last executing test programs:

1m4.842066987s ago: executing program 0 (id=540):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)
listen(r0, 0xa)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0xffffffffffffffff, r2, r5}, 0xc)

1m4.761759868s ago: executing program 0 (id=541):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000580)=@ethtool_wolinfo={0x5, 0x750, 0x9, "38e26caaccd0"}})
unshare(0x60040000)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x4, 0x0, 0x0, 0xbb, &(0x7f0000000080)="09e8e68a4361d230814e8ebd3a12e08ec3259a9a506028f4062164849996013873488cea1178d137d5abbd9c9f301ccc8452e7cd07ab5908038bf08ddfe7a3a240bd46add68dec1e8a4c80773e7052e5562af6e9a41aa2e0e35eff260ddf3eb57874573c6cabf77eb2ea49b1dc11192c83f25e7b949f7cb3575ee0ebcdef1903c6f2867a73d7818a9308f1ce1c1bec22b5714409c418ed70d01b5767005cdceafe0573f8ec192b64961315d1274e606028cf1afd5c05bf1067726b", 0xfffffffc})

1m4.07151978s ago: executing program 0 (id=544):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r0, &(0x7f0000000280)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet_tcp(0x2, 0x1, 0x0)

1m3.974339196s ago: executing program 0 (id=546):
ioprio_set$pid(0x2, 0x0, 0x2000)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0xb23091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendfile(r0, r7, 0x0, 0x2000fb)

1m3.800262285s ago: executing program 0 (id=548):
r0 = socket(0x10, 0x3, 0xfffffffe)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/tls_stat/file0\x00', 0x9f)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/tls_stat\x00', 0x0, 0x0)
read(r2, &(0x7f0000000100), 0x64)
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000380)={&(0x7f00000002c0)=[r4], 0x1, 0x80000})
ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000040))
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1m3.411580055s ago: executing program 0 (id=551):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, 0x0, &(0x7f0000000240)="e111d87636e3fa963a7e80b7e359", 0xe, r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x4, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x94, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7ffffffe, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x1, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x1000000)

1m3.357079997s ago: executing program 32 (id=551):
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(0x0, 0x0, &(0x7f0000000240)="e111d87636e3fa963a7e80b7e359", 0xe, r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x4, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x94, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7ffffffe, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x1, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x1000000)

1m0.455137235s ago: executing program 2 (id=589):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80)

1m0.453292785s ago: executing program 2 (id=590):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x701, 0x3, 0x248, 0xd8, 0xb, 0x108, 0xd8, 0x0, 0x1b0, 0x1c8, 0x1c8, 0x1b0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x2, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'vxcan1\x00', {}, {}, 0x4, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x800, 0x7ff, 0x1, 'pptp\x00', 'syz1\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000009c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m0.334956578s ago: executing program 2 (id=591):
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='nilfs2\x00', 0x7000000, 0x0)

1m0.334159781s ago: executing program 2 (id=593):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1, 0x82000001, 0xff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fd/4\x00')
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000500))
chdir(&(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
rmdir(&(0x7f0000000100)='./control\x00')
recvmsg$unix(r0, &(0x7f00000008c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000280)=""/213, 0xd5}], 0x2, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x10000)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000040)={0x1, 0x2})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0)
listen(r3, 0x1)
sendmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000001001000001000000020000000000002b4e001000000000000000100100000e0000006978c907ac4b2f5d36e7d6a222835209e07e44b1fddcbad4d67ac9b5c8e841472f47ea958ac16c"], 0x28}, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000000600000000000000"], 0x18}, 0x0)
fanotify_init(0x4000, 0x0)
removexattr(0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r5, &(0x7f00000001c0)='p:s/p ./file0:0\f\\', 0x11)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000940)=""/250, 0xfa}], 0x2}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e6ffffffffffff805871122200001800"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
writev(r6, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1)

59.41364828s ago: executing program 2 (id=612):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r0, &(0x7f0000000280)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet_tcp(0x2, 0x1, 0x0)

59.231457646s ago: executing program 2 (id=614):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
recvmmsg(r0, &(0x7f0000004700)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000001880)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/20, 0x14}], 0x2, &(0x7f00000018c0)=""/127, 0x7f}, 0x8}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003000)=[{&(0x7f00000019c0)=""/157, 0x9d}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/181, 0xb5}, {&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000001cc0)=""/114, 0x72}, {&(0x7f0000001d40)=""/29, 0x1d}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001e00)=""/223, 0xdf}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/251, 0xfb}], 0xa, &(0x7f00000030c0)=""/236, 0xec}, 0x8}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/47, 0x2f}, {&(0x7f0000003240)=""/4, 0x4}, {&(0x7f0000003280)=""/48, 0x30}, {&(0x7f00000032c0)=""/119, 0x77}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/166, 0xa6}], 0x7, &(0x7f0000003540)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004540)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000045c0)=""/134, 0x86}], 0x1, &(0x7f00000046c0)=""/36, 0x24}, 0x2}], 0x4, 0x2000, &(0x7f0000004800)={0x77359400})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e28, 0x2007, @local, 0xd16}}, 0x402}, 0x90)
setns(0xc9, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x1}, 0x8)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x2, 0xfffffffd)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
fcntl$notify(r3, 0x402, 0x80000004)
r4 = syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00')
readv(r4, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x74, 0x3)

59.03633421s ago: executing program 33 (id=614):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
recvmmsg(r0, &(0x7f0000004700)=[{{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000001880)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/20, 0x14}], 0x2, &(0x7f00000018c0)=""/127, 0x7f}, 0x8}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003000)=[{&(0x7f00000019c0)=""/157, 0x9d}, {&(0x7f0000001a80)=""/125, 0x7d}, {&(0x7f0000001b00)=""/181, 0xb5}, {&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000001cc0)=""/114, 0x72}, {&(0x7f0000001d40)=""/29, 0x1d}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001e00)=""/223, 0xdf}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/251, 0xfb}], 0xa, &(0x7f00000030c0)=""/236, 0xec}, 0x8}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000031c0)=""/51, 0x33}, {&(0x7f0000003200)=""/47, 0x2f}, {&(0x7f0000003240)=""/4, 0x4}, {&(0x7f0000003280)=""/48, 0x30}, {&(0x7f00000032c0)=""/119, 0x77}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/166, 0xa6}], 0x7, &(0x7f0000003540)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004540)=@tipc=@id, 0x80, &(0x7f0000004680)=[{&(0x7f00000045c0)=""/134, 0x86}], 0x1, &(0x7f00000046c0)=""/36, 0x24}, 0x2}], 0x4, 0x2000, &(0x7f0000004800)={0x77359400})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e28, 0x2007, @local, 0xd16}}, 0x402}, 0x90)
setns(0xc9, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={0x0, 0x1}, 0x8)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x2, 0xfffffffd)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c830}, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0)
fcntl$notify(r3, 0x402, 0x80000004)
r4 = syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00')
readv(r4, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x74, 0x3)

3.259598429s ago: executing program 1 (id=1848):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000280))
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x474083, 0x15, 0x8}, 0x18)

3.19943155s ago: executing program 1 (id=1852):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x8}}, './file0\x00'})
read$proc_mixer(r0, &(0x7f0000000040)=""/102, 0x66)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000100)=')@\x00', 0x100, &(0x7f0000000140)={@_ha_fsid={[0x5, 0xf]}, {0x8001, 0xe, 0x4, 0xffffffffffffa4f1}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xf5a})
r2 = dup(r1)
ioctl$BLKFINISHZONE(r0, 0x40101288, &(0x7f0000000240)={0x6, 0x6})
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000280)={0xdf, r0, 0x80000})
preadv(r1, &(0x7f0000002180)=[{&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000000e80)=""/29, 0x1d}, {&(0x7f0000000ec0)=""/207, 0xcf}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/39, 0x27}, {&(0x7f0000002000)=""/161, 0xa1}, {&(0x7f00000020c0)=""/151, 0x97}], 0x7, 0x7, 0x54042847)

3.114017631s ago: executing program 1 (id=1855):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000001680), 0x0, 0x2002)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000005c0)={0x2f, &(0x7f0000000440)=[{0x2c, '\x00', @buffer={"3a0f92de4f9e996df464d5d2e64448fde364553d1c7ed668f00c34fa067c02dc", 0x20}, 0x80000}]})

3.102996901s ago: executing program 1 (id=1857):
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac'])
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
setuid(0xee01)

3.051000783s ago: executing program 1 (id=1859):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xe, {"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", 0x1000}}, 0x1006)

2.951111002s ago: executing program 1 (id=1864):
syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x2000, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (async)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async)
r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x1e, '\x00', @st={0x4, [{0x3, @svalue=0x8001}, {0x1, @svalue=0xc}, {0x1, @uvalue=0x8}, {0x3, @uvalue=0x2}]}, 0x8000}]})
write(r3, &(0x7f0000000500)='tcpci 0x5', 0x9) (async)
sendfile(0xffffffffffffffff, r2, &(0x7f0000002080)=0x9c, 0x23b) (async)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
r5 = socket(0x10, 0x803, 0x4)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd71) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x200005}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (async)
syz_usb_connect$uac3(0x2, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="121c1001000000408c0d14004000010203010902a100030101c010080b0002010130070904000000010130000a2401083d0007000000132403250101060250ff07000007000100ff010c240b0701fcffffff08060014240202000105070b000000030006000200ff0109040100000102300009040101010102300009050109200009d4840a2525000000000104000904020000010230000904020f0000000000000082091002fa0a040a252500000080050900"], 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x350, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xb}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xee}, @NL80211_ATTR_TX_RATES={0x320, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x7, 0xa}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x2}, {0x2}, {0x1, 0x6}, {0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x7, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0xa}, {0x3, 0x2}, {0x3}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x7}, {0x7, 0x7}, {0x1}]}]}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x3, 0x0, 0x4, 0x1ff, 0xa, 0x5, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d, 0xd, 0x0, 0x100, 0x4, 0x9, 0xfffb, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xb, 0x401, 0x1, 0x80, 0x71, 0x4]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x30, 0x2, 0x88, 0x0, 0x5, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x5}, {0x5, 0x8}, {0x6, 0x8}, {0x3, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x6}, {}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x9}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1fe, 0x4, 0x9, 0xa, 0x81, 0xffff, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x6246, 0xffff, 0xa7, 0xd8f, 0x5, 0x616f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x4, 0xc, 0x4, 0x78, 0x7, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x4, 0xb, 0x9, 0x4, 0xc, 0x50, 0x2, 0x6, 0x0, 0x4, 0x0, 0x5, 0x3, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x2}, {0x1, 0x3}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x6}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0x8}, {0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xd, 0x65, 0x4, 0x8004, 0x0, 0x8, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8ea, 0x400, 0x800, 0xdc80, 0x5, 0x10, 0x4, 0x7b53]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe00, 0x5, 0x0, 0x7, 0x6, 0x3, 0x46]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4c6, 0x0, 0x9, 0x64a, 0x4, 0x6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8, 0x3, 0x4, 0x400, 0x5, 0x3ff, 0x5]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x4}, {0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x2}, {0x5, 0x8}, {0x7, 0x3}, {0x7}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0xa}, {0x7, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x6}, {}, {0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x3, 0x9}, {0x3}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x70eb, 0xf, 0x9, 0x9, 0x6, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0xd, 0x9, 0x401, 0x4, 0x0, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x249a, 0xfffd, 0xf03, 0x5, 0x6, 0x3, 0x29ed, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x5, 0x44a, 0x3, 0xfffc, 0xf, 0xb10, 0x8]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x16, 0x60, 0x6c, 0xc, 0x6, 0x6c, 0xd]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x1b, 0x60, 0x30, 0x48, 0x0, 0x4, 0x25, 0x36, 0x36, 0x4e, 0x30, 0x16, 0xc, 0x1, 0xb, 0x12, 0x24]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x4, 0x18, 0x12, 0x1b, 0x18, 0x94, 0x14, 0x3, 0x60, 0x12, 0x6c, 0x18]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x6}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x17}, {0x0, 0x8}, {0x0, 0x5}, {0x2}, {0x0, 0x8}, {0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0xa}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x8}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x1}, {0x5, 0x4}, {0x7, 0xa}, {0x1, 0x3}, {}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x5}, {}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x8}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x7}, {0x0, 0x2}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0xa}, {0x6, 0x5}, {0x1}, {}, {0x1, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x3, 0x4}, {0x7, 0x4}, {0x6, 0x2}]}]}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x24004880}, 0x4040000)

559.579863ms ago: executing program 3 (id=1918):
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfed5, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00', @ANYRESOCT, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32, @ANYRESHEX=0x0], 0x30}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000240)="4e28f81018f697ced5589d27ff5ac092b77a955a404bf3342b62d6f2807e3eec57d289ca7f46a09d56c9132fd17cbd530f51f645455ae48acde0533e9f9c7061de421fac9edd6567fddedcb58cb44468a7ccb9929948559fbffc9235df39cd5a60ff1dc8a670a09d0e61898847c16588cd991bc5d0d3f48c9e6c59b365700e5488d4f4c100afaf0eedff9d73bae4ab40364d8a6189eb644c5a3bcad405c117311fbde3b08d45a656f3df03b7c9acfafe5001938cdf50dcf115", 0xb9}, 0x68)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='common_pid > 0', 0xe)
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x8000)

451.094541ms ago: executing program 3 (id=1920):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32], 0x44}}, 0x0)

361.663164ms ago: executing program 3 (id=1921):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7ff, 0x1, 0x1, 0x0, 0x7})
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000020064fe", @ANYRES32=0x0, @ANYBLOB="0400000000ff0f0000000000000000002000000000000000a1ae478da118dcde7bc18b5ce662656448aa4c03c4fe180cffc867f5dbcc9af45b0602ce1cd3abdc90f25f7c2493b1f8109cd119e249199cdbe1899a0e67294f5a6adbfddc4f900bc0342ecfcb302ed68dae18253a40121e917c47a569"], 0x2c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000)
symlink(&(0x7f0000000940)='./mnt\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40c1)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4)

271.446365ms ago: executing program 5 (id=1923):
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
pselect6(0x40, &(0x7f00000001c0)={0xffffffffffffffe0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)

271.258686ms ago: executing program 3 (id=1924):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1'}, 0xb)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x2000800)

270.548323ms ago: executing program 5 (id=1926):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r1, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r1, r2, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x1, 0x3, 0x9)
pipe2(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
close(r3)
vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000340000000000000000000000000000000000000000400000a56a9a1a30"], 0x50)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f00000000c0), 0x100040, &(0x7f0000000340)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000007,uid<', @ANYRESDEC=r1, @ANYBLOB="2c6f626a5f747970653d6900e51dd91c4088609e6b3d14f02a0f88731306919db777c3b765667d0025579b76c99b1a7f9b934f60dda115773ab15236cdd2b4f7e5c2f6293b2032a43512da0fafd15cab01f0e7efcc6eaafa5f1d021218a896a3b7c44d4a503efe327934c291821fa3d5421b3ba75098d2c9b8fea3075b917d46c64de5056a36638f88293ac1411f7cb469ee5d948e32463ca6248842c00fbc2ad7b6a1ae863400e06e2a192dde9a9ea4c6b69bfc69bc1ae3f2ffabd774bec40c585deea15751830967d3affdcd9d5d875ae02e6e08f0659ac731f56595cae771813e39e16e7577fb48c492301cbd4516e7e337495798bf4b9cc60ec4577172badcce805fe594e35b6e8486e632"])
io_uring_enter(r4, 0x1cc8, 0xf346, 0xf4, &(0x7f0000000300)={[0x5]}, 0x8)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r0, &(0x7f000000b1c0)={0x2020}, 0x2020) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r1, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r1, r2, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket(0x1, 0x3, 0x9) (async)
pipe2(&(0x7f0000000140), 0x0) (async)
close(r3) (async)
vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000340000000000000000000000000000000000000000400000a56a9a1a30"], 0x50) (async)
mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f00000000c0), 0x100040, &(0x7f0000000340)=ANY=[@ANYBLOB='stats=global,max=00000000000000000000007,uid<', @ANYRESDEC=r1, @ANYBLOB="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"]) (async)
io_uring_enter(r4, 0x1cc8, 0xf346, 0xf4, &(0x7f0000000300)={[0x5]}, 0x8) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000080c) (async)

227.184113ms ago: executing program 3 (id=1927):
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, r0, @void, @value=r0}, 0x20)

223.936836ms ago: executing program 4 (id=1928):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2f, 0x8}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r2}]}, 0x35}, 0x1, 0xd, 0x0, 0x480c5}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r6, 0x4)

171.618706ms ago: executing program 5 (id=1929):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x3f00, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

171.300098ms ago: executing program 3 (id=1930):
r0 = getpid()
getpriority(0x1, r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e999e60000000000000000000000000000000000ffffac141433000000000000000000000400000000000000000000000c9c0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000007f0000000000000006000000000000000300000000000000fcfffffffffffffffdffffffffffffff0500000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000050000000000000000000000000000000100010300000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d37, 0xffffff01, 0x8003, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xfeffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x5, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0x6, 0x6, 0x400, 0xd, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4de, 0x0, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x389, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x0, 0x10000, 0x104, 0x37f3, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0xc41a, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c8, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x40000047, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0x0, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
recvmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/73, 0x49}], 0x1}, 0x120)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f00000007c0)}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r4, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf)

170.636046ms ago: executing program 5 (id=1931):
r0 = getpgrp(0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='syscall\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {0x3, 0x6, 0x0, 0xfff9}, 0x25, [0x0, 0x2, 0x9, 0x0, 0xa, 0x3, 0xffffffff, 0xd63, 0x4, 0x3ff, 0x8001, 0x1e3, 0x3937, 0x6, 0x3, 0xa58a, 0x8, 0x4, 0x6, 0x6, 0x43, 0x1ff, 0x8, 0x8, 0x2, 0x7f, 0xc59, 0x5, 0x1, 0x10000, 0x2, 0x6, 0xf, 0xce, 0x1000, 0x6, 0x7, 0x0, 0x6, 0x4c, 0xb33, 0x2, 0x4a, 0x6, 0x1ff, 0x8, 0x3, 0x9, 0x6, 0xf2, 0x3, 0x5, 0x4, 0x7ff, 0x1, 0x7, 0x181, 0x9218, 0x5, 0x9, 0x4, 0x80000001, 0x3, 0x9], [0x335b0dbb, 0x0, 0x4, 0x9, 0x8001, 0x4, 0x5, 0xf, 0xa12, 0x2, 0x3, 0x1, 0x8, 0x40, 0x8, 0xa, 0x10000, 0x5, 0x8000, 0x7, 0x9, 0x0, 0x3, 0x80000001, 0x2, 0x4, 0x8, 0x1, 0x80000000, 0x2, 0x3, 0x800, 0x3, 0x12, 0x0, 0xce, 0x8000, 0xdd0, 0x0, 0x0, 0xb, 0x8, 0x1, 0x6, 0x101, 0x4, 0x8, 0x5, 0x8001, 0x40, 0x1, 0x6, 0x9, 0xb, 0x7, 0x4a, 0xbd3f, 0x6, 0x80000000, 0xbbf0, 0x6, 0x9, 0x9, 0x1], [0x3, 0xea, 0x7, 0x7943, 0x7, 0x400, 0x8000, 0xc, 0x5, 0x8502, 0x2, 0x0, 0xffff, 0x1, 0x0, 0x52e, 0xffff, 0x4, 0x3, 0x89, 0x1, 0x4, 0x7, 0x7fff, 0x7c, 0x5, 0x80, 0x1000, 0x40, 0x4, 0x1, 0xaaaf9b0, 0xfffffff7, 0xffff, 0x5, 0x6, 0x4, 0xe, 0x3, 0xff, 0xb, 0x0, 0x40, 0x34c00, 0x363d, 0x6, 0x9, 0x4, 0x9, 0xd, 0xc, 0x5, 0x1, 0x4, 0x5, 0x4, 0x10, 0x1, 0x6, 0x8, 0x6, 0x2, 0x1, 0x6], [0x9, 0x6, 0x1, 0x800, 0x9, 0x24d, 0x3f6950fc, 0x639f, 0x80, 0x6bf6, 0x8, 0xffff970c, 0x8, 0x1, 0xffffffff, 0xbfcf, 0x1, 0x0, 0x1, 0x2, 0x8, 0x641, 0x0, 0xb12, 0x0, 0xff, 0x2, 0x0, 0x3, 0xffff0e10, 0x7, 0x0, 0x9, 0x1, 0x8, 0x1, 0x7fff, 0x8, 0x9, 0x3, 0x7, 0x80000001, 0x6, 0x7, 0x6, 0x0, 0x0, 0x780000, 0x2, 0xc, 0xe, 0x0, 0x3, 0x9, 0x8000, 0x8, 0x4, 0x8, 0x4, 0x4a94, 0x3, 0x1, 0x9, 0x10001]}, 0x45c)

101.022825ms ago: executing program 4 (id=1932):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4000}, 0x18)
write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc)
write(r1, &(0x7f00000004c0)='\n', 0x1)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x0, 0xfffffffffffffffb, 0x8d, 0x8, @scatter={0x4, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/177, 0xb1}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/99, 0x63}]}, &(0x7f0000000400)="9e5bb250e59aa899a28ce32a9fc7d63046fb2407b566bd5e886c5783c1475c0df60a10765187e3cc60c0c032bc3e23ed1a43d7200e05e9353f0738ccaf5d5c734a345a55a738f8fd0daaf9ea3727d9fa9cd251ee03654e9dbb1d258d1e3abe0a8390121181f4990106dc7f61913d3956606aed6678756dd71a1d72b3ddbe063a426714130fe9532245d59247e4", &(0x7f00000004c0)=""/46, 0x8000, 0x1, 0x1, &(0x7f0000000500)})
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x78, @buffer={0x0, 0x5f, &(0x7f0000000080)=""/95}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10004, 0x30520cf7f25f0c64, 0x0, 0x0})

100.892968ms ago: executing program 4 (id=1933):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x80)

51.839799ms ago: executing program 4 (id=1934):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x58565559, 0x0, 0x0, 0xbd30, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})

51.585679ms ago: executing program 5 (id=1935):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x58565559, 0x0, 0x0, 0xbd30, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}}) (fail_nth: 1)

44.481128ms ago: executing program 4 (id=1936):
r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$proc_mixer(r0, &(0x7f0000000280)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet_tcp(0x2, 0x1, 0x0)

2.686919ms ago: executing program 5 (id=1937):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6c}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044000)
recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/128, 0x80}], 0x1, &(0x7f0000000340)=""/174, 0xae}, 0x40000002)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x58565559, 0x0, 0x0, 0xbd30, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}})

0s ago: executing program 4 (id=1938):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x81, 0xf, 0xfb}, {0x8, 0xa, 0x62, 0x9}]}, 0xff40)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4c1d, 0x4, @empty, 0x803}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000002c0)={0x1f, 0x3, 0x4}, 0x6) (async)
futex_waitv(&(0x7f0000000d80)=[{0x1, 0x0, 0x4}], 0x1, 0x0, 0x0, 0x1) (async, rerun: 32)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r6, &(0x7f00000004c0), &(0x7f00000005c0)=@tcp}, 0x20) (async, rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="5b685c7e69f7a96657ffd83386dd6a000000001801fffe800000000000000000000000000026ff0200000000000000000000000000014c0000040000000100facea6781b5bd172623575a5b9508af86aba82f5a50d07a549a9de0350d45e1e69ec347c5422a3236eb6d2598673c680628b7b1912ed2b76812cee43a0a9961f673c7bbd56289dcfc7abf887af81d057cfe57134fae3008ed9c091db6e846bee498d7af8e825db3f2243ea1f88ab"], 0x0) (rerun: 64)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

kernel console output (not intermixed with test programs):

=c000003e syscall=202 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144023][   T43] audit: type=1326 audit(2000000025.629:25382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144122][   T43] audit: type=1326 audit(2000000025.629:25383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144337][   T43] audit: type=1326 audit(2000000025.629:25384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144456][   T43] audit: type=1326 audit(2000000025.629:25385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144615][   T43] audit: type=1326 audit(2000000025.629:25386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.144813][   T43] audit: type=1326 audit(2000000025.629:25387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.145318][   T43] audit: type=1326 audit(2000000025.629:25388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.145341][   T43] audit: type=1326 audit(2000000025.629:25389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10411 comm="syz.5.1437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f5f9e159 code=0x7ffc0000
[  148.177972][  T844] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.180664][  T844] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  148.180681][  T844] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.180692][  T844] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  148.180713][  T844] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.182012][  T844] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.182027][  T844] usb 6-1: Product: syz
[  148.182036][  T844] usb 6-1: Manufacturer: syz
[  148.185909][  T844] cdc_wdm 6-1:1.0: skipping garbage
[  148.185919][  T844] cdc_wdm 6-1:1.0: skipping garbage
[  148.188791][  T844] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  148.188803][  T844] cdc_wdm 6-1:1.0: Unknown control protocol
[  148.280685][T10413] overlay: Unknown parameter '0000'
[  148.355912][T10429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  148.386316][   T30] usb 6-1: USB disconnect, device number 17
[  148.537147][T10450] FAULT_INJECTION: forcing a failure.
[  148.537147][T10450] name failslab, interval 1, probability 0, space 0, times 0
[  148.537237][T10450] CPU: 2 UID: 0 PID: 10450 Comm: syz.4.1452 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  148.537269][T10450] Tainted: [L]=SOFTLOCKUP
[  148.537274][T10450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  148.537281][T10450] Call Trace:
[  148.537285][T10450]  <TASK>
[  148.537291][T10450]  dump_stack_lvl+0x100/0x190
[  148.537321][T10450]  should_fail_ex.cold+0x5/0xa
[  148.537345][T10450]  should_failslab+0xc2/0x120
[  148.537374][T10450]  __kmalloc_cache_noprof+0x91/0x6d0
[  148.537402][T10450]  ? __kasan_kmalloc+0xaa/0xb0
[  148.537423][T10450]  ? nci_allocate_device+0x105/0x410
[  148.537455][T10450]  nci_allocate_device+0x105/0x410
[  148.537476][T10450]  virtual_ncidev_open+0x6f/0x220
[  148.537492][T10450]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  148.537506][T10450]  misc_open+0x26d/0x450
[  148.537523][T10450]  ? __pfx_misc_open+0x10/0x10
[  148.537540][T10450]  chrdev_open+0x234/0x6a0
[  148.537555][T10450]  ? __pfx_chrdev_open+0x10/0x10
[  148.537568][T10450]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[  148.537587][T10450]  do_dentry_open+0x6ab/0x14d0
[  148.537598][T10450]  ? __pfx_chrdev_open+0x10/0x10
[  148.537614][T10450]  vfs_open+0x82/0x3f0
[  148.537630][T10450]  path_openat+0x19fa/0x2440
[  148.537646][T10450]  ? __pfx_path_openat+0x10/0x10
[  148.537663][T10450]  do_file_open+0x20e/0x430
[  148.537678][T10450]  ? __pfx_do_file_open+0x10/0x10
[  148.537701][T10450]  ? _raw_spin_unlock+0x28/0x50
[  148.537713][T10450]  ? alloc_fd+0x471/0x7a0
[  148.537730][T10450]  do_sys_openat2+0x10f/0x1e0
[  148.537745][T10450]  ? __pfx_do_sys_openat2+0x10/0x10
[  148.537768][T10450]  __x64_sys_openat+0x12d/0x210
[  148.537783][T10450]  ? __pfx___x64_sys_openat+0x10/0x10
[  148.537804][T10450]  do_syscall_64+0x123/0x790
[  148.537818][T10450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.537830][T10450] RIP: 0033:0x7f159419e159
[  148.537841][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.537851][T10450] RSP: 002b:00007f1594ff0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  148.537862][T10450] RAX: ffffffffffffffda RBX: 00007f1594425fa0 RCX: 00007f159419e159
[  148.537870][T10450] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c
[  148.537876][T10450] RBP: 00007f159423503b R08: 0000000000000000 R09: 0000000000000000
[  148.537896][T10450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  148.537905][T10450] R13: 00007f1594426038 R14: 00007f1594425fa0 R15: 00007fffb8b52668
[  148.537921][T10450]  </TASK>
[  148.599701][T10456] input: syz0 as /devices/virtual/input/input17
[  148.702763][   T30] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  148.710357][T10461] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  148.732554][ T5089] Bluetooth: hci0: unexpected event for opcode 0x2060
[  148.843562][T10473] openvswitch: netlink: VXLAN extension message has 5 unknown bytes.
[  148.872941][   T30] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  148.873885][   T30] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  148.873899][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.873910][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  148.873931][   T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.875172][   T30] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  148.875185][   T30] usb 6-1: Product: syz
[  148.875194][   T30] usb 6-1: Manufacturer: syz
[  148.885348][   T30] cdc_wdm 6-1:1.0: skipping garbage
[  148.885359][   T30] cdc_wdm 6-1:1.0: skipping garbage
[  148.903576][   T30] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  148.903588][   T30] cdc_wdm 6-1:1.0: Unknown control protocol
[  149.089873][    C1] cdc_wdm 6-1:1.0: Unexpected error -71
[  149.090961][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.091021][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.091211][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.091221][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.091453][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.091463][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.092257][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.092280][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.092553][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.092563][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.092735][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.092745][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.092917][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.092926][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.093108][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.093118][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.093246][  T844] usb 6-1: USB disconnect, device number 18
[  149.093316][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  149.093325][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  149.093333][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  149.193525][T10499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  149.204614][T10504] __nla_validate_parse: 7 callbacks suppressed
[  149.204863][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'.
[  149.272518][T10507] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  149.381315][T10516] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  149.390602][  T844] libceph: ceph_tcp_connect failed: -2
[  149.390654][  T844] libceph: mon0 (2)0.0.0.0:6789 connect error
[  149.444306][T10525] FAULT_INJECTION: forcing a failure.
[  149.444306][T10525] name failslab, interval 1, probability 0, space 0, times 0
[  149.444370][T10525] CPU: 1 UID: 0 PID: 10525 Comm: syz.3.1477 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  149.444410][T10525] Tainted: [L]=SOFTLOCKUP
[  149.444418][T10525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  149.444429][T10525] Call Trace:
[  149.444436][T10525]  <TASK>
[  149.444444][T10525]  dump_stack_lvl+0x100/0x190
[  149.444488][T10525]  should_fail_ex.cold+0x5/0xa
[  149.444515][T10525]  should_failslab+0xc2/0x120
[  149.444559][T10525]  kmem_cache_alloc_noprof+0x92/0x6a0
[  149.444581][T10525]  ? __pfx_map_id_range_down+0x10/0x10
[  149.444603][T10525]  ? rcu_is_watching+0x13/0xc0
[  149.444628][T10525]  ? security_inode_alloc+0x3b/0x2c0
[  149.444662][T10525]  security_inode_alloc+0x3b/0x2c0
[  149.444691][T10525]  inode_init_always_gfp+0xc6f/0xfb0
[  149.444720][T10525]  alloc_inode+0x8e/0x250
[  149.444738][T10525]  sock_alloc+0x44/0x280
[  149.444763][T10525]  ? security_socket_create+0x7f/0x250
[  149.444793][T10525]  __sock_create+0xc2/0x860
[  149.444824][T10525]  __sys_socket+0x14d/0x260
[  149.444851][T10525]  ? __pfx___sys_socket+0x10/0x10
[  149.444884][T10525]  __x64_sys_socket+0x72/0xb0
[  149.444909][T10525]  ? lockdep_hardirqs_on+0x7d/0x110
[  149.444939][T10525]  do_syscall_64+0x123/0x790
[  149.444966][T10525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.444987][T10525] RIP: 0033:0x7f3c2539f9c7
[  149.445005][T10525] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.445023][T10525] RSP: 002b:00007f3c26256f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  149.445043][T10525] RAX: ffffffffffffffda RBX: 00007f3c25626090 RCX: 00007f3c2539f9c7
[  149.445057][T10525] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  149.445068][T10525] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  149.445079][T10525] R10: 0000200000000280 R11: 0000000000000286 R12: 0000000000000000
[  149.445090][T10525] R13: 00007f3c25626128 R14: 00007f3c25626090 R15: 00007ffe2ece7af8
[  149.445114][T10525]  </TASK>
[  149.447664][T10525] socket: no more sockets
[  149.453386][T10529] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  149.643467][  T844] libceph: ceph_tcp_connect failed: -2
[  149.643553][  T844] libceph: mon0 (2)0.0.0.0:6789 connect error
[  149.827295][T10544] kvm: pic: single mode not supported
[  149.828927][T10548] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  149.828965][T10544] kvm: pic: single mode not supported
[  149.830010][T10544] kvm: pic: single mode not supported
[  149.955902][   T67] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  150.019384][T10558] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  150.164979][  T844] libceph: ceph_tcp_connect failed: -2
[  150.165047][  T844] libceph: mon0 (2)0.0.0.0:6789 connect error
[  150.251650][T10571] FAULT_INJECTION: forcing a failure.
[  150.251650][T10571] name failslab, interval 1, probability 0, space 0, times 0
[  150.251722][T10571] CPU: 0 UID: 0 PID: 10571 Comm: syz.1.1497 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.251748][T10571] Tainted: [L]=SOFTLOCKUP
[  150.251756][T10571] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  150.251766][T10571] Call Trace:
[  150.251780][T10571]  <TASK>
[  150.251788][T10571]  dump_stack_lvl+0x100/0x190
[  150.251828][T10571]  should_fail_ex.cold+0x5/0xa
[  150.251856][T10571]  should_failslab+0xc2/0x120
[  150.251885][T10571]  __kmalloc_cache_noprof+0x91/0x6d0
[  150.251913][T10571]  ? apply_subsystem_event_filter+0xb59/0x17a0
[  150.251940][T10571]  apply_subsystem_event_filter+0xb59/0x17a0
[  150.251971][T10571]  ? __pfx_apply_subsystem_event_filter+0x10/0x10
[  150.251999][T10571]  ? _copy_from_user+0x59/0xd0
[  150.252031][T10571]  subsystem_filter_write+0x95/0x120
[  150.252056][T10571]  vfs_write+0x2aa/0x1050
[  150.252075][T10571]  ? __pfx_subsystem_filter_write+0x10/0x10
[  150.252096][T10571]  ? lock_acquire+0x1d1/0x380
[  150.252114][T10571]  ? __fget_files+0x34/0x3d0
[  150.252137][T10571]  ? __pfx_vfs_write+0x10/0x10
[  150.252153][T10571]  ? find_held_lock+0x2b/0x80
[  150.252178][T10571]  ? __fget_files+0x215/0x3d0
[  150.252205][T10571]  ? __fget_files+0x21f/0x3d0
[  150.252235][T10571]  ksys_write+0x12a/0x250
[  150.252253][T10571]  ? __pfx_ksys_write+0x10/0x10
[  150.252297][T10571]  do_syscall_64+0x123/0x790
[  150.252330][T10571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.252349][T10571] RIP: 0033:0x7f8460f9e159
[  150.252366][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.252383][T10571] RSP: 002b:00007f8461ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  150.252406][T10571] RAX: ffffffffffffffda RBX: 00007f8461225fa0 RCX: 00007f8460f9e159
[  150.252419][T10571] RDX: 0000000000000008 RSI: 0000200000000180 RDI: 0000000000000003
[  150.252430][T10571] RBP: 00007f8461ed4090 R08: 0000000000000000 R09: 0000000000000000
[  150.252447][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  150.252458][T10571] R13: 00007f8461226038 R14: 00007f8461225fa0 R15: 00007ffea62e2d58
[  150.252486][T10571]  </TASK>
[  150.433020][T10516] ceph: No mds server is up or the cluster is laggy
[  150.553701][T10588] hfs: can't find a HFS filesystem on dev sr0
[  150.642735][T10594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=10594 comm=syz.1.1506
[  151.505729][T10596] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  151.509693][T10596] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  151.524362][T10596] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  151.529374][T10596] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  151.530049][T10596] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  151.534970][T10596] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  151.542195][T10596] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  151.542743][T10596] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.550456][T10596] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  151.659368][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  151.873522][T10634] unsupported nla_type 16419
[  152.236917][T10672] 9pnet_virtio: no channels available for device syz
[  152.267000][T10676] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1537'.
[  152.386015][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1eb1 instead
[  152.390176][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xaf1c instead
[  152.394981][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6014 instead
[  152.399090][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x8830 instead
[  152.403115][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x846f instead
[  152.403132][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7c97 instead
[  152.403149][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa891 instead
[  152.403164][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ff0 instead
[  152.403177][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xa714 instead
[  152.403193][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6b0f instead
[  152.403207][T10691] jffs2: Further such events for this erase block will not be printed
[  152.403586][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x81f4 instead
[  152.403603][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xe721 instead
[  152.403618][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x686a instead
[  152.403634][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xdf2b instead
[  152.403650][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xe732 instead
[  152.403663][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xa766 instead
[  152.403679][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1e0d instead
[  152.403694][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x571d instead
[  152.403710][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x42d5 instead
[  152.403725][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x950f instead
[  152.403739][T10691] jffs2: Further such events for this erase block will not be printed
[  152.404094][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x1285 instead
[  152.404110][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xb6ca instead
[  152.404126][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x8a02 instead
[  152.404141][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xa9f9 instead
[  152.404158][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xa609 instead
[  152.404172][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x1564 instead
[  152.404185][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xff40 instead
[  152.404201][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x28f3 instead
[  152.404216][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x01dc instead
[  152.404230][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xc9ed instead
[  152.404241][T10691] jffs2: Further such events for this erase block will not be printed
[  152.404609][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x3c80 instead
[  152.404625][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xea1c instead
[  152.404642][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x525d instead
[  152.404655][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xa6e0 instead
[  152.404671][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x42a2 instead
[  152.404687][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xbabe instead
[  152.404703][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb17a instead
[  152.404721][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd072 instead
[  152.404737][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xb344 instead
[  152.404757][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x4c10 instead
[  152.404772][T10691] jffs2: Further such events for this erase block will not be printed
[  152.405164][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x146d instead
[  152.405205][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x98cd instead
[  152.405221][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xeeb9 instead
[  152.405235][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x364b instead
[  152.405249][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x2d8b instead
[  152.405264][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xc585 instead
[  152.405279][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc08c instead
[  152.405294][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xe11a instead
[  152.405309][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0dd9 instead
[  152.405324][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb552 instead
[  152.405337][T10691] jffs2: Further such events for this erase block will not be printed
[  152.405671][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xd074 instead
[  152.405688][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8493 instead
[  152.405701][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x4fc2 instead
[  152.405715][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0a4f instead
[  152.405731][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xa78a instead
[  152.405752][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x1283 instead
[  152.405769][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8ab0 instead
[  152.405783][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x08eb instead
[  152.405799][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x0771 instead
[  152.405814][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xc728 instead
[  152.405829][T10691] jffs2: Further such events for this erase block will not be printed
[  152.406164][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x87f1 instead
[  152.406178][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x6008 instead
[  152.406193][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x300f instead
[  152.406210][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xca02 instead
[  152.406225][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xa354 instead
[  152.406241][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x884f instead
[  152.406256][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf609 instead
[  152.406270][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xba7c instead
[  152.406285][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x4fc6 instead
[  152.406300][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x98dc instead
[  152.406315][T10691] jffs2: Further such events for this erase block will not be printed
[  152.406649][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x2c73 instead
[  152.406666][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x9798 instead
[  152.406682][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbb03 instead
[  152.406702][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x9d69 instead
[  152.406718][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x6c0b instead
[  152.406731][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0a1f instead
[  152.406752][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x15e7 instead
[  152.406767][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2b8e instead
[  152.406782][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xbcd7 instead
[  152.406797][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x4761 instead
[  152.406811][T10691] jffs2: Further such events for this erase block will not be printed
[  152.407148][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xbc32 instead
[  152.407161][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x3157 instead
[  152.407177][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x4cd7 instead
[  152.407191][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x6302 instead
[  152.407207][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x295b instead
[  152.407222][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe378 instead
[  152.407237][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x952d instead
[  152.407251][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xa080 instead
[  152.407263][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x5541 instead
[  152.407278][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x6c71 instead
[  152.407293][T10691] jffs2: Further such events for this erase block will not be printed
[  152.407679][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xa2b8 instead
[  152.407695][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x7274 instead
[  152.407710][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xe0e1 instead
[  152.407726][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x76f3 instead
[  152.407741][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xbdb5 instead
[  152.407762][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x86d9 instead
[  152.407773][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x28c9 instead
[  152.407790][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xa2e1 instead
[  152.407805][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xdecc instead
[  152.407823][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x28f2 instead
[  152.407838][T10691] jffs2: Further such events for this erase block will not be printed
[  152.408171][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xe01f instead
[  152.408187][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x8e86 instead
[  152.408202][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x5f6d instead
[  152.408218][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf574 instead
[  152.408233][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xdc13 instead
[  152.408247][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x990d instead
[  152.408263][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x021b instead
[  152.408276][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xd74a instead
[  152.408290][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x0062 instead
[  152.408304][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x76f1 instead
[  152.408318][T10691] jffs2: Further such events for this erase block will not be printed
[  152.408642][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xc26d instead
[  152.408659][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x8960 instead
[  152.408672][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xc7ed instead
[  152.408688][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xbf71 instead
[  152.408702][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x06b9 instead
[  152.408717][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb470 instead
[  152.408731][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8136 instead
[  152.408749][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xbc51 instead
[  152.408765][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x4978 instead
[  152.408779][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5ab0 instead
[  152.408794][T10691] jffs2: Further such events for this erase block will not be printed
[  152.409127][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xfd06 instead
[  152.409144][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x8f0b instead
[  152.409158][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5d9 instead
[  152.409195][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x9a10 instead
[  152.409210][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xfab0 instead
[  152.409224][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x5f63 instead
[  152.409237][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa8a1 instead
[  152.409253][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x678d instead
[  152.409267][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xfb07 instead
[  152.409280][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xd080 instead
[  152.409293][T10691] jffs2: Further such events for this erase block will not be printed
[  152.409619][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xfe5e instead
[  152.409634][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xfe63 instead
[  152.409649][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x62f4 instead
[  152.409663][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x7139 instead
[  152.409677][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd390 instead
[  152.409692][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x26e8 instead
[  152.409704][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0741 instead
[  152.409715][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x9c2f instead
[  152.409729][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xf392 instead
[  152.409749][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x12ae instead
[  152.409763][T10691] jffs2: Further such events for this erase block will not be printed
[  152.410086][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x2b61 instead
[  152.410102][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x06bd instead
[  152.410118][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x620d instead
[  152.410132][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x9fa8 instead
[  152.410146][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf4d1 instead
[  152.410162][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xbd78 instead
[  152.410175][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x62b0 instead
[  152.410189][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xbbe2 instead
[  152.410203][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x759b instead
[  152.410216][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x1dd8 instead
[  152.410231][T10691] jffs2: Further such events for this erase block will not be printed
[  152.410568][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb9a4 instead
[  152.410585][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xde74 instead
[  152.410603][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x2a32 instead
[  152.410617][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xc242 instead
[  152.410632][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4341 instead
[  152.410647][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x26dc instead
[  152.410662][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x34ed instead
[  152.410677][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xc5ba instead
[  152.410692][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x1a2c instead
[  152.410706][T10691] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x178b instead
[  152.410720][T10691] jffs2: Further such events for this erase block will not be printed
[  152.411555][T10691] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  152.411565][T10691] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32
[  152.563469][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'.
[  152.600042][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'.
[  152.647179][T10706] FAULT_INJECTION: forcing a failure.
[  152.647179][T10706] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  152.647209][T10706] CPU: 1 UID: 0 PID: 10706 Comm: syz.4.1549 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.647235][T10706] Tainted: [L]=SOFTLOCKUP
[  152.647242][T10706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  152.647252][T10706] Call Trace:
[  152.647259][T10706]  <TASK>
[  152.647267][T10706]  dump_stack_lvl+0x100/0x190
[  152.647327][T10706]  should_fail_ex.cold+0x5/0xa
[  152.647354][T10706]  _copy_to_user+0x32/0xd0
[  152.647404][T10706]  simple_read_from_buffer+0xcb/0x170
[  152.647430][T10706]  proc_fail_nth_read+0x1af/0x230
[  152.647454][T10706]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.647478][T10706]  ? rw_verify_area+0xce/0x6d0
[  152.647505][T10706]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  152.647531][T10706]  vfs_read+0x1e4/0xb40
[  152.647550][T10706]  ? lock_acquire+0x1d1/0x380
[  152.647568][T10706]  ? __fget_files+0x34/0x3d0
[  152.647590][T10706]  ? __pfx_vfs_read+0x10/0x10
[  152.647607][T10706]  ? find_held_lock+0x2b/0x80
[  152.647631][T10706]  ? __fget_files+0x215/0x3d0
[  152.647658][T10706]  ? __fget_files+0x21f/0x3d0
[  152.647688][T10706]  ksys_read+0x12a/0x250
[  152.647706][T10706]  ? __pfx_ksys_read+0x10/0x10
[  152.647732][T10706]  do_syscall_64+0x123/0x790
[  152.647762][T10706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.647781][T10706] RIP: 0033:0x7f159415e98e
[  152.647797][T10706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  152.647814][T10706] RSP: 002b:00007f1594feffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  152.647833][T10706] RAX: ffffffffffffffda RBX: 00007f1594ff06c0 RCX: 00007f159415e98e
[  152.647845][T10706] RDX: 000000000000000f RSI: 00007f1594ff00a0 RDI: 0000000000000005
[  152.647856][T10706] RBP: 00007f1594ff0090 R08: 0000000000000000 R09: 0000000000000000
[  152.647867][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.647886][T10706] R13: 00007f1594426038 R14: 00007f1594425fa0 R15: 00007fffb8b52668
[  152.647913][T10706]  </TASK>
[  152.690329][T10708] netlink: 'syz.3.1552': attribute type 10 has an invalid length.
[  152.696174][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.698598][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  152.698628][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  152.699650][T10708] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  152.728343][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  152.728386][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  152.762669][ T5089] Bluetooth: hci1: command 0x0401 tx timeout
[  152.774268][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1551'.
[  152.819406][T10715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  152.905798][T10732] FAULT_INJECTION: forcing a failure.
[  152.905798][T10732] name failslab, interval 1, probability 0, space 0, times 0
[  152.905819][T10732] CPU: 0 UID: 0 PID: 10732 Comm: syz.5.1559 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  152.905835][T10732] Tainted: [L]=SOFTLOCKUP
[  152.905839][T10732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  152.905846][T10732] Call Trace:
[  152.905850][T10732]  <TASK>
[  152.905855][T10732]  dump_stack_lvl+0x100/0x190
[  152.905874][T10732]  should_fail_ex.cold+0x5/0xa
[  152.905892][T10732]  should_failslab+0xc2/0x120
[  152.905907][T10732]  __kmalloc_noprof+0xfc/0x840
[  152.905919][T10732]  ? rcu_is_watching+0x13/0xc0
[  152.905935][T10732]  ? tomoyo_realpath_from_path+0xb6/0x690
[  152.905953][T10732]  tomoyo_realpath_from_path+0xb6/0x690
[  152.905969][T10732]  tomoyo_path_number_perm+0x23c/0x580
[  152.905987][T10732]  ? tomoyo_path_number_perm+0x22e/0x580
[  152.906007][T10732]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  152.906024][T10732]  ? avc_policy_seqno+0x9/0x20
[  152.906044][T10732]  ? look_up_lock_class+0x55/0x120
[  152.906072][T10732]  ? from_kuid+0x8d/0xd0
[  152.906084][T10732]  ? __pfx_from_kuid+0x10/0x10
[  152.906101][T10732]  tomoyo_path_chown+0x173/0x1b0
[  152.906116][T10732]  ? __pfx_tomoyo_path_chown+0x10/0x10
[  152.906132][T10732]  ? from_vfsuid+0xea/0x140
[  152.906144][T10732]  ? __pfx_from_vfsuid+0x10/0x10
[  152.906158][T10732]  security_path_chown+0x12a/0x2d0
[  152.906178][T10732]  chown_common+0x3da/0x6e0
[  152.906196][T10732]  ? __pfx_chown_common+0x10/0x10
[  152.906210][T10732]  ? mnt_get_write_access+0x52/0x2f0
[  152.906229][T10732]  ? mnt_get_write_access+0x52/0x2f0
[  152.906257][T10732]  ? mnt_get_write_access+0x1ec/0x2f0
[  152.906278][T10732]  do_fchownat+0x18e/0x1f0
[  152.906294][T10732]  ? __pfx_do_fchownat+0x10/0x10
[  152.906307][T10732]  ? ksys_write+0x1ac/0x250
[  152.906319][T10732]  ? __pfx_ksys_write+0x10/0x10
[  152.906334][T10732]  __x64_sys_chown+0x7b/0xc0
[  152.906348][T10732]  ? lockdep_hardirqs_on+0x7d/0x110
[  152.906362][T10732]  do_syscall_64+0x123/0x790
[  152.906378][T10732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.906391][T10732] RIP: 0033:0x7ff4f5f9e159
[  152.906401][T10732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.906413][T10732] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c
[  152.906425][T10732] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  152.906432][T10732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  152.906439][T10732] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  152.906446][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  152.906453][T10732] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  152.906469][T10732]  </TASK>
[  152.906474][T10732] ERROR: Out of memory at tomoyo_realpath_from_path.
[  153.009087][T10738] af_packet: packet size is too long (795633006 > 2016)
[  153.076492][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1eb1 instead
[  153.076507][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xaf1c instead
[  153.076517][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6014 instead
[  153.076526][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x8830 instead
[  153.076535][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x846f instead
[  153.076544][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7c97 instead
[  153.076554][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa891 instead
[  153.076563][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ff0 instead
[  153.076571][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xa714 instead
[  153.076581][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6b0f instead
[  153.076589][T10746] jffs2: Further such events for this erase block will not be printed
[  153.076836][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x81f4 instead
[  153.076846][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xe721 instead
[  153.076855][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x686a instead
[  153.076864][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xdf2b instead
[  153.076873][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xe732 instead
[  153.076882][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xa766 instead
[  153.076890][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1e0d instead
[  153.076898][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x571d instead
[  153.076907][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x42d5 instead
[  153.078122][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x950f instead
[  153.078133][T10746] jffs2: Further such events for this erase block will not be printed
[  153.078380][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x1285 instead
[  153.078389][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xb6ca instead
[  153.078398][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x8a02 instead
[  153.078406][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xa9f9 instead
[  153.078415][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xa609 instead
[  153.078424][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x1564 instead
[  153.078433][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xff40 instead
[  153.078442][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x28f3 instead
[  153.078451][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x01dc instead
[  153.078460][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xc9ed instead
[  153.078469][T10746] jffs2: Further such events for this erase block will not be printed
[  153.078695][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x3c80 instead
[  153.078704][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xea1c instead
[  153.078712][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x525d instead
[  153.078727][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xa6e0 instead
[  153.078736][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x42a2 instead
[  153.078745][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xbabe instead
[  153.078754][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb17a instead
[  153.078763][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd072 instead
[  153.078772][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xb344 instead
[  153.078782][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x4c10 instead
[  153.078790][T10746] jffs2: Further such events for this erase block will not be printed
[  153.079022][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x146d instead
[  153.079031][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x98cd instead
[  153.079039][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xeeb9 instead
[  153.079048][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x364b instead
[  153.079056][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x2d8b instead
[  153.079064][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xc585 instead
[  153.079072][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc08c instead
[  153.079080][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xe11a instead
[  153.079089][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0dd9 instead
[  153.079097][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb552 instead
[  153.079104][T10746] jffs2: Further such events for this erase block will not be printed
[  153.079469][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xd074 instead
[  153.079559][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8493 instead
[  153.079569][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x4fc2 instead
[  153.079578][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0a4f instead
[  153.079587][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xa78a instead
[  153.079596][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x1283 instead
[  153.079605][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8ab0 instead
[  153.079614][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x08eb instead
[  153.079622][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x0771 instead
[  153.079631][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xc728 instead
[  153.079640][T10746] jffs2: Further such events for this erase block will not be printed
[  153.080006][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x87f1 instead
[  153.080017][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x6008 instead
[  153.080025][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x300f instead
[  153.080033][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xca02 instead
[  153.080042][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xa354 instead
[  153.080051][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x884f instead
[  153.080059][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf609 instead
[  153.080068][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xba7c instead
[  153.080077][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x4fc6 instead
[  153.080086][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x98dc instead
[  153.080095][T10746] jffs2: Further such events for this erase block will not be printed
[  153.080400][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x2c73 instead
[  153.080411][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x9798 instead
[  153.080420][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbb03 instead
[  153.080429][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x9d69 instead
[  153.080438][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x6c0b instead
[  153.080447][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0a1f instead
[  153.080456][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x15e7 instead
[  153.080465][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2b8e instead
[  153.080474][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xbcd7 instead
[  153.080483][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x4761 instead
[  153.080491][T10746] jffs2: Further such events for this erase block will not be printed
[  153.080744][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xbc32 instead
[  153.080754][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x3157 instead
[  153.080763][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x4cd7 instead
[  153.080772][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x6302 instead
[  153.080781][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x295b instead
[  153.080790][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe378 instead
[  153.080799][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x952d instead
[  153.080808][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xa080 instead
[  153.080818][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x5541 instead
[  153.080826][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x6c71 instead
[  153.080835][T10746] jffs2: Further such events for this erase block will not be printed
[  153.081060][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xa2b8 instead
[  153.081069][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x7274 instead
[  153.081077][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xe0e1 instead
[  153.081085][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x76f3 instead
[  153.081093][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xbdb5 instead
[  153.081101][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x86d9 instead
[  153.081110][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x28c9 instead
[  153.081118][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xa2e1 instead
[  153.081126][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xdecc instead
[  153.081134][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x28f2 instead
[  153.081142][T10746] jffs2: Further such events for this erase block will not be printed
[  153.081464][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xe01f instead
[  153.081475][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x8e86 instead
[  153.081484][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x5f6d instead
[  153.081492][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf574 instead
[  153.081500][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xdc13 instead
[  153.081508][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x990d instead
[  153.081516][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x021b instead
[  153.081524][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xd74a instead
[  153.081532][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x0062 instead
[  153.081541][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x76f1 instead
[  153.081549][T10746] jffs2: Further such events for this erase block will not be printed
[  153.081783][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xc26d instead
[  153.081793][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x8960 instead
[  153.081801][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xc7ed instead
[  153.081810][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xbf71 instead
[  153.081818][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x06b9 instead
[  153.081826][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb470 instead
[  153.081834][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8136 instead
[  153.081842][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xbc51 instead
[  153.081851][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x4978 instead
[  153.081859][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5ab0 instead
[  153.081867][T10746] jffs2: Further such events for this erase block will not be printed
[  153.082090][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xfd06 instead
[  153.082098][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x8f0b instead
[  153.082107][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5d9 instead
[  153.082115][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x9a10 instead
[  153.082123][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xfab0 instead
[  153.082131][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x5f63 instead
[  153.082139][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa8a1 instead
[  153.082147][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x678d instead
[  153.082155][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xfb07 instead
[  153.082164][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xd080 instead
[  153.082172][T10746] jffs2: Further such events for this erase block will not be printed
[  153.082437][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xfe5e instead
[  153.082740][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xfe63 instead
[  153.082750][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x62f4 instead
[  153.082758][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x7139 instead
[  153.082767][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd390 instead
[  153.082775][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x26e8 instead
[  153.082783][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0741 instead
[  153.082791][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x9c2f instead
[  153.082799][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xf392 instead
[  153.082808][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x12ae instead
[  153.082816][T10746] jffs2: Further such events for this erase block will not be printed
[  153.083039][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x2b61 instead
[  153.083047][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x06bd instead
[  153.083056][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x620d instead
[  153.083064][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x9fa8 instead
[  153.083072][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf4d1 instead
[  153.083081][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xbd78 instead
[  153.083089][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x62b0 instead
[  153.083097][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xbbe2 instead
[  153.083105][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x759b instead
[  153.083114][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x1dd8 instead
[  153.083122][T10746] jffs2: Further such events for this erase block will not be printed
[  153.083344][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb9a4 instead
[  153.083352][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xde74 instead
[  153.083361][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x2a32 instead
[  153.083369][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xc242 instead
[  153.083378][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4341 instead
[  153.083386][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x26dc instead
[  153.083395][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x34ed instead
[  153.083403][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xc5ba instead
[  153.083411][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x1a2c instead
[  153.083419][T10746] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x178b instead
[  153.083427][T10746] jffs2: Further such events for this erase block will not be printed
[  153.083731][T10746] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  153.083737][T10746] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32
[  153.277663][T10760] ecryptfs: Unknown parameter 'ecryptfs_cipher}aes
ecŒ|}«'
[  153.528645][   T43] kauditd_printk_skb: 35 callbacks suppressed
[  153.528661][   T43] audit: type=1400 audit(2000000031.009:25425): avc:  denied  { ioctl } for  pid=10778 comm="syz.3.1578" path="mnt:[4026532865]" dev="nsfs" ino=4026532865 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  153.552611][ T5089] Bluetooth: hci3: command 0x0405 tx timeout
[  153.552634][ T5089] Bluetooth: hci2: command 0x0c1a tx timeout
[  153.927020][T10808] bridge0: port 3(ipvlan2) entered blocking state
[  153.928447][T10808] bridge0: port 3(ipvlan2) entered disabled state
[  153.928519][T10808] ipvlan2: entered allmulticast mode
[  153.928528][T10808] bridge0: entered allmulticast mode
[  153.936171][T10808] ipvlan2: left allmulticast mode
[  153.937282][T10808] bridge0: left allmulticast mode
[  154.078164][   T43] audit: type=1400 audit(2000000031.559:25426): avc:  denied  { accept } for  pid=10818 comm="syz.5.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  154.110336][T10823] vivid-004: =================  START STATUS  =================
[  154.110389][T10823] vivid-004: Radio HW Seek Mode: Bounded
[  154.110441][T10823] vivid-004: Radio Programmable HW Seek: false
[  154.110452][T10823] vivid-004: RDS Rx I/O Mode: Block I/O
[  154.110462][T10823] vivid-004: Generate RBDS Instead of RDS: false
[  154.110473][T10823] vivid-004: RDS Reception: true
[  154.110482][T10823] vivid-004: RDS Program Type: 0 inactive
[  154.110495][T10823] vivid-004: RDS PS Name:  inactive
[  154.110506][T10823] vivid-004: RDS Radio Text:  inactive
[  154.110518][T10823] vivid-004: RDS Traffic Announcement: false inactive
[  154.110530][T10823] vivid-004: RDS Traffic Program: false inactive
[  154.110542][T10823] vivid-004: RDS Music: false inactive
[  154.110553][T10823] vivid-004: ==================  END STATUS  ==================
[  154.209790][T10829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  154.274782][T10836] comedi comedi1: mpc624: I/O base address not correctly aligned
[  154.405585][T10847] __nla_validate_parse: 3 callbacks suppressed
[  154.405668][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1608'.
[  154.478841][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1eb1 instead
[  154.478895][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xaf1c instead
[  154.478953][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x6014 instead
[  154.480663][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x8830 instead
[  154.480682][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x846f instead
[  154.480709][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7c97 instead
[  154.480723][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa891 instead
[  154.480835][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x5ff0 instead
[  154.480851][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xa714 instead
[  154.480865][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x6b0f instead
[  154.480879][T10856] jffs2: Further such events for this erase block will not be printed
[  154.481277][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x81f4 instead
[  154.481293][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xe721 instead
[  154.481308][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x686a instead
[  154.481322][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xdf2b instead
[  154.481337][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0xe732 instead
[  154.481352][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xa766 instead
[  154.481366][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x1e0d instead
[  154.481380][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x571d instead
[  154.481396][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x42d5 instead
[  154.481411][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x950f instead
[  154.481429][T10856] jffs2: Further such events for this erase block will not be printed
[  154.481790][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x1285 instead
[  154.481805][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xb6ca instead
[  154.481821][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x8a02 instead
[  154.481835][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xa9f9 instead
[  154.481850][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xa609 instead
[  154.481953][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x1564 instead
[  154.481969][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xff40 instead
[  154.482033][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x28f3 instead
[  154.482049][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x01dc instead
[  154.482065][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xc9ed instead
[  154.482079][T10856] jffs2: Further such events for this erase block will not be printed
[  154.482538][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x3c80 instead
[  154.482555][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xea1c instead
[  154.482571][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x525d instead
[  154.482585][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0xa6e0 instead
[  154.482600][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x42a2 instead
[  154.482615][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xbabe instead
[  154.482630][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb17a instead
[  154.482645][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xd072 instead
[  154.482660][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xb344 instead
[  154.482674][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x4c10 instead
[  154.482687][T10856] jffs2: Further such events for this erase block will not be printed
[  154.483152][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x146d instead
[  154.483169][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x98cd instead
[  154.483183][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0xeeb9 instead
[  154.483199][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x364b instead
[  154.483214][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x2d8b instead
[  154.483229][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xc585 instead
[  154.483243][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xc08c instead
[  154.483258][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xe11a instead
[  154.483273][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x0dd9 instead
[  154.483288][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0xb552 instead
[  154.483302][T10856] jffs2: Further such events for this erase block will not be printed
[  154.483686][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xd074 instead
[  154.483701][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8493 instead
[  154.483715][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x4fc2 instead
[  154.483729][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0a4f instead
[  154.483744][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xa78a instead
[  154.483759][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x1283 instead
[  154.483772][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x8ab0 instead
[  154.483786][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x08eb instead
[  154.483799][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x0771 instead
[  154.483812][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xc728 instead
[  154.483824][T10856] jffs2: Further such events for this erase block will not be printed
[  154.484276][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x87f1 instead
[  154.484294][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x6008 instead
[  154.484309][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x300f instead
[  154.484324][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xca02 instead
[  154.484339][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xa354 instead
[  154.484352][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x884f instead
[  154.484367][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xf609 instead
[  154.484381][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0xba7c instead
[  154.484395][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x4fc6 instead
[  154.484408][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x98dc instead
[  154.484428][T10856] jffs2: Further such events for this erase block will not be printed
[  154.484782][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x2c73 instead
[  154.484797][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x9798 instead
[  154.484812][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xbb03 instead
[  154.484826][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x9d69 instead
[  154.484841][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x6c0b instead
[  154.484855][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x0a1f instead
[  154.484869][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x15e7 instead
[  154.484884][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x2b8e instead
[  154.484898][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xbcd7 instead
[  154.484911][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x4761 instead
[  154.484923][T10856] jffs2: Further such events for this erase block will not be printed
[  154.485401][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xbc32 instead
[  154.485424][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x3157 instead
[  154.485438][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x4cd7 instead
[  154.485454][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x6302 instead
[  154.485468][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x295b instead
[  154.485484][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0xe378 instead
[  154.485498][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x952d instead
[  154.485513][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xa080 instead
[  154.485528][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x5541 instead
[  154.485541][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x6c71 instead
[  154.485554][T10856] jffs2: Further such events for this erase block will not be printed
[  154.485909][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xa2b8 instead
[  154.485923][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x7274 instead
[  154.485938][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0xe0e1 instead
[  154.485953][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0x76f3 instead
[  154.485967][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xbdb5 instead
[  154.485982][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x86d9 instead
[  154.485996][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x28c9 instead
[  154.486011][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xa2e1 instead
[  154.486027][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xdecc instead
[  154.486041][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x28f2 instead
[  154.486056][T10856] jffs2: Further such events for this erase block will not be printed
[  154.486529][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xe01f instead
[  154.486545][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x8e86 instead
[  154.486561][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0x5f6d instead
[  154.486575][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xf574 instead
[  154.486590][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xdc13 instead
[  154.486604][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x990d instead
[  154.486619][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x021b instead
[  154.486633][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xd74a instead
[  154.486647][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0x0062 instead
[  154.486661][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x76f1 instead
[  154.486674][T10856] jffs2: Further such events for this erase block will not be printed
[  154.487031][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xc26d instead
[  154.487047][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x8960 instead
[  154.487060][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xc7ed instead
[  154.487074][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xbf71 instead
[  154.487087][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x06b9 instead
[  154.487100][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xb470 instead
[  154.487114][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x8136 instead
[  154.487128][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xbc51 instead
[  154.487142][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x4978 instead
[  154.487157][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x5ab0 instead
[  154.487170][T10856] jffs2: Further such events for this erase block will not be printed
[  154.487612][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xfd06 instead
[  154.487627][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x8f0b instead
[  154.487641][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xf5d9 instead
[  154.487655][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x9a10 instead
[  154.487668][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xfab0 instead
[  154.487682][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x5f63 instead
[  154.487696][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa8a1 instead
[  154.487710][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x678d instead
[  154.487723][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xfb07 instead
[  154.487737][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xd080 instead
[  154.487750][T10856] jffs2: Further such events for this erase block will not be printed
[  154.488101][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xfe5e instead
[  154.488116][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xfe63 instead
[  154.488130][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x62f4 instead
[  154.488143][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x7139 instead
[  154.488157][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd390 instead
[  154.488171][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x26e8 instead
[  154.488185][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x0741 instead
[  154.488199][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x9c2f instead
[  154.488213][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xf392 instead
[  154.488226][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x12ae instead
[  154.488240][T10856] jffs2: Further such events for this erase block will not be printed
[  154.489624][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x2b61 instead
[  154.489644][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x06bd instead
[  154.489659][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0x620d instead
[  154.489676][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x9fa8 instead
[  154.489692][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xf4d1 instead
[  154.489719][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xbd78 instead
[  154.489734][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x62b0 instead
[  154.489750][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0xbbe2 instead
[  154.489766][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x759b instead
[  154.489781][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x1dd8 instead
[  154.489796][T10856] jffs2: Further such events for this erase block will not be printed
[  154.490135][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb9a4 instead
[  154.490153][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xde74 instead
[  154.490169][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x2a32 instead
[  154.490184][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0xc242 instead
[  154.490199][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x4341 instead
[  154.490215][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x26dc instead
[  154.490230][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x34ed instead
[  154.490245][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xc5ba instead
[  154.490260][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x1a2c instead
[  154.490275][T10856] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x178b instead
[  154.490290][T10856] jffs2: Further such events for this erase block will not be printed
[  154.490737][T10856] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  154.490746][T10856] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32
[  154.524161][   T43] audit: type=1400 audit(2000000032.009:25427): avc:  denied  { map } for  pid=10857 comm="syz.4.1613" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  154.730449][T10871] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  154.833708][   T67] Bluetooth: hci1: command 0x0401 tx timeout
[  154.863283][T10887] SELinux: DCCP has been removed, pid=10887 comm=syz.5.1626
[  155.184642][T10924] netlink: 'syz.1.1644': attribute type 49 has an invalid length.
[  155.314509][   T43] audit: type=1400 audit(2000000032.799:25428): avc:  denied  { read } for  pid=10940 comm="syz.3.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  155.533452][   T35] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  155.632483][   T67] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.632574][   T67] Bluetooth: hci3: command 0x0405 tx timeout
[  155.681699][T10971] macvlan0: entered promiscuous mode
[  155.687143][   T35] usb 6-1: Using ep0 maxpacket: 8
[  155.704481][   T35] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  155.730608][   T35] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  155.741125][   T35] usb 6-1: config 179 has no interface number 0
[  155.750704][   T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  155.755314][   T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  155.755341][   T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  155.755362][   T35] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  155.755384][   T35] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  155.755417][   T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.759022][T10929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  155.765296][ T5822] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  155.912700][ T5822] usb 9-1: device descriptor read/64, error -71
[  155.968188][   T43] audit: type=1400 audit(2000000033.449:25429): avc:  denied  { connect } for  pid=10927 comm="syz.1.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.985947][   T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input18
[  156.154707][ T5822] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  156.158236][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1674'.
[  156.158415][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'.
[  156.160324][T10991] IPv6: sit2: Disabled Multicast RS
[  156.160837][T10991] sit2: entered allmulticast mode
[  156.163588][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1674'.
[  156.163839][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1674'.
[  156.169939][   T43] audit: type=1400 audit(2000000033.649:25430): avc:  denied  { ioctl } for  pid=10927 comm="syz.1.1646" path="socket:[48201]" dev="sockfs" ino=48201 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  156.284318][T10997] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1676'.
[  156.292563][ T5822] usb 9-1: device descriptor read/64, error -71
[  156.319048][   T25] usb 6-1: USB disconnect, device number 19
[  156.319056][    C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  156.319387][    C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  156.403158][ T5822] usb usb9-port1: attempt power cycle
[  156.416783][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1683'.
[  156.448278][T11016] netlink: 'syz.3.1685': attribute type 1 has an invalid length.
[  156.458750][T11016] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.465272][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1685'.
[  156.482083][T11016] macvlan2: entered promiscuous mode
[  156.482172][T11016] macvlan2: entered allmulticast mode
[  156.483115][T11016] bond2: entered promiscuous mode
[  156.483742][T11016] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  156.490062][T11016] bond2: left promiscuous mode
[  156.561515][   T43] audit: type=1400 audit(2000000034.039:25431): avc:  denied  { write } for  pid=11020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.615865][   T43] audit: type=1400 audit(2000000034.099:25432): avc:  denied  { write } for  pid=11024 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.617420][T11015] e1000e 0000:00:02.0 eth1: removed PHC
[  156.708960][   T43] audit: type=1400 audit(2000000034.189:25433): avc:  denied  { write } for  pid=11026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.752744][ T5822] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  156.758673][T11015] e1000e 0000:00:02.0 eth1: NIC Link is Down
[  156.763195][   T43] audit: type=1400 audit(2000000034.249:25434): avc:  denied  { write } for  pid=11035 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  156.776204][ T5822] usb 9-1: device descriptor read/8, error -71
[  156.912847][ T5089] Bluetooth: hci1: command 0x0401 tx timeout
[  157.037990][ T5822] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  157.056680][ T5822] usb 9-1: device descriptor read/8, error -71
[  157.108263][T11062] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1695'.
[  157.163390][ T5822] usb usb9-port1: unable to enumerate USB device
[  157.367168][ T5089] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  157.418590][T11093] MTD: Couldn't look up '/dev/rnullb0': -2
[  157.418842][ T5089] Bluetooth: hci3: unexpected event 0x09 length: 12 > 3
[  157.478996][T11097] openvswitch: netlink: Missing key (keys=c0, expected=480)
[  157.532603][T11099] netlink: Conntrack attr has 8 unknown bytes
[  157.532676][T11099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.713060][ T5089] Bluetooth: hci3: command 0x0405 tx timeout
[  157.713102][   T67] Bluetooth: hci2: command 0x0c1a tx timeout
[  157.721178][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'.
[  157.746074][T11108] netlink: ct_mark mask cannot be 0
[  157.746143][T11108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.411127][T11139] IPv6: NLM_F_CREATE should be specified when creating new route
[  158.459111][T11141] syzkaller1: tun_chr_ioctl cmd 1074025678
[  158.459159][T11141] syzkaller1: group set to 0
[  158.875375][   T43] kauditd_printk_skb: 17 callbacks suppressed
[  158.875456][   T43] audit: type=1400 audit(2000000036.359:25452): avc:  denied  { create } for  pid=11165 comm="syz.5.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  158.876601][   T43] audit: type=1400 audit(2000000036.359:25453): avc:  denied  { bind } for  pid=11165 comm="syz.5.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  158.877021][   T43] audit: type=1400 audit(2000000036.359:25454): avc:  denied  { connect } for  pid=11165 comm="syz.5.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  158.877266][   T43] audit: type=1400 audit(2000000036.359:25455): avc:  denied  { write } for  pid=11165 comm="syz.5.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  158.877789][   T43] audit: type=1400 audit(2000000036.359:25456): avc:  denied  { read } for  pid=11165 comm="syz.5.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  158.881713][T11166] EXT4-fs: Conflicting test_dummy_encryption options
[  158.883063][   T43] audit: type=1400 audit(2000000036.359:25457): avc:  denied  { append } for  pid=11165 comm="syz.5.1727" name="usbmon6" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  158.884800][T11168] netlink: 'syz.5.1727': attribute type 21 has an invalid length.
[  159.084156][T11183] FAULT_INJECTION: forcing a failure.
[  159.084156][T11183] name failslab, interval 1, probability 0, space 0, times 0
[  159.084231][T11183] CPU: 3 UID: 0 PID: 11183 Comm: syz.1.1734 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.084256][T11183] Tainted: [L]=SOFTLOCKUP
[  159.084263][T11183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  159.084273][T11183] Call Trace:
[  159.084279][T11183]  <TASK>
[  159.084287][T11183]  dump_stack_lvl+0x100/0x190
[  159.084331][T11183]  should_fail_ex.cold+0x5/0xa
[  159.084356][T11183]  should_failslab+0xc2/0x120
[  159.084383][T11183]  __kmalloc_noprof+0xfc/0x840
[  159.084401][T11183]  ? tomoyo_encode2+0xfb/0x3c0
[  159.084425][T11183]  tomoyo_encode2+0xfb/0x3c0
[  159.084447][T11183]  tomoyo_encode+0x29/0x50
[  159.084465][T11183]  tomoyo_realpath_from_path+0x18c/0x690
[  159.084490][T11183]  tomoyo_path_number_perm+0x23c/0x580
[  159.084516][T11183]  ? tomoyo_path_number_perm+0x22e/0x580
[  159.084559][T11183]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  159.084595][T11183]  ? __lock_acquire+0x5c0/0x1f40
[  159.084625][T11183]  ? __fget_files+0x34/0x3d0
[  159.084647][T11183]  ? find_held_lock+0x2b/0x80
[  159.084670][T11183]  ? hook_file_ioctl_common+0x140/0x440
[  159.084697][T11183]  ? __fget_files+0x21f/0x3d0
[  159.084722][T11183]  security_file_ioctl+0xd3/0x230
[  159.084741][T11183]  __x64_sys_ioctl+0xb7/0x210
[  159.084760][T11183]  do_syscall_64+0x123/0x790
[  159.084789][T11183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.084807][T11183] RIP: 0033:0x7f8460f9e159
[  159.084822][T11183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  159.084839][T11183] RSP: 002b:00007f8461ed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  159.084856][T11183] RAX: ffffffffffffffda RBX: 00007f8461225fa0 RCX: 00007f8460f9e159
[  159.084868][T11183] RDX: 0000200000000180 RSI: 000000008008af00 RDI: 0000000000000003
[  159.084879][T11183] RBP: 00007f8461ed4090 R08: 0000000000000000 R09: 0000000000000000
[  159.084889][T11183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.084900][T11183] R13: 00007f8461226038 R14: 00007f8461225fa0 R15: 00007ffea62e2d58
[  159.084925][T11183]  </TASK>
[  159.085013][T11183] ERROR: Out of memory at tomoyo_realpath_from_path.
[  159.994763][T11188] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  159.994911][T11188] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  159.994982][T11188] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  160.029768][   T43] audit: type=1400 audit(2000000037.509:25458): avc:  denied  { mounton } for  pid=11210 comm="syz.4.1745" path="/243/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  160.064917][T11216] FAULT_INJECTION: forcing a failure.
[  160.064917][T11216] name failslab, interval 1, probability 0, space 0, times 0
[  160.064986][T11216] CPU: 0 UID: 0 PID: 11216 Comm: syz.5.1748 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  160.065024][T11216] Tainted: [L]=SOFTLOCKUP
[  160.065031][T11216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.065040][T11216] Call Trace:
[  160.065048][T11216]  <TASK>
[  160.065055][T11216]  dump_stack_lvl+0x100/0x190
[  160.065086][T11216]  should_fail_ex.cold+0x5/0xa
[  160.065113][T11216]  should_failslab+0xc2/0x120
[  160.065160][T11216]  __kmalloc_cache_noprof+0x91/0x6d0
[  160.065186][T11216]  ? ip_set_create+0x342/0x1510
[  160.065225][T11216]  ip_set_create+0x342/0x1510
[  160.065253][T11216]  ? trace_contention_end+0x126/0x160
[  160.065277][T11216]  ? __pfx_ip_set_create+0x10/0x10
[  160.065320][T11216]  ? find_held_lock+0x2b/0x80
[  160.065351][T11216]  nfnetlink_rcv_msg+0x9d5/0x11e0
[  160.065389][T11216]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  160.065415][T11216]  ? __lock_acquire+0x5c0/0x1f40
[  160.065458][T11216]  ? avc_has_perm_noaudit+0x145/0x3b0
[  160.065487][T11216]  netlink_rcv_skb+0x159/0x420
[  160.065501][T11216]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  160.065516][T11216]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.065533][T11216]  ? ns_capable+0xd2/0xf0
[  160.065546][T11216]  nfnetlink_rcv+0x1b3/0x440
[  160.065560][T11216]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  160.065573][T11216]  ? netlink_deliver_tap+0x1ae/0xcc0
[  160.065592][T11216]  netlink_unicast+0x585/0x850
[  160.065606][T11216]  ? __pfx_netlink_unicast+0x10/0x10
[  160.065620][T11216]  netlink_sendmsg+0x8b0/0xda0
[  160.065633][T11216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.065646][T11216]  ? selinux_socket_sendmsg+0x198/0x2f0
[  160.065666][T11216]  ____sys_sendmsg+0xa4d/0xbe0
[  160.065680][T11216]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.065692][T11216]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.065710][T11216]  ? lock_acquire+0x1d1/0x380
[  160.065721][T11216]  ? get_pid_task+0x2a/0x250
[  160.065737][T11216]  ___sys_sendmsg+0x190/0x1e0
[  160.065760][T11216]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.065785][T11216]  ? get_pid_task+0x106/0x250
[  160.065819][T11216]  ? find_held_lock+0x2b/0x80
[  160.065858][T11216]  __sys_sendmsg+0x160/0x210
[  160.065881][T11216]  ? __pfx___sys_sendmsg+0x10/0x10
[  160.065915][T11216]  do_syscall_64+0x123/0x790
[  160.065940][T11216]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.065956][T11216] RIP: 0033:0x7ff4f5f9e159
[  160.065970][T11216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.065984][T11216] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.066001][T11216] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  160.066012][T11216] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  160.066023][T11216] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  160.066033][T11216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.066043][T11216] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  160.066063][T11216]  </TASK>
[  160.117899][   T43] audit: type=1400 audit(2000000037.599:25459): avc:  denied  { setattr } for  pid=11218 comm="syz.1.1749" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  160.163994][   T67] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  160.179835][   T67] Bluetooth: hci3: unexpected event for opcode 0x042f
[  160.217159][   T67] Bluetooth: hci1: unexpected event 0x09 length: 12 > 3
[  160.383145][T11249] __nla_validate_parse: 1 callbacks suppressed
[  160.383481][T11249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1760'.
[  160.383506][T11249] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1760'.
[  160.386625][   T43] audit: type=1400 audit(2000000037.869:25460): avc:  denied  { write } for  pid=11246 comm="syz.3.1760" name="usb_gadget" dev="configfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  160.454873][T11255] program syz.3.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.454992][T11255] ata1.00: invalid transfer count 0
[  160.616604][ T5141] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  160.616663][ T5141] ldm_validate_privheads(): Disk read failed.
[  160.623508][ T5141] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be ''.
[  160.628362][ T5141] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  160.631950][ T5141] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  160.632023][ T5141] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  160.632035][ T5141] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  160.632080][ T5141]  loop0:
[  160.632095][ T5141] loop0: partition table partially beyond EOD, truncated
[  160.834651][T11280] FAULT_INJECTION: forcing a failure.
[  160.834651][T11280] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  160.843432][T11280] CPU: 3 UID: 0 PID: 11280 Comm: syz.3.1772 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  160.843476][T11280] Tainted: [L]=SOFTLOCKUP
[  160.843484][T11280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  160.843495][T11280] Call Trace:
[  160.843503][T11280]  <TASK>
[  160.843511][T11280]  dump_stack_lvl+0x100/0x190
[  160.843544][T11280]  should_fail_ex.cold+0x5/0xa
[  160.843566][T11280]  ? prepare_alloc_pages+0x16d/0x5b0
[  160.843591][T11280]  should_fail_alloc_page+0xeb/0x140
[  160.843616][T11280]  prepare_alloc_pages+0x1f0/0x5b0
[  160.843643][T11280]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[  160.843676][T11280]  ? find_held_lock+0x2b/0x80
[  160.843700][T11280]  ? is_bpf_text_address+0x8a/0x1a0
[  160.843723][T11280]  ? is_bpf_text_address+0x8a/0x1a0
[  160.843746][T11280]  ? bpf_ksym_find+0x128/0x1c0
[  160.843773][T11280]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  160.843804][T11280]  ? is_bpf_text_address+0x94/0x1a0
[  160.843827][T11280]  ? kernel_text_address+0x8d/0x100
[  160.843857][T11280]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  160.843900][T11280]  ? arch_stack_walk+0xa6/0xf0
[  160.843935][T11280]  ? stack_trace_save+0x8e/0xc0
[  160.843962][T11280]  ? __pfx_stack_trace_save+0x10/0x10
[  160.843989][T11280]  ? kernel_text_address+0x8d/0x100
[  160.844022][T11280]  ? kasan_save_stack+0x3f/0x50
[  160.844041][T11280]  ? kasan_save_stack+0x30/0x50
[  160.844060][T11280]  ? kasan_save_track+0x14/0x30
[  160.844078][T11280]  ? __kasan_slab_alloc+0x89/0x90
[  160.844098][T11280]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[  160.844117][T11280]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  160.844139][T11280]  ? policy_nodemask+0xed/0x4f0
[  160.844166][T11280]  alloc_pages_mpol+0x201/0x550
[  160.844196][T11280]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  160.844227][T11280]  alloc_pages_noprof+0x1a/0x160
[  160.844254][T11280]  pte_alloc_one+0x1c/0x3d0
[  160.844280][T11280]  __pte_alloc+0x6d/0x380
[  160.844300][T11280]  ? __pfx___pte_alloc+0x10/0x10
[  160.844326][T11280]  do_anonymous_page+0x1307/0x2050
[  160.844354][T11280]  ? find_held_lock+0x2b/0x80
[  160.844378][T11280]  ? __pmd_alloc+0x3f6/0x950
[  160.844399][T11280]  ? __pmd_alloc+0x3f6/0x950
[  160.844420][T11280]  ? __pfx_do_anonymous_page+0x10/0x10
[  160.844445][T11280]  ? do_raw_spin_unlock+0x145/0x1e0
[  160.844468][T11280]  ? _raw_spin_unlock+0x28/0x50
[  160.844489][T11280]  ? __pmd_alloc+0x3fb/0x950
[  160.844513][T11280]  __handle_mm_fault+0x1ff3/0x2f60
[  160.844544][T11280]  ? __pfx___handle_mm_fault+0x10/0x10
[  160.844568][T11280]  ? __pfx_mt_find+0x10/0x10
[  160.844615][T11280]  handle_mm_fault+0x363/0xa20
[  160.844646][T11280]  __get_user_pages+0x8ae/0x2c30
[  160.844678][T11280]  ? __pfx___get_user_pages+0x10/0x10
[  160.844699][T11280]  ? lock_acquire+0x1d1/0x380
[  160.844717][T11280]  ? mmap_read_lock_maybe_expand+0x1e2/0x3d0
[  160.844748][T11280]  get_user_pages_remote+0x3d2/0xb10
[  160.844774][T11280]  ? __pfx_get_user_pages_remote+0x10/0x10
[  160.844806][T11280]  get_arg_page+0xf4/0x310
[  160.844825][T11280]  ? __pfx_get_arg_page+0x10/0x10
[  160.844841][T11280]  ? do_raw_spin_lock+0x128/0x260
[  160.844864][T11280]  ? alloc_bprm+0x54e/0x9e0
[  160.844881][T11280]  ? alloc_bprm+0x54e/0x9e0
[  160.844902][T11280]  copy_string_kernel+0x17d/0x3f0
[  160.844921][T11280]  ? alloc_bprm+0x596/0x9e0
[  160.844943][T11280]  do_execveat_common.isra.0+0x2e6/0x580
[  160.844968][T11280]  __x64_sys_execveat+0xdf/0x130
[  160.844990][T11280]  do_syscall_64+0x123/0x790
[  160.845017][T11280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.845036][T11280] RIP: 0033:0x7f3c2539e159
[  160.845053][T11280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.845071][T11280] RSP: 002b:00007f3c26279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  160.845091][T11280] RAX: ffffffffffffffda RBX: 00007f3c25625fa0 RCX: 00007f3c2539e159
[  160.845102][T11280] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  160.845113][T11280] RBP: 00007f3c26279090 R08: 0000000000001000 R09: 0000000000000000
[  160.845125][T11280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  160.845158][T11280] R13: 00007f3c25626038 R14: 00007f3c25625fa0 R15: 00007ffe2ece7af8
[  160.845189][T11280]  </TASK>
[  160.957635][   T67] Bluetooth: hci2: unexpected event for opcode 0x2002
[  161.324021][   T67] Bluetooth: hci1: command 0x0401 tx timeout
[  161.493981][T11300] binder: 11299:11300 ioctl c0306201 200000000080 returned -14
[  161.525456][T11300] binder: 11299:11300 ioctl c0306201 2000000003c0 returned -14
[  161.621111][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1781'.
[  161.650039][   T67] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  161.702825][   T67] Bluetooth: hci2: unexpected event for opcode 0x0c20
[  161.710371][T11315] usb usb8: usbfs: process 11315 (syz.1.1785) did not claim interface 0 before use
[  161.721814][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'.
[  161.721873][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1785'.
[  161.725783][T11315] geneve3: entered promiscuous mode
[  161.725796][T11315] geneve3: entered allmulticast mode
[  161.976241][   T43] audit: type=1400 audit(2000000039.449:25461): avc:  denied  { cmd } for  pid=11339 comm="syz.1.1797" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[  161.977057][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'.
[  162.073731][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'.
[  162.076980][T11367] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1806'.
[  162.134429][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'.
[  162.162995][T11372] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1808'.
[  162.559863][   T67] Bluetooth: hci3: unexpected event for opcode 0x080f
[  162.864586][T11454] 9pnet_virtio: no channels available for device syz
[  163.549160][T11487] netlink: 'syz.3.1850': attribute type 12 has an invalid length.
[  163.786529][T11519] FAULT_INJECTION: forcing a failure.
[  163.786529][T11519] name failslab, interval 1, probability 0, space 0, times 0
[  163.786596][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.5.1863 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.786633][T11519] Tainted: [L]=SOFTLOCKUP
[  163.786641][T11519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.786652][T11519] Call Trace:
[  163.786659][T11519]  <TASK>
[  163.786667][T11519]  dump_stack_lvl+0x100/0x190
[  163.786699][T11519]  should_fail_ex.cold+0x5/0xa
[  163.786724][T11519]  should_failslab+0xc2/0x120
[  163.786748][T11519]  __kmalloc_noprof+0xfc/0x840
[  163.786766][T11519]  ? rcu_is_watching+0x13/0xc0
[  163.786791][T11519]  ? tomoyo_realpath_from_path+0xb6/0x690
[  163.786818][T11519]  tomoyo_realpath_from_path+0xb6/0x690
[  163.786845][T11519]  tomoyo_path_number_perm+0x23c/0x580
[  163.786871][T11519]  ? tomoyo_path_number_perm+0x22e/0x580
[  163.786901][T11519]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  163.786933][T11519]  ? __lock_acquire+0x5c0/0x1f40
[  163.786966][T11519]  ? __fget_files+0x34/0x3d0
[  163.786989][T11519]  ? find_held_lock+0x2b/0x80
[  163.787015][T11519]  ? hook_file_ioctl_common+0x140/0x440
[  163.787040][T11519]  ? __fget_files+0x21f/0x3d0
[  163.787066][T11519]  security_file_ioctl+0xd3/0x230
[  163.787087][T11519]  __x64_sys_ioctl+0xb7/0x210
[  163.787106][T11519]  do_syscall_64+0x123/0x790
[  163.787129][T11519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.787149][T11519] RIP: 0033:0x7ff4f5f9e159
[  163.787164][T11519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.787182][T11519] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  163.787206][T11519] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  163.787219][T11519] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003
[  163.787230][T11519] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  163.787242][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.787253][T11519] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  163.787280][T11519]  </TASK>
[  163.790027][T11519] ERROR: Out of memory at tomoyo_realpath_from_path.
[  163.895369][T11530] FAULT_INJECTION: forcing a failure.
[  163.895369][T11530] name failslab, interval 1, probability 0, space 0, times 0
[  163.895442][T11530] CPU: 0 UID: 0 PID: 11530 Comm: syz.3.1866 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.895480][T11530] Tainted: [L]=SOFTLOCKUP
[  163.895488][T11530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  163.895499][T11530] Call Trace:
[  163.895506][T11530]  <TASK>
[  163.895514][T11530]  dump_stack_lvl+0x100/0x190
[  163.895544][T11530]  should_fail_ex.cold+0x5/0xa
[  163.895571][T11530]  should_failslab+0xc2/0x120
[  163.895594][T11530]  __kmalloc_noprof+0xfc/0x840
[  163.895613][T11530]  ? __memcg_list_lru_alloc+0x418/0x680
[  163.895642][T11530]  __memcg_list_lru_alloc+0x418/0x680
[  163.895666][T11530]  ? xa_load+0x149/0x2c0
[  163.895696][T11530]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  163.895727][T11530]  ? rcu_read_unlock+0x17/0x60
[  163.895757][T11530]  memcg_list_lru_alloc+0xd3/0x100
[  163.895787][T11530]  __memcg_slab_post_alloc_hook+0x27b/0x1270
[  163.895822][T11530]  ? kasan_save_track+0x14/0x30
[  163.895844][T11530]  kmem_cache_alloc_lru_noprof+0x4f6/0x6a0
[  163.895863][T11530]  ? __d_alloc+0x35/0xa50
[  163.895890][T11530]  __d_alloc+0x35/0xa50
[  163.895916][T11530]  d_alloc_pseudo+0x1c/0xc0
[  163.895934][T11530]  alloc_file_pseudo+0x118/0x290
[  163.895976][T11530]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  163.896000][T11530]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[  163.896027][T11530]  ? __do_sys_memfd_secret+0x130/0x570
[  163.896056][T11530]  __do_sys_memfd_secret+0x266/0x570
[  163.896081][T11530]  do_syscall_64+0x123/0x790
[  163.896109][T11530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.896128][T11530] RIP: 0033:0x7f3c2539e159
[  163.896143][T11530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.896160][T11530] RSP: 002b:00007f3c26279028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf
[  163.896178][T11530] RAX: ffffffffffffffda RBX: 00007f3c25625fa0 RCX: 00007f3c2539e159
[  163.896190][T11530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  163.896201][T11530] RBP: 00007f3c2543503b R08: 0000000000000000 R09: 0000000000000000
[  163.896211][T11530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.896223][T11530] R13: 00007f3c25626038 R14: 00007f3c25625fa0 R15: 00007ffe2ece7af8
[  163.896248][T11530]  </TASK>
[  163.916444][T11521] i2c i2c-0: new_device: Instantiated device tcpci at 0x05
[  164.056260][T11542] FAULT_INJECTION: forcing a failure.
[  164.056260][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.056382][T11542] CPU: 2 UID: 0 PID: 11542 Comm: syz.5.1871 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.056420][T11542] Tainted: [L]=SOFTLOCKUP
[  164.056428][T11542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  164.056438][T11542] Call Trace:
[  164.056445][T11542]  <TASK>
[  164.056452][T11542]  dump_stack_lvl+0x100/0x190
[  164.056483][T11542]  should_fail_ex.cold+0x5/0xa
[  164.056508][T11542]  _copy_from_user+0x2e/0xd0
[  164.056537][T11542]  __sys_bpf+0x2f5/0x4a30
[  164.056562][T11542]  ? __pfx___sys_bpf+0x10/0x10
[  164.056580][T11542]  ? find_held_lock+0x2b/0x80
[  164.056604][T11542]  ? get_pid_task+0xfc/0x250
[  164.056630][T11542]  ? get_pid_task+0xfc/0x250
[  164.056662][T11542]  ? find_held_lock+0x2b/0x80
[  164.056689][T11542]  ? rcu_read_lock_any_held+0x6a/0x90
[  164.056714][T11542]  ? find_held_lock+0x2b/0x80
[  164.056735][T11542]  ? ksys_write+0x190/0x250
[  164.056753][T11542]  ? ksys_write+0x190/0x250
[  164.056770][T11542]  ? lock_acquire+0x1d1/0x380
[  164.056817][T11542]  ? fput+0x7c/0x100
[  164.056839][T11542]  ? ksys_write+0x1ac/0x250
[  164.056859][T11542]  ? __x64_sys_bpf+0xce/0x140
[  164.056876][T11542]  __x64_sys_bpf+0xce/0x140
[  164.056894][T11542]  ? do_syscall_64+0xae/0x790
[  164.056918][T11542]  do_syscall_64+0x123/0x790
[  164.056943][T11542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.056963][T11542] RIP: 0033:0x7ff4f5f9e159
[  164.056977][T11542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.056994][T11542] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  164.057013][T11542] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  164.057026][T11542] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000000
[  164.057037][T11542] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  164.057048][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.057059][T11542] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  164.057084][T11542]  </TASK>
[  164.144583][  T844] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  164.283927][  T844] usb 6-1: device descriptor read/64, error -71
[  164.510399][T11574] Failed to initialize the IGMP autojoin socket (err -2)
[  164.532390][  T844] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  164.576106][T11581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11581 comm=syz.4.1887
[  164.577440][T11585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11585 comm=syz.4.1887
[  164.673992][  T844] usb 6-1: device descriptor read/64, error -71
[  164.783707][  T844] usb usb6-port1: attempt power cycle
[  164.789095][T11592] lapbether: lapb_data_request error - 4
[  165.143571][   T43] kauditd_printk_skb: 6 callbacks suppressed
[  165.143684][   T43] audit: type=1400 audit(2000000042.629:25468): avc:  denied  { write } for  pid=11608 comm="syz.3.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  165.152384][  T844] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  165.153300][T11609] netlink: 'syz.3.1896': attribute type 7 has an invalid length.
[  165.163323][  T844] usb 6-1: device descriptor read/8, error -71
[  165.343902][T11614] FAULT_INJECTION: forcing a failure.
[  165.343902][T11614] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.343963][T11614] CPU: 2 UID: 0 PID: 11614 Comm: syz.3.1898 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.343990][T11614] Tainted: [L]=SOFTLOCKUP
[  165.343995][T11614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.344002][T11614] Call Trace:
[  165.344007][T11614]  <TASK>
[  165.344012][T11614]  dump_stack_lvl+0x100/0x190
[  165.344032][T11614]  should_fail_ex.cold+0x5/0xa
[  165.344049][T11614]  _copy_from_user+0x2e/0xd0
[  165.344067][T11614]  kstrtouint_from_user+0xd6/0x1d0
[  165.344082][T11614]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  165.344099][T11614]  ? lock_acquire+0x1d1/0x380
[  165.344114][T11614]  proc_fail_nth_write+0x83/0x220
[  165.344128][T11614]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  165.344146][T11614]  vfs_write+0x2aa/0x1050
[  165.344162][T11614]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  165.344176][T11614]  ? lock_acquire+0x1d1/0x380
[  165.344187][T11614]  ? __fget_files+0x34/0x3d0
[  165.344200][T11614]  ? __pfx_vfs_write+0x10/0x10
[  165.344210][T11614]  ? find_held_lock+0x2b/0x80
[  165.344226][T11614]  ? __fget_files+0x215/0x3d0
[  165.344242][T11614]  ? __fget_files+0x21f/0x3d0
[  165.344259][T11614]  ksys_write+0x12a/0x250
[  165.344270][T11614]  ? __pfx_ksys_write+0x10/0x10
[  165.344286][T11614]  do_syscall_64+0x123/0x790
[  165.344302][T11614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.344314][T11614] RIP: 0033:0x7f3c2535e98e
[  165.344324][T11614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  165.344334][T11614] RSP: 002b:00007f3c26278fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  165.344346][T11614] RAX: ffffffffffffffda RBX: 00007f3c262796c0 RCX: 00007f3c2535e98e
[  165.344353][T11614] RDX: 0000000000000001 RSI: 00007f3c262790a0 RDI: 0000000000000004
[  165.344360][T11614] RBP: 00007f3c26279090 R08: 0000000000000000 R09: 0000000000000000
[  165.344367][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.344374][T11614] R13: 00007f3c25626038 R14: 00007f3c25625fa0 R15: 00007ffe2ece7af8
[  165.344389][T11614]  </TASK>
[  165.433960][  T844] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  165.454239][  T844] usb 6-1: device descriptor read/8, error -71
[  165.523444][   T43] audit: type=1400 audit(2000000042.999:25469): avc:  denied  { write } for  pid=11620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.562858][  T844] usb usb6-port1: unable to enumerate USB device
[  165.606499][   T43] audit: type=1400 audit(2000000043.089:25470): avc:  denied  { write } for  pid=11626 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.709864][   T43] audit: type=1400 audit(2000000043.189:25471): avc:  denied  { write } for  pid=11631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.724015][   T67] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  165.724193][   T67] Bluetooth: hci2: Injecting HCI hardware error event
[  165.725674][   T67] Bluetooth: hci2: hardware error 0x00
[  165.786147][   T43] audit: type=1400 audit(2000000043.269:25472): avc:  denied  { write } for  pid=11638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  165.962857][T11651] __nla_validate_parse: 7 callbacks suppressed
[  165.962956][T11651] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1909'.
[  165.984784][T11653] FAULT_INJECTION: forcing a failure.
[  165.984784][T11653] name failslab, interval 1, probability 0, space 0, times 0
[  165.984858][T11653] CPU: 2 UID: 0 PID: 11653 Comm: syz.5.1910 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.984896][T11653] Tainted: [L]=SOFTLOCKUP
[  165.984904][T11653] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  165.984915][T11653] Call Trace:
[  165.984922][T11653]  <TASK>
[  165.984930][T11653]  dump_stack_lvl+0x100/0x190
[  165.984962][T11653]  should_fail_ex.cold+0x5/0xa
[  165.984989][T11653]  should_failslab+0xc2/0x120
[  165.985013][T11653]  __kmalloc_noprof+0xfc/0x840
[  165.985033][T11653]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  165.985061][T11653]  genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0
[  165.985089][T11653]  genl_family_rcv_msg_doit+0xc7/0x300
[  165.985134][T11653]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  165.985164][T11653]  ? bpf_lsm_capable+0x9/0x10
[  165.985188][T11653]  ? security_capable+0x80/0x260
[  165.985214][T11653]  ? ns_capable+0xd2/0xf0
[  165.985235][T11653]  genl_rcv_msg+0x560/0x800
[  165.985263][T11653]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.985283][T11653]  ? __lock_acquire+0x5c0/0x1f40
[  165.985301][T11653]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  165.985331][T11653]  netlink_rcv_skb+0x159/0x420
[  165.985349][T11653]  ? __pfx_genl_rcv_msg+0x10/0x10
[  165.985370][T11653]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.985385][T11653]  ? rcu_is_watching+0x13/0xc0
[  165.985419][T11653]  ? __rcu_read_unlock+0x26a/0x5e0
[  165.985438][T11653]  ? rcu_is_watching+0x13/0xc0
[  165.985467][T11653]  genl_rcv+0x28/0x40
[  165.985485][T11653]  netlink_unicast+0x585/0x850
[  165.985507][T11653]  ? __pfx_netlink_unicast+0x10/0x10
[  165.985533][T11653]  netlink_sendmsg+0x8b0/0xda0
[  165.985557][T11653]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.985578][T11653]  ? selinux_socket_sendmsg+0x198/0x2f0
[  165.985611][T11653]  ____sys_sendmsg+0xa4d/0xbe0
[  165.985633][T11653]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.985653][T11653]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.985683][T11653]  ? lock_acquire+0x1d1/0x380
[  165.985716][T11653]  ? get_pid_task+0x2a/0x250
[  165.985743][T11653]  ___sys_sendmsg+0x190/0x1e0
[  165.985769][T11653]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.985794][T11653]  ? get_pid_task+0x106/0x250
[  165.985828][T11653]  ? find_held_lock+0x2b/0x80
[  165.985870][T11653]  __sys_sendmsg+0x160/0x210
[  165.985890][T11653]  ? __pfx___sys_sendmsg+0x10/0x10
[  165.985926][T11653]  do_syscall_64+0x123/0x790
[  165.985951][T11653]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.985970][T11653] RIP: 0033:0x7ff4f5f9e159
[  165.985986][T11653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.986002][T11653] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.986020][T11653] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  165.986033][T11653] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003
[  165.986044][T11653] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  165.986055][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.986066][T11653] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  165.986093][T11653]  </TASK>
[  166.104241][T11592] kexec: Could not allocate control_code_buffer
[  166.177446][T11665] vhci_hcd vhci_hcd.0: failed to lookup sock
[  166.185774][T11667] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058)
[  166.189670][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1916'.
[  166.243714][   T43] audit: type=1400 audit(2000000043.729:25473): avc:  denied  { ioctl } for  pid=11673 comm="syz.3.1918" path="/333/tracing/events/sched/filter" dev="tracefs" ino=19680823 ioctlcmd=0x5516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1
[  166.300026][T11678] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  166.452195][T11683] netlink: 'syz.4.1922': attribute type 11 has an invalid length.
[  166.565060][T11701] all: renamed from macvtap0 (while UP)
[  166.592418][ T5089] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  166.592480][ T5089] Bluetooth: hci3: Injecting HCI hardware error event
[  166.595723][ T5729] Bluetooth: hci3: hardware error 0x00
[  166.600899][T11708] bridge0: port 3(macsec2) entered blocking state
[  166.600981][T11708] bridge0: port 3(macsec2) entered disabled state
[  166.601035][T11708] macsec2: entered allmulticast mode
[  166.619989][T11708] macsec2: left allmulticast mode
[  166.649567][T11712] ªªªªªª: renamed from vlan0 (while UP)
[  166.689140][T11718] FAULT_INJECTION: forcing a failure.
[  166.689140][T11718] name failslab, interval 1, probability 0, space 0, times 0
[  166.689232][T11718] CPU: 2 UID: 0 PID: 11718 Comm: syz.5.1935 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.689271][T11718] Tainted: [L]=SOFTLOCKUP
[  166.689279][T11718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.689289][T11718] Call Trace:
[  166.689296][T11718]  <TASK>
[  166.689304][T11718]  dump_stack_lvl+0x100/0x190
[  166.689336][T11718]  should_fail_ex.cold+0x5/0xa
[  166.689362][T11718]  should_failslab+0xc2/0x120
[  166.689384][T11718]  __kmalloc_noprof+0xfc/0x840
[  166.689402][T11718]  ? rcu_is_watching+0x13/0xc0
[  166.689426][T11718]  ? tomoyo_realpath_from_path+0xb6/0x690
[  166.689451][T11718]  tomoyo_realpath_from_path+0xb6/0x690
[  166.689477][T11718]  tomoyo_path_number_perm+0x23c/0x580
[  166.689504][T11718]  ? tomoyo_path_number_perm+0x22e/0x580
[  166.689532][T11718]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  166.689569][T11718]  ? __lock_acquire+0x5c0/0x1f40
[  166.689615][T11718]  ? __fget_files+0x34/0x3d0
[  166.689638][T11718]  ? find_held_lock+0x2b/0x80
[  166.689662][T11718]  ? hook_file_ioctl_common+0x140/0x440
[  166.689691][T11718]  ? __fget_files+0x21f/0x3d0
[  166.689716][T11718]  security_file_ioctl+0xd3/0x230
[  166.689737][T11718]  __x64_sys_ioctl+0xb7/0x210
[  166.689757][T11718]  do_syscall_64+0x123/0x790
[  166.689782][T11718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.689801][T11718] RIP: 0033:0x7ff4f5f9e159
[  166.689816][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.689833][T11718] RSP: 002b:00007ff4f6d84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  166.689850][T11718] RAX: ffffffffffffffda RBX: 00007ff4f6225fa0 RCX: 00007ff4f5f9e159
[  166.689862][T11718] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003
[  166.689872][T11718] RBP: 00007ff4f6d84090 R08: 0000000000000000 R09: 0000000000000000
[  166.689883][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.689894][T11718] R13: 00007ff4f6226038 R14: 00007ff4f6225fa0 R15: 00007ffd5f6d58f8
[  166.689919][T11718]  </TASK>
[  166.695459][T11718] ERROR: Out of memory at tomoyo_realpath_from_path.
[  166.804360][   T43] audit: type=1400 audit(2000000044.289:25474): avc:  denied  { setopt } for  pid=11727 comm="syz.3.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  166.830205][T11521] =======================================
** replaying previous printk message **
[  166.830205][T11521] ==================================================================
[  166.830236][T11521] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0
[  166.830264][T11521] Read of size 4 at addr ffff88802dc3c63c by task syz.1.1864/11521
[  166.830277][T11521] 
[  166.830287][T11521] CPU: 3 UID: 0 PID: 11521 Comm: syz.1.1864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  166.830310][T11521] Tainted: [L]=SOFTLOCKUP
[  166.830316][T11521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  166.830326][T11521] Call Trace:
[  166.830332][T11521]  <TASK>
[  166.830339][T11521]  dump_stack_lvl+0x100/0x190
[  166.830363][T11521]  print_report+0x13d/0x4b0
[  166.830386][T11521]  ? __virt_addr_valid+0x239/0x430
[  166.830404][T11521]  ? dvb_frontend_release+0x4f3/0x5d0
[  166.830424][T11521]  kasan_report+0xdf/0x1c0
[  166.830445][T11521]  ? dvb_frontend_release+0x4f3/0x5d0
[  166.830467][T11521]  dvb_frontend_release+0x4f3/0x5d0
[  166.830487][T11521]  ? __pfx_dvb_frontend_release+0x10/0x10
[  166.830508][T11521]  __fput+0x3ff/0xb50
[  166.830530][T11521]  task_work_run+0x150/0x240
[  166.830554][T11521]  ? __pfx_task_work_run+0x10/0x10
[  166.830576][T11521]  ? do_raw_spin_unlock+0x145/0x1e0
[  166.830599][T11521]  do_exit+0x951/0x2ae0
[  166.830620][T11521]  ? __pfx_do_exit+0x10/0x10
[  166.830639][T11521]  ? do_raw_spin_lock+0x128/0x260
[  166.830657][T11521]  ? find_held_lock+0x2b/0x80
[  166.830678][T11521]  ? get_signal+0x7e0/0x21e0
[  166.830695][T11521]  do_group_exit+0xd5/0x2a0
[  166.830716][T11521]  get_signal+0x1ec7/0x21e0
[  166.830737][T11521]  ? __pfx_get_signal+0x10/0x10
[  166.830755][T11521]  ? do_futex+0x190/0x440
[  166.830776][T11521]  arch_do_signal_or_restart+0x91/0x7e0
[  166.830799][T11521]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  166.830828][T11521]  exit_to_user_mode_loop+0x139/0x700
[  166.830846][T11521]  ? rcu_is_watching+0x13/0xc0
[  166.830867][T11521]  do_syscall_64+0x661/0x790
[  166.830888][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.830904][T11521] RIP: 0033:0x7f8460f9e159
[  166.830917][T11521] Code: Unable to access opcode bytes at 0x7f8460f9e12f.
[  166.830925][T11521] RSP: 002b:00007f8461ed40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  166.830941][T11521] RAX: fffffffffffffe00 RBX: 00007f8461225fa8 RCX: 00007f8460f9e159
[  166.830953][T11521] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8461225fa8
[  166.830963][T11521] RBP: 00007f8461225fa0 R08: 0000000000000000 R09: 0000000000000000
[  166.830973][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.830983][T11521] R13: 00007f8461226038 R14: 00007ffea62e2c70 R15: 00007ffea62e2d58
[  166.831000][T11521]  </TASK>
[  166.831006][T11521] 
[  166.831010][T11521] Allocated by task 1:
[  166.831018][T11521]  kasan_save_stack+0x30/0x50
[  166.831034][T11521]  kasan_save_track+0x14/0x30
[  166.831050][T11521]  __kasan_kmalloc+0xaa/0xb0
[  166.831064][T11521]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  166.831086][T11521]  dvb_register_device+0x1d6/0x1e20
[  166.831106][T11521]  dvb_register_frontend+0x552/0x820
[  166.831124][T11521]  vidtv_bridge_probe+0x44b/0xa30
[  166.831144][T11521]  platform_probe+0x106/0x1d0
[  166.831165][T11521]  really_probe+0x241/0xa60
[  166.831178][T11521]  __driver_probe_device+0x210/0x460
[  166.831193][T11521]  driver_probe_device+0x4a/0x140
[  166.831226][T11521]  __driver_attach+0x21f/0x5b0
[  166.831240][T11521]  bus_for_each_dev+0x13e/0x1d0
[  166.831258][T11521]  bus_add_driver+0x305/0x5b0
[  166.831279][T11521]  driver_register+0x1e2/0x360
[  166.831294][T11521]  vidtv_bridge_init+0x52/0x80
[  166.831316][T11521]  do_one_initcall+0x11c/0x6f0
[  166.831331][T11521]  kernel_init_freeable+0x6ea/0x7b0
[  166.831349][T11521]  kernel_init+0x21/0x1e0
[  166.831368][T11521]  ret_from_fork+0x730/0xd60
[  166.831384][T11521]  ret_from_fork_asm+0x1a/0x30
[  166.831399][T11521] 
[  166.831403][T11521] Freed by task 11521:
[  166.831410][T11521]  kasan_save_stack+0x30/0x50
[  166.831426][T11521]  kasan_save_track+0x14/0x30
[  166.831441][T11521]  kasan_save_free_info+0x3b/0x70
[  166.831462][T11521]  __kasan_slab_free+0x5f/0x80
[  166.831477][T11521]  kfree+0x22b/0x6d0
[  166.831496][T11521]  dvb_device_put.part.0+0x57/0x90
[  166.831515][T11521]  dvb_generic_release+0xe2/0x160
[  166.831534][T11521]  dvb_frontend_release+0x13d/0x5d0
[  166.831552][T11521]  __fput+0x3ff/0xb50
[  166.831569][T11521]  task_work_run+0x150/0x240
[  166.831589][T11521]  do_exit+0x951/0x2ae0
[  166.831606][T11521]  do_group_exit+0xd5/0x2a0
[  166.831623][T11521]  get_signal+0x1ec7/0x21e0
[  166.831638][T11521]  arch_do_signal_or_restart+0x91/0x7e0
[  166.831659][T11521]  exit_to_user_mode_loop+0x139/0x700
[  166.831676][T11521]  do_syscall_64+0x661/0x790
[  166.831693][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.831708][T11521] 
[  166.831712][T11521] The buggy address belongs to the object at ffff88802dc3c600
[  166.831712][T11521]  which belongs to the cache kmalloc-256 of size 256
[  166.831724][T11521] The buggy address is located 60 bytes inside of
[  166.831724][T11521]  freed 256-byte region [ffff88802dc3c600, ffff88802dc3c700)
[  166.831739][T11521] 
[  166.831743][T11521] The buggy address belongs to the physical page:
[  166.831750][T11521] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2dc3c
[  166.831764][T11521] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  166.831776][T11521] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  166.831791][T11521] page_type: f5(slab)
[  166.831805][T11521] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  166.831818][T11521] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  166.831832][T11521] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122
[  166.831845][T11521] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  166.831858][T11521] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  166.831871][T11521] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  166.831880][T11521] page dumped because: kasan: bad access detected
[  166.831888][T11521] page_owner tracks the page as allocated
[  166.831893][T11521] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9879565182
[  166.831927][T11521]  post_alloc_hook+0xfd/0x120
[  166.831947][T11521]  get_page_from_freelist+0x110d/0x35d0
[  166.831969][T11521]  __alloc_frozen_pages_noprof+0x2eb/0x3300
[  166.831991][T11521]  new_slab+0xa9/0x6e0
[  166.832011][T11521]  refill_objects+0xe3/0x410
[  166.832031][T11521]  __pcs_replace_empty_main+0x35e/0x650
[  166.832052][T11521]  __kmalloc_cache_noprof+0x4f4/0x6d0
[  166.832072][T11521]  bus_add_driver+0x92/0x5b0
[  166.832093][T11521]  driver_register+0x1e2/0x360
[  166.832109][T11521]  do_one_initcall+0x11c/0x6f0
[  166.832123][T11521]  kernel_init_freeable+0x6ea/0x7b0
[  166.832148][T11521]  kernel_init+0x21/0x1e0
[  166.832168][T11521]  ret_from_fork+0x730/0xd60
[  166.832182][T11521]  ret_from_fork_asm+0x1a/0x30
[  166.832197][T11521] page_owner free stack trace missing
[  166.832202][T11521] 
[  166.832206][T11521] Memory state around the buggy address:
[  166.832214][T11521]  ffff88802dc3c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  166.832224][T11521]  ffff88802dc3c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  166.832235][T11521] >ffff88802dc3c600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.832243][T11521]                                         ^
[  166.832252][T11521]  ffff88802dc3c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.832262][T11521]  ffff88802dc3c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  166.832271][T11521] ==================================================================
[  166.834610][T11521] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  167.123596][T11521] CPU: 3 UID: 0 PID: 11521 Comm: syz.1.1864 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  167.127713][T11521] Tainted: [L]=SOFTLOCKUP
[  167.129296][T11521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  167.133069][T11521] Call Trace:
[  167.134131][T11521]  <TASK>
[  167.135151][T11521]  dump_stack_lvl+0x100/0x190
[  167.137085][T11521]  vpanic+0x553/0x970
[  167.138505][T11521]  ? __pfx_vpanic+0x10/0x10
[  167.140051][T11521]  ? rcu_is_watching+0x13/0xc0
[  167.142042][T11521]  ? dvb_frontend_release+0x4f3/0x5d0
[  167.144048][T11521]  panic+0xd1/0xe0
[  167.145240][T11521]  ? __pfx_panic+0x10/0x10
[  167.146785][T11521]  ? dvb_frontend_release+0x4f3/0x5d0
[  167.148887][T11521]  ? preempt_schedule_common+0x3c/0xb0
[  167.150591][T11521]  check_panic_on_warn.cold+0x19/0x34
[  167.152581][T11521]  end_report.part.0+0x3a/0x90
[  167.154336][T11521]  kasan_report.cold+0xe/0x18
[  167.155817][T11521]  ? dvb_frontend_release+0x4f3/0x5d0
[  167.157880][T11521]  dvb_frontend_release+0x4f3/0x5d0
[  167.159745][T11521]  ? __pfx_dvb_frontend_release+0x10/0x10
[  167.161544][T11521]  __fput+0x3ff/0xb50
[  167.163183][T11521]  task_work_run+0x150/0x240
[  167.164951][T11521]  ? __pfx_task_work_run+0x10/0x10
[  167.166565][T11521]  ? do_raw_spin_unlock+0x145/0x1e0
[  167.168519][T11521]  do_exit+0x951/0x2ae0
[  167.170130][T11521]  ? __pfx_do_exit+0x10/0x10
[  167.171582][T11521]  ? do_raw_spin_lock+0x128/0x260
[  167.173409][T11521]  ? find_held_lock+0x2b/0x80
[  167.175280][T11521]  ? get_signal+0x7e0/0x21e0
[  167.176737][T11521]  do_group_exit+0xd5/0x2a0
[  167.178324][T11521]  get_signal+0x1ec7/0x21e0
[  167.180193][T11521]  ? __pfx_get_signal+0x10/0x10
[  167.181756][T11521]  ? do_futex+0x190/0x440
[  167.183185][T11521]  arch_do_signal_or_restart+0x91/0x7e0
[  167.185444][T11521]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  167.187372][T11521]  exit_to_user_mode_loop+0x139/0x700
[  167.189367][T11521]  ? rcu_is_watching+0x13/0xc0
[  167.191110][T11521]  do_syscall_64+0x661/0x790
[  167.192460][T11521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.194580][T11521] RIP: 0033:0x7f8460f9e159
[  167.196406][T11521] Code: Unable to access opcode bytes at 0x7f8460f9e12f.
[  167.198581][T11521] RSP: 002b:00007f8461ed40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  167.201860][T11521] RAX: fffffffffffffe00 RBX: 00007f8461225fa8 RCX: 00007f8460f9e159
[  167.204721][T11521] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8461225fa8
[  167.207433][T11521] RBP: 00007f8461225fa0 R08: 0000000000000000 R09: 0000000000000000
[  167.210279][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.213044][T11521] R13: 00007f8461226038 R14: 00007ffea62e2c70 R15: 00007ffea62e2d58
[  167.215753][T11521]  </TASK>
[  167.217387][T11521] Kernel Offset: disabled
[  167.219150][T11521] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:51:36  Registers:
info registers vcpu 0

CPU#0
RAX=00000000001abaab RBX=ffffffff8ea91500 RCX=ffffffff8bd04185 RDX=0000000000000001
RSI=ffffffff8e3ec063 RDI=ffffffff8c621080 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0
R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000
RIP=ffffffff8bd026bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5b5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f3c261556c8 CR3=0000000028102000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8b52b56
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8b52b56 00007fffb8b52b5c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159423561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159423565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15942357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1594235650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000001 RDX=ffff88802b630000
RSI=ffffffff81ff516e RDI=ffff88802b630000 RBP=ffff88806a743ca0 RSP=ffffc9000563f4d0
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed10056c62b3 R13=0000000000000003 R14=ffffed100d4e8795 R15=0000000000000001
RIP=ffffffff81ff5170 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c01300
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c01300
FS =0000 0000555574e55500 ffffffff 00c00000
GS =0000 ffff8880d5c5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007f1594427dac CR3=000000002aae8000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1594f5d560
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8b52b56
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb8b52b56 00007fffb8b52b5c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159423561e
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f159423565e
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15942357c2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1594235650
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15943f2600 00007f15943f25e0 00007f15943f25e8 00007f15943f2618
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1594f5d020 00007f15943f25c0 00007f15943f25d0 00007f15943f2610
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f15943f25f8 00007f15943f25c8 00007f15943f2600 00007f15943f25e0
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=dffffc0000000000 RBX=ffff88806a6245c0 RCX=0000000000000001 RDX=0000000000000000
RSI=00000026d8cc91c9 RDI=ffff88806a6245e4 RBP=0000000000000190 RSP=ffffc900040e7818
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=000000000002ec8c R13=ffff88806a6245c0 R14=0000000000000002 R15=ffffffff8ecd53e0
RIP=ffffffff81e2d1b0 RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f47a99f6c80 ffffffff 00c00000
GS =0000 ffff8880d5d5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00007ff4f5feb840 CR3=00000000377b5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000
Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c1fb 00007ffdb590c1fb
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c700 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c700 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663730303030203a 3431522038333036 3232313634386637 30303030203a3331
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f7064783d 7373616c63742074
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63742074
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63732022
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393339312e332e7a 7973223d6d6d6f63 2037323731313d64 69702020726f6620
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 353578303d646d63 6c74636f69203332 3830383639313d6f 6e69202273666563
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85b043a5 RDI=ffffffff9bc67ca0 RBP=ffffffff9bc67c60 RSP=ffffc9000c9571f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666
R12=0000000000000000 R13=0000000000000038 R14=0000000000000007 R15=ffffc9000c957508
RIP=ffffffff85b043cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880d5e5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000555574e70a28 CR3=00000000377b5000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000030000 Opmask03=0000000000000000
Opmask04=00000000fffeffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c1fb 00007ffdb590c1fb
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c700 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb590c700 0000003000000018
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f7064783d 7373616c63742074
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63742074
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 65746e6f63732022
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 393339312e332e7a 7973223d6d6d6f63 2037323731313d64 69702020726f6620
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 353578303d646d63 6c74636f69203332 3830383639313d6f 6e69202273666563
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000