842] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.000C/input/input22 [ 434.415310][ T5842] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 434.508813][T15607] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.556083][T15623] usb 1-1: USB disconnect, device number 2 [ 435.087762][T15651] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3331'. [ 435.850572][ T5448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.861392][ T5749] Bluetooth: hci2: unexpected event for opcode 0x203c [ 436.191667][ C2] net_ratelimit: 43314 callbacks suppressed [ 436.191682][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 436.191728][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 436.193710][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 436.197766][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 436.201072][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 436.205111][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 436.208341][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 436.211983][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 436.215596][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 436.220073][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 436.255735][T15675] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3337'. [ 436.757049][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.975069][T15623] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 437.041975][T15623] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 437.059718][T15623] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 437.081109][T15683] tmpfs: Unknown parameter '‘Çhè9å­±ÍH{üÛÞdx‰iÿ‰©ø8¼àã­0ZÑl |wµ?–VHü²C\W4ÒÙÆtµC|þA [ 437.081109][T15683] Ä5¾' [ 437.085587][T15623] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 437.120034][T15623] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 437.137292][T15623] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 437.142233][T15623] usb usb2: Product: EHCI Host Controller [ 437.145372][T15623] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 437.147367][T15623] usb usb2: SerialNumber: 0000:00:1d.7 [ 437.209832][ T99] Bluetooth: hci3: Frame reassembly failed (-84) [ 437.315925][T15623] hub 2-0:1.0: USB hub found [ 437.341339][T15623] hub 2-0:1.0: 6 ports detected [ 437.515078][T15623] hub 1-0:1.0: USB hub found [ 437.524019][T15623] hub 1-0:1.0: 2 ports detected [ 437.621328][T15623] hub 3-0:1.0: USB hub found [ 437.627384][T15623] hub 3-0:1.0: 2 ports detected [ 437.716937][T15623] hub 4-0:1.0: USB hub found [ 437.720380][T15623] hub 4-0:1.0: 2 ports detected [ 437.721766][ T5842] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 437.902312][ T5842] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 437.929345][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 437.932888][ T5842] usb 2-1: Product: QEMU USB Tablet [ 437.937017][ T5842] usb 2-1: Manufacturer: QEMU [ 437.941014][ T5842] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 437.970051][ T5842] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000D/input/input23 [ 438.000986][T15692] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 438.006251][T15692] CIFS mount error: No usable UNC path provided in device string! [ 438.006251][T15692] [ 438.010107][T15692] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 438.184055][ T5842] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 438.853063][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 439.255205][ T5745] Bluetooth: hci3: command 0x1003 tx timeout [ 439.261228][ T5749] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 439.498586][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.501314][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.061750][ T29] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 440.127047][T15714] syz_tun: entered allmulticast mode [ 440.148829][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'. [ 440.214145][ T29] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 440.227323][ T29] usb 11-1: config index 0 descriptor too short (expected 71, got 53) [ 440.232471][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.238920][ T29] usb 11-1: Product: syz [ 440.240239][ T29] usb 11-1: Manufacturer: syz [ 440.248868][ T29] usb 11-1: SerialNumber: syz [ 440.271576][ T29] mos7720 11-1:1.0: Moschip 2 port adapter converter detected [ 440.331240][T15713] syz_tun: left allmulticast mode [ 440.529683][T15720] syz_tun: entered allmulticast mode [ 440.567198][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3351'. [ 440.639697][ T29] usb 11-1: mos7720: usb_control_msg() failed: -71 [ 440.646445][T15719] syz_tun: left allmulticast mode [ 440.665795][ T29] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 440.679855][ T29] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 440.706007][ T29] usb 11-1: USB disconnect, device number 17 [ 440.707947][ C1] usb 11-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 440.726608][ T29] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 440.746116][ T29] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 440.753157][ T29] mos7720 11-1:1.0: device disconnected [ 440.847924][T15725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.947596][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 440.954569][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 440.958757][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 440.965829][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 440.969788][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 441.201666][ C2] net_ratelimit: 44654 callbacks suppressed [ 441.201680][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 441.201830][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 441.203732][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 441.207704][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 441.211236][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 441.214878][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 441.218516][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 441.222472][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 441.225870][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 441.229764][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 441.689616][T15735] IPVS: Unknown mcast interface: syzkaller1 [ 441.706606][T15735] IPVS: Unknown mcast interface: syzkaller1 [ 442.425505][T15759] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 442.513317][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 442.574457][T15766] lo: entered allmulticast mode [ 442.581496][T15766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3368'. [ 442.641640][T10830] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 442.644852][T15765] lo: left allmulticast mode [ 442.704345][T15768] lo: entered allmulticast mode [ 442.802266][T10830] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 442.808772][T10830] usb 10-1: config index 0 descriptor too short (expected 71, got 53) [ 442.813525][T10830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.816151][T10830] usb 10-1: Product: syz [ 442.817535][T10830] usb 10-1: Manufacturer: syz [ 442.819232][T10830] usb 10-1: SerialNumber: syz [ 442.829021][T10830] mos7720 10-1:1.0: Moschip 2 port adapter converter detected [ 442.875885][T15767] lo: left allmulticast mode [ 443.184950][T10830] usb 10-1: mos7720: usb_control_msg() failed: -71 [ 443.201368][T10830] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 443.209077][T10830] usb 10-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 443.220892][T10830] usb 10-1: USB disconnect, device number 26 [ 443.222845][ C0] usb 10-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 443.257536][T10830] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 443.273293][T10830] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 443.282029][T10830] mos7720 10-1:1.0: device disconnected [ 443.561710][ T5842] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 443.701924][ T5842] usb 11-1: device descriptor read/64, error -71 [ 443.961985][ T5842] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 444.091780][T15789] Console: switching to colour dummy device 80x25 [ 444.108545][T15792] __nla_validate_parse: 1 callbacks suppressed [ 444.108557][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3376'. [ 444.114241][ T5842] usb 11-1: device descriptor read/64, error -71 [ 444.182565][T15794] lo: entered allmulticast mode [ 444.200017][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3377'. [ 444.215876][T15790] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 444.221989][ T5842] usb usb11-port1: attempt power cycle [ 444.229971][T15790] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 444.438951][T15793] lo: left allmulticast mode [ 444.584273][ T5842] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 444.625467][ T5842] usb 11-1: device descriptor read/8, error -71 [ 444.635402][T15802] netlink: 'syz.0.3379': attribute type 10 has an invalid length. [ 444.641609][T15802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3379'. [ 444.891787][ T5842] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 444.922781][ T5842] usb 11-1: device descriptor read/8, error -71 [ 445.032151][ T5842] usb usb11-port1: unable to enumerate USB device [ 445.719665][T15807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3380'. [ 446.211659][ C2] net_ratelimit: 48073 callbacks suppressed [ 446.211674][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 446.212005][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 446.213748][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 446.217651][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 446.220780][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 446.224439][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 446.228089][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 446.232110][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 446.235331][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 446.239281][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 446.846675][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 446.856788][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 446.867631][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x0ddf instead [ 446.888695][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb595 instead [ 446.905329][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 446.915373][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 446.926851][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 446.936172][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 446.946780][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 446.959343][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 446.969787][T15815] jffs2: Further such events for this erase block will not be printed [ 446.978432][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 446.989756][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 446.994790][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0ddf instead [ 446.998211][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb595 instead [ 447.005931][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 447.010538][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 447.018930][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 447.029221][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 447.033948][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 447.041603][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 447.046091][T15815] jffs2: Further such events for this erase block will not be printed [ 447.053695][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 447.063225][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 447.068303][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x0ddf instead [ 447.071826][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xb595 instead [ 447.078272][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 447.085686][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 447.090998][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x0ddf instead [ 447.096244][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xb595 instead [ 447.102330][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 447.106764][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 447.112332][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x0ddf instead [ 447.116934][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xb595 instead [ 447.120329][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 447.125589][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 447.132169][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x0ddf instead [ 447.136612][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xb595 instead [ 447.153919][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 447.157181][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 447.162043][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0ddf instead [ 447.165470][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xb595 instead [ 447.173442][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 447.182423][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 447.186825][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x0ddf instead [ 447.192696][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xb595 instead [ 447.208781][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 447.215513][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 447.219904][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x0ddf instead [ 447.225408][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xb595 instead [ 447.235434][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 447.238909][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 447.245845][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x0ddf instead [ 447.249072][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xb595 instead [ 447.265215][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 447.268425][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 447.272680][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x0ddf instead [ 447.277675][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xb595 instead [ 447.285386][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 447.295281][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 447.299650][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x0ddf instead [ 447.306828][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xb595 instead [ 447.314609][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 447.320938][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 447.327737][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x0ddf instead [ 447.335145][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xb595 instead [ 447.341506][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 447.346277][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 447.352026][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0ddf instead [ 447.359670][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xb595 instead [ 447.369054][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 447.374486][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 447.380810][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x0ddf instead [ 447.385251][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xb595 instead [ 447.390777][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 447.396192][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 447.406126][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x0ddf instead [ 447.411138][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xb595 instead [ 447.420378][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 447.426908][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 447.431435][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x0ddf instead [ 447.436670][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xb595 instead [ 447.444848][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 447.448753][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 447.456531][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x0ddf instead [ 447.461894][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xb595 instead [ 447.465240][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 447.473876][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 447.478074][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x0ddf instead [ 447.484934][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xb595 instead [ 447.490539][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 447.500703][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 447.504052][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x0ddf instead [ 447.513955][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xb595 instead [ 447.519407][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 447.525350][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 447.530866][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x0ddf instead [ 447.539574][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xb595 instead [ 447.545201][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 447.550737][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 447.556425][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x0ddf instead [ 447.563206][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xb595 instead [ 447.570879][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 447.574571][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 447.584626][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x0ddf instead [ 447.594058][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xb595 instead [ 447.597895][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 447.607804][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 447.611029][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x0ddf instead [ 447.619936][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xb595 instead [ 447.624416][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 447.629785][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 447.635682][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x0ddf instead [ 447.646203][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xb595 instead [ 447.654992][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 447.659413][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 447.664966][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0ddf instead [ 447.670458][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xb595 instead [ 447.676128][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 447.681613][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 447.689426][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x0ddf instead [ 447.695107][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xb595 instead [ 447.700731][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 447.709660][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 447.713441][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x0ddf instead [ 447.718520][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xb595 instead [ 447.726449][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 447.732611][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 447.736689][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x0ddf instead [ 447.743457][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xb595 instead [ 447.749165][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 447.759606][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 447.765141][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x0ddf instead [ 447.770501][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xb595 instead [ 447.778315][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 447.796421][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 447.804037][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x0ddf instead [ 447.818772][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xb595 instead [ 447.824802][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 447.830137][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 447.835592][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x0ddf instead [ 447.840233][T15815] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xb595 instead [ 447.846113][T15815] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 447.848990][T15815] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 448.793859][T15802] dummy0: entered promiscuous mode [ 448.950099][T15819] bridge0: port 3(netdevsim0) entered blocking state [ 448.971662][T15819] bridge0: port 3(netdevsim0) entered disabled state [ 448.981789][T15819] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 448.991131][T15819] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 449.000717][T15819] netlink: 'syz.0.3382': attribute type 10 has an invalid length. [ 449.003840][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.006290][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.012920][T15819] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.015667][T15819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.018253][T15819] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.020619][T15819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.116267][T15819] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.119195][T15819] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.232605][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3385'. [ 449.272106][ T2320] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 449.340439][T15825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.391255][T15829] 9p: Bad value for 'rfdno' [ 449.432096][ T2320] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 449.440573][ T2320] usb 11-1: config index 0 descriptor too short (expected 71, got 53) [ 449.451660][ T2320] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.455705][ T2320] usb 11-1: Product: syz [ 449.457074][ T2320] usb 11-1: Manufacturer: syz [ 449.463498][ T2320] usb 11-1: SerialNumber: syz [ 449.474560][ T2320] mos7720 11-1:1.0: Moschip 2 port adapter converter detected [ 449.841354][ T2320] usb 11-1: mos7720: usb_control_msg() failed: -71 [ 449.854370][ T2320] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 449.875177][ T2320] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 449.917277][ T2320] usb 11-1: USB disconnect, device number 22 [ 449.919226][ C0] usb 11-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 449.933529][ T2320] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 449.938567][ T2320] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 449.943041][ T2320] mos7720 11-1:1.0: device disconnected [ 449.997498][T15839] lo: entered allmulticast mode [ 450.039375][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3390'. [ 450.120890][T15838] lo: left allmulticast mode [ 450.537878][T15849] fuse: fd is not a fuse device [ 450.992561][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3395'. [ 451.022077][T15857] syz_tun: entered allmulticast mode [ 451.049661][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3396'. [ 451.200181][T15862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.204087][T15856] syz_tun: left allmulticast mode [ 451.221707][ C2] net_ratelimit: 47837 callbacks suppressed [ 451.221718][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 451.222052][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 451.223816][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 451.227810][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 451.231009][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 451.235591][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 451.239037][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 451.243124][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 451.246380][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 451.250347][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 451.312124][T15867] lo: entered allmulticast mode [ 451.721853][T15874] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 451.760851][T15874] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 451.763266][T15874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 451.771682][T15874] vhci_hcd vhci_hcd.0: Device attached [ 452.063234][ T852] usb 38-1: SetAddress Request (14) to port 0 [ 452.065210][ T852] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 452.186484][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3406'. [ 452.431734][T15875] vhci_hcd: connection reset by peer [ 452.433860][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 452.435614][ T5813] vhci_hcd vhci_hcd.0: release socket [ 452.437426][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 452.784386][T15901] lo: entered allmulticast mode [ 452.803639][T15901] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3409'. [ 452.872222][T15900] lo: left allmulticast mode [ 453.104460][T15914] lo: entered allmulticast mode [ 453.110931][T15914] bond0: entered allmulticast mode [ 453.115433][T15914] dummy0: entered allmulticast mode [ 453.119872][T15914] eql: entered allmulticast mode [ 453.124254][T15914] ifb0: entered allmulticast mode [ 453.127698][T15914] ifb1: entered allmulticast mode [ 453.137590][T15914] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 453.148415][T15914] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 453.159069][T15914] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 453.169044][T15914] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 453.217292][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 453.221360][T15924] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 453.309831][T15924] bridge1: entered promiscuous mode [ 453.319447][T15924] bond1: (slave bridge1): making interface the new active one [ 453.325146][T15924] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 453.344894][T15924] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 454.041639][T15927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.651035][T15944] lo: entered allmulticast mode [ 454.677243][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3420'. [ 454.807391][T15939] lo: left allmulticast mode [ 455.020876][T15965] bridge_slave_0: left allmulticast mode [ 455.032434][T15965] bridge_slave_0: left promiscuous mode [ 455.034429][T15965] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.067598][T15969] block nbd0: shutting down sockets [ 455.099512][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3426'. [ 455.178028][T15965] bridge_slave_1: left allmulticast mode [ 455.185474][T15965] bridge_slave_1: left promiscuous mode [ 455.194682][T15965] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.659243][T15965] bond0: (slave bond_slave_0): Releasing backup interface [ 455.686980][T15965] bond0: (slave bond_slave_1): Releasing backup interface [ 455.730416][T15965] team0: Port device team_slave_0 removed [ 455.763780][T15965] team0: Port device team_slave_1 removed [ 455.769546][T15965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.775162][T15965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.789109][T15965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.800106][T15965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.815389][T15969] team0: Mode changed to "random" [ 455.822236][T15974] tipc: Started in network mode [ 455.824118][T15974] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 455.835305][T15974] tipc: Enabled bearer , priority 0 [ 455.846115][T15993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3432'. [ 456.210954][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3433'. [ 456.231578][ C2] net_ratelimit: 42274 callbacks suppressed [ 456.231591][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 456.231843][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 456.233602][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 456.237431][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 456.240523][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 456.244526][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 456.247898][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 456.251797][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 456.254828][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 456.258634][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 456.291778][ T29] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 456.305501][ T1157] tipc: Resetting bearer [ 456.322488][T15999] lo: entered allmulticast mode [ 456.382538][T15989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.451981][ T29] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 456.457390][ T29] usb 11-1: config index 0 descriptor too short (expected 71, got 53) [ 456.461915][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.464492][ T29] usb 11-1: Product: syz [ 456.465790][ T29] usb 11-1: Manufacturer: syz [ 456.470396][ T29] usb 11-1: SerialNumber: syz [ 456.494061][ T29] mos7720 11-1:1.0: Moschip 2 port adapter converter detected [ 456.514160][T16012] comedi comedi1: Minor 4 specified more than once! [ 456.538465][ T5813] batadv1: left allmulticast mode [ 456.540144][ T5813] batadv1: left promiscuous mode [ 456.541869][ T5813] bridge0: port 3(batadv1) entered disabled state [ 456.561113][ T5813] bridge_slave_1: left allmulticast mode [ 456.563522][ T5813] bridge_slave_1: left promiscuous mode [ 456.565364][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.593655][ T5813] bridge_slave_0: left allmulticast mode [ 456.595500][ T5813] bridge_slave_0: left promiscuous mode [ 456.597332][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.801132][ T29] usb 11-1: mos7720: usb_control_msg() failed: -71 [ 456.824890][ T29] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 456.848337][ T29] usb 11-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 456.869528][ T29] usb 11-1: USB disconnect, device number 23 [ 456.871456][ C1] usb 11-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 456.902721][ T29] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 456.923410][ T29] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 456.930707][ T29] mos7720 11-1:1.0: device disconnected [ 457.184058][ T852] usb 38-1: device descriptor read/8, error -110 [ 457.507776][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3438'. [ 457.560828][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.602525][ T852] usb usb38-port1: attempt power cycle [ 457.657137][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.698733][T16026] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 457.699451][ T5813] bond0 (unregistering): Released all slaves [ 457.753182][ T5813] bond1 (unregistering): Released all slaves [ 457.791430][ T5813] bond2 (unregistering): Released all slaves [ 457.895904][T15997] lo: left allmulticast mode [ 457.908612][ T9] tipc: Node number set to 11578026 [ 458.007839][T16032] FAULT_INJECTION: forcing a failure. [ 458.007839][T16032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.021626][T16032] CPU: 1 UID: 0 PID: 16032 Comm: syz.5.3441 Not tainted syzkaller #0 PREEMPT(full) [ 458.021649][T16032] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.021660][T16032] Call Trace: [ 458.021666][T16032] [ 458.021673][T16032] dump_stack_lvl+0x100/0x190 [ 458.021700][T16032] should_fail_ex.cold+0x5/0xa [ 458.021720][T16032] _copy_from_user+0x2e/0xd0 [ 458.021746][T16032] bpf_test_init.isra.0+0xaf/0x100 [ 458.021767][T16032] bpf_prog_test_run_skb+0x48e/0x3530 [ 458.021793][T16032] ? find_held_lock+0x2b/0x80 [ 458.021818][T16032] ? __fget_files+0x210/0x3d0 [ 458.021845][T16032] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 458.021868][T16032] ? fput+0x7c/0x100 [ 458.021886][T16032] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 458.021906][T16032] __sys_bpf+0x2265/0x4a30 [ 458.021934][T16032] ? __pfx___sys_bpf+0x10/0x10 [ 458.021959][T16032] ? find_held_lock+0x2b/0x80 [ 458.021981][T16032] ? get_pid_task+0xfc/0x250 [ 458.022005][T16032] ? get_pid_task+0xfc/0x250 [ 458.022034][T16032] ? proc_fail_nth_write+0x9f/0x220 [ 458.022055][T16032] ? find_held_lock+0x2b/0x80 [ 458.022083][T16032] ? rcu_read_lock_any_held+0x6a/0x90 [ 458.022107][T16032] ? find_held_lock+0x2b/0x80 [ 458.022130][T16032] ? ksys_write+0x190/0x250 [ 458.022150][T16032] ? ksys_write+0x190/0x250 [ 458.022186][T16032] ? fput+0x7c/0x100 [ 458.022203][T16032] ? __ia32_sys_bpf+0xcc/0x170 [ 458.022223][T16032] __ia32_sys_bpf+0xcc/0x170 [ 458.022246][T16032] ? __do_fast_syscall_32+0xb3/0x8b0 [ 458.022264][T16032] __do_fast_syscall_32+0x13a/0x8b0 [ 458.022280][T16032] ? lockdep_hardirqs_on+0x7d/0x110 [ 458.022305][T16032] do_fast_syscall_32+0x32/0x70 [ 458.022320][T16032] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 458.022340][T16032] RIP: 0023:0xf7f72fec [ 458.022361][T16032] Code: Unable to access opcode bytes at 0xf7f72fc2. [ 458.022369][T16032] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 458.022385][T16032] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000240 [ 458.022396][T16032] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 458.022406][T16032] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.022416][T16032] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 458.022426][T16032] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 458.022447][T16032] [ 458.195059][ T852] usb usb38-port1: unable to enumerate USB device [ 458.252512][T16026] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.287130][T16027] syz_tun: left promiscuous mode [ 458.316749][T16027] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 458.535403][ T5821] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 458.705639][T16040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.765611][ T5813] tipc: Left network mode [ 458.805151][ T5813] rxrpc: Leaked peer a8 {1} 127.0.0.1:7003 [ 459.405691][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3447'. [ 459.500113][ T5813] hsr_slave_0: left promiscuous mode [ 459.506684][ T5813] hsr_slave_1: left promiscuous mode [ 459.509046][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.513059][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.526552][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.529087][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.566607][ T5813] veth1_macvtap: left promiscuous mode [ 459.569531][ T5813] veth0_macvtap: left promiscuous mode [ 459.572311][ T5813] veth1_vlan: left promiscuous mode [ 459.576174][ T5813] veth0_vlan: left promiscuous mode [ 459.679944][T16064] 9p: Bad value for 'rfdno' [ 459.770011][T16065] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3448'. [ 459.933787][ T9] Process accounting resumed [ 460.233237][ T5813] team0 (unregistering): Port device team_slave_1 removed [ 460.263065][ T5813] team0 (unregistering): Port device team_slave_0 removed [ 460.581661][T16081] syzkaller0: entered promiscuous mode [ 460.583393][T16081] syzkaller0: entered allmulticast mode [ 460.671701][T16092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.038912][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3457'. [ 461.241574][ C2] net_ratelimit: 43844 callbacks suppressed [ 461.241588][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 461.241838][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 461.243603][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 461.247535][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 461.250684][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 461.254272][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 461.257884][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 461.261829][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 461.265016][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 461.269027][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 461.671719][ T9] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 461.695016][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3463'. [ 461.707415][T16115] bridge_slave_1: left allmulticast mode [ 461.709147][T16115] bridge_slave_1: left promiscuous mode [ 461.721687][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.745015][T16115] bridge_slave_0: left allmulticast mode [ 461.749008][T16115] bridge_slave_0: left promiscuous mode [ 461.750897][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.756768][T16118] overlayfs: failed to clone lowerpath [ 461.831846][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 461.837365][ T9] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 461.852095][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.855573][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.864459][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 461.865170][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.876735][ T9] usb 11-1: config 0 descriptor?? [ 462.374397][ T9] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 462.461684][ T29] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 462.560702][T16135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.622446][ T29] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 462.625060][ T9] usb 11-1: USB disconnect, device number 24 [ 462.626168][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.640396][ T29] usb 10-1: config 0 descriptor?? [ 462.656543][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3470'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xc4000) [ 462.851488][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 462.856064][ T1126] ata1: failed to read log page 10h (errno=-5) [ 462.858281][ T1126] ata1.00: NCQ disabled due to excessive errors [ 462.860313][ T1126] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 462.864973][ T1126] ata1.00: irq_stat 0x41000000 [ 462.866459][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 462.874166][T16124] batman_adv: batadv0: Adding interface: macvtap2 [ 462.876242][T16124] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.876415][ T1126] ata1.00: cmd 60/20:70:3e:7b:03/06:00:00:00:00/40 tag 14 ncq dma 802816 in [ 462.876415][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 462.891935][T16124] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 462.897286][ T1126] ata1.00: status: { DRDY } [ 462.900951][ T1126] ata1.00: error: { ABRT } [ 462.912819][ T1126] ata1.00: configured for UDMA/100 [ 462.914761][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 462.919177][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 462.924179][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 462.929844][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 7b 3e 00 06 20 00 [ 462.935186][ T1126] I/O error, dev sda, sector 228158 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 462.940622][ T1126] ata1: EH complete [ 463.315918][T16141] syz_tun: entered allmulticast mode [ 463.327566][T16141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3474'. [ 463.374494][ T29] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 463.385611][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 463.418470][ T29] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 463.432630][ T29] [drm] Initialized udl on minor 1 [ 463.437235][ T29] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 463.440519][ T29] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 463.448450][ T852] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 463.451616][ T29] usb 10-1: USB disconnect, device number 27 [ 463.453504][T16140] syz_tun: left allmulticast mode [ 463.453796][ T852] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 463.464590][ T852] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 464.825588][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'. [ 465.175780][T16178] can: request_module (can-proto-0) failed. [ 465.440075][T16196] /dev/nullb0: Can't lookup blockdev [ 465.724972][T16125] fido_id[16125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/report_descriptor': No such file or directory [ 465.938560][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3496'. [ 466.251678][ C2] net_ratelimit: 43332 callbacks suppressed [ 466.251692][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 466.251740][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 466.253737][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 466.257408][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 466.260992][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 466.265086][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 466.268293][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 466.272316][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 466.275588][ C2] bridge0: received packet on veth1_to_bridge with own address as source address (addr:9a:df:3e:54:84:b5, vlan:1) [ 466.280113][ C3] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 466.448597][T16221] netlink: 'syz.6.3498': attribute type 1 has an invalid length. [ 466.477320][T16221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.114073][T16235] netlink: 'syz.0.3502': attribute type 4 has an invalid length. [ 467.866764][T16237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.962737][T16240] lo: entered allmulticast mode [ 467.972996][T16240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3504'. [ 468.018965][T16239] lo: left allmulticast mode [ 468.079355][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3505'. [ 468.820870][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 468.841500][T16257] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3512'. [ 469.266437][T16263] syz_tun: entered allmulticast mode [ 469.290437][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3513'. [ 469.307541][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 469.396289][T16261] syz_tun: left allmulticast mode [ 469.532222][T16276] ================================================================== [ 469.535323][T16276] BUG: KASAN: slab-use-after-free in dvb_media_device_free+0x589/0x650 [ 469.538446][T16276] Read of size 8 at addr ffff88802a99d4b0 by task syz.0.3517/16276 [ 469.542359][T16276] [ 469.543995][T16276] CPU: 0 UID: 0 PID: 16276 Comm: syz.0.3517 Not tainted syzkaller #0 PREEMPT(full) [ 469.544020][T16276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.544033][T16276] Call Trace: [ 469.544039][T16276] [ 469.544044][T16276] dump_stack_lvl+0x100/0x190 [ 469.544062][T16276] print_report+0x13d/0x4b0 [ 469.544079][T16276] ? __virt_addr_valid+0x239/0x430 [ 469.544096][T16276] ? dvb_media_device_free+0x589/0x650 [ 469.544109][T16276] kasan_report+0xdf/0x1c0 [ 469.544121][T16276] ? dvb_media_device_free+0x589/0x650 [ 469.544136][T16276] dvb_media_device_free+0x589/0x650 [ 469.544150][T16276] ? up_write+0x2dc/0x5b0 [ 469.544165][T16276] dvb_remove_device.part.0+0xa4/0x270 [ 469.544179][T16276] dvb_remove_device+0x1f/0x30 [ 469.544191][T16276] dvb_unregister_frontend+0x7a/0x150 [ 469.544204][T16276] vidtv_bridge_remove+0x84/0x140 [ 469.544221][T16276] ? __pfx_vidtv_bridge_remove+0x10/0x10 [ 469.544236][T16276] platform_remove+0x5f/0x80 [ 469.544249][T16276] ? __pfx_platform_remove+0x10/0x10 [ 469.544261][T16276] device_remove+0xcb/0x180 [ 469.544277][T16276] device_release_driver_internal+0x44e/0x620 [ 469.544297][T16276] unbind_store+0xf8/0x110 [ 469.544310][T16276] ? __pfx_unbind_store+0x10/0x10 [ 469.544324][T16276] drv_attr_store+0x74/0xb0 [ 469.544335][T16276] ? __pfx_drv_attr_store+0x10/0x10 [ 469.544347][T16276] sysfs_kf_write+0xf2/0x150 [ 469.544362][T16276] kernfs_fop_write_iter+0x3e0/0x5f0 [ 469.544374][T16276] ? __pfx_sysfs_kf_write+0x10/0x10 [ 469.544389][T16276] vfs_write+0x6af/0x1050 [ 469.544403][T16276] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 469.544416][T16276] ? __pfx_vfs_write+0x10/0x10 [ 469.544429][T16276] ? find_held_lock+0x2b/0x80 [ 469.544451][T16276] ksys_write+0x12a/0x250 [ 469.544466][T16276] ? __pfx_ksys_write+0x10/0x10 [ 469.544482][T16276] __do_fast_syscall_32+0x13a/0x8b0 [ 469.544494][T16276] do_fast_syscall_32+0x32/0x70 [ 469.544504][T16276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.544518][T16276] RIP: 0023:0xf70aefec [ 469.544533][T16276] Code: Unable to access opcode bytes at 0xf70aefc2. [ 469.544538][T16276] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 469.544550][T16276] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 469.544558][T16276] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.544564][T16276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.544571][T16276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.544577][T16276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.544587][T16276] [ 469.544591][T16276] [ 469.634332][T16276] Allocated by task 1: [ 469.636028][T16276] kasan_save_stack+0x30/0x50 [ 469.637968][T16276] kasan_save_track+0x14/0x30 [ 469.639938][T16276] __kasan_kmalloc+0xaa/0xb0 [ 469.641846][T16276] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 469.644053][T16276] dvb_register_device+0x1d6/0x1e20 [ 469.646162][T16276] dvb_register_frontend+0x552/0x820 [ 469.648323][T16276] vidtv_bridge_probe+0x44b/0xa30 [ 469.650385][T16276] platform_probe+0x106/0x1d0 [ 469.652294][T16276] really_probe+0x241/0xa60 [ 469.654155][T16276] __driver_probe_device+0x210/0x460 [ 469.656323][T16276] driver_probe_device+0x4a/0x140 [ 469.658383][T16276] __driver_attach+0x21f/0x5b0 [ 469.660387][T16276] bus_for_each_dev+0x13e/0x1d0 [ 469.662380][T16276] bus_add_driver+0x305/0x5b0 [ 469.664353][T16276] driver_register+0x1e2/0x360 [ 469.666264][T16276] vidtv_bridge_init+0x52/0x80 [ 469.668198][T16276] do_one_initcall+0x11c/0x6f0 [ 469.670173][T16276] kernel_init_freeable+0x6ea/0x7b0 [ 469.672304][T16276] kernel_init+0x21/0x1e0 [ 469.674068][T16276] ret_from_fork+0x730/0xd60 [ 469.675983][T16276] ret_from_fork_asm+0x1a/0x30 [ 469.677933][T16276] [ 469.678928][T16276] Freed by task 16276: [ 469.680614][T16276] kasan_save_stack+0x30/0x50 [ 469.682434][T16276] kasan_save_track+0x14/0x30 [ 469.684286][T16276] kasan_save_free_info+0x3b/0x70 [ 469.686308][T16276] __kasan_slab_free+0x5f/0x80 [ 469.688265][T16276] kfree+0x22b/0x6c0 [ 469.689868][T16276] dvb_device_put.part.0+0x57/0x90 [ 469.691947][T16276] dvb_remove_device.part.0+0x90/0x270 [ 469.694137][T16276] dvb_remove_device+0x1f/0x30 [ 469.696126][T16276] dvb_unregister_frontend+0x7a/0x150 [ 469.698305][T16276] vidtv_bridge_remove+0x84/0x140 [ 469.700382][T16276] platform_remove+0x5f/0x80 [ 469.702277][T16276] device_remove+0xcb/0x180 [ 469.704136][T16276] device_release_driver_internal+0x44e/0x620 [ 469.706584][T16276] unbind_store+0xf8/0x110 [ 469.708420][T16276] drv_attr_store+0x74/0xb0 [ 469.710305][T16276] sysfs_kf_write+0xf2/0x150 [ 469.712214][T16276] kernfs_fop_write_iter+0x3e0/0x5f0 [ 469.714370][T16276] vfs_write+0x6af/0x1050 [ 469.716176][T16276] ksys_write+0x12a/0x250 [ 469.717953][T16276] __do_fast_syscall_32+0x13a/0x8b0 [ 469.720106][T16276] do_fast_syscall_32+0x32/0x70 [ 469.722021][T16276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.724392][T16276] [ 469.725398][T16276] The buggy address belongs to the object at ffff88802a99d400 [ 469.725398][T16276] which belongs to the cache kmalloc-256 of size 256 [ 469.730842][T16276] The buggy address is located 176 bytes inside of [ 469.730842][T16276] freed 256-byte region [ffff88802a99d400, ffff88802a99d500) [ 469.736245][T16276] [ 469.737232][T16276] The buggy address belongs to the physical page: [ 469.739841][T16276] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a99c [ 469.743332][T16276] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 469.746743][T16276] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 469.749808][T16276] page_type: f5(slab) [ 469.751392][T16276] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 469.754813][T16276] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 469.758281][T16276] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 469.761764][T16276] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 469.765262][T16276] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 469.768761][T16276] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 469.772240][T16276] page dumped because: kasan: bad access detected [ 469.774821][T16276] page_owner tracks the page as allocated [ 469.777139][T16276] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12605505048 [ 469.784541][T16276] post_alloc_hook+0xfd/0x120 [ 469.786474][T16276] get_page_from_freelist+0x110d/0x35b0 [ 469.788743][T16276] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 469.791172][T16276] new_slab+0xa5/0x640 [ 469.792858][T16276] refill_objects+0xe3/0x410 [ 469.794759][T16276] __pcs_replace_empty_main+0x372/0x680 [ 469.797048][T16276] __kmalloc_cache_noprof+0x47b/0x6b0 [ 469.799244][T16276] bus_add_driver+0x92/0x5b0 [ 469.801171][T16276] driver_register+0x1e2/0x360 [ 469.803124][T16276] usb_register_driver+0x21c/0x3e0 [ 469.805200][T16276] do_one_initcall+0x11c/0x6f0 [ 469.807166][T16276] kernel_init_freeable+0x6ea/0x7b0 [ 469.809301][T16276] kernel_init+0x21/0x1e0 [ 469.811046][T16276] ret_from_fork+0x730/0xd60 [ 469.812879][T16276] ret_from_fork_asm+0x1a/0x30 [ 469.814832][T16276] page_owner free stack trace missing [ 469.817026][T16276] [ 469.818020][T16276] Memory state around the buggy address: [ 469.820312][T16276] ffff88802a99d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 469.823542][T16276] ffff88802a99d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.826751][T16276] >ffff88802a99d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 469.829980][T16276] ^ [ 469.832264][T16276] ffff88802a99d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 469.835508][T16276] ffff88802a99d580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 469.838759][T16276] ================================================================== [ 469.965437][T16276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 469.968402][T16276] CPU: 0 UID: 0 PID: 16276 Comm: syz.0.3517 Not tainted syzkaller #0 PREEMPT(full) [ 469.972149][T16276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.976209][T16276] Call Trace: [ 469.977583][T16276] [ 469.978812][T16276] dump_stack_lvl+0x100/0x190 [ 469.980796][T16276] vpanic+0x553/0x970 [ 469.982418][T16276] ? __pfx_vpanic+0x10/0x10 [ 469.984304][T16276] ? dvb_media_device_free+0x589/0x650 [ 469.986521][T16276] panic+0xd1/0xe0 [ 469.988085][T16276] ? __pfx_panic+0x10/0x10 [ 469.989984][T16276] ? dvb_media_device_free+0x589/0x650 [ 469.992130][T16276] ? preempt_schedule_common+0x3c/0xb0 [ 469.994290][T16276] check_panic_on_warn.cold+0x19/0x34 [ 469.996491][T16276] end_report.part.0+0x3a/0x90 [ 469.998455][T16276] kasan_report.cold+0xe/0x18 [ 470.000414][T16276] ? dvb_media_device_free+0x589/0x650 [ 470.002632][T16276] dvb_media_device_free+0x589/0x650 [ 470.004796][T16276] ? up_write+0x2dc/0x5b0 [ 470.006585][T16276] dvb_remove_device.part.0+0xa4/0x270 [ 470.008817][T16276] dvb_remove_device+0x1f/0x30 [ 470.010792][T16276] dvb_unregister_frontend+0x7a/0x150 [ 470.013005][T16276] vidtv_bridge_remove+0x84/0x140 [ 470.015078][T16276] ? __pfx_vidtv_bridge_remove+0x10/0x10 [ 470.017186][T16276] platform_remove+0x5f/0x80 [ 470.018944][T16276] ? __pfx_platform_remove+0x10/0x10 [ 470.021039][T16276] device_remove+0xcb/0x180 [ 470.022724][T16276] device_release_driver_internal+0x44e/0x620 [ 470.025214][T16276] unbind_store+0xf8/0x110 [ 470.027042][T16276] ? __pfx_unbind_store+0x10/0x10 [ 470.028984][T16276] drv_attr_store+0x74/0xb0 [ 470.030879][T16276] ? __pfx_drv_attr_store+0x10/0x10 [ 470.033004][T16276] sysfs_kf_write+0xf2/0x150 [ 470.034891][T16276] kernfs_fop_write_iter+0x3e0/0x5f0 [ 470.036950][T16276] ? __pfx_sysfs_kf_write+0x10/0x10 [ 470.038970][T16276] vfs_write+0x6af/0x1050 [ 470.040647][T16276] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 470.042934][T16276] ? __pfx_vfs_write+0x10/0x10 [ 470.044870][T16276] ? find_held_lock+0x2b/0x80 [ 470.046742][T16276] ksys_write+0x12a/0x250 [ 470.048444][T16276] ? __pfx_ksys_write+0x10/0x10 [ 470.050397][T16276] __do_fast_syscall_32+0x13a/0x8b0 [ 470.052432][T16276] do_fast_syscall_32+0x32/0x70 [ 470.054331][T16276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.056782][T16276] RIP: 0023:0xf70aefec [ 470.058367][T16276] Code: Unable to access opcode bytes at 0xf70aefc2. [ 470.060994][T16276] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 470.064220][T16276] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000300 [ 470.067373][T16276] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.070419][T16276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.073429][T16276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 470.076525][T16276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.079742][T16276] [ 470.081700][T16276] Kernel Offset: disabled [ 470.083386][T16276] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:53:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a91f55 RDI=ffffffff9bc26ca0 RBP=ffffffff9bc26c60 RSP=ffffc900033974f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b92621e R15=ffffffff85a91ef0 RIP=ffffffff85a91f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809698f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3ba426 CR3=0000000052088000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000082000020 Opmask04=00000000fff7ffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056407aa501b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056407aa5ca40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373253309d4b3d5 7373253309d4b3f2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dedac7fb62fbdd99 737325366ddb12ee ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30616964656d2f30 2e76746469762f6d 726f6674616c702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312f31316273752f 362e6463685f796d 6d75642f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000081 0000006b636f006b 6300306573756f00 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422c45422c44422c 43422c42422c4142 2c39422c38422c37 422c44412c43412c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 36412c35412c3441 2c33412c46392c45 392c44392c43392c 42392c46382c4538 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c43382c30382c46 372c45372c44372c 43372c42372c4137 2c39372c37372c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000003 RBX=ffff88802b333c68 RCX=ffffffff8212bb1f RDX=0000000000000000 RSI=ffffffff8c617f00 RDI=ffffffff8e6a8928 RBP=0000000000000001 RSP=ffffc90004c1f768 R8 =0000000000000000 R9 =fffffbfff2288a5a R10=ffffffff914452d7 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffff888024dbe210 RIP=ffffffff81ee54e2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3028b6 CR3=0000000064326000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd 0000000500001500 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000a3b00000cbd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000a3b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692074616d726f66 2064616200707865 6765722073756f69 76657270206f6e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 450c584d415e434a 0c484d4e005c5449 4b495e0c5f594345 5a495e5c0c434200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=0000000000000000 RCX=0000000000000200 RDX=0000000000000101 RSI=ffffffff8e3bbb29 RDI=ffffffff8c617f80 RBP=ffffffff8ede9b40 RSP=ffffc90000537ad8 R8 =000000007f1fed10 R9 =0000000000000007 R10=0000000000000200 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5dd95 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50f76cf CR3=0000000052153000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24d7accbff0dbea1 e095cf7b460315e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b7e6d4d32bc024e2 836b2a3c6c68f0d9 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19e645fef064376f 546648c5e9b353a9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 993d6605020097f6 6582825de0ad0cdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00011cd900000001 ff295400905bd300 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000011cf3 2932900bb96361fa ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00011cf22f607c00 53dc94001f86b300 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b2ab40038dc8265 0000000125254e00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 33ea3ae39aba2c1b d23ff019122397de ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d3fa17aad50aed1 1df2d45f8be4b5d9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0d94000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 020500000000080b efc0000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000100000 0014000000180000 001c000000200000 0024000000280000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 002c000000300000 0034000000380000 003c000000400000 0044000000480000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004c000000500000 0054000000580000 005c000000600000 0064000000680000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0074000000880000 00a0000000780000 007c000000bc0000 001e000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002000000024 000000280000002c 0000003000000034 000000380000003c ZMM25=abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c abd9419cabd9419c ZMM26=004088e8004088e8 004088e8004088e8 004088e8004088e8 004088e8004088e8 004088e8004088e8 004088e8004088e8 004088e8004088e8 004088e8004088e8 ZMM27=e3555551e3555551 e3555551e3555551 e3555551e3555551 e3555551e3555551 e3555551e3555551 e3555551e3555551 e3555551e3555551 e3555551e3555551 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=eb140000eb140000 eb140000eb140000 eb140000eb140000 eb140000eb140000 eb140000eb140000 eb140000eb140000 eb140000eb140000 eb140000eb140000 info registers vcpu 3 CPU#3 RAX=0000000000000400 RBX=ffff888021498ae0 RCX=000000000000000a RDX=ffff88801cf10000 RSI=ffffffff86b83bfa RDI=ffff88801cf10000 RBP=000000000000000a RSP=ffffc900005dfb38 R8 =0000000000000005 R9 =000000000000001f R10=000000000000000a R11=0000000000000001 R12=ffffc90000415138 R13=ffff888021498b3c R14=ffff888021498ae8 R15=0000000000000000 RIP=ffffffff86b83c07 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096c8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003d40 CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1afd80a4c3a77b47 880d68e00fd74273 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac6e66ad73a281d2 50adbd0358864b02 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d9c5142dcc6a5a53 60b379a5b5e71974 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf837d225518fa5c 48272e75322b6119 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e000000c0000001 1d6efac900002d2f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40000001a8000001 1d71ee4d00000001 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b80000011d6c2ea7 1d6c029b1d6b85e1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d7034eb46008001 b00000000000958a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 96db834991cbf170 360183cd8dd435c3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4334d503e5b8263 227fcda36e175817 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000