last executing test programs: 30.533404551s ago: executing program 0 (id=757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 30.443618369s ago: executing program 0 (id=758): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/117, 0x75}, {0x0}], 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x6, 0x8, 0xe, "9921fcf9eeffff09000000000000000000a6a9"}) 30.047060261s ago: executing program 0 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 29.943681559s ago: executing program 0 (id=761): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 29.813291277s ago: executing program 0 (id=762): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x0, r1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 28.892074872s ago: executing program 0 (id=770): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) 28.734436004s ago: executing program 32 (id=770): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20) 21.031731224s ago: executing program 1 (id=818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xc5df0ddff6d8fa9e, 0x200000005c832, 0xffffffffffffffff, 0x0) 20.163543678s ago: executing program 1 (id=823): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000300)={0x5, 0x48, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x20008000) socket(0x10, 0x6, 0x5) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xa000000) 18.93019423s ago: executing program 1 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf405807302079790102030109021200015f6560700904010800ffa2"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17.675204349s ago: executing program 3 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 17.674926711s ago: executing program 3 (id=850): sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x40) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2c020400) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0x2ea}, &(0x7f0000000980)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x9000000, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) 16.653504225s ago: executing program 3 (id=855): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000800)={'raw\x00', 0x2, [{}, {}]}, 0x48) 16.440957623s ago: executing program 3 (id=856): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 16.440651363s ago: executing program 3 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f0000000200)) 15.922672981s ago: executing program 1 (id=867): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 15.482692933s ago: executing program 3 (id=868): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000440)='=B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacq\x1e\xbe\xe1}knh#\xcf)\x0f\xc8\xc8\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\x00\x00\x99\xd4\x00\x00\x00\x00MK)\x19O\xaf\x92P\xb7b\x9c\xaaW\xaa;,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab\xa6\xa6\xbfl\xdd\xe4W\x14UR\x88\x88i\xd8\x89\xdb0C\x9b\xf0\xc96\x99\xd9S\xddp\xc5\xcf\x89T\x1b\t8f=\xf5e\x96\xf7\\\xaeu\x7f?\xee \xd5\xa4\x9cg\x0f*\xcdG\xfc\x93\xdcC>\x87\x19\xf9cE\xff\xff\x17V\x93\xa5Xfd\xe6\xf8\x1f\x80\f|\xeb\xeb\x84A\x97~a\xab\x86\xf1\x84F;\xcehKkX\xf8\x16\xd2\xf1\\\x85', 0x7) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0) 15.032150502s ago: executing program 33 (id=868): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000440)='=B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacq\x1e\xbe\xe1}knh#\xcf)\x0f\xc8\xc8\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\x00\x00\x99\xd4\x00\x00\x00\x00MK)\x19O\xaf\x92P\xb7b\x9c\xaaW\xaa;,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab\xa6\xa6\xbfl\xdd\xe4W\x14UR\x88\x88i\xd8\x89\xdb0C\x9b\xf0\xc96\x99\xd9S\xddp\xc5\xcf\x89T\x1b\t8f=\xf5e\x96\xf7\\\xaeu\x7f?\xee \xd5\xa4\x9cg\x0f*\xcdG\xfc\x93\xdcC>\x87\x19\xf9cE\xff\xff\x17V\x93\xa5Xfd\xe6\xf8\x1f\x80\f|\xeb\xeb\x84A\x97~a\xab\x86\xf1\x84F;\xcehKkX\xf8\x16\xd2\xf1\\\x85', 0x7) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0) 14.983948114s ago: executing program 1 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}]}, 0x38}}, 0x800) 14.743697183s ago: executing program 2 (id=873): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) setresuid(0xee00, 0xee01, 0xee01) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xa) 14.743555417s ago: executing program 2 (id=874): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r0, &(0x7f000000bb80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="e5", 0x1}], 0x1, &(0x7f0000000240)=ANY=[], 0x1140}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000005) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 14.65363884s ago: executing program 1 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000002608000140000000100900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 14.613966035s ago: executing program 34 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180070001006374000014000280080002400000002608000140000000100900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 13.899276262s ago: executing program 2 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, 0x0}, 0x20) 13.800733746s ago: executing program 2 (id=878): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 13.726533411s ago: executing program 2 (id=879): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002f80)=""/1, 0x1) 13.542244889s ago: executing program 2 (id=880): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 13.445614093s ago: executing program 35 (id=880): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4.352488088s ago: executing program 4 (id=937): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000804) 4.020211516s ago: executing program 4 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellinkprop={0x4c, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) 3.88323435s ago: executing program 4 (id=945): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000006c0)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3.743348646s ago: executing program 6 (id=947): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1) 2.500462268s ago: executing program 6 (id=956): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a00af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff297eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16e343ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000000840)={&(0x7f0000000000)={0x50, 0x0, 0x352d, {0x7, 0x29, 0x8000, 0x60000011, 0xdcf, 0x3, 0xb, 0x2, 0x0, 0x0, 0x2, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="4b0507e79196ad6d8206191bb226bed2c6cc7d48d32a8d68d8f81774356a57a750d5d0913cb210a914c65be855b22279a7b3b1ea297adb7fa8d8bc7c0af94c52f108ac176d56e96f3c7c0d51d813c4d4a3ea470e17f3c7d6d781d53eff8638fa54e4b7ca63d1f5aed9539ffa98c5710784dfeda3e407100c93864033279afff84b067d94edc7c8ba2bbeea533c011ffeb391cc29b30b4d4892d06c5062440ac33bf299606d6d16efdd92409237dfeb9cf311ce687d14f178230c228e992007928258e8a59b96ed1aecfcfe300b82f86e6bf0d6e1b16893f2c6ee310f5934d46c0a69f12f69a1c277b1d05e636b3e2ffedba0817a2453836af9267a1533603cb618e188845276b93a52bbad311c4db8e04d337b0f9f6802e47292708c60ea698e1aa8cfd6653e8f229f77e11b955165b9a0cfbfa837c27eaafe57476b54e8b7d01fd98399375d3467d9d54fcdb86908ab83a36c8a33c93ee04f4ed7d96da6f5d89c994eee08f6c68b652f58d35d4d47a0007280c0f157a87f95f9e3f7d221eed219656d6b9485c871018d62a1a566a875086bdbd63c0f6ad7c8fc0ca0e30dd7fdcb5ca04f007b140a6fd8f2a4bfc06b0df5ab52743c9bc438a806154e065a59e91a0676e60881bf57247c0e6e17794e656ffe95a3c00ce3b9d1d25101d0606d1495d0e1e9bd53b4455f69a33c7ea3dc68f8ec5123d7258fabb352bdca2602dbb0afd0d7025d16164b00a1d1685c802c5c575db3335728d752c23d771fd648f67bf465862c0a33ce259901973ba9516daf5b58a0b9fbeeeaf130cb768c0d20a30b9b8027597914d1c0c52ad06bc5bb85aae013b43198cbbc3a4e02dfebfd4ecf53b18b8bfe21e136c1e7696989ff2c78bca419e22219955f9e837ca38d3db4f59776d003bd720200bc45f1e139a9f49a9685ca5097e56f05714abd0a6d9af1b99a7eb582482c267ea654d54ee5b4a7e17ae7136ab743c851ec8c4416f22af8bbbff2ad76b545324a9e8b4701ad147861ddc908a95bee188e53de65af36081671996bec93836a89c70e78bb258d03f05f21a562fa94f40b9b4615cbba05818866185a914cbe90ee156d3df3e5f4a9129fcfc17e3854174e8f3a5722306b886413afb540024eca4443c44fc16d82a2cfb6626bcb4738959e259513ca11f16f7ebd77194c87095abd659bc28f2ee1cb3c1e7eab1cfa4cadfd7ecae7404004cb02729d8b689806a852050ef6fc34fc38b62e1c872d9a2b6624c5a85357f5ca7368ba936473f04760a8b8fe15649739dea26d966735793b80f1adfe148d5c362161c4ba70086387f51ad7de47998ac2d7a29d3c3eeb3fb6116a07cef42bafbc8baa7f7d14360272ae0953b71be41773407298bb32736e670ceeb1df976f3fd3ce034a7a4337733ee0b7898fe04006549db18c7a0447c2d093d4618f0b845c089adbed2b7d45b2fb1009160b1f08707ac6ed965cc3ad05895a5426bd735242ec4e03fbbad5386441d5d7a6b4b6669147e4d7c983ae4be3c35baefe1496a0c33ee30fe34c334cb4058b4ae484feb6078f944ce7b6636a6f5e2eea6919ee7f5955e4a7ecce4f821e5863c4487f6bb8a99c84f85ec9fa3e9cef2f80a5c84b6d1b0b442f3123820d59a55e354a5eaaea939f1be11815eb042ceb364b9ae9ca8bf1a55981ad09168f8ff34f51b17329e5f822f2a60ba5ce243afc52b15426e126848811a7f64ec7c9e96197482cee385eb5aee804662397f6581b080da7d633bf725528360a0e8c3630e0690daaf7d078a8e8c76999d04493cf59aee528d44ceaada146564b0b2f878feff6117bb5655a6911b07c56d53ee8fdf5c362f5a25035fa9a7282ad890a39624bbba5f2b10474005764afe0c5c27f93535a642a8419669d995e5670356f41ce4d4d22bc76cfbb2ec72e423188af2de1a9102791fa50b9bc8918fb644247b029004d4357a60cd47403678476ae4c88d636a6f3fea0a29b24310098a7130afd8d66337344f48ab9efbddafb919deec946ef4384ca5d29bbdb031ed9583162720d86a99be75d78f96dbde17800582511db3cf1ce1b98b369e9c4246444960d662be24f57c04a221523bd3f40c47d7b62f44f855df17f462e292917a398cb97873db9c4c10cbd3bcbf850f896cc71440571b0d2170cbf842dafc9498c2409d8a81ac47386c4706dd7ad8544e3938af66f3ea15afde06fe11416f5bb30fa6a0c405babfe1619118768a93a0d0b3ddffc78a16e396d848a204347ce5aae2a23fc36be740ae4f30bc520bb3a4bebd1757c32126122aeb1c8fa2cc4c9a21c6dafce6128f2b22632b002c0338376ae5828ef4d3a84557401cbf84fc0c206633f4ce6b1c9ac0d4da7b50633e30809ca1b555eeec1e8143187db954df8d2cdbe48c4eaa3ced1392709c914304b704f058fbc9cd2d13c7113b4d5dcd24e5265ce474fda44693f01394e87515c066ebc832e3ed5a9555b63f4200bb73d2067ec7063468ad5075384cfbc9b6ad9ce450a2fb983cfc37373045faad6492d7052d2a59fe300d3f9c002848a35a57c4fa1705531f22e13a46c76c7aca596f260bf2c3a325b53dfd1d6e986ec19ce96c3fff922539260645c64b9a6ed4dd0f9bdd270171ac9152d590b7ce4645503c82c0f38f47f6eb6cc8f6d5933b83ff673c2019197f600fd0c2208739d631722643d7446f9f2ab97cb56ec55a8c983e6fd5ba605233862625198f5294725053ff9a62472e62801cb7a04241037d2c11ba3cd415f7a008a972d3c0e0bd1a85797c4152715fe47f7f2cc4cdff8cb215982d1b9636cb447d76dc5d21f80c8b9c1aa50d5b6d7db7d93d7b17a1032ffd9f123758e07066497383c621089cea8e9aac5a7fafb627e0d5210d0c44ad74f2de55746dcec1e62601bf6dd4a1d0febbc23cfb7eb52cad3fec4f5dc10ea8f1e1d3d9f8e407405b4ec3f595af6f3c43611cfbbb9af9ffff0b7aebd482f5733da063247f7bfdaa391edeb1a9e1e2025c5642918c84ab5683d895ecf86de2b2288a4e882b292769b5cfd5716d09002f31ea32617a3f806e42421ec703bad7c06540d452b3959f8a44063feecf27655026eb950eb8f3868b2430234db03c0d162add2464987c801d39d0a25378aee0f08034298e1d7de192c30ef7dbdaa8f5ebcbd99a2835b8db84382ad15581bbeff062b7b241ab6553012c4dd3724a74a27938193b2106a13db1a16276444a15e875ed9b5e025067e97d121baf627fd4b25bb56837ef8bd79c7baab43f7f5dfa2fe72e0184216a2b62cf1ae1ffdedc819bb30c4c199f51e0950201222d9085f1c1124dda56e9aa5fdfdf733f2c1e9aeb559e8e542c90cdc219c0f63364283c49bb427ef76700b153cc9095c15bdae8e12227fd09bad57891a1c5b08218932c947e0b0acbe4965d15302cbcd4f2c6bbb3d07caa0c33a1877632441177f74cc41119602f36ddbdbee38531bf8d3c36348572ffcf0bc8a49a962a980cc0d1862350e3cb6c703d50f769600f5520bc0f1c7f74842c143380ba4d86fb02231ed89dfb302fc20d4bc07c0d0d3b1362d45e1ae0713a7cfaf6121755d5b534a273f88bc9c736fb887d3abb78e86c24318f3de49c56ebe309bd184f248dd11d2ac5223630b56f763ad1a430de48ec601a235c442bf9bc994399b14cf0622e139868cc2c0e79984ea856beacbd4e12b9da5f98b836f4e11fecec8e428ac04618e6c2f24f9388401d18f077006d7841a1db64713480f720354d5cdb6e8015b2c6a770c9af9ab220e3bf36a6442dbe5f05acc166643b3d6fecde95dd8a64658b7b70ca88661ae023edc6f7ff4c8166314f8c53cbdfb9844710825b4d29bc9dce408e3ed6281687cf56019d452935fcae6092add9e406130c55ab08587a1ec325df3aa229182c9ea66e5e75adc04abbd94d20fa128365cb956096500f560b9751414351a3858040a8261209af15ade0f9e567f0242498eff2142ffd15a73b96223cc68507dcd58ce7201c87ca8630c740e014f6afcb2c2c71391063176d0c528117317fa518241c5c745b85351690018e7be70aa330ce87b1b179c95d6fea6eff75302ea9be90ace28c6def3ce62c07e251c84942c6f1ff3da855087c5eace922f5d15ab26b54781521c97eb706d14f30a4c6765d4b4b5dce6d0d4e9886e92fcf71233d5758254d8b4a33b8403d5a33d8ca979f5573cbb96e780a57b5b156426c74b3b480158b0bf34e87931ca0f65d238fac6927c75a4e84c900e715e6db0bbd207935da6e52111dc83a31557daa4b8ffad1f16ddcf89938b2a2000d24028ecd41346dbe23acd5eadc4e440ef2eb4d46de8d898628f8800fa3eec694453035fdbac6ee138518644c724170e47f174aeb52f8d5a1774159b90b63ad42180d2bc973feed84aafb5bee7e84d0df246a4765f3eb9f8a95896e99576a7dac9aec553630efdf967d0805734a2eb484d658469320f47e0346057c9fec39863e61640d150d26ea8f837c51657889f9394aa799493d193d9ede55010168cb7abbb7690f52c90d82a25bc4e39c66b3cbfb45d4fbe9a9d0cbe59e5d166d6836c1fadb0d905cbf9d99def8fc1bd6876881582339a7f447d924e9110cbb31409b5301acc6a923daf06608c2797b32440fa73b33a53a0159f1ef9a05abc1fdec6e07bbb9d335b6f0b55a6778cd2c870faa914c8e8a33de5995004d77b7e3f67d279b7dcb80a99dd51d53a1acb0b7d6114133efda31eea6906890d2299814b9e77aa9fb03323d1a25f511fdde15f7b81781117d8cc3e678ea6e0160fa6690cc84de8436eabbcb98b9458f151ad62194bb5119934a8be63aae3114042f6d0a19a337345bb06c7a8369b60c4ad8d2fcacac74040c6f28b4ed39f3c6a5bbaffd9a75dba16645ad28a08abcce45c2fab1855cfe00815bb8f78b49d3b0c370d376951630113bd5b4c47129c88a7a763b3f92db5763b826d2eff21508d050c0e839b42b8fe4eff51c5c9dd5928b903d8921dcfabf4259e2ebf74dea514da1441047d84f82982e145364bb34875947cf53270c31a4be4515fdac005e801ace23223b9481576052a2d0f6a8920e2515c873ab327e10443c6418b4293a3e451b0bfb3580d6f8571acae5ef1f2fc632ff243aa5ecf418c017954eb237fc2762fee6675eaa6a178e35701b8127ad582c350dc0516d0ad8ed77122802aa1632cbb80d9ae5d58371f55ec3807990f18c44991c93a97c6b141bb3730b57dd8c4f57739c328bf80059c61c198af238ec178871a1079e7c1f56bac5d08d131c9c1a4753df318418efdaaa9b7da0ff286b196a3dcb7656b0c3cab4e7841c47e57597dbc08ff2cb2bdc5185d52c23f7fd190f8853dd225db24e24b93f879e5599b7033169f54e9a8aa8657af9c2f24ec04b7cf3a97637bcbe8c1b7dee03104d1e8bf07ce794d5b09f4303af8942a65a6b9de85f03ca3f08b30d12bf938c4ad53e71c6e7361273b4fbddd111e0f30d3c9f2990470794772d79808e239abff4e739010f6038aaf638925afbd489eadb05b2ed468edbcc02fe5e54fb641ccfb3f9eaccbd9593fcf1c6de949646a8f7cbb5e7b779e47868c560f726c761cf80b22709f9925e6e31315d90e7050f2ee5b0257dd2ae3d258993fa937911c742eff003eca6fd8872d831c4234a938d95719c15cc622b2f523a00d63f69f96de52753eb9d598f2d999ad59ff9e7f8267553feafb19b71e2a4937caf77afe05de50de11121f0efa53403cabcd38def8b0edcb03ee04675590464b6c3f778a8f6d6b2ba7d88940c30748cecccd2ee9d475392c78166d7167af322d4789be6b6bbc65c32a87f746e492ffc03f32442f202a4afe8e8aad10d5724cf3450afbb203b04dcfa5b26e077419b27ec4f7d0c28bc47fe24a02bc06a472f8bd2027a470940ea8796db64430814b20df7a77fa5c55e16fdb65c8be8e1c36e17983434eee8d2aac1bbf4f0260c94e063ae4647ef8de22ca57fc146d03c8182a8e72e41b9b71ca47da7e811a5359d239cd84e54baf757476e6127a134c322964329aedefc281aafcd84363bff2dd33cfd2fd659b15f58317590f4ed29ae284a2d44420b1e03aba970abcc2bf0f2e58ee72f64afc165fc777ff019fd497951564ba236dc2a48a55b8bffdccafa9dd92845f8cfb3c213447487a1d2e8a20e3a0bfae39d809da384cb6feabd070eb2d6faf5ee0044ed6c8be7fa543fc17efcc2164249b641490c218a3305729fae12775c7359cef9153619fdf71bca9693e410b7c2e49acb888a06bf583b333c1c4d41ec054c61457de6928390d1f2794ca20beef106baa4925558da51c2e4de42d027e5e1cc940215f0c9d5b7fe4b1e906d1429578117d6c61318a2219cb8d24640753c88d179894d8e31077f736ad558240159368b2693501f1416fb584be45eda672f9809f8437532c1126b736beda5e3964bf26e170d21132ee8e39caafe7f881c598b7ae539002d32915996299eca3e287f12d1b2edc198b8dc6773dcb0eac1fc39981fc5817fb7de26e7a1bc3ee629e013291c2839bd20086bc8633f3c67cf97d4e19aed8588c418d8ca1fac5878e1677a679565b0254b4199c90b7620a11430c5e10f1d4430d40b0e4a71e5c9050716dc03374147a21c0cccb864945ea2d458ada49fb78968cfdda976e9a21a42973064c07dd847fc29bcfec6394166d795c1f7e2e43afd96950a08b34a6dc5eba9f4f72a327c4f324105a6d003152b85d2084c15a70e240f725b06d6d1b8793c9d60010e8b4bb0928e68b89e5ad7bddd7ce61f50de0adc58ae2601cd57e434d622487ec7dc3ee72c47ed82ce507381fa3ac409ea48a6068b033fd458b4d37b2b011ab540b9bc9ee02cc1a04931a7ced45751c55751266de518d0274d8f2511741d683f6336eeb1a98a579bab2dddab6cc956ed330f65e99905517e0ccd4068da9019b5292395fb99346d9984963b9d4b6e704e99dc45372621b2b189d308bfaa027a8c7827db478ce62f96fe173ce056ee2f5cc4c2fb135ae680947e9b4d365cdcd053814210552cfd9b4d8433e0a0cd29823652c0b2c5b48811a742f5fac063a9ac143199357409c82f4d1e35da1bd852f67850e93b81754c4efcb29aa9b91fa699db20a06286be1621b3420a0dd4b68e79654d7fd0b9a73511f99a90c4245fd96bd7260b82ad31b17887c4b22637050e082a3b5bee44e7f61da581197f03ff0e642b9b022f6c29a3a56161018729cb903d9396ba430a1d11344123b4070ff2d5b098408df4768cf93fcb8f997373fbeb3d00395b7a53f46aacc31f171b739f0305594b5a0c86fcb7ee450aa7bbcfe0f6f995300e5ca618cbc5b72fae34f5db73dd83105cca16cfdf0e1a356683f381963c029c3da94aff5b0d1738aa46230a36f14868fcfca83363525907adc7b505f4b1c1ee6ec7991945d6655d208c699224a3f9cbc870e8010611dab2b926abd4a47f9d135eed664804c669bf03feef12ff2ef9afa220edad8218f75156f94c8d68443e6ae839db568bbfa8ace424506bf6f339d325c7dce35423d832ec07abba21d14ecb510929323bca3bc2228801d109f5226ca79b1095ed9cfda8a634f4e6074a79c299262eee74ba7c33298ac3b72b914c2ed27ad58885d9c2abfb61d48cd8f501765b5a5d14a2fb0d1363ce49a63459f4dc784296abe1fd7b2382a905be530cffa1e160979a3c8c46f9ee22e6c0fbbc3a5efc9d4cc2ea6c1ef8d77d095d3d3924e446caaf3fa0065ba95a880810f9d59f498aff42d556f6b8351655b2ec61143447ded685bd94e15f164816a2551fa9dae5846a60cd86df5afb98cdd7c802734dd610ff9719b3b7abadcb78c0be5f30e7b4ee966a4c779bc470fbe445cd325bf3ccaab58bc42e169782ae8d56296dcbd5707b3d56d8f1c933dc9d94f179ee3d560a95eb7c54f50b66ce2dac7b55663602e7f0c502f16178d861ac4e5064c772461ba839106cd4da5f88525f54ab7fd27b2a351fd4350037fc86310e41522090eebbff9c120a9a8f7463702fb1bde8a01b1cf8f88c0e9d2acfbf49aad347ae6e9550babd2a9cc9877e849286a804128e97f1c15d8a3b4f9dfd588107ee76fe9f42f491f6ba6df72b8fc2ffe76fef1dc589a2d8bd47986f7b85e51cde73e35dfa0efab3def3bd722a15df4099e4b5e1ba6f8e5465c34dabe9fbf6d217f7995eb4e9d9422a832c933e0f09209e994b9595839a9027cf7617ddfd0231bf0a66ea51cd255e3995c5599ed47ec71efe8cce8ac4e0c942f8ff26871e354a63934adb2faa44481456acaf57266458f737262de8091e8b8dec7266dfbe1ff4d9812fc4f34961d5671d17b7cb37ec508b515f93c121e84c85d69275cc3ba671aeecccffbe4d535400766ff4b8e4d0ba916a48456a741483dc8f763e72b2507b1be9e38f376b6c16223ac7d8c8fcf2475b7bdd3cd0cb3cebcb530829b73024c9976caf5e8c412127f03c0ee5cbc126d354bf1a184abe257f777f4037c9c78b24d46438d42f3bd50d25d1ea936c9ef9b35674b83d52c6773d5a7ad5aaed4d9878564847b2d16c40feec000fd9e2d3da29b8d8e3458903d6768efd6d98b226e67639ebc674ca79ca553f576f8c6377478a39cff44c899b4814910efccc11d3fad47a0b5fa0f2d293c75ef09dd075ad664bfcc8a2f4a6153eaea8e1ed8c0a42bf2220bf49996bbe1a1e1297a03a027d7998c587d050aca837f83fb394b38c4c33c0a65893ab878dcc9dd85a04b91d4eda33c7c85a88c53ec890bae9683928857275ac0b58759b7519f0002184719530e00ce6715019822f5c3129139c40b13a993097b0435f82fc73760c2827d2793f92841e32ec81c9b676410c353c46d242022514a6efbb06f6bdb1818219cfbc3d37bae6825cd8ef3c34dd89346f15632bd89486ae2316c2a3813467e7346d2961d02f105a5ad64ad33d9e89174f9dd73b64d2183fd772988da5cd20ecf489187526cde619099bfe7d52879cd7c6db025894160e1d2dfe4b845f27185e8116d1f12484c93ffd1a008127099a9c9c77cc7c7f7e43961767de8f675921d5851b9b03734dcb7c54df1d064e41dd98af7e2714bf38a33c72322dd206619e050d2387fb1342cf23271e6078471f96c7709bd742994dc712a38a331986dcf76788cf6f9cee79acc239407eb9f097ec8288542fb535b98e16364362f3f4b35e30db67789d9b2481e75404716b38f95caeadf40e1fb13160db22aacf2d1a86c76c29e52bb30c939f5cec5a2f1b8a8a40f7b08c820ca85394ca0184445b425708410d38125563341053daf3e20f9f4c876010ebad5e3b679bcfb8e7177bfb3dca880d0b5efe0eb99122581230bdfd1d4c7124be50a3a9fb321efd28c7d37a7859877b237a0c0bea8ab65a70b4c2c1a991fdf96e646a697acd10e2ce76418003199a768f5ba696385736eba07ba4f5f6469f6e47427189bd3981f11f58e76b7da94d1512f57eaee9089778fbcd75f697708ac12f0772df9d5e1ed419e1043f961024a7e6393d9e96067a07599f61b83fced4e383121ebf1f38e66ba4fe88c8132f8ccc9ad1a94dfb416e76e2fbaaec2466e2e457b3ac6e318d1592db824e0901536157bb32e8437909cb53f7e987bdc5703fa5527aae38a8aef7c287cf491b8aabc57945cd62199ec4f4e393b3908c7b6aa491be72ab860af453b36de055859b74bf328a2b4fd249aa8841729d9dbd076306deef5d5123235070ed5f18fe7f8eaf6630e0eb985e907d8ef7dc64fca103bcc89cde4f42a08288addd2d1446072990d65b22d0349989d527e73da1a3e0092a59284dbab078be682eb9742e116226e33b1886bc693f7fc6432def8cab6f08456028276b8984ad062685b4801c9d0ee5f1a193202c0798cd4b38d4ab181dca32bc9c7462b8bbe22c2dd1d5d8f6baea0553f07e96856c7a8b8dc578ab3cdaa5abdefae3af80d1e127b39094b4f21c8a3974167c52c6ff2d64a433f343d95dafd8c3fd2f0ddc361a8bad4587016064b53cf8ff04ef5917d57ad8383141bfd0f80d342998faf32b97a50b485687a853daac361c0a5c0dd007f2485824d9295ed23a22a340a9dc714314dd23009fb82474739cfbfaa259f4c2804cdb1c7a9378b0865fe2c2ed93ebf35a8f133c37b743b954b9f0af23b286b0e663a1bf3ca3929e89a1c208811bac25498e0efea9ace1aa813764874bc97a09e0b030ea322b3ebe9807f9792a6664619ec36be5b30723b88fb093922367641f6350974a8741c63efcef60060d8996c4a9b009af262b1b2754a93be81af8e1031917ce4d7adeed0179639b42e02042960c7cad1e5006ba83e2c0e1e0524e79da8890bf5e1aab998d04faa31def22644d4c48ce1507737f6dc480ba366cac623c8482f6d4f8c990339a108c0123ae7840cbd67d26ca19d30074c9df0b4248ee6cf61bee33f173dccacd809dcfb6ba4f5d2d8523ea62d23aa24391ede638fd457b0e78d51c985d7d94a418ff6698db0293ba42d49a55862e2485ffa5b0250722b0e84e22c6dcb422be5de678635aa9bd7b0499c19214b24f174dcc2bed48535556ad9af0ac9c66a444b16016b1d87efcca8ace1f49d8a1b9de14d8e8e50188f6e1f0869fc0d2540ad0712c9ee2e4d3e9fccd307dab908e6b67155812404a97136bec80edbb53162445807cf6f6a883b74931d29bec6eecf5c04c91ea57bc2f9008d92a6c39c9cf0f0fe40af85d69e6fb70011e553f7ab7ba8f8ea68dc339f6bb2198751d693d154da21a50f51cef289e9e5a6658dfdbb3b3a5878a9f22868028f3de815f2863a4bf8edf7fbd7e8c143a161086b0a3361dfe064ed3fcf096b5e7a3f1517867b3c072136630b0ebc26f07d128440fe67d0d12ba9da32deecfb0b08d7be284165a367e2b68af98a0a3509ed7cc20a4aa7f309ecef479e0d4712ab1afc35cbe9acb63947939f10cd5b9c9a67a23d0ab9054c0eb17e1ad5ac91bdd317d1755da89ed5162303e079bd678fd7c516103c2c778261d5f9a71dbb2956b84d0606effaa5f232cf508d750935be6bc6cf9fb8f975834c0b57ce4f442c0129d980962bcce179d9b8dd8461b14be10912ecc45102f30fd879ec0879d2bb4ddf65ed09868dc7140e6a77eeebc8b5cd0bb64d1a2244394483c925b56490015d03ba7b628b3d3aec8b52d0922cd8f52d92635707b9fbf2f1e28924fc1601fcd05fec2a6cfe4db5edf9b02f0f1e1ec22fb0323ecbf768feb232e469420672d9834ab9c642f28f8a01d30accb19a4418d37f17c63e9195e203d36f2f537aadaf991bd94f3ba64a62e4c0b5c5f9239a79eb087df24e737217cf615d80b17d745c30f44a4e2f8ed33fdd2559f30e113f3942e60ebcfebf030100b75e83fe3b7c0ddabbe54af93caaf8b9ae46b3612e5366c42e6896a3201046c9e3a6ab134b4a8f6b13d69f7fa981bfdfc89721593a6dcb1bced285618bc957fc17ba056c12b1c9db50281b56c15f2833bddf8bb5f6a71ffaedab39f5e43f96aeca7fbff913ef722704ca7e5bf5d8759b89dbd1f424ce193cd196d7a421512b0949901cef37a79bef2d20f6fdcb5697e3e2e1c9d481eca06c885ffd10bff6f83095f19b98eb52bd2ee2c9ba90a28a3952", 0x2000, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x78, 0x0, 0xfffffffffffffff2, {0x7, 0x10000, 0x0, {0x0, 0x4, 0x101, 0x8000, 0x7, 0x100000001, 0x800000, 0x5, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x8, 0x200}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.343606453s ago: executing program 5 (id=957): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 2.343423797s ago: executing program 6 (id=958): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000200)) 2.171610451s ago: executing program 6 (id=959): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x44}}, 0x20004080) 2.171092538s ago: executing program 5 (id=960): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt(r0, 0x1, 0xb, &(0x7f0000000640)=""/159, &(0x7f0000000140)=0x9f) 2.081453574s ago: executing program 6 (id=961): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 2.081246325s ago: executing program 5 (id=962): socket$inet(0x2, 0x4000000000000001, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000001c80), 0x0, &(0x7f0000000100)=ANY=[]) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x22, 0x2, 0x3) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000100)) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\//\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=r1, @ANYBLOB="1400fe00a7f214e421e879bec0103a361172c9cd040034"], 0x3c}, 0x1, 0x0, 0x0, 0x200040c1}, 0xa71b3742016f6be8) 1.920841944s ago: executing program 7 (id=964): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 1.812714891s ago: executing program 6 (id=965): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.582288583s ago: executing program 7 (id=966): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d0202035", 0x5a}, {0x0}, {&(0x7f0000000300)}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.47293207s ago: executing program 7 (id=967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$media(&(0x7f0000000000), 0x1000000000001, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000040)) 1.190543622s ago: executing program 4 (id=968): syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 453.590008ms ago: executing program 7 (id=969): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x44}}, 0x20004080) 393.645587ms ago: executing program 7 (id=970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0x30000, 0xdddd6000, 0x0, 0x9e, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x6, 0x66, 0xc5, 0x7, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0xf, 0x7, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x80a0000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xe}, {0x1000, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0xa, 0x3, 0x1, 0x4, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xf7f71000, 0x100000, 0xd, 0x22, 0x8, 0x3, 0x6, 0x4, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x8}, {0x4000, 0x101}, {0x4, 0xffff}, 0x10000, 0x0, 0x1000, 0x0, 0x6, 0x1000, 0xdddd1000, [0x8, 0x2, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) 223.45697ms ago: executing program 4 (id=971): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ptrace(0x10, r2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000003100010000000000000000dd0100"], 0x28}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @mcast2, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f00000000c0)=""/111) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x48, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000890}, 0x40000) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 223.260695ms ago: executing program 5 (id=972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x4, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000d}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 106.99036ms ago: executing program 5 (id=973): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) 105.572574ms ago: executing program 7 (id=974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) close(r0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000300)={'wlan1\x00', @random="010000000700"}) 0s ago: executing program 5 (id=975): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r2, 0x260}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): logical block 0, async page read [ 73.249260][ T6423] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.251784][ T6423] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.254250][ T6423] ldm_validate_partition_table(): Disk read failed. [ 73.256359][ T6423] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.258868][ T6423] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.261502][ T6423] Dev loop6: unable to read RDB block 0 [ 73.264480][ T6423] loop6: unable to read partition table [ 73.265898][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.1.106'. [ 73.267546][ T6423] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 73.340529][ T40] audit: type=1400 audit(1768591229.400:301): avc: denied { create } for pid=6425 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.347859][ T40] audit: type=1400 audit(1768591229.420:302): avc: denied { ioctl } for pid=6425 comm="syz.1.107" path="socket:[12577]" dev="sockfs" ino=12577 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.356089][ T40] audit: type=1400 audit(1768591229.420:303): avc: denied { create } for pid=6425 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.362326][ T40] audit: type=1400 audit(1768591229.420:304): avc: denied { shutdown } for pid=6425 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.370368][ T40] audit: type=1400 audit(1768591229.420:305): avc: denied { bind } for pid=6425 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.378239][ T40] audit: type=1400 audit(1768591229.420:306): avc: denied { read } for pid=6425 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.470297][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.474968][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 73.571526][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'. [ 73.693265][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 73.907983][ T6471] dlm: no locking on control device [ 74.053644][ T6494] bond1: option arp_validate: invalid value (2048) [ 74.058913][ T6494] bond1 (unregistering): Released all slaves [ 74.195264][ T838] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.345394][ T838] usb 6-1: Using ep0 maxpacket: 16 [ 74.349089][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.353335][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.357461][ T838] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.362435][ T838] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 74.366090][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.371602][ T838] usb 6-1: config 0 descriptor?? [ 74.778075][ T6477] random: crng reseeded on system resumption [ 74.802183][ T838] usbhid 6-1:0.0: can't add hid device: -71 [ 74.812174][ T838] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 74.840775][ T838] usb 6-1: USB disconnect, device number 3 [ 74.841472][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.847192][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.942144][ T6516] vim2m vim2m.0: vidioc_s_fmt queue busy [ 75.155219][ T5951] Bluetooth: hci0: command tx timeout [ 75.158148][ T6536] overlayfs: failed to resolve './file0': -2 [ 75.182230][ T6539] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 75.184950][ T6539] [U] J"—e:ÀÆ" [ 75.185273][ T5982] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.269213][ T6545] pim6reg: entered allmulticast mode [ 75.271726][ T6545] pim6reg: left allmulticast mode [ 75.365299][ T5982] usb 8-1: Using ep0 maxpacket: 8 [ 75.368248][ T5982] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.374022][ T5982] usb 8-1: config 0 has no interface number 0 [ 75.376267][ T5982] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 75.379865][ T5982] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 75.383849][ T5982] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.389044][ T5982] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.393446][ T5982] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.396827][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.401892][ T5982] usb 8-1: config 0 descriptor?? [ 75.408887][ T5982] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 75.525250][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.615222][ T6507] ldusb 8-1:0.55: Write buffer overflow, 1 bytes dropped [ 75.707775][ T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.712139][ T54] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.727998][ T54] usb 5-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 75.731879][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.735359][ T54] usb 5-1: Product: syz [ 75.737198][ T54] usb 5-1: Manufacturer: syz [ 75.739234][ T54] usb 5-1: SerialNumber: syz [ 75.743885][ T54] usb 5-1: config 0 descriptor?? [ 75.957241][ T6548] overlayfs: failed lookup in lower (newroot/7, name='file0', err=-40): overlapping layers [ 75.963585][ T6548] overlayfs: failed lookup in lower (newroot/7, name='file0', err=-40): overlapping layers [ 75.980793][ T54] usb 5-1: USB disconnect, device number 2 [ 76.025260][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 76.185238][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 76.199036][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 76.201170][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 76.204041][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.210293][ T34] usb 6-1: config 0 descriptor?? [ 76.356407][ T6558] syz.2.144 (6558): drop_caches: 2 [ 76.409193][ T6565] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 76.441448][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.443920][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.627525][ T34] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 76.759251][ T6575] __nla_validate_parse: 3 callbacks suppressed [ 76.759267][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 76.911252][ T5989] usb 6-1: USB disconnect, device number 4 [ 77.016003][ T6590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6590 comm=syz.0.153 [ 77.064654][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 77.080871][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.245502][ T5951] Bluetooth: hci0: command tx timeout [ 77.291753][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.156'. [ 77.295492][ T6596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.156'. [ 77.450875][ T6606] netlink: 72 bytes leftover after parsing attributes in process `syz.1.160'. [ 77.523041][ T6609] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 77.565241][ T142] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.718731][ T55] usb 8-1: USB disconnect, device number 2 [ 77.726595][ T142] usb 7-1: Using ep0 maxpacket: 32 [ 77.726835][ T55] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 77.730429][ T142] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 77.737588][ T142] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 77.740851][ T142] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 77.744856][ T142] usb 7-1: Product: syz [ 77.746661][ T142] usb 7-1: Manufacturer: syz [ 77.748588][ T142] usb 7-1: SerialNumber: syz [ 77.755261][ T142] usb 7-1: config 0 descriptor?? [ 77.757995][ T6598] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 77.762071][ T142] hub 7-1:0.0: bad descriptor, ignoring hub [ 77.764788][ T142] hub 7-1:0.0: probe with driver hub failed with error -5 [ 77.855750][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 77.855764][ T40] audit: type=1400 audit(1768591233.920:352): avc: denied { read } for pid=6610 comm="syz.3.161" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.866870][ T40] audit: type=1400 audit(1768591233.920:353): avc: denied { open } for pid=6610 comm="syz.3.161" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.874757][ T40] audit: type=1400 audit(1768591233.920:354): avc: denied { ioctl } for pid=6610 comm="syz.3.161" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 ioctlcmd=0x2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.883288][ T40] audit: type=1400 audit(1768591233.930:355): avc: denied { setattr } for pid=6610 comm="syz.3.161" name="vcsa3" dev="devtmpfs" ino=3098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 78.031175][ T6616] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 78.057717][ T6616] bond2: entered promiscuous mode [ 78.060067][ T6616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.078711][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 78.081694][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 78.084661][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 78.098460][ T6614] bond2: (slave bridge1): making interface the new active one [ 78.101778][ T6614] bridge1: entered promiscuous mode [ 78.106524][ T6614] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 78.218401][ T40] audit: type=1400 audit(1768591234.280:356): avc: denied { read write } for pid=6597 comm="syz.2.157" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.220578][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.226112][ T40] audit: type=1400 audit(1768591234.280:357): avc: denied { open } for pid=6597 comm="syz.2.157" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.240723][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.270020][ T40] audit: type=1400 audit(1768591234.330:358): avc: denied { write } for pid=6618 comm="syz.0.163" name="sg1" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.279938][ T40] audit: type=1400 audit(1768591234.330:359): avc: denied { map } for pid=6618 comm="syz.0.163" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.290560][ T40] audit: type=1400 audit(1768591234.330:360): avc: denied { execute } for pid=6618 comm="syz.0.163" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.319813][ T40] audit: type=1400 audit(1768591234.380:361): avc: denied { prog_load } for pid=6620 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.393741][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 78.402175][ T6627] random: crng reseeded on system resumption [ 78.579804][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 78.662971][ T6640] random: crng reseeded on system resumption [ 78.811700][ T6654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=6654 comm=syz.0.172 [ 78.817950][ T6652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=6652 comm=syz.0.172 [ 78.854847][ T6615] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 78.859024][ T6615] raw-gadget.1 gadget.2: failed to queue disconnect event [ 79.538578][ T6613] Set syz1 is full, maxelem 65536 reached [ 80.559305][ T6689] xt_l2tp: missing protocol rule (udp|l2tpip) [ 80.841236][ T6704] netlink: 'syz.0.187': attribute type 10 has an invalid length. [ 80.855840][ T6704] veth0_vlan: left promiscuous mode [ 80.859729][ T6704] veth0_vlan: entered promiscuous mode [ 80.866026][ T6704] team0: Device veth0_vlan failed to register rx_handler [ 81.016547][ T6708] ubi8: attaching mtd0 [ 81.020947][ T6708] ubi8: scanning is finished [ 81.023053][ T6708] ubi8: empty MTD device detected [ 81.025104][ T6708] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 81.087704][ T6708] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 81.313635][ T6714] Bluetooth: MGMT ver 1.23 [ 81.413960][ T6717] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 81.417220][ T6717] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 81.806238][ T5951] Bluetooth: hci1: Malformed LE Event: 0x0b [ 81.822244][ T6749] __nla_validate_parse: 2 callbacks suppressed [ 81.822261][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.958567][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.961825][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.964918][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.968858][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.971755][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.974600][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.978115][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.981113][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 81.983974][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 82.129082][ T6077] usb 7-1: USB disconnect, device number 2 [ 82.221830][ T6759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6759 comm=syz.2.200 [ 82.383812][ T6779] 9p: Bad value for 'version' [ 82.595750][ T6793] tmpfs: Bad value for 'mpol' [ 82.649708][ T6797] mkiss: ax0: crc mode is auto. [ 83.210601][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 83.210613][ T40] audit: type=1400 audit(1768591239.270:385): avc: denied { create } for pid=6825 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 83.416375][ T40] audit: type=1400 audit(1768591239.480:386): avc: denied { write } for pid=6830 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.677498][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6845 comm=syz.2.224 [ 83.829285][ T6857] netlink: 'syz.0.227': attribute type 9 has an invalid length. [ 83.831806][ T6857] netlink: 'syz.0.227': attribute type 11 has an invalid length. [ 83.834415][ T6857] netlink: 'syz.0.227': attribute type 12 has an invalid length. [ 83.842179][ T40] audit: type=1400 audit(1768591239.900:387): avc: denied { write } for pid=6856 comm="syz.0.227" name="file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.855187][ T40] audit: type=1400 audit(1768591239.900:388): avc: denied { open } for pid=6856 comm="syz.0.227" path="/40/file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.862540][ T40] audit: type=1400 audit(1768591239.920:389): avc: denied { unlink } for pid=6208 comm="syz-executor" name="file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.973883][ T40] audit: type=1400 audit(1768591240.030:390): avc: denied { mounton } for pid=6870 comm="syz.3.231" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 83.988814][ T6871] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 84.041587][ T40] audit: type=1400 audit(1768591240.100:391): avc: denied { read } for pid=6879 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 84.089847][ T6886] exFAT-fs (nullb0): invalid boot record signature [ 84.093332][ T6886] exFAT-fs (nullb0): failed to read boot sector [ 84.099221][ T6886] exFAT-fs (nullb0): failed to recognize exfat type [ 84.103251][ T40] audit: type=1400 audit(1768591240.160:392): avc: denied { create } for pid=6885 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.113017][ T40] audit: type=1400 audit(1768591240.160:393): avc: denied { bind } for pid=6885 comm="syz.3.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.209414][ T40] audit: type=1400 audit(1768591240.270:394): avc: denied { read } for pid=6889 comm="syz.0.237" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 84.268271][ T6900] Only authenc() type AEADs are supported by ESSIV [ 84.340721][ T6902] netfs: Couldn't get user pages (rc=-14) [ 84.343715][ T6902] netfs: Zero-sized read [R=1] [ 84.536575][ T6905] netlink: 'syz.3.240': attribute type 10 has an invalid length. [ 84.548469][ T6905] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 84.551332][ T6905] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.628967][ T5951] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 84.632671][ T5951] Bluetooth: Wrong link type (-22) [ 84.659123][ T6913] netlink: 'syz.3.244': attribute type 10 has an invalid length. [ 84.848550][ T6911] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 84.857840][ T6917] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 84.946764][ T6922] pimreg3: entered allmulticast mode [ 84.955361][ T6924] program syz.3.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.297697][ T5982] IPVS: starting estimator thread 0... [ 85.385370][ T6952] IPVS: using max 44 ests per chain, 105600 per kthread [ 85.567402][ T6961] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 85.569879][ T6959] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 85.570038][ T6961] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 85.854168][ T6978] sp0: Synchronizing with TNC [ 85.935269][ T5982] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.109238][ T5982] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.112954][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.116035][ T5982] usb 5-1: Product: syz [ 86.117436][ T5982] usb 5-1: Manufacturer: syz [ 86.119059][ T5982] usb 5-1: SerialNumber: syz [ 86.124261][ T5982] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.147772][ T1025] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.167202][ T6984] new mount options do not match the existing superblock, will be ignored [ 86.679741][ T10] cfg80211: failed to load regulatory.db [ 86.681620][ T7018] batman_adv: batadv0: Adding interface: gretap1 [ 86.683979][ T7018] batman_adv: batadv0: Interface activated: gretap1 [ 86.899370][ T838] usb 5-1: USB disconnect, device number 3 [ 86.963969][ T7048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7048 comm=syz.2.282 [ 87.014359][ T7059] process 'syz.0.286' launched './file0' with NULL argv: empty string added [ 87.022780][ T7059] Invalid argument reading file caps for ./file0 [ 87.037045][ T7061] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 87.042674][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.046779][ T7061] bridge_slave_1: left allmulticast mode [ 87.049220][ T7061] bridge_slave_1: left promiscuous mode [ 87.051760][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.062877][ T7061] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 87.159370][ T1025] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 87.162317][ T1025] ath9k_htc: Failed to initialize the device [ 87.168512][ T838] usb 5-1: ath9k_htc: USB layer deinitialized [ 87.184144][ T7073] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 87.314592][ T7086] overlayfs: conflicting options: nfs_export=on,index=off [ 87.362160][ T7090] sctp: [Deprecated]: syz.0.295 (pid 7090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.362160][ T7090] Use struct sctp_sack_info instead [ 87.415754][ T7102] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 87.581331][ T7110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7110 comm=syz.1.300 [ 87.586399][ T7110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7110 comm=syz.1.300 [ 87.714166][ T7133] ubi7: attaching mtd0 [ 87.719032][ T7133] ubi7: scanning is finished [ 87.721002][ T7133] ubi7: empty MTD device detected [ 87.830072][ T7138] __nla_validate_parse: 33 callbacks suppressed [ 87.830084][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 87.836303][ T7133] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB) [ 87.838897][ T7133] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 1689 bytes [ 87.841369][ T7133] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 87.855284][ T7133] ubi7: VID header offset: 2343 (aligned 2343), data offset: 2407 [ 87.858671][ T7133] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 87.861586][ T7133] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 9 [ 87.864392][ T7133] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4062014473 [ 87.872468][ T7133] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 87.880173][ T7139] ubi7: background thread "ubi_bgt7d" started, PID 7139 [ 87.898397][ T7141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.071902][ T7154] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 88.088413][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'. [ 88.098022][ T7157] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 88.166769][ T7164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 88.319701][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 88.319713][ T40] audit: type=1400 audit(1768591244.380:429): avc: denied { connect } for pid=7171 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.442886][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 88.442954][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 88.447144][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 88.450614][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 88.458269][ T7186] fuse: Bad value for 'rootmode' [ 88.661486][ T7195] netlink: 228 bytes leftover after parsing attributes in process `syz.2.323'. [ 88.734235][ T7196] netlink: 52 bytes leftover after parsing attributes in process `syz.2.323'. [ 88.791148][ T40] audit: type=1400 audit(1768591244.850:430): avc: denied { create } for pid=7197 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 88.800016][ T40] audit: type=1400 audit(1768591244.860:431): avc: denied { getopt } for pid=7197 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 89.035279][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.185250][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 89.189311][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 89.193908][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 89.197482][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.201485][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.206992][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.210802][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.289825][ T40] audit: type=1400 audit(1768591245.350:432): avc: denied { accept } for pid=7201 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.327535][ T7208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7208 comm=syz.1.326 [ 89.332717][ T7208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=7208 comm=syz.1.326 [ 89.385824][ T7210] netlink: 36 bytes leftover after parsing attributes in process `syz.1.327'. [ 89.397071][ T7210] (syz.1.327,7210,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 89.399663][ T7210] (syz.1.327,7210,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 89.401919][ T7210] (syz.1.327,7210,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 89.404565][ T7210] (syz.1.327,7210,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 89.419752][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 89.419791][ T5951] Bluetooth: hci0: connection err: -111 [ 89.422806][ T10] usbtmc 5-1:16.0: can't read capabilities [ 89.439963][ T5989] usb 5-1: USB disconnect, device number 4 [ 89.474989][ T40] audit: type=1400 audit(1768591245.530:433): avc: denied { ioctl } for pid=7214 comm="syz.0.329" path="socket:[17573]" dev="sockfs" ino=17573 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 89.650562][ T40] audit: type=1400 audit(1768591245.710:434): avc: denied { accept } for pid=7225 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.678799][ T40] audit: type=1400 audit(1768591245.710:435): avc: denied { map } for pid=7225 comm="syz.1.332" path="socket:[16731]" dev="sockfs" ino=16731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.731035][ T7233] validate_nla: 2 callbacks suppressed [ 89.731050][ T7233] netlink: 'syz.1.333': attribute type 1 has an invalid length. [ 89.737976][ T7233] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 89.929557][ T7260] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 90.104404][ T40] audit: type=1400 audit(1768591246.160:436): avc: denied { write } for pid=7264 comm="syz.2.342" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.113792][ T40] audit: type=1400 audit(1768591246.160:437): avc: denied { open } for pid=7264 comm="syz.2.342" path="/75/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.122710][ T40] audit: type=1400 audit(1768591246.180:438): avc: denied { ioctl } for pid=7264 comm="syz.2.342" path="/75/file0/file0" dev="fuse" ino=1 ioctlcmd=0x4d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.122770][ T7265] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 90.135298][ T5989] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.285333][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.307313][ T5989] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 90.310629][ T5989] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 90.315258][ T5989] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.320610][ T5989] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.324477][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.328850][ T5989] usb 6-1: Product: syz [ 90.330624][ T5989] usb 6-1: Manufacturer: syz [ 90.332625][ T5989] usb 6-1: SerialNumber: syz [ 90.337038][ T5989] usb 6-1: config 0 descriptor?? [ 90.341139][ T5989] hub 6-1:0.0: bad descriptor, ignoring hub [ 90.343631][ T5989] hub 6-1:0.0: probe with driver hub failed with error -5 [ 90.350286][ T5989] usb 6-1: selecting invalid altsetting 0 [ 90.439707][ T54] usb 5-1: config index 0 descriptor too short (expected 64816, got 45) [ 90.444117][ T54] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 90.455183][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.459004][ T54] usb 5-1: Product: syz [ 90.460418][ T54] usb 5-1: Manufacturer: syz [ 90.461913][ T54] usb 5-1: SerialNumber: syz [ 90.719229][ T54] rtl8150 5-1:1.0: couldn't reset the device [ 90.722031][ T54] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 90.736271][ T54] usb 5-1: USB disconnect, device number 5 [ 90.880366][ T7292] loop5: detected capacity change from 0 to 7 [ 90.885874][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.888931][ C0] buffer_io_error: 11 callbacks suppressed [ 90.888941][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.905233][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.908478][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.911117][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.914383][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.917610][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.921001][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.924046][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.928136][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.932395][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.936342][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.939703][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.943499][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.946766][ T6114] ldm_validate_partition_table(): Disk read failed. [ 90.949774][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.953346][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.956242][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.959849][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.963648][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.967610][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 90.971123][ T6114] Dev loop5: unable to read RDB block 0 [ 90.973700][ T6114] loop5: unable to read partition table [ 90.976076][ T6114] loop5: partition table beyond EOD, truncated [ 90.989227][ T7292] ldm_validate_partition_table(): Disk read failed. [ 90.995029][ T7292] Dev loop5: unable to read RDB block 0 [ 91.005358][ T7292] loop5: unable to read partition table [ 91.007934][ T7292] loop5: partition table beyond EOD, truncated [ 91.010076][ T7292] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 91.028884][ T7255] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 91.033250][ T5343] ldm_validate_partition_table(): Disk read failed. [ 91.037083][ T5343] Dev loop5: unable to read RDB block 0 [ 91.039487][ T5343] loop5: unable to read partition table [ 91.041956][ T5343] loop5: partition table beyond EOD, truncated [ 91.185308][ T7255] usb 6-1: device descriptor read/64, error -71 [ 91.213955][ T7311] overlay: ./bus is not a directory [ 91.304239][ T7323] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.435293][ T7255] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 91.500190][ T7335] overlay: ./bus is not a directory [ 91.503193][ T7335] fuse: Bad value for 'user_id' [ 91.505092][ T7335] fuse: Bad value for 'user_id' [ 91.508144][ T7335] No source specified [ 91.508181][ T7336] No source specified [ 91.565312][ T7255] usb 6-1: device descriptor read/64, error -71 [ 91.576311][ T7342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.697120][ T7352] overlayfs: failed to resolve './file1': -2 [ 91.808889][ T7371] capability: warning: `syz.2.373' uses deprecated v2 capabilities in a way that may be insecure [ 91.815406][ T7255] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 91.837189][ T7255] usb 6-1: device descriptor read/8, error -71 [ 91.953596][ T7382] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.987692][ T7390] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 92.076549][ T7399] smc: net device bond0 applied user defined pnetid SYZ2 [ 92.085525][ T7255] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 92.091048][ T7399] smc: removing net device bond0 with user defined pnetid SYZ2 [ 92.096068][ T7399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.104849][ T7399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.110162][ T7399] bond0 (unregistering): Released all slaves [ 92.116769][ T7255] usb 6-1: device descriptor read/8, error -71 [ 92.227456][ T6077] usb 6-1: USB disconnect, device number 5 [ 92.395352][ T6077] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.545288][ T6077] usb 6-1: device descriptor read/64, error -71 [ 92.604358][ T7420] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 92.618793][ T7420] team0: Port device geneve0 added [ 92.637698][ T7422] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 92.805287][ T6077] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 92.912784][ T7446] kvm: pic: non byte read [ 92.916660][ T7446] kvm: pic: non byte read [ 92.919274][ T7446] kvm: pic: non byte read [ 92.924499][ T7457] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 92.930738][ T7456] __nla_validate_parse: 8 callbacks suppressed [ 92.930754][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 92.943526][ T7457] smc: adding net device bond0 with user defined pnetid SYZ2 [ 92.949277][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.397'. [ 92.955376][ T6077] usb 6-1: device descriptor read/64, error -71 [ 92.961420][ T7457] bond0: (slave bridge1): making interface the new active one [ 92.968523][ T7457] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 92.985497][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.397'. [ 92.994636][ T7457] bond0: entered promiscuous mode [ 92.994656][ T7457] bridge1: entered promiscuous mode [ 92.994786][ T7457] bond0: entered allmulticast mode [ 92.994822][ T7457] bridge1: entered allmulticast mode [ 92.996466][ T7457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.056571][ T7461] overlayfs: conflicting options: userxattr,metacopy=on [ 93.058361][ T7462] overlayfs: conflicting options: userxattr,metacopy=on [ 93.075444][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.079861][ T6077] usb usb6-port1: attempt power cycle [ 93.085102][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 93.088554][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.399'. [ 93.169431][ T7473] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 93.388831][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 93.715570][ T6077] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 93.736372][ T6077] usb 6-1: Using ep0 maxpacket: 16 [ 93.741862][ T6077] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 93.746994][ T6077] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.750020][ T6077] usb 6-1: Product: syz [ 93.751532][ T6077] usb 6-1: Manufacturer: syz [ 93.753190][ T6077] usb 6-1: SerialNumber: syz [ 93.757716][ T6077] r8152-cfgselector 6-1: Unknown version 0x0000 [ 93.760017][ T6077] r8152-cfgselector 6-1: config 0 descriptor?? [ 94.027342][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.033233][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.066838][ T6077] r8152-cfgselector 6-1: Unknown version 0x0000 [ 94.074859][ T6077] r8152-cfgselector 6-1: bad CDC descriptors [ 94.093191][ T6077] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 94.175391][ T54] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.239700][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 94.239714][ T40] audit: type=1400 audit(1768591250.300:468): avc: denied { bind } for pid=7533 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.337370][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.342020][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.346698][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.350048][ T40] audit: type=1400 audit(1768591250.400:469): avc: denied { mount } for pid=7551 comm="syz.1.420" name="/" dev="autofs" ino=19890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.352227][ T54] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.367823][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.369580][ T40] audit: type=1400 audit(1768591250.430:470): avc: denied { unmount } for pid=5936 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.373510][ T7554] evm: overlay not supported [ 94.377912][ T54] usb 5-1: config 0 descriptor?? [ 94.391298][ T40] audit: type=1400 audit(1768591250.450:471): avc: denied { create } for pid=7552 comm="syz.2.421" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.405817][ T40] audit: type=1400 audit(1768591250.460:472): avc: denied { link } for pid=7552 comm="syz.2.421" name="#9" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.422933][ T7559] xt_socket: unknown flags 0x48 [ 94.423307][ T40] audit: type=1400 audit(1768591250.460:473): avc: denied { rename } for pid=7552 comm="syz.2.421" name="#a" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 94.425653][ T7560] xt_socket: unknown flags 0x48 [ 94.731142][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 94.752220][ T7588] bond3: invalid ARP target 0.0.0.0 specified for addition [ 94.754670][ T7588] bond3: option arp_ip_target: invalid value (0) [ 94.764845][ T7588] bond3 (unregistering): Released all slaves [ 94.766682][ T1146] wlan1: Trigger new scan to find an IBSS to join [ 94.786007][ T54] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 94.804862][ T54] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 94.823973][ T7594] netlink: 'syz.1.430': attribute type 5 has an invalid length. [ 94.827834][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 94.893151][ T40] audit: type=1400 audit(2000000000.249:474): avc: denied { mounton } for pid=7593 comm="syz.1.430" path="/proc/277/task" dev="proc" ino=18919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.058349][ T1025] usb 5-1: USB disconnect, device number 6 [ 95.103949][ T40] audit: type=1400 audit(2000000000.459:475): avc: denied { write } for pid=7593 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.110547][ T40] audit: type=1400 audit(2000000000.469:476): avc: denied { write } for pid=7593 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.117010][ T40] audit: type=1400 audit(2000000000.469:477): avc: denied { associate } for pid=7593 comm="syz.1.430" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.383743][ T7614] input: syz0 as /devices/virtual/input/input10 [ 95.509619][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 95.514468][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 95.564199][ T7634] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 95.576824][ T7633] [U] J"—E:ÀÆ" [ 95.699285][ T7651] program syz.2.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.621395][ T7664] dvmrp17: entered allmulticast mode [ 96.881495][ T7679] openvswitch: netlink: Invalid VLAN frame [ 96.914341][ T7679] macsec0: entered promiscuous mode [ 96.916744][ T7679] macsec0: entered allmulticast mode [ 96.918694][ T7679] veth1_macvtap: entered allmulticast mode [ 96.920080][ T7681] unsupported nlmsg_type 40 [ 96.971071][ T7681] "syz.2.456" (7681) uses obsolete ecb(arc4) skcipher [ 97.072160][ T7688] syz.0.457 (7688): drop_caches: 2 [ 97.345320][ T54] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 97.496421][ T54] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 97.499040][ T54] usb 7-1: config 0 has no interface number 0 [ 97.500964][ T54] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.504391][ T54] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 97.508389][ T54] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 97.512057][ T54] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 97.515896][ T54] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.520145][ T54] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 97.523093][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.527254][ T54] usb 7-1: config 0 descriptor?? [ 97.529502][ T7692] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.534332][ T54] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 97.736707][ T7692] hugetlbfs: Bad value 'k' for mount option 'size' [ 97.736707][ T7692] [ 97.745860][ T54] usb 7-1: USB disconnect, device number 3 [ 97.753069][ T54] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 97.795241][ T1155] wlan1: Trigger new scan to find an IBSS to join [ 98.504097][ T7723] __nla_validate_parse: 5 callbacks suppressed [ 98.504108][ T7723] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.470'. [ 98.737354][ T7734] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 98.744146][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 98.751083][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.785998][ T7734] bridge_slave_0 (unregistering): left allmulticast mode [ 98.788639][ T7734] bridge_slave_0 (unregistering): left promiscuous mode [ 98.791570][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.794826][ T7738] fuse: Bad value for 'fd' [ 98.829010][ T142] IPVS: starting estimator thread 0... [ 98.831819][ T7741] netlink: 232 bytes leftover after parsing attributes in process `syz.3.475'. [ 98.835008][ T7741] openvswitch: netlink: Flow key attr not present in new flow. [ 98.915262][ T7743] IPVS: using max 44 ests per chain, 105600 per kthread [ 98.990937][ T7756] erspan0: entered promiscuous mode [ 98.999468][ T5951] Bluetooth: Unexpected continuation frame (len 10) [ 99.027553][ T7762] fuse: Bad value for 'fd' [ 99.205154][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 99.295699][ T40] kauditd_printk_skb: 51662 callbacks suppressed [ 99.295710][ T40] audit: type=1400 audit(2000000004.659:52140): avc: denied { setopt } for pid=7789 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.295940][ T7790] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 99.327045][ T7792] overlayfs: conflicting lowerdir path [ 99.335300][ T40] audit: type=1400 audit(2000000004.699:52141): avc: denied { write } for pid=7793 comm="syz.2.492" lport=36455 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.344464][ T7794] netlink: 56 bytes leftover after parsing attributes in process `syz.2.492'. [ 99.345297][ T40] audit: type=1400 audit(2000000004.699:52142): avc: denied { ioctl } for pid=7791 comm="syz.0.491" path="socket:[20582]" dev="sockfs" ino=20582 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 99.365427][ T838] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 99.404630][ T7802] overlayfs: failed to get inode (-116) [ 99.408986][ T7802] overlayfs: failed to get inode (-116) [ 99.413665][ T7800] netlink: 'syz.1.494': attribute type 11 has an invalid length. [ 99.417249][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7798 comm=syz.2.495 [ 99.427904][ T7798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.444417][ T7802] PID 7802 killed due to inadequate hugepage pool [ 99.457538][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.526582][ T838] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 99.530296][ T838] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 99.533671][ T838] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 99.537748][ T838] usb 8-1: config 0 interface 0 has no altsetting 0 [ 99.542147][ T838] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.547316][ T838] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 99.550005][ T838] usb 8-1: Product: syz [ 99.551349][ T838] usb 8-1: Manufacturer: syz [ 99.552836][ T838] usb 8-1: SerialNumber: syz [ 99.568266][ T838] usb 8-1: config 0 descriptor?? [ 99.571114][ T7776] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 99.571234][ T7812] syz.1.499: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 99.578575][ T838] usb 8-1: selecting invalid altsetting 0 [ 99.579569][ T7812] CPU: 3 UID: 0 PID: 7812 Comm: syz.1.499 Not tainted syzkaller #0 PREEMPT(full) [ 99.579584][ T7812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.579604][ T7812] Call Trace: [ 99.579609][ T7812] [ 99.579613][ T7812] dump_stack_lvl+0x16c/0x1f0 [ 99.579649][ T7812] warn_alloc+0x248/0x3a0 [ 99.579666][ T7812] ? __pfx_warn_alloc+0x10/0x10 [ 99.579676][ T7812] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 99.579691][ T7812] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.579706][ T7812] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 99.579724][ T7812] ? kasan_save_stack+0x42/0x60 [ 99.579737][ T7812] ? kasan_save_stack+0x33/0x60 [ 99.579748][ T7812] ? kasan_save_track+0x14/0x30 [ 99.579761][ T7812] ? vb2_vmalloc_alloc+0x135/0x410 [ 99.579772][ T7812] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 99.579786][ T7812] ? __x64_sys_ioctl+0x18e/0x210 [ 99.579798][ T7812] ? do_syscall_64+0xcd/0xf80 [ 99.579810][ T7812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.579824][ T7812] ? vb2_vmalloc_alloc+0x135/0x410 [ 99.579837][ T7812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.579857][ T7812] ? vb2_vmalloc_alloc+0x135/0x410 [ 99.579866][ T7812] vmalloc_user_noprof+0x9e/0xe0 [ 99.579880][ T7812] ? vb2_vmalloc_alloc+0x135/0x410 [ 99.579890][ T7812] vb2_vmalloc_alloc+0x135/0x410 [ 99.579900][ T7812] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 99.579910][ T7812] __vb2_queue_alloc+0x8c9/0x1280 [ 99.579932][ T7812] vb2_core_create_bufs+0x559/0xab0 [ 99.579950][ T7812] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 99.579967][ T7812] ? lock_acquire+0x179/0x330 [ 99.579983][ T7812] vb2_create_bufs+0x5e8/0x840 [ 99.579999][ T7812] ? __pfx_vb2_create_bufs+0x10/0x10 [ 99.580013][ T7812] ? v4l_sanitize_colorspace+0x213/0x400 [ 99.580034][ T7812] vb2_ioctl_create_bufs+0x244/0x3e0 [ 99.580049][ T7812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.580062][ T7812] vidioc_create_bufs+0x7d/0xf0 [ 99.580076][ T7812] v4l_create_bufs+0x151/0x260 [ 99.580089][ T7812] __video_do_ioctl+0xb77/0xf00 [ 99.580103][ T7812] ? __might_fault+0xe3/0x190 [ 99.580114][ T7812] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.580132][ T7812] video_usercopy+0x4d0/0x16c0 [ 99.580145][ T7812] ? __pfx___video_do_ioctl+0x10/0x10 [ 99.580157][ T7812] ? selinux_kernel_read_file+0x120/0x120 [ 99.580171][ T7812] ? __pfx_video_usercopy+0x10/0x10 [ 99.580193][ T7812] v4l2_ioctl+0x1bd/0x250 [ 99.580205][ T7812] ? __pfx_v4l2_ioctl+0x10/0x10 [ 99.580217][ T7812] __x64_sys_ioctl+0x18e/0x210 [ 99.580229][ T7812] do_syscall_64+0xcd/0xf80 [ 99.580244][ T7812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.580254][ T7812] RIP: 0033:0x7f7e8498f7c9 [ 99.580263][ T7812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.580273][ T7812] RSP: 002b:00007f7e857dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.580283][ T7812] RAX: ffffffffffffffda RBX: 00007f7e84be5fa0 RCX: 00007f7e8498f7c9 [ 99.580289][ T7812] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000003 [ 99.580295][ T7812] RBP: 00007f7e84a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 99.580301][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.580307][ T7812] R13: 00007f7e84be6038 R14: 00007f7e84be5fa0 R15: 00007ffcc5308208 [ 99.580320][ T7812] [ 99.580673][ T7812] Mem-Info: [ 99.651990][ T40] audit: type=1400 audit(2000000005.009:52143): avc: denied { load_policy } for pid=7811 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.652211][ T7813] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 99.652397][ T7813] SELinux: failed to load policy [ 99.652454][ T7812] active_anon:41373 inactive_anon:0 isolated_anon:0 [ 99.652454][ T7812] active_file:16293 inactive_file:40792 isolated_file:0 [ 99.652454][ T7812] unevictable:1768 dirty:23 writeback:0 [ 99.652454][ T7812] slab_reclaimable:7370 slab_unreclaimable:73897 [ 99.652454][ T7812] mapped:24795 shmem:28999 pagetables:1513 [ 99.652454][ T7812] sec_pagetables:308 bounce:0 [ 99.652454][ T7812] kernel_misc_reclaimable:0 [ 99.652454][ T7812] free:417166 free_pcp:17393 free_cma:0 [ 99.652485][ T7812] Node 0 active_anon:165492kB inactive_anon:0kB active_file:65152kB inactive_file:162968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99140kB dirty:92kB writeback:0kB shmem:112460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:5836kB sec_pagetables:1232kB all_unreclaimable? no Balloon:0kB [ 99.652512][ T7812] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 99.652538][ T7812] Node 0 DMA free:14932kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:352kB local_pcp:36kB free_cma:0kB [ 99.652570][ T7812] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 99.652591][ T7812] Node 0 DMA32 free:76228kB boost:6144kB min:33692kB low:40576kB high:47460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:165488kB inactive_anon:0kB active_file:65152kB inactive_file:162968kB unevictable:3536kB writepending:92kB zspages:0kB present:2080628kB managed:1265152kB mlocked:0kB bounce:0kB free_pcp:34640kB local_pcp:6008kB free_cma:0kB [ 99.652619][ T7812] lowmem_reserve[]: 0 0 0 0 0 [ 99.652639][ T7812] Node 1 Normal free:1577504kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:200kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:34580kB local_pcp:11492kB free_cma:0kB [ 99.652667][ T7812] lowmem_reserve[]: 0 0 0 0 0 [ 99.652687][ T7812] Node 0 DMA: 13*4kB (UM) 11*8kB (UM) 14*16kB (UM) 14*32kB (UM) 11*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 0*4096kB = 14956kB [ 99.652796][ T7812] Node 0 DMA32: 1669*4kB (UME) 957*8kB (UE) 629*16kB (UME) 540*32kB (UME) 83*64kB (UME) 25*128kB (UE) 15*256kB (UME) 15*512kB (UME) 6*1024kB (M) 4*2048kB (U) 0*4096kB = 76044kB [ 99.652892][ T7812] Node 1 Normal: 5*4kB (UME) 7*8kB (UME) 9*16kB (ME) 76*32kB (UME) 25*64kB (UME) 17*128kB (UME) 5*256kB (UE) 4*512kB (UME) 3*1024kB (U) 2*2048kB (UM) 381*4096kB (UM) = 1577500kB [ 99.652989][ T7812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.652997][ T7812] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 99.653005][ T7812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.653018][ T7812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 99.653026][ T7812] 86080 total pagecache pages [ 99.653030][ T7812] 0 pages in swap cache [ 99.653033][ T7812] Free swap = 124996kB [ 99.653037][ T7812] Total swap = 124996kB [ 99.653043][ T7812] 1048443 pages RAM [ 99.653047][ T7812] 0 pages HighMem/MovableOnly [ 99.653051][ T7812] 282844 pages reserved [ 99.653055][ T7812] 0 pages cma reserved [ 99.724073][ T7812] MPI: mpi too large (130952 bits) [ 99.812368][ T7776] usb 8-1: BOGUS urb xfer, pipe 0 != type 1 [ 99.848302][ T40] audit: type=1400 audit(2000000005.209:52144): avc: denied { write } for pid=7815 comm="syz.0.500" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 99.887300][ T40] audit: type=1400 audit(2000000005.249:52145): avc: denied { map } for pid=7819 comm="syz.1.501" path="socket:[22549]" dev="sockfs" ino=22549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 99.905395][ T40] audit: type=1400 audit(2000000005.249:52146): avc: denied { create } for pid=7822 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 99.911949][ T40] audit: type=1400 audit(2000000005.249:52147): avc: denied { module_request } for pid=7822 comm="syz.2.503" kmod="net-pf-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.359954][ T7849] binder: 7848:7849 ioctl 5101 0 returned -22 [ 100.363169][ T7849] binder: 7848:7849 ioctl c02064b2 200000000080 returned -22 [ 100.590196][ T40] audit: type=1400 audit(2000000005.949:52148): avc: denied { bind } for pid=7870 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.596941][ T40] audit: type=1400 audit(2000000005.949:52149): avc: denied { append } for pid=7870 comm="syz.0.515" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.632144][ T7872] IPv6: syztnl0: Disabled Multicast RS [ 100.835948][ T1146] wlan1: Trigger new scan to find an IBSS to join [ 101.398258][ T7885] fuse: Bad value for 'group_id' [ 101.400406][ T7885] fuse: Bad value for 'group_id' [ 101.414511][ T7885] vlan0: entered allmulticast mode [ 101.416994][ T7885] veth0_vlan: entered allmulticast mode [ 101.430921][ T7885] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 101.507403][ T1025] libceph: connect (1)[c::]:6789 error -101 [ 101.512334][ T1025] libceph: mon0 (1)[c::]:6789 connect error [ 101.636688][ T142] usb 8-1: USB disconnect, device number 3 [ 101.746441][ T1086] wlan1: Creating new IBSS network, BSSID f2:9c:cf:7a:19:da [ 101.767245][ T1025] libceph: connect (1)[c::]:6789 error -101 [ 101.769925][ T1025] libceph: mon0 (1)[c::]:6789 connect error [ 101.895347][ T7912] sg_write: data in/out 489/10 bytes for SCSI command 0xeb-- guessing data in; [ 101.895347][ T7912] program syz.2.527 not setting count and/or reply_len properly [ 102.009836][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.527'. [ 102.285634][ T1025] libceph: connect (1)[c::]:6789 error -101 [ 102.287777][ T1025] libceph: mon0 (1)[c::]:6789 connect error [ 102.375848][ T7889] ceph: No mds server is up or the cluster is laggy [ 102.798472][ T7933] netlink: 'syz.2.533': attribute type 9 has an invalid length. [ 103.030862][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 103.070375][ T7961] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 103.074947][ T7961] QAT: Invalid ioctl -1060596699 [ 103.119776][ T7968] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.542'. [ 103.122847][ T7968] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 103.128551][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 103.134405][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.151993][ T7971] netlink: 64 bytes leftover after parsing attributes in process `syz.2.543'. [ 103.166231][ T7968] bridge_slave_0 (unregistering): left allmulticast mode [ 103.168742][ T7968] bridge_slave_0 (unregistering): left promiscuous mode [ 103.171387][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.299230][ T7976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34064 sclass=netlink_route_socket pid=7976 comm=syz.0.545 [ 103.376421][ T7983] veth1_macvtap: left allmulticast mode [ 103.379049][ T7983] veth1_macvtap: left promiscuous mode [ 103.427213][ T7988] befs: (nbd0): unable to read superblock [ 103.450284][ T7986] input: syz1 as /devices/virtual/input/input11 [ 103.534445][ T7995] xt_cgroup: path and classid specified [ 103.551984][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 103.593801][ T8004] sp0: Synchronizing with TNC [ 103.705277][ T142] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.740464][ T8013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.743442][ T8013] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 103.747343][ T8013] vhci_hcd vhci_hcd.0: Device attached [ 103.750995][ T8014] vhci_hcd: unknown pdu 2 [ 103.755072][ T1184] vhci_hcd vhci_hcd.2: stop threads [ 103.757819][ T1184] vhci_hcd vhci_hcd.2: release socket [ 103.760117][ T1184] vhci_hcd vhci_hcd.2: disconnect device [ 103.766399][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 103.772501][ T8013] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 103.855415][ T6077] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 103.865972][ T142] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 103.870595][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.874363][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.879214][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.885790][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.889576][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.894168][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.899776][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.903564][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.908226][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.911545][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.914399][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.917983][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.920879][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.923733][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.927318][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.930170][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.933009][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.936624][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.939466][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.942320][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.945781][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.948534][ T142] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 103.951307][ T142] usb 5-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.954630][ T142] usb 5-1: config 64 interface 0 has no altsetting 0 [ 103.958438][ T142] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.961238][ T142] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.963747][ T142] usb 5-1: Product: syz [ 103.965059][ T142] usb 5-1: Manufacturer: syz [ 103.966629][ T142] usb 5-1: SerialNumber: syz [ 103.975479][ T142] yurex 5-1:64.0: USB YUREX device now attached to Yurex #0 [ 104.005897][ T6077] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 104.009085][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.011855][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.015425][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.018196][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.021046][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.024423][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.028039][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.030858][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.034473][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.038308][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.041131][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.044773][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.047840][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.050576][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.054160][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.057282][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.060218][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.063606][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.066861][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.069702][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.073063][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.076257][ T6077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.079308][ T6077] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.082656][ T6077] usb 8-1: config 0 interface 0 has no altsetting 0 [ 104.087622][ T6077] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 104.090459][ T6077] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 104.093191][ T6077] usb 8-1: Product: syz [ 104.094597][ T6077] usb 8-1: Manufacturer: syz [ 104.096314][ T6077] usb 8-1: SerialNumber: syz [ 104.099018][ T6077] usb 8-1: config 0 descriptor?? [ 104.105247][ T6077] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 104.178009][ T5989] usb 5-1: USB disconnect, device number 7 [ 104.184693][ T5989] yurex 5-1:64.0: USB YUREX #0 now disconnected [ 104.304684][ T142] usb 8-1: USB disconnect, device number 4 [ 104.307843][ T142] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 104.383303][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 104.383315][ T40] audit: type=1400 audit(2000000009.739:52158): avc: denied { setattr } for pid=8016 comm="syz.2.560" name="file1" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 104.433791][ T8017] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 104.452435][ T8017] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.458291][ T8017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8017 comm=syz.2.560 [ 104.469675][ T8017] bond3: (slave ip6gretap1): making interface the new active one [ 104.473179][ T8017] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 104.514131][ T8022] netlink: 92 bytes leftover after parsing attributes in process `syz.2.561'. [ 104.515953][ T8007] netlink: 'syz.3.556': attribute type 62 has an invalid length. [ 104.517439][ T8006] netlink: 'syz.3.556': attribute type 62 has an invalid length. [ 104.525009][ T40] audit: type=1400 audit(2000000009.879:52159): avc: denied { setattr } for pid=8020 comm="syz.2.561" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.742354][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.758343][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.763068][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.767918][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.771841][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.775763][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.779573][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.783380][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.787345][ T8028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8028 comm=syz.0.562 [ 104.854299][ T8034] hub 8-0:1.0: USB hub found [ 104.857116][ T8034] hub 8-0:1.0: 1 port detected [ 104.905102][ T40] audit: type=1400 audit(2000000010.259:52160): avc: denied { create } for pid=8035 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.911534][ T40] audit: type=1400 audit(2000000010.269:52161): avc: denied { connect } for pid=8035 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.031270][ T8039] overlayfs: unescaped trailing colons in lowerdir mount option. [ 105.034527][ T40] audit: type=1400 audit(2000000010.389:52162): avc: denied { setopt } for pid=8038 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.042843][ T40] audit: type=1400 audit(2000000010.399:52163): avc: denied { append } for pid=8038 comm="syz.2.565" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.099273][ T40] audit: type=1400 audit(2000000010.459:52164): avc: denied { create } for pid=8040 comm="syz.2.566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 105.099412][ T8041] o2cb: This node has not been configured. [ 105.109810][ T8041] o2cb: Cluster check failed. Fix errors before retrying. [ 105.112054][ T8041] (syz.2.566,8041,3):user_dlm_register:674 ERROR: status = -22 [ 105.114393][ T8041] (syz.2.566,8041,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 105.122111][ T40] audit: type=1400 audit(2000000010.479:52165): avc: denied { mounton } for pid=8040 comm="syz.2.566" path="/" dev="ocfs2_dlmfs" ino=22058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.123610][ T8041] hpfs: Bad magic ... probably not HPFS [ 105.326443][ T8052] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 105.329761][ T8052] netlink: 412 bytes leftover after parsing attributes in process `syz.2.569'. [ 105.380986][ T40] audit: type=1400 audit(2000000010.739:52166): avc: denied { ioctl } for pid=8056 comm="syz.2.570" path="socket:[21280]" dev="sockfs" ino=21280 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.388810][ T40] audit: type=1400 audit(2000000010.739:52167): avc: denied { read } for pid=8056 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.480044][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'. [ 105.527302][ T8068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.532548][ T8068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 105.603056][ T8069] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 105.606641][ T8069] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 105.610755][ T8069] overlayfs: d_ino too big (173, ino=9223372036854776764, xinobits=3) [ 105.614659][ T8069] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 105.619956][ T8069] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 105.624285][ T8069] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 105.628245][ T8069] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 105.632034][ T8069] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 105.636309][ T8069] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 105.640794][ T8069] overlayfs: d_ino too big (kernel, ino=4611686018427388752, xinobits=3) [ 105.700989][ T8071] netlink: 84 bytes leftover after parsing attributes in process `syz.2.574'. [ 105.923382][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.021958][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 106.034309][ T8091] overlayfs: failed to resolve './file0': -2 [ 106.323268][ T8108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.415323][ T6077] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 106.566855][ T6077] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 106.570084][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.574280][ T6077] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.579154][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.583770][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.589855][ T6077] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 106.592891][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.598317][ T6077] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.603259][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.608276][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.614338][ T6077] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 106.617721][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 106.622024][ T6077] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.627233][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.631872][ T6077] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.639488][ T6077] usb 7-1: string descriptor 0 read error: -22 [ 106.642132][ T6077] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.646401][ T6077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.659411][ T6077] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 106.864785][ T8114] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 106.871599][ T850] usb 7-1: USB disconnect, device number 4 [ 107.461918][ T8132] nbd: must specify a device to reconfigure [ 107.476095][ T8134] nbd: must specify a device to reconfigure [ 107.726292][ T8145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.595'. [ 107.955289][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 107.955375][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.303878][ T8163] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 108.329902][ T8163] gre1: entered promiscuous mode [ 108.331738][ T8163] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 108.335472][ T8163] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 108.339903][ T8163] bond1: (slave gre1): making interface the new active one [ 108.342458][ T8163] bond1: (slave gre1): Enslaving as an active interface with an up link [ 108.437339][ T850] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 108.597234][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.601182][ T850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.604199][ T850] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 108.607337][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.613483][ T850] usb 6-1: config 0 descriptor?? [ 108.641081][ T8166] 8021q: VLANs not supported on caif0 [ 108.824614][ T850] usbhid 6-1:0.0: can't add hid device: -71 [ 108.828003][ T850] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 108.834142][ T850] usb 6-1: USB disconnect, device number 10 [ 110.418054][ T8199] gfs2: gfs2 mount does not exist [ 110.422213][ T8207] netlink: 164 bytes leftover after parsing attributes in process `syz.2.615'. [ 110.743427][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 110.743442][ T40] audit: type=1400 audit(2000000016.099:52183): avc: denied { watch } for pid=8212 comm="syz.3.618" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.403707][ T8236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.625'. [ 111.930416][ T8248] xt_hashlimit: max too large, truncated to 1048576 [ 111.934673][ T8248] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.303865][ T8256] Illegal XDP return value 4294967294 on prog (id 92) dev syz_tun, expect packet loss! [ 112.366692][ T8258] nftables ruleset with unbound set [ 112.518400][ T8262] xfrm0: entered promiscuous mode [ 112.520670][ T8262] xfrm0: entered allmulticast mode [ 112.755994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.975314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.986133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.994292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.994473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.035406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.038067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 113.200008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.269174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.301619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.575347][ T40] audit: type=1400 audit(2000000018.669:52184): avc: denied { read } for pid=8270 comm="syz.2.637" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.584899][ T40] audit: type=1400 audit(2000000018.669:52185): avc: denied { open } for pid=8270 comm="syz.2.637" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 113.811883][ T40] audit: type=1400 audit(2000000019.169:52186): avc: denied { write } for pid=8275 comm="syz.3.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.085360][ T5989] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 117.875310][ T5989] usb 6-1: Using ep0 maxpacket: 16 [ 117.878900][ T5989] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 117.882751][ T5989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.889303][ T5989] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.892469][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.895013][ T5989] usb 6-1: Product: syz [ 117.896584][ T5989] usb 6-1: Manufacturer: syz [ 117.899787][ T5989] usb 6-1: SerialNumber: syz [ 117.904948][ T5989] usb 6-1: config 0 descriptor?? [ 117.919493][ T5989] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 117.922981][ T5989] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 118.177390][ T8353] trusted_key: encrypted_key: insufficient parameters specified [ 119.053426][ T5989] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 119.387597][ T5989] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 119.531224][ T8375] Mount JFS Failure: -22 [ 119.532915][ T8375] jfs_mount failed w/return code = -22 [ 119.997187][ T5989] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 119.999796][ T5989] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 120.002430][ T5989] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 120.015222][ T5989] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 120.019931][ T5989] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 120.023386][ T5989] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 120.145637][ T5989] usb 6-1: USB disconnect, device number 11 [ 122.164084][ T40] audit: type=1400 audit(2000000027.519:52187): avc: denied { bind } for pid=8404 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.698964][ T8413] syz.2.670 (8413): drop_caches: 2 [ 122.860568][ T40] audit: type=1400 audit(2000000028.219:52188): avc: denied { recv } for pid=5921 comm="syz-executor" saddr=127.0.0.1 src=57408 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 122.881229][ T8420] netlink: 'syz.1.673': attribute type 6 has an invalid length. [ 122.905618][ T40] audit: type=1400 audit(2000000028.269:52189): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=57408 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 123.214216][ T40] audit: type=1400 audit(2000000028.569:52190): avc: denied { read } for pid=8425 comm="syz.1.676" dev="nsfs" ino=4026533163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 123.223453][ T40] audit: type=1400 audit(2000000028.569:52191): avc: denied { open } for pid=8425 comm="syz.1.676" path="net:[4026533163]" dev="nsfs" ino=4026533163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.843833][ T8454] pimreg: entered allmulticast mode [ 124.853356][ T8454] pimreg: left allmulticast mode [ 124.938984][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 125.176509][ T8461] netlink: 80 bytes leftover after parsing attributes in process `syz.2.687'. [ 125.716023][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.996540][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 126.999409][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 127.099723][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'. [ 127.449994][ T40] audit: type=1400 audit(2000000039.804:52192): avc: denied { getopt } for pid=8492 comm="syz.1.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.440890][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 128.614067][ T8516] x_tables: duplicate underflow at hook 2 [ 128.680589][ T5989] kernel read not supported for file /vcs (pid: 5989 comm: kworker/2:3) [ 129.935226][ T7072] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 130.087284][ T7072] usb 6-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 130.091367][ T7072] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 130.094640][ T7072] usb 6-1: config 16 has no interfaces? [ 130.096645][ T7072] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 130.099806][ T7072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.787920][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 131.675547][ T10] usb 6-1: USB disconnect, device number 12 [ 131.718865][ T8555] program syz.2.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.771269][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.3.718'. [ 131.778915][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 131.836339][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 131.945716][ T40] audit: type=1326 audit(2000000044.274:52193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8561 comm="syz.0.719" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa12158f7c9 code=0x0 [ 132.703624][ T8574] netlink: 60 bytes leftover after parsing attributes in process `syz.1.725'. [ 132.708627][ T8573] netlink: 60 bytes leftover after parsing attributes in process `syz.1.725'. [ 132.997882][ T8576] syz.3.726 (8576): drop_caches: 2 [ 133.068050][ T8585] Bluetooth: MGMT ver 1.23 [ 133.071816][ T40] audit: type=1400 audit(2000000045.424:52194): avc: denied { name_bind } for pid=8579 comm="syz.1.728" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 135.110464][ T8605] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 136.646749][ T5951] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 136.652041][ T5951] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 136.731332][ T838] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 136.957780][ T838] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 136.960969][ T838] usb 5-1: config 7 has no interface number 0 [ 136.963499][ T838] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 136.967568][ T838] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 136.970992][ T838] usb 5-1: config 7 interface 252 has no altsetting 0 [ 137.936688][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.938900][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.518754][ T838] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 139.529859][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.536519][ T838] usb 5-1: can't set config #7, error -71 [ 139.542666][ T838] usb 5-1: USB disconnect, device number 8 [ 140.200278][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'. [ 140.203156][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'. [ 140.224897][ T8681] bond2: entered promiscuous mode [ 140.227001][ T8681] bond2: entered allmulticast mode [ 140.229710][ T8681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.025410][ T40] audit: type=1326 audit(2000000053.364:52195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8695 comm="syz.2.768" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc81318f7c9 code=0x0 [ 141.337726][ T7519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.469609][ T7519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.728589][ T7519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.808432][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.815870][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.828507][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.843748][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.853194][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.947034][ T7519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.213302][ T7519] bridge_slave_1: left allmulticast mode [ 142.216136][ T7519] bridge_slave_1: left promiscuous mode [ 142.218873][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.467743][ T7519] bond1 (unregistering): (slave gre1): Releasing backup interface [ 142.492709][ T7519] dvmrp17 (unregistering): left allmulticast mode [ 142.639769][ T7519] bond0 (unregistering): (slave bridge1): Releasing active interface [ 142.642674][ T7519] bridge1 (unregistering): left promiscuous mode [ 142.644694][ T7519] bridge1 (unregistering): left allmulticast mode [ 142.749392][ T40] audit: type=1326 audit(2000000055.104:52196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8498f7c9 code=0x7fc00000 [ 142.940917][ T7519] smc: removing net device bond0 with user defined pnetid SYZ2 [ 142.950643][ T7519] bond0 (unregistering): Released all slaves [ 142.999666][ T7519] bond1 (unregistering): Released all slaves [ 143.416868][ T40] audit: type=1326 audit(2000000055.764:52197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e84986667 code=0x7fc00000 [ 143.437434][ T40] audit: type=1326 audit(2000000055.764:52198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e8492b889 code=0x7fc00000 [ 143.456977][ T40] audit: type=1326 audit(2000000055.764:52199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7e8492b94f code=0x7fc00000 [ 143.487072][ T40] audit: type=1326 audit(2000000055.764:52200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8730 comm="syz.1.782" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e8498f7c9 code=0x7fc00000 [ 143.609796][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 143.637064][ T8755] program syz.1.788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.876335][ T5950] Bluetooth: hci0: command tx timeout [ 144.098371][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.106506][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.114902][ T8711] bridge_slave_0: entered allmulticast mode [ 144.119381][ T8711] bridge_slave_0: entered promiscuous mode [ 144.128588][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.135021][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.138855][ T8711] bridge_slave_1: entered allmulticast mode [ 144.143046][ T8711] bridge_slave_1: entered promiscuous mode [ 144.213883][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.220592][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.322577][ T7519] hsr_slave_0: left promiscuous mode [ 144.326114][ T7519] hsr_slave_1: left promiscuous mode [ 144.329848][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.333101][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.338755][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.345020][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.366148][ T7519] veth0_macvtap: left promiscuous mode [ 144.368838][ T7519] veth1_vlan: left promiscuous mode [ 144.804828][ T7519] team0 (unregistering): Port device team_slave_1 removed [ 144.845528][ T7519] team0 (unregistering): Port device team_slave_0 removed [ 145.684960][ T8711] team0: Port device team_slave_0 added [ 145.721808][ T8711] team0: Port device team_slave_1 added [ 145.843044][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.851175][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.886564][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.919147][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.927768][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.955425][ T5950] Bluetooth: hci0: command tx timeout [ 145.958239][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.075687][ T8711] hsr_slave_0: entered promiscuous mode [ 146.088039][ T8711] hsr_slave_1: entered promiscuous mode [ 146.095954][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 146.097852][ T8711] Cannot create hsr debugfs directory [ 146.217890][ T8711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.355966][ T8711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.379255][ T8711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.395785][ T8711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.474504][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.543477][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.553055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.556232][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.566996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.570180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.618457][ T40] audit: type=1400 audit(2000000058.974:52201): avc: denied { egress } for pid=54 comm="kworker/3:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 146.716840][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.851022][ T40] audit: type=1400 audit(2000000058.974:52202): avc: denied { sendto } for pid=54 comm="kworker/3:1" daddr=ff02::16 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 146.907821][ T8711] veth0_vlan: entered promiscuous mode [ 146.916049][ T8711] veth1_vlan: entered promiscuous mode [ 146.949609][ T8711] veth0_macvtap: entered promiscuous mode [ 146.954257][ T8711] veth1_macvtap: entered promiscuous mode [ 146.980195][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.986183][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.003870][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.065529][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.068447][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.072033][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.117213][ T7519] IPVS: stop unused estimator thread 0... [ 147.333765][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.337755][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.353875][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.364064][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.383363][ T8868] batadv_slave_1: entered promiscuous mode [ 147.386776][ T8868] batadv_slave_1: left promiscuous mode [ 147.675393][ T40] audit: type=1400 audit(2000000060.014:52203): avc: denied { mounton } for pid=8711 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 147.692687][ T40] audit: type=1400 audit(2000000060.014:52204): avc: denied { mounton } for pid=8711 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 148.036293][ T5950] Bluetooth: hci0: command tx timeout [ 148.107371][ T8877] ptrace attach of "/syz-executor exec"[5936] was attempted by "/syz-executor exec"[8877] [ 148.736900][ T8881] befs: (nbd1): No write support. Marking filesystem read-only [ 148.745328][ T8881] befs: (nbd1): unable to read superblock [ 148.787102][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.811'. [ 150.184172][ T5950] Bluetooth: hci0: command tx timeout [ 150.301309][ T40] audit: type=1400 audit(2000000062.544:52205): avc: denied { create } for pid=8909 comm="syz.1.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 151.576661][ T40] audit: type=1400 audit(2000000063.934:52206): avc: denied { write } for pid=8935 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 151.773377][ T6009] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 151.936432][ T6009] usb 6-1: not running at top speed; connect to a high speed hub [ 151.942973][ T6009] usb 6-1: config 95 has an invalid interface number: 1 but max is 0 [ 151.946363][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.832'. [ 151.946382][ T6009] usb 6-1: config 95 has no interface number 0 [ 151.951586][ T6009] usb 6-1: config 95 interface 1 has no altsetting 0 [ 151.951652][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 151.958061][ T6009] usb 6-1: string descriptor 0 read error: -22 [ 151.960211][ T6009] usb 6-1: New USB device found, idVendor=0758, idProduct=2030, bcdDevice=79.79 [ 151.963118][ T6009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.122744][ T40] audit: type=1400 audit(2000000064.474:52207): avc: denied { read } for pid=8967 comm="syz.4.841" path="socket:[26854]" dev="sockfs" ino=26854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.156165][ T34] usb 6-1: USB disconnect, device number 13 [ 154.667899][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.852890][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.976276][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.103053][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 155.126973][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 155.130892][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.257721][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.276770][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.296610][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.345366][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.375606][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.491407][ T9045] chnl_net:caif_netlink_parms(): no params data found [ 155.582865][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.588504][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.593125][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.596942][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.599813][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.640902][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.643328][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.646051][ T9045] bridge_slave_0: entered allmulticast mode [ 155.648735][ T9045] bridge_slave_0: entered promiscuous mode [ 155.652868][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.655597][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.658129][ T9045] bridge_slave_1: entered allmulticast mode [ 155.660900][ T9045] bridge_slave_1: entered promiscuous mode [ 155.670082][ T12] bridge_slave_1: left allmulticast mode [ 155.672480][ T12] bridge_slave_1: left promiscuous mode [ 155.675023][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.725480][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (83) [ 155.897337][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (83) [ 155.952183][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 155.955040][ T12] bridge1 (unregistering): left promiscuous mode [ 156.082247][ T12] bond0 (unregistering): left promiscuous mode [ 156.084216][ T12] bond_slave_0: left promiscuous mode [ 156.086162][ T12] bond_slave_1: left promiscuous mode [ 156.089420][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.094779][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.098742][ T12] bond0 (unregistering): Released all slaves [ 156.183120][ T12] bond1 (unregistering): Released all slaves [ 156.258421][ T12] bond2 (unregistering): Released all slaves [ 156.281000][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.289412][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.319371][ T9045] team0: Port device team_slave_0 added [ 156.329032][ T9045] team0: Port device team_slave_1 added [ 156.375458][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.382666][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.393690][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.404214][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.411674][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.422914][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.544688][ T9045] hsr_slave_0: entered promiscuous mode [ 156.547611][ T9045] hsr_slave_1: entered promiscuous mode [ 156.549703][ T9045] debugfs: 'hsr0' already exists in 'hsr' [ 156.551507][ T9045] Cannot create hsr debugfs directory [ 156.589469][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 156.726901][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.731826][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.736766][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.739283][ T12] team0: left promiscuous mode [ 156.741261][ T12] team_slave_0: left promiscuous mode [ 156.743648][ T12] team_slave_1: left promiscuous mode [ 156.746206][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.748909][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.752099][ T12] hsr_slave_0: left promiscuous mode [ 156.756846][ T12] hsr_slave_1: left promiscuous mode [ 156.759120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.762037][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.767046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.770074][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.780838][ T12] veth1_macvtap: left promiscuous mode [ 156.782871][ T12] veth0_macvtap: left promiscuous mode [ 156.784986][ T12] veth1_vlan: left promiscuous mode [ 156.787439][ T12] veth0_vlan: left promiscuous mode [ 157.156729][ T12] team0 (unregistering): Port device team_slave_1 removed [ 157.185778][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.475315][ T5951] Bluetooth: hci1: command tx timeout [ 157.517741][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.520374][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.525457][ T9063] bridge_slave_0: entered allmulticast mode [ 157.528583][ T9063] bridge_slave_0: entered promiscuous mode [ 157.544912][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.547493][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.550029][ T9063] bridge_slave_1: entered allmulticast mode [ 157.553196][ T9063] bridge_slave_1: entered promiscuous mode [ 157.586310][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.601388][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.645623][ T5951] Bluetooth: hci3: command tx timeout [ 157.648183][ T9063] team0: Port device team_slave_0 added [ 157.654823][ T9063] team0: Port device team_slave_1 added [ 157.686646][ T9045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.703236][ T9045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.714683][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.717295][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.725411][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.729795][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.732000][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.740710][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.753280][ T9045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.765915][ T9045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.791673][ T9063] hsr_slave_0: entered promiscuous mode [ 157.794809][ T9063] hsr_slave_1: entered promiscuous mode [ 157.798734][ T9063] debugfs: 'hsr0' already exists in 'hsr' [ 157.800503][ T9063] Cannot create hsr debugfs directory [ 157.929735][ T9083] chnl_net:caif_netlink_parms(): no params data found [ 158.080425][ T12] IPVS: stop unused estimator thread 0... [ 158.112069][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.114821][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.120016][ T9083] bridge_slave_0: entered allmulticast mode [ 158.133127][ T9083] bridge_slave_0: entered promiscuous mode [ 158.148053][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.150622][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.153723][ T9083] bridge_slave_1: entered allmulticast mode [ 158.161958][ T9083] bridge_slave_1: entered promiscuous mode [ 158.238099][ T9083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.245827][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.263403][ T9063] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.269504][ T9063] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.279389][ T9083] team0: Port device team_slave_0 added [ 158.281813][ T9063] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.288506][ T9063] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.297025][ T9083] team0: Port device team_slave_1 added [ 158.320063][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.322308][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.330858][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.335838][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.337981][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.354827][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.400329][ T9083] hsr_slave_0: entered promiscuous mode [ 158.403604][ T9083] hsr_slave_1: entered promiscuous mode [ 158.407314][ T9083] debugfs: 'hsr0' already exists in 'hsr' [ 158.409781][ T9083] Cannot create hsr debugfs directory [ 158.419884][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.520208][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.544653][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.547008][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.561558][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.563937][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.693442][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.733347][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.736198][ T9083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 158.755371][ T5951] Bluetooth: hci2: command tx timeout [ 158.759713][ T9083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 158.778297][ T9083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 158.800455][ T9083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 158.809948][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.812301][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.880328][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.883287][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.137252][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.193706][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.232590][ T9083] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.247492][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.250575][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.289599][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.291884][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.318106][ T9083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.321298][ T9083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.458892][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.487208][ T9045] veth0_vlan: entered promiscuous mode [ 159.504294][ T9045] veth1_vlan: entered promiscuous mode [ 159.538576][ T9083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.545707][ T9045] veth0_macvtap: entered promiscuous mode [ 159.549539][ T9045] veth1_macvtap: entered promiscuous mode [ 159.555230][ T5951] Bluetooth: hci1: command tx timeout [ 159.562857][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.568443][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.588412][ T1184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.591120][ T1184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.597666][ T1184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.600426][ T1184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.715311][ T5951] Bluetooth: hci3: command tx timeout [ 159.817920][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.823363][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.846185][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.848875][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.859962][ T9063] veth0_vlan: entered promiscuous mode [ 159.868837][ T9063] veth1_vlan: entered promiscuous mode [ 159.897541][ T9063] veth0_macvtap: entered promiscuous mode [ 159.906652][ T9063] veth1_macvtap: entered promiscuous mode [ 159.925191][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.942525][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.950417][ T9083] veth0_vlan: entered promiscuous mode [ 159.958275][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.964612][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.973060][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.979685][ T1146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.990453][ T9083] veth1_vlan: entered promiscuous mode [ 160.092033][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.094740][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.108329][ T9083] veth0_macvtap: entered promiscuous mode [ 160.140133][ T9083] veth1_macvtap: entered promiscuous mode [ 160.168067][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.172744][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.570069][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.572608][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.657191][ T4040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.666030][ T4040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.673766][ T4040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.695854][ T4040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.813134][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.825293][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.847782][ T5951] Bluetooth: hci2: command tx timeout [ 160.921496][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.925906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.050232][ T40] audit: type=1804 audit(2000000073.404:52208): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.881" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=29339 res=1 errno=0 [ 161.193316][ T9228] gfs2: gfs2 mount does not exist [ 161.193403][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 161.266672][ T9238] input: syz1 as /devices/virtual/input/input16 [ 161.482280][ T40] audit: type=1326 audit(2000000073.834:52209): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.490706][ T40] audit: type=1326 audit(2000000073.834:52210): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.499587][ T40] audit: type=1326 audit(2000000073.834:52211): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.508285][ T40] audit: type=1326 audit(2000000073.834:52212): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.516466][ T40] audit: type=1326 audit(2000000073.834:52213): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.525094][ T40] audit: type=1326 audit(2000000073.834:52214): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.536880][ T40] audit: type=1400 audit(2000000073.834:52215): avc: denied { bind } for pid=9243 comm="syz.7.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.544707][ T40] audit: type=1326 audit(2000000073.834:52216): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.552380][ T40] audit: type=1326 audit(2000000073.834:52217): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.7.898" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77b578f7c9 code=0x7ffc0000 [ 161.635388][ T5951] Bluetooth: hci1: command tx timeout [ 161.806152][ T5951] Bluetooth: hci3: command tx timeout [ 162.845285][ T6027] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 162.925291][ T5951] Bluetooth: hci2: command tx timeout [ 163.027733][ T6027] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.031919][ T6027] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.036357][ T6027] usb 12-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 163.039488][ T6027] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.049466][ T6027] usb 12-1: config 0 descriptor?? [ 163.544410][ T6027] aquacomputer_d5next 0003:0C70:F00D.0004: hidraw1: USB HID v40.00 Device [HID 0c70:f00d] on usb-dummy_hcd.7-1/input0 [ 163.725240][ T5951] Bluetooth: hci1: command tx timeout [ 163.885223][ T5951] Bluetooth: hci3: command tx timeout [ 163.900436][ T6027] usb 12-1: USB disconnect, device number 2 [ 164.327236][ T9320] : renamed from bond0 (while UP) [ 164.363643][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'. [ 164.367036][ T9330] netlink: 44 bytes leftover after parsing attributes in process `syz.5.926'. [ 164.628966][ T9343] hfsplus: unable to find HFS+ superblock [ 165.005368][ T5951] Bluetooth: hci2: command tx timeout [ 166.166476][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 166.166555][ T40] audit: type=1400 audit(2000000078.514:52247): avc: denied { set_context_mgr } for pid=9379 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 166.334162][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 166.337229][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 166.616262][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 166.619088][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 166.671305][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.951'. [ 166.699623][ T40] audit: type=1400 audit(2000000079.054:52248): avc: denied { call } for pid=9379 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 167.140584][ T6009] libceph: connect (1)[c::]:6789 error -101 [ 167.235734][ T9384] ceph: No mds server is up or the cluster is laggy [ 167.252963][ T6009] libceph: mon0 (1)[c::]:6789 connect error [ 167.364017][ T40] audit: type=1400 audit(2000000079.714:52249): avc: denied { write } for pid=9404 comm="syz.7.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.950289][ T40] audit: type=1400 audit(2000000080.304:52250): avc: denied { getopt } for pid=9419 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.234593][ T40] audit: type=1400 audit(2000000080.584:52251): avc: denied { getopt } for pid=9424 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 168.533490][ T40] audit: type=1400 audit(2000000080.884:52252): avc: denied { write } for pid=9434 comm="syz.7.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 168.891063][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 170.130057][ T5951] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 170.134495][ T5951] CPU: 3 UID: 0 PID: 5951 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.134523][ T5951] Tainted: [L]=SOFTLOCKUP [ 170.134529][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.134541][ T5951] Workqueue: hci1 hci_rx_work [ 170.134563][ T5951] Call Trace: [ 170.134569][ T5951] [ 170.134575][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 170.134601][ T5951] sysfs_warn_dup+0x7f/0xa0 [ 170.134636][ T5951] sysfs_create_dir_ns+0x24b/0x2b0 [ 170.134656][ T5951] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 170.134674][ T5951] ? find_held_lock+0x2b/0x80 [ 170.134704][ T5951] ? do_raw_spin_unlock+0x172/0x230 [ 170.134728][ T5951] kobject_add_internal+0x2c4/0x9d0 [ 170.134758][ T5951] kobject_add+0x16e/0x240 [ 170.134799][ T5951] ? __pfx_kobject_add+0x10/0x10 [ 170.134829][ T5951] ? kobject_put+0xaf/0x6f0 [ 170.134851][ T5951] ? _raw_spin_unlock+0x28/0x50 [ 170.134879][ T5951] device_add+0x288/0x1980 [ 170.134899][ T5951] ? __pfx_dev_set_name+0x10/0x10 [ 170.134920][ T5951] ? __pfx_device_add+0x10/0x10 [ 170.134939][ T5951] ? mgmt_send_event_skb+0x2fb/0x460 [ 170.134966][ T5951] hci_conn_add_sysfs+0x1a8/0x260 [ 170.134988][ T5951] le_conn_complete_evt+0x11ed/0x1fa0 [ 170.135014][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 170.135039][ T5951] hci_le_conn_complete_evt+0x23c/0x3a0 [ 170.135063][ T5951] hci_le_meta_evt+0x357/0x610 [ 170.135083][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 170.135105][ T5951] hci_event_packet+0x685/0x1210 [ 170.135124][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 170.135145][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 170.135166][ T5951] ? kcov_remote_start+0x399/0x680 [ 170.135184][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.135211][ T5951] hci_rx_work+0x2c9/0x1020 [ 170.135250][ T5951] process_one_work+0x9ba/0x1b20 [ 170.135282][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 170.135310][ T5951] ? assign_work+0x1a0/0x250 [ 170.135332][ T5951] worker_thread+0x6c8/0xf10 [ 170.135359][ T5951] ? __kthread_parkme+0x19e/0x250 [ 170.135377][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 170.135403][ T5951] kthread+0x3c5/0x780 [ 170.135423][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.135445][ T5951] ? rcu_is_watching+0x12/0xc0 [ 170.135462][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.135483][ T5951] ret_from_fork+0x983/0xb10 [ 170.135501][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 170.135520][ T5951] ? __switch_to+0x7af/0x10d0 [ 170.135540][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.135560][ T5951] ret_from_fork_asm+0x1a/0x30 [ 170.135594][ T5951] [ 170.234646][ T5951] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 170.239279][ T5951] Bluetooth: hci1: failed to register connection device [ 170.246785][ T5951] ================================================================== [ 170.249406][ T5951] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe47/0x1010 [ 170.251936][ T5951] Read of size 8 at addr ffff88803b5a9480 by task kworker/u33:8/5951 [ 170.255489][ T5951] [ 170.257056][ T5951] CPU: 3 UID: 0 PID: 5951 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.257075][ T5951] Tainted: [L]=SOFTLOCKUP [ 170.257079][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.257087][ T5951] Workqueue: hci1 hci_rx_work [ 170.257107][ T5951] Call Trace: [ 170.257112][ T5951] [ 170.257117][ T5951] dump_stack_lvl+0x116/0x1f0 [ 170.257134][ T5951] print_report+0xcd/0x630 [ 170.257148][ T5951] ? __virt_addr_valid+0x81/0x610 [ 170.257159][ T5951] ? __phys_addr+0xe8/0x180 [ 170.257169][ T5951] ? l2cap_connect_cfm+0xe47/0x1010 [ 170.257181][ T5951] kasan_report+0xe0/0x110 [ 170.257194][ T5951] ? l2cap_connect_cfm+0xe47/0x1010 [ 170.257206][ T5951] l2cap_connect_cfm+0xe47/0x1010 [ 170.257219][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 170.257233][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 170.257246][ T5951] le_conn_complete_evt+0x1991/0x1fa0 [ 170.257638][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 170.257656][ T5951] hci_le_conn_complete_evt+0x23c/0x3a0 [ 170.257670][ T5951] hci_le_meta_evt+0x357/0x610 [ 170.257684][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 170.257697][ T5951] hci_event_packet+0x685/0x1210 [ 170.257709][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 170.257723][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 170.257736][ T5951] ? kcov_remote_start+0x399/0x680 [ 170.257747][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.257762][ T5951] hci_rx_work+0x2c9/0x1020 [ 170.257776][ T5951] process_one_work+0x9ba/0x1b20 [ 170.257798][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 170.257819][ T5951] ? assign_work+0x1a0/0x250 [ 170.257837][ T5951] worker_thread+0x6c8/0xf10 [ 170.257853][ T5951] ? __kthread_parkme+0x19e/0x250 [ 170.257863][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 170.257876][ T5951] kthread+0x3c5/0x780 [ 170.257891][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.257905][ T5951] ? rcu_is_watching+0x12/0xc0 [ 170.257914][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.257926][ T5951] ret_from_fork+0x983/0xb10 [ 170.257938][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 170.257950][ T5951] ? __switch_to+0x7af/0x10d0 [ 170.257975][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.257987][ T5951] ret_from_fork_asm+0x1a/0x30 [ 170.258004][ T5951] [ 170.258008][ T5951] [ 170.331314][ T5951] Allocated by task 5951: [ 170.332860][ T5951] kasan_save_stack+0x33/0x60 [ 170.334396][ T5951] kasan_save_track+0x14/0x30 [ 170.336184][ T5951] __kasan_kmalloc+0xaa/0xb0 [ 170.337668][ T5951] l2cap_chan_create+0x44/0x930 [ 170.339312][ T5951] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 170.341327][ T5951] l2cap_sock_new_connection_cb+0x101/0x240 [ 170.343526][ T5951] l2cap_connect_cfm+0x4f0/0x1010 [ 170.345299][ T5951] le_conn_complete_evt+0x1991/0x1fa0 [ 170.347374][ T5951] hci_le_conn_complete_evt+0x23c/0x3a0 [ 170.349651][ T5951] hci_le_meta_evt+0x357/0x610 [ 170.351637][ T5951] hci_event_packet+0x685/0x1210 [ 170.353475][ T5951] hci_rx_work+0x2c9/0x1020 [ 170.355166][ T5951] process_one_work+0x9ba/0x1b20 [ 170.357040][ T5951] worker_thread+0x6c8/0xf10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.359011][ T5951] kthread+0x3c5/0x780 [ 170.360784][ T5951] ret_from_fork+0x983/0xb10 [ 170.362427][ T5951] ret_from_fork_asm+0x1a/0x30 [ 170.363992][ T5951] [ 170.364787][ T5951] Freed by task 9480: [ 170.366315][ T5951] kasan_save_stack+0x33/0x60 [ 170.368289][ T5951] kasan_save_track+0x14/0x30 [ 170.370214][ T5951] kasan_save_free_info+0x3b/0x60 [ 170.372151][ T5951] __kasan_slab_free+0x5f/0x80 [ 170.374018][ T5951] kfree+0x2f8/0x6e0 [ 170.375362][ T5951] l2cap_chan_put+0x1bb/0x310 [ 170.376896][ T5951] l2cap_sock_cleanup_listen+0x4d/0x2f0 [ 170.378735][ T5951] l2cap_sock_release+0x69/0x280 [ 170.380520][ T5951] __sock_release+0xb3/0x270 [ 170.382087][ T5951] sock_close+0x1c/0x30 [ 170.383474][ T5951] __fput+0x402/0xb70 [ 170.384772][ T5951] task_work_run+0x150/0x240 [ 170.386288][ T5951] exit_to_user_mode_loop+0xfb/0x540 [ 170.388077][ T5951] do_syscall_64+0x4ee/0xf80 [ 170.389581][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.391868][ T5951] [ 170.392709][ T5951] The buggy address belongs to the object at ffff88803b5a9000 [ 170.392709][ T5951] which belongs to the cache kmalloc-2k of size 2048 [ 170.397138][ T5951] The buggy address is located 1152 bytes inside of [ 170.397138][ T5951] freed 2048-byte region [ffff88803b5a9000, ffff88803b5a9800) [ 170.401554][ T5951] [ 170.402359][ T5951] The buggy address belongs to the physical page: [ 170.404401][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3b5a8 [ 170.407171][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.409878][ T5951] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 170.412496][ T5951] page_type: f5(slab) [ 170.413806][ T5951] raw: 00fff00000000040 ffff88801b442f00 0000000000000000 dead000000000001 [ 170.416551][ T5951] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 170.419577][ T5951] head: 00fff00000000040 ffff88801b442f00 0000000000000000 dead000000000001 [ 170.422766][ T5951] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 170.425817][ T5951] head: 00fff00000000003 ffffea0000ed6a01 00000000ffffffff 00000000ffffffff [ 170.429074][ T5951] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 170.431875][ T5951] page dumped because: kasan: bad access detected [ 170.433921][ T5951] page_owner tracks the page as allocated [ 170.435747][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5934, tgid 5934 (syz-executor), ts 65703943710, free_ts 60466256155 [ 170.442430][ T5951] post_alloc_hook+0x1af/0x220 [ 170.443990][ T5951] get_page_from_freelist+0xd0b/0x31a0 [ 170.445728][ T5951] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 170.447667][ T5951] alloc_pages_mpol+0x1fb/0x550 [ 170.449239][ T5951] new_slab+0x2c3/0x430 [ 170.450609][ T5951] ___slab_alloc+0xe18/0x1c90 [ 170.452129][ T5951] __slab_alloc.constprop.0+0x63/0x110 [ 170.453881][ T5951] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 170.455969][ T5951] kmalloc_reserve+0xef/0x2c0 [ 170.457491][ T5951] pskb_expand_head+0x238/0xf80 [ 170.459086][ T5951] netlink_trim+0x231/0x2f0 [ 170.460575][ T5951] netlink_broadcast_filtered+0xf1/0xf90 [ 170.462367][ T5951] nlmsg_notify+0x9e/0x220 [ 170.463791][ T5951] rtmsg_ifinfo+0x174/0x1a0 [ 170.465245][ T5951] __dev_notify_flags+0x24c/0x2e0 [ 170.466827][ T5951] netif_change_flags+0x108/0x160 [ 170.468458][ T5951] page last free pid 28 tgid 28 stack trace: [ 170.470317][ T5951] __free_frozen_pages+0x7df/0x1170 [ 170.471952][ T5951] __folio_put+0x329/0x450 [ 170.473349][ T5951] skb_release_data+0x81a/0x9e0 [ 170.474918][ T5951] napi_consume_skb+0x2a0/0x300 [ 170.476475][ T5951] e1000_unmap_and_free_tx_resource+0x144/0x200 [ 170.478502][ T5951] e1000_clean+0x4a0/0x2670 [ 170.479961][ T5951] __napi_poll.constprop.0+0xb3/0x540 [ 170.481690][ T5951] net_rx_action+0x9f9/0xfa0 [ 170.483182][ T5951] handle_softirqs+0x219/0x950 [ 170.484728][ T5951] run_ksoftirqd+0x3a/0x60 [ 170.486160][ T5951] smpboot_thread_fn+0x3f7/0xae0 [ 170.487786][ T5951] kthread+0x3c5/0x780 [ 170.489094][ T5951] ret_from_fork+0x983/0xb10 [ 170.490587][ T5951] ret_from_fork_asm+0x1a/0x30 [ 170.492126][ T5951] [ 170.492904][ T5951] Memory state around the buggy address: [ 170.494690][ T5951] ffff88803b5a9380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.497207][ T5951] ffff88803b5a9400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.499791][ T5951] >ffff88803b5a9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.502325][ T5951] ^ [ 170.503630][ T5951] ffff88803b5a9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.506173][ T5951] ffff88803b5a9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.508723][ T5951] ================================================================== [ 170.511937][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.514253][ T5951] CPU: 3 UID: 0 PID: 5951 Comm: kworker/u33:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.517763][ T5951] Tainted: [L]=SOFTLOCKUP [ 170.519152][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.522530][ T5951] Workqueue: hci1 hci_rx_work [ 170.524079][ T5951] Call Trace: [ 170.525164][ T5951] [ 170.526142][ T5951] dump_stack_lvl+0x3d/0x1f0 [ 170.527665][ T5951] vpanic+0x640/0x6f0 [ 170.528961][ T5951] panic+0xca/0xd0 [ 170.530196][ T5951] ? __pfx_panic+0x10/0x10 [ 170.531629][ T5951] ? l2cap_connect_cfm+0xe47/0x1010 [ 170.533807][ T5951] ? preempt_schedule_common+0x44/0xc0 [ 170.536104][ T5951] ? preempt_schedule_thunk+0x16/0x30 [ 170.538392][ T5951] check_panic_on_warn+0xab/0xb0 [ 170.540451][ T5951] end_report+0x107/0x160 [ 170.542278][ T5951] kasan_report+0xee/0x110 [ 170.544153][ T5951] ? l2cap_connect_cfm+0xe47/0x1010 [ 170.546187][ T5951] l2cap_connect_cfm+0xe47/0x1010 [ 170.548106][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 170.550404][ T5951] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 170.552651][ T5951] le_conn_complete_evt+0x1991/0x1fa0 [ 170.554883][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 170.557235][ T5951] hci_le_conn_complete_evt+0x23c/0x3a0 [ 170.559512][ T5951] hci_le_meta_evt+0x357/0x610 [ 170.561180][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 170.563695][ T5951] hci_event_packet+0x685/0x1210 [ 170.565774][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 170.567978][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 170.570206][ T5951] ? kcov_remote_start+0x399/0x680 [ 170.572334][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 170.574094][ T5951] hci_rx_work+0x2c9/0x1020 [ 170.576038][ T5951] process_one_work+0x9ba/0x1b20 [ 170.578135][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 170.580368][ T5951] ? assign_work+0x1a0/0x250 [ 170.582302][ T5951] worker_thread+0x6c8/0xf10 [ 170.583886][ T5951] ? __kthread_parkme+0x19e/0x250 [ 170.585906][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 170.588054][ T5951] kthread+0x3c5/0x780 [ 170.589765][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.591708][ T5951] ? rcu_is_watching+0x12/0xc0 [ 170.593432][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.595175][ T5951] ret_from_fork+0x983/0xb10 [ 170.597102][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 170.598957][ T5951] ? __switch_to+0x7af/0x10d0 [ 170.600575][ T5951] ? __pfx_kthread+0x10/0x10 [ 170.602479][ T5951] ret_from_fork_asm+0x1a/0x30 [ 170.604265][ T5951] [ 170.606171][ T5951] Kernel Offset: disabled [ 170.607693][ T5951] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:22:06 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff818be89b RCX=ffffffff81c71f1f RDX=0000000000000000 RSI=ffffffff8dacf6aa RDI=ffffffff8bf2b580 RBP=ffff88806a43ac80 RSP=ffffffff8e007b68 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9088cdd7 R11=ffffffff8e098670 R12=ffff88806a43ac80 R13=ffff88804ef7c980 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff818be8cd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000030000 CR3=0000000063a3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000316e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b5815050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b581505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b5815057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b581506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b58150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b58151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b59ba4a8 00007f77b59ba4a0 00007f77b59ba498 00007f77b59ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b651d100 00007f77b59ba460 00007f77b59b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f77b59ba4b8 00007f77b59ba4b0 00007f77b59ba4a8 00007f77b59ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81fc061f RDX=ffff888036194980 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea00015e8180 RSP=ffffc900030f73e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffff8880361954b0 R12=0000000000000000 R13=dffffc0000000000 R14=ffffc900030f75e0 R15=0000000000000000 RIP=ffffffff81bef4f2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff847717d60 CR3=0000000063a3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff846bba6c3 00007ff846bba6c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd92236de0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bf453dc 000055555bf452f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff846bbad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bf44793 000055555bf445b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bf36d84 000055555bf36d80 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555bf3e978 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1fbe00100005b982 080001080006061e 980010000fffffff ffffff0401821000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 0400080002100002 1000080171f40fff ffffffffff040886 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5bac60800010800 06011e860fffffff ffffff04088985ba 8408000100000608 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606011fbe001000 05b9820800010800 06061e980010000f ffffffffffff0401 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8210000010000fff ffffffffff041280 8004010800010800 100174a60010000f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000032638d RBX=0000000000000002 RCX=ffffffff8b78a6d9 RDX=0000000000000000 RSI=ffffffff8dacf6aa RDI=ffffffff8bf2b580 RBP=ffffed1003bda930 RSP=ffffc90000187de8 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=ffff88801ded54b0 R12=0000000000000002 R13=ffff88801ded4980 R14=ffffffff9088cdd0 R15=0000000000000000 RIP=ffffffff8b788dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffe04b81a40 CR3=0000000033dd8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5d419950 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c6215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c621505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c6215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c621506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c62150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83c62151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000024e1d RBX=0000000000000000 RCX=ffffc9002eace000 RDX=0000000000100000 RSI=ffffffff81ced3be RDI=ffffffff90148188 RBP=0000000000000000 RSP=ffffc9000281f550 R8 =0000000000000006 R9 =00000000000000c9 R10=ffffffffa0205f80 R11=0000000000097380 R12=00000000000000c9 R13=dffffc0000000000 R14=0000000000000000 R15=ffffffffa0205f80 RIP=ffffffff81ced3be RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000035d5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc079f0e60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f498dc151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000