last executing test programs: 2.201015754s ago: executing program 2 (id=431): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800", @ANYRESOCT], 0x0, 0x8000, 0x0, 0x0, 0x41100}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x4, 0x9, 0x41, 0xfffff758, 0x0, @mcast2, @private1, 0x40, 0x7, 0x6, 0x3}}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="08000000010000", 0x7) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) 2.080859176s ago: executing program 2 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioperm(0x0, 0x3, 0x4) r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000440)={0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0xfffffffffffffc01, 0x0) execveat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000200)='$%}\x00', &(0x7f0000000240)='\\]\x00', &(0x7f0000000280)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000380)='overlay\x00', &(0x7f00000003c0)='overlay\x00', &(0x7f0000000400)='overlay\x00', &(0x7f0000000480)='overlay\x00', &(0x7f00000004c0)='\x00']}, &(0x7f0000000600)={[&(0x7f0000000580)='overlay\x00', &(0x7f00000005c0)='overlay\x00']}, 0x2400) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)) 1.240380264s ago: executing program 1 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002300)={0x14, 0x3e, 0x321, 0x0, 0x0, {0xa}}, 0x14}}, 0x4004010) syz_emit_ethernet(0x62, &(0x7f0000000500)={@local, @random, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\a\f', 0x2c, 0x2b, 0xfc, @local, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x5, 0xf989, "90"}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @exp_smc={0xfe, 0x6}, @nop, @eol]}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 1.23800019s ago: executing program 2 (id=448): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x20) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x1ff, 0x56f39c1abc6ba11f, 0xfff}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000006c0)={0x2, @vbi={0x82, 0xbc20, 0x0, 0x42303159, [0x8, 0x3], [0x5, 0x4], 0x13a}}) 1.180026751s ago: executing program 1 (id=449): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x5, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000000c0)={0x3, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10}}, {{0xa, 0x4e20, 0x1, @loopback, 0x5}}}, 0x108) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) recvmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000000240)=@sco, 0x80, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/25, 0x19}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/242, 0xf2}], 0x4, &(0x7f0000001500)=""/112, 0x70}, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x6006c044) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001740), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x40}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x480}, 0xc804) rename(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='./file0\x00') r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001900), 0x101000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001940)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x74, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xc}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000001b80)=']/#\x00', 0x4) syz_emit_ethernet(0x26, &(0x7f0000001bc0)={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x1, 0x0, 0x4}}, {@can={0xc, {{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "4a15148f01659847"}}}}, &(0x7f0000001c00)={0x1, 0x4, [0xa82, 0xffd, 0xd18, 0x3d8]}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001c40)={0x4, {{0xa, 0x4e23, 0x80000000, @mcast2}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, 0x6}}, {{0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {{0xa, 0x4e24, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000000}}, {{0xa, 0x4e22, 0x7, @mcast2, 0x1}}, {{0xa, 0x4e22, 0x4, @empty, 0xe565}}]}, 0x310) writev(r4, &(0x7f0000002400)=[{&(0x7f0000001f80)="99eb99f29fa96bf8f4ac1409a1dd06cd282b38d1787a7ffbdfd0e275fa461e75e08ae8", 0x23}, {&(0x7f0000001fc0)="fb3e02b6371f25b35adef351856d04682c30b302c68bc5ee4703377ac31928d4003d3f9ebaa380a02f7a0f9e0966160ae1595c63e71daa4c0d0a50c117bfb66535efe017a800019b877cbf31d98238f58552cc1e5ba1faa8737c47cde4d011d1ec980c059688ae17bb7cbb3bfcaf69fc47507f6d01f9cc95d43ea560ea5dcc1299d5bf46c96a5fafcdc8498cee7efc701807f061228e813d73c2045dd5b50b6b0ac6999f961749a624ff002601af", 0xae}, {&(0x7f0000002080)="48a12ac0fe58d3413e9248e72666cf591fa5f7182aa1a724908ceee49d19d0a1c12478b7cb492517b4d76ecfe928928aecc2d574da26bee0db67c310f9059f3afb498756fb2f99a8c7202b7f0c8ed04321d5fff83580e6fc17b75a00587857656ce0c537baac7d634d37bf245828789ad99fc4743718b2eb717e27e9be0def4ba2821b70394951c5917069892033d068be2610a6d7ed8e3e634c7fc35d97c044557c6b910a4b17af167d24c920793c857847f6555714ea8b78e31b19836ab9243a8b0f0953d5b4e974b0dbfc956985a619aebdf86f20a114f0946b4402a45ad0e77adf8648b7b5eee1", 0xe9}, {&(0x7f0000002180)="7ff5f2f25428ca70d34f6c8f42132be16dc07031b070c76b637203c2a2b63bcba06f1bf7f0f5f96ed415dd753bbfb968fa93eb6b0b8cb3ee3243f9a20f450bfd38d2543933aa7911545a22e7b9886b1c8390315de2bb79121fd34f0316db7fe87fbdf2a747d38e60ad7bacc86fc572b33473d69116a3637b4bd2", 0x7a}, {&(0x7f0000002200)="2ace578a8b8e98eb0c0468df15cbfaff1e0671a9dc7676840512b81c18d3d5855c1819886779e83f4e97241116501eedbca83b029bb3cb488e09", 0x3a}, {&(0x7f0000002240)="0c041eed354d920c92fe470cb48ab6bea6f5a2670291ce89a66d387b0d82", 0x1e}, {&(0x7f0000002280)="edc3f3a73441576bf763d945b28af4052ef913ba4112a04ade027d96dba3bb2eab64b2ac2bfa67d949b0fe22e087e43e32ad12fce7b2757b44be72846c6a7bc3e9d60ff7fbf33eac083db506501a7b2e7f7eddb2eb359db66c775d", 0x5b}, {&(0x7f0000002300)="69ea1b1a9ca916340c2dc02b51551d4ee110c2eb9c3389faa9eb5b2a95cd089392cde5ec175e2028ef9af8f68251915cc6f84f043ddd2e391aa63b", 0x3b}, {&(0x7f0000002340)="8cb881bcea5ab8ac991904cdf6370dbb8e1df2f7a7fa290e6b705b2c4fbc63c4d0b1052c80d26deef09a3c6663395a79ecdfdbf9af3d486c121f28a27432c6a49253abbf173e183cb5cad2ded4a047863f07871a23bb78ee8ec6e971fede0d436e373421f32d628c5bba4724800cfdef459acd30cc6ceadc654231a20d7a7e497efbdbb9969e629dda74e208080513246dc831f9", 0x94}], 0x9) syz_open_dev$loop(&(0x7f00000024c0), 0xa, 0x202400) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002500), 0x20500, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f0000002540)={r6}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000002580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) getpeername(r6, &(0x7f0000002600)=@nfc, &(0x7f0000002680)=0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f00000026c0)) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000002700), &(0x7f0000002740)=0x10) 1.179518861s ago: executing program 2 (id=450): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000002ac0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000100)=0xfffff7fc) 1.099317457s ago: executing program 1 (id=452): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r1 = memfd_create(&(0x7f0000000000)='@[\x00', 0x0) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x0, 0x0, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xfe11}}]}}, 0x0, 0x4a, 0x0, 0x1, 0x0, 0x10000, @value=r2}, 0x28) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) io_setup(0x800, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x25, 0xffffffffffbffaf2, 0x2, 0x2, 0x1, [0x9, 0x8f, 0x100, 0x95c]}) io_submit(r4, 0x2, &(0x7f0000000980)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0}, 0x0]) 971.049036ms ago: executing program 1 (id=453): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 32) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}]}) 968.752757ms ago: executing program 1 (id=454): memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x62}, 0x24000800) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700"], 0xc0}}, 0x0) memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU$\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe39\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4\x06\x00\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x026 ~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9f^\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x86A4\xdcOr*\xfc\xa3\v\xe0\x8bs\x1c\x94\xab\xb3\x91\xa8\xa1uF\xd7|\x94\xf1\xf3\xb8\xa7L\x02\x1fMk%\xd4\x1fG\xc6w\xc2\x8d\x8d\xcd\x9c\x84{_(\x02\xc3G\xe8v\xdf\x7f\x81\xfe\xd6*;\x99C\x81L\x91P_A\x9f\xf9\xa9$\x02\"\xb2oiS\x89Q\xd6\xf0F;_c\x13\x10\x16\xf7\xdaxav\xaeH(\\\x1c\xffbv\xd9\xaf\xc3\x7fp\xef\x92\x9f\xae\x01', 0x6) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) (async) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x62}, 0x24000800) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xecf, 0xa}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) (async) ptrace(0x10, r2) (async) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) (async) ptrace$cont(0x20, r2, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700"], 0xc0}}, 0x0) (async) 750.920968ms ago: executing program 1 (id=455): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000001540)=ANY=[@ANYBLOB="03010a00"], 0x1009, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x1, 0x1, 0x38415262, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x40d}, {0x10001, 0x2}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000308010201000000000000009307e1c24f510b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r3}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x4, 0x20000002, 0xc015) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={&(0x7f0000000180)="ddfbc6689017e239f580b9a72671c58dcaadac5fcfeba151442d2ebe40060d296da672cf575f9ce23c5b5810e19fae49f1f1d81e8e9ab967b1bf474dd379727952a80cee46929b61bd0e1aee3e6fe0e2f6785319b760e3d44ed9cd83ad524129e1e7dc6620e10980f2eefc43d8", &(0x7f00000002c0)=""/165, &(0x7f0000000380)="a719ac72b680ef10b52078b1f8aebc99dc0604357e1a5ab37d9e39f592e162307da5424ddb7f20f72fbf811c7dba19a32b46a9d19e192c2399d38eeef46c3c6985b01f36f431841fcd854690198ea33a6c26ee558579fa4d187fc43d49b4fd61a3", &(0x7f0000000400)="46dbcbc1a71dc1194bbfa7104d667d24c1de9c0c9745586ec19c1319d990b2f2f02ff0ae7b50e4508c2333ac33ab481a6fb132bf8d1fdefc438d962269aa3ea738e6a95405687d23aac4ab328dc904876b904b6b9dcc5a1f8494c7f6515e302192a04e420027d5591c7400eeddc5958ed7a1e0ae7755da9db5382a052e3abbbc5a3ebd7b5ca95a7e2288ab28ba296da9354522c6db411c6d1a25aa0b6bce8d823ecb7c841f9ef08649d7ad0ff8b9b57601a68d481621b69cc34e32e1a8ac36cd50bae296289a2048f3c5503a76068b4d3f38f1bbb7ad2bf9805904fc00b47a0c90cc9cc0e346dc46409edfc459564b65b91d33d416", 0x4, r0}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) execve(&(0x7f0000000580)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000980)={[&(0x7f0000000900)='syz\x00', &(0x7f0000000940)='+]*\x00']}) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) io_uring_enter(r3, 0x6295, 0x5473, 0x2, &(0x7f0000000200)={[0xe]}, 0x8) ioctl$TCSETS(r4, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x14, &(0x7f00000006c0)=@raw=[@jmp={0x5, 0x1, 0x1, 0x0, 0x9, 0x2, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 530.094298ms ago: executing program 0 (id=457): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xe, 0x1) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0fc4110, &(0x7f0000000040)={0x9, [0x32a5, 0x7, 0x4], [{0xc85e, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x5, 0x1, 0x1, 0x1}, {0xffffffff, 0x9, 0x1, 0x0, 0x1, 0x1}, {0xa, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xffff, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x4e3, 0x6, 0x1, 0x1}, {0x8000, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xc, 0x10001, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x7ff, 0x0, 0x1, 0x0, 0x1}], 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000d90100"]) r7 = accept4$x25(r2, 0x0, &(0x7f00000001c0), 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000280)) 361.063079ms ago: executing program 0 (id=458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgrp(r2) prctl$PR_SET_PTRACER(0x59616d61, r3) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000008030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000460a01040000000e00000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000f0800034000000001080004400000002205000200830000002c0001800a00010072656469720000001c0002800800034000000002080001400000001408000240000000000900010073797a30000000001400000011000100"/256], 0x100}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) 360.614407ms ago: executing program 0 (id=459): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, &(0x7f0000000240)={0x0, "50f04611cbc3ad9335b1cad63f1683e3bfdb00"}}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x100) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) prlimit64(0x0, 0x5, &(0x7f0000000000)={0x3, 0x7}, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r6, @ANYBLOB="08000ab5fc9fac01", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 287.765813ms ago: executing program 3 (id=460): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0xa691, 0x0, '\x00', {0x0, @reserved}}) (async) r2 = socket(0x10, 0x3, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/88, 0x58}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/87, 0x57}], 0x3) (async) r3 = dup2(r1, 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x48000000000, 0x8001) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000280)=""/113) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000300)=0x214, 0x4) (async) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) 287.224873ms ago: executing program 3 (id=461): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x8c2b01) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x52, 0x0, 0x1}, 0x28) 211.018882ms ago: executing program 3 (id=462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x313000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000020100c0"]) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x171d) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000180)=0x8, 0x4) bind$inet(r4, &(0x7f00000006c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$eventfd(r3, &(0x7f0000000000)=0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) 210.499099ms ago: executing program 0 (id=463): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x0, 0x40, 0x20, 0xe05, 0x4, 0x0, 0x2, 0xb05, 0xffffffff, 0x1, 0x10, 0x7, &(0x7f0000000080)=[0x4], 0x1, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 120.628995ms ago: executing program 3 (id=464): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x0, r1}) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xffffffffffffffe0, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x800, 0x9, 0x800}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 120.084357ms ago: executing program 0 (id=465): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56, 0x0, 0x0, 0xf4240}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 119.358754ms ago: executing program 3 (id=466): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800002202000047e9e53d7f6a2244c0b4edda6b552a71c1ad25736083f7ebea29f125c6b8a1efb3b9dc9fdceb99820a05df9cda409c0fb6e12ba5790f8e4f81"], 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @phonet={0x23, 0x79, 0x3, 0x2}, @tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x85b8, 0x0, 0x0, 0x0, 0xfff7, &(0x7f0000000080)='veth0_virt_wifi\x00', 0xfff, 0x8, 0x2b8}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r7, 0x0, 0x7a, 0x5, 0x9, 0x0, {0x40002, 0x1000, 0x101c, 0x10, 0x4, 0x400, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) 118.951934ms ago: executing program 0 (id=467): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) r6 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x200) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000001d40)={0xa, @raw_data="752ae0b998dc0a7286617792b8846137fd5e789aaacdf16c2c8775cdb14054e3a03edfb1e65a686f175bc0aa07009dca773bf20ff0b4b8b885a2e6213209aa5f69589d00313ac31fd733f990e24a6b11c0bfad8562e8ff27733629751e457143f05e4b06a6d09713601d7a90991ae9e868c3e7ceefdcbae94b35e94b333a855e26d6621bbc847bd5b83bf9ab82d320e7f6cb6022fc19d94c5b8366d919a5ffeb51fedbdb2fe6a71f1d70d8c08277f6c113f5372fc84c75a9067658b71e17e835e03f3949bd66f1e7"}) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') 614.16µs ago: executing program 2 (id=468): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) (async) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) (async) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) read$char_usb(r4, &(0x7f0000000040)=""/169, 0xa9) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="14481bc89a310000000002010400000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRESOCT=r4, @ANYBLOB="0000000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl730\x00', [0x0, 0x136f, 0x810000, 0x3, 0xf, 0x4c7, 0x0, 0x8000, 0x5, 0x104, 0x1, 0x1, 0xd, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x400, 0x2086, 0x24, 0x0, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0xe, 0x0, 0x1000000]}) getsockopt(r0, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) 442.401µs ago: executing program 3 (id=469): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendfile(r0, r0, 0x0, 0x40008) (async) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000180)={0x1}) 0s ago: executing program 2 (id=470): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000039c0)=0xd, 0x4) listen(r1, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) symlink(&(0x7f0000000880)='.\x00', &(0x7f0000000140)='./file1/file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r5 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r5, 0x54, 0x0, 0x0, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000305fcffffff000000000000000006a4818a63559587c2f0e24da751efb576951f97c471cf68b190b3b929a8b0ba9345989449d464b74723b662d9d207e7f58840a7e4bd856800a152217e6554d26a25ddcf2f8d3096a54f5fca00d6b9", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) kernel console output (not intermixed with test programs): [ 44.099977][ T40] audit: type=1400 audit(1756922798.425:61): avc: denied { siginh } for pid=5937 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:23652' (ED25519) to the list of known hosts. [ 46.192835][ T40] audit: type=1400 audit(1756922800.535:62): avc: denied { name_bind } for pid=5952 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.214414][ T40] audit: type=1400 audit(1756922800.555:63): avc: denied { write } for pid=5953 comm="sh" path="pipe:[5940]" dev="pipefs" ino=5940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.233904][ T40] audit: type=1400 audit(1756922800.575:64): avc: denied { execute } for pid=5953 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.240138][ T40] audit: type=1400 audit(1756922800.575:65): avc: denied { execute_no_trans } for pid=5953 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.181394][ T40] audit: type=1400 audit(1756922802.525:66): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.183870][ T5953] cgroup: Unknown subsys name 'net' [ 48.349852][ T5953] cgroup: Unknown subsys name 'cpuset' [ 48.354785][ T5953] cgroup: Unknown subsys name 'rlimit' [ 48.617655][ T5957] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.409920][ T5953] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.902577][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 52.902588][ T40] audit: type=1400 audit(1756922807.245:80): avc: denied { execmem } for pid=5963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.153583][ T40] audit: type=1400 audit(1756922807.495:81): avc: denied { create } for pid=5966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.160636][ T40] audit: type=1400 audit(1756922807.495:82): avc: denied { read write } for pid=5966 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.169735][ T40] audit: type=1400 audit(1756922807.495:83): avc: denied { open } for pid=5966 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.189914][ T40] audit: type=1400 audit(1756922807.505:84): avc: denied { ioctl } for pid=5966 comm="syz-executor" path="socket:[6491]" dev="sockfs" ino=6491 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.205222][ T5968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.209416][ T5971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.212993][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.215616][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.219858][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.223019][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.226524][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.230084][ T5968] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.234732][ T5968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.236738][ T40] audit: type=1400 audit(1756922807.575:85): avc: denied { read } for pid=5966 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.238071][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.240306][ T5968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.240742][ T5968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.241501][ T5968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.241999][ T5968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.246366][ T40] audit: type=1400 audit(1756922807.575:86): avc: denied { open } for pid=5966 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.253905][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.256260][ T40] audit: type=1400 audit(1756922807.575:87): avc: denied { mounton } for pid=5966 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.258476][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.258576][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.259065][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.291131][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.294460][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.441427][ T40] audit: type=1400 audit(1756922807.785:88): avc: denied { module_request } for pid=5979 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.491898][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 53.610689][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 53.635243][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 53.715154][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.719710][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.722074][ T5979] bridge_slave_0: entered allmulticast mode [ 53.724532][ T5979] bridge_slave_0: entered promiscuous mode [ 53.734602][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.737024][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.739359][ T5979] bridge_slave_1: entered allmulticast mode [ 53.742035][ T5979] bridge_slave_1: entered promiscuous mode [ 53.785123][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 53.860816][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.937251][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.964425][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.967478][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.969964][ T5970] bridge_slave_0: entered allmulticast mode [ 53.973428][ T5970] bridge_slave_0: entered promiscuous mode [ 53.976765][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.979407][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.981803][ T5970] bridge_slave_1: entered allmulticast mode [ 53.984385][ T5970] bridge_slave_1: entered promiscuous mode [ 54.032087][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.034442][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.037095][ T5966] bridge_slave_0: entered allmulticast mode [ 54.039618][ T5966] bridge_slave_0: entered promiscuous mode [ 54.058674][ T5979] team0: Port device team_slave_0 added [ 54.090410][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.092886][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.095130][ T5966] bridge_slave_1: entered allmulticast mode [ 54.098013][ T5966] bridge_slave_1: entered promiscuous mode [ 54.101346][ T5979] team0: Port device team_slave_1 added [ 54.117501][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.217966][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.221528][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.224808][ T5975] bridge_slave_0: entered allmulticast mode [ 54.228757][ T5975] bridge_slave_0: entered promiscuous mode [ 54.233112][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.261106][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.263860][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.275488][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.281315][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.283629][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.286473][ T5975] bridge_slave_1: entered allmulticast mode [ 54.289232][ T5975] bridge_slave_1: entered promiscuous mode [ 54.317594][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.321977][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.324940][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.335756][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.377736][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.437501][ T5970] team0: Port device team_slave_0 added [ 54.441907][ T5970] team0: Port device team_slave_1 added [ 54.474993][ T5966] team0: Port device team_slave_0 added [ 54.480426][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.487367][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.525189][ T5966] team0: Port device team_slave_1 added [ 54.662457][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.664676][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.672734][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.694219][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.697405][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.705221][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.713392][ T5979] hsr_slave_0: entered promiscuous mode [ 54.716549][ T5979] hsr_slave_1: entered promiscuous mode [ 54.721501][ T5975] team0: Port device team_slave_0 added [ 54.723939][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.727001][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.736280][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.740440][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.742593][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.750601][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.760502][ T5975] team0: Port device team_slave_1 added [ 54.794893][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.797595][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.807207][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.838086][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.840906][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.851517][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.962702][ T5970] hsr_slave_0: entered promiscuous mode [ 54.964860][ T5970] hsr_slave_1: entered promiscuous mode [ 54.967030][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 54.968845][ T5970] Cannot create hsr debugfs directory [ 54.993211][ T5966] hsr_slave_0: entered promiscuous mode [ 54.996396][ T5966] hsr_slave_1: entered promiscuous mode [ 54.999335][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 55.001126][ T5966] Cannot create hsr debugfs directory [ 55.053190][ T5975] hsr_slave_0: entered promiscuous mode [ 55.055658][ T5975] hsr_slave_1: entered promiscuous mode [ 55.058032][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 55.059878][ T5975] Cannot create hsr debugfs directory [ 55.248993][ T5971] Bluetooth: hci3: command tx timeout [ 55.249001][ T5978] Bluetooth: hci0: command tx timeout [ 55.326998][ T5978] Bluetooth: hci1: command tx timeout [ 55.327007][ T5971] Bluetooth: hci2: command tx timeout [ 55.390078][ T5979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.408985][ T5979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.415315][ T5979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.427155][ T5979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.457201][ T5966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.461940][ T5966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.468961][ T5966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.484329][ T5966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.539810][ T5975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.543809][ T5975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.549246][ T5975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.564637][ T5975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.648391][ T5970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.657806][ T5970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.662848][ T5970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.667733][ T5970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.687771][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.705669][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.723461][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.740157][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.744925][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.747412][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.759291][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.761546][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.774764][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.777050][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.780806][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.783045][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.809277][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.847693][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.861054][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.868824][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.871090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.893056][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.895836][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.896429][ T40] audit: type=1400 audit(1756922810.235:89): avc: denied { sys_module } for pid=5979 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.904958][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.939926][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.942948][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.953166][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.956194][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.012372][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.060135][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.068436][ T5979] veth0_vlan: entered promiscuous mode [ 56.073896][ T5979] veth1_vlan: entered promiscuous mode [ 56.100836][ T5979] veth0_macvtap: entered promiscuous mode [ 56.110808][ T5966] veth0_vlan: entered promiscuous mode [ 56.114852][ T5979] veth1_macvtap: entered promiscuous mode [ 56.122905][ T5966] veth1_vlan: entered promiscuous mode [ 56.133541][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.145781][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.149701][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.168909][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.171591][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.181630][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.184312][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.192327][ T5966] veth0_macvtap: entered promiscuous mode [ 56.208226][ T5966] veth1_macvtap: entered promiscuous mode [ 56.227208][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.231937][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.254890][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.257559][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.269114][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.289082][ T5975] veth0_vlan: entered promiscuous mode [ 56.292498][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.295891][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.308912][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.312480][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.317269][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.320482][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.323102][ T5975] veth1_vlan: entered promiscuous mode [ 56.353608][ T5970] veth0_vlan: entered promiscuous mode [ 56.362701][ T5975] veth0_macvtap: entered promiscuous mode [ 56.371812][ T5979] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.379282][ T5975] veth1_macvtap: entered promiscuous mode [ 56.384656][ T5970] veth1_vlan: entered promiscuous mode [ 56.397535][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.399965][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.400633][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.418578][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.443463][ T6053] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 56.447791][ T6053] macvtap1: entered allmulticast mode [ 56.450024][ T6053] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 56.455007][ T6053] batman_adv: batadv0: Adding interface: macvtap1 [ 56.459273][ T6053] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.470260][ T6053] batman_adv: batadv0: Interface activated: macvtap1 [ 56.476103][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.481807][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.484789][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.486713][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.490258][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.505503][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.525073][ T5970] veth0_macvtap: entered promiscuous mode [ 56.538749][ T5970] veth1_macvtap: entered promiscuous mode [ 56.565170][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.568040][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.569044][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.578370][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.589324][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.600702][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.604786][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.605808][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.607437][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.610519][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.619851][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.660825][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.663391][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.688887][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.694624][ T6071] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 56.694693][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.699030][ T6071] overlayfs: overlapping lowerdir path [ 56.830548][ T6087] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 56.833163][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 56.892337][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 56.986733][ T6007] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.066116][ T6101] process 'syz.3.18' launched './file1' with NULL argv: empty string added [ 57.136875][ T6110] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 57.152509][ T6007] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 57.156291][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.159939][ T6007] usb 5-1: Product: syz [ 57.161718][ T6007] usb 5-1: Manufacturer: syz [ 57.163709][ T6007] usb 5-1: SerialNumber: syz [ 57.169212][ T6007] usb 5-1: config 0 descriptor?? [ 57.191142][ T6116] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 57.204715][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.204715][ T6116] [ 57.211338][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.214434][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.214434][ T6116] [ 57.218010][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.220953][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.220953][ T6116] [ 57.224297][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.229538][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.229538][ T6116] [ 57.232890][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.237557][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.237557][ T6116] [ 57.240783][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.244371][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.244371][ T6116] [ 57.252202][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.255157][ T6116] CIFS mount error: No usable UNC path provided in device string! [ 57.255157][ T6116] [ 57.259354][ T6116] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 57.264694][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.268575][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.282912][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.283330][ T1149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.286494][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.294838][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.298565][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.302809][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.303099][ T6113] Zero length message leads to an empty skb [ 57.327098][ T5978] Bluetooth: hci3: command tx timeout [ 57.339059][ T5978] Bluetooth: hci0: command tx timeout [ 57.362019][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 57.402729][ T6129] netlink: 56 bytes leftover after parsing attributes in process `syz.2.25'. [ 57.406926][ T5978] Bluetooth: hci2: command tx timeout [ 57.416801][ T5978] Bluetooth: hci1: command tx timeout [ 57.459435][ T6131] syz.1.26: attempt to access beyond end of device [ 57.459435][ T6131] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 57.463601][ T6131] gfs2: error -5 reading superblock [ 57.478633][ T6135] kernel profiling enabled (shift: 63) [ 57.480461][ T6135] profiling shift: 63 too large [ 57.500753][ T6136] netlink: 10 bytes leftover after parsing attributes in process `syz.2.27'. [ 57.621877][ T6153] nfs: Unknown parameter 'acMNrìôY¡'Õ9_™î½Þ©E´)z²J˜È‘÷‰¦\sÚØûDë9¿Ë_1þàB¹lÖXqUz0ľߚ;¦Á~)UE0ý¤%´€Y°/OªO‘äÏ‘¸' [ 57.627856][ T6153] overlayfs: missing 'lowerdir' [ 57.636042][ T6153] nfs: Unknown parameter 'acMNrìôY¡'Õ9_™î½Þ©E´)z²J˜È‘÷‰¦\sÚØûDë9¿Ë_1þàB¹lÖXqUz0ľߚ;¦Á~)UE0ý¤%´€Y°/OªO‘äÏ‘¸' [ 57.695928][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.702497][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'. [ 57.737355][ T6169] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 57.741103][ T6169] netlink: 'syz.3.39': attribute type 7 has an invalid length. [ 57.751161][ T6169] netlink: 'syz.3.39': attribute type 7 has an invalid length. [ 57.754397][ T6169] netlink: 'syz.3.39': attribute type 8 has an invalid length. [ 57.796791][ T1029] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.893544][ T6159] usb 5-1: USB disconnect, device number 2 [ 57.948885][ T1029] usb 7-1: Using ep0 maxpacket: 16 [ 57.953315][ T1029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.957473][ T1029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.960946][ T1029] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 57.963901][ T1029] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.968491][ T1029] usb 7-1: config 0 descriptor?? [ 58.046188][ T40] kauditd_printk_skb: 1113 callbacks suppressed [ 58.046202][ T40] audit: type=1400 audit(1756922812.385:1170): avc: denied { remount } for pid=6181 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.135942][ T40] audit: type=1400 audit(1756922812.475:1171): avc: denied { sys_module } for pid=6183 comm="syz.1.43" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.192995][ T40] audit: type=1400 audit(1756922812.535:1172): avc: denied { create } for pid=6189 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 58.199638][ T40] audit: type=1400 audit(1756922812.535:1173): avc: denied { getopt } for pid=6189 comm="syz.3.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 58.287727][ T40] audit: type=1400 audit(1756922812.635:1174): avc: denied { ioctl } for pid=6192 comm="syz.1.47" path="socket:[8073]" dev="sockfs" ino=8073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.289068][ T6194] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 58.294635][ T6193] netlink: 'syz.3.46': attribute type 21 has an invalid length. [ 58.296550][ T40] audit: type=1400 audit(1756922812.635:1175): avc: denied { bind } for pid=6192 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.310583][ T40] audit: type=1400 audit(1756922812.635:1176): avc: denied { setopt } for pid=6192 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.319766][ T40] audit: type=1400 audit(1756922812.635:1177): avc: denied { write } for pid=6192 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.327482][ T40] audit: type=1400 audit(1756922812.655:1178): avc: denied { bind } for pid=6192 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.335134][ T40] audit: type=1400 audit(1756922812.655:1179): avc: denied { read } for pid=6192 comm="syz.1.47" path="socket:[8073]" dev="sockfs" ino=8073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.419645][ T6201] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 58.421966][ T1029] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:041E:3100.0002/input/input5 [ 58.423406][ T6201] overlayfs: overlapping lowerdir path [ 58.495469][ T1029] creative-sb0540 0003:041E:3100.0002: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 58.677059][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.682039][ T5074] usb 7-1: USB disconnect, device number 2 [ 58.840743][ T29] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 58.843498][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.845879][ T29] usb 8-1: Product: syz [ 58.847543][ T29] usb 8-1: Manufacturer: syz [ 58.849040][ T29] usb 8-1: SerialNumber: syz [ 58.851788][ T29] usb 8-1: config 0 descriptor?? [ 59.378262][ T5074] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.406751][ T5978] Bluetooth: hci3: command tx timeout [ 59.486996][ T5978] Bluetooth: hci1: command tx timeout [ 59.487620][ T5971] Bluetooth: hci2: command tx timeout [ 59.513384][ T6236] overlayfs: overlapping lowerdir path [ 59.543921][ T5074] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 59.546454][ T5074] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.556648][ T5074] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.562654][ T5074] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.565427][ T5074] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.570426][ T5074] usb 6-1: Product: syz [ 59.571758][ T5074] usb 6-1: Manufacturer: syz [ 59.573215][ T5074] usb 6-1: SerialNumber: syz [ 59.576331][ T5074] usb 6-1: config 0 descriptor?? [ 59.576342][ T1960] usb 8-1: USB disconnect, device number 2 [ 59.583328][ T5074] hub 6-1:0.0: bad descriptor, ignoring hub [ 59.585255][ T5074] hub 6-1:0.0: probe with driver hub failed with error -5 [ 59.603213][ T5074] usb 6-1: selecting invalid altsetting 0 [ 59.688242][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.691430][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.709711][ T6260] macvlan2: entered allmulticast mode [ 59.711887][ T6260] veth1_vlan: entered allmulticast mode [ 59.746844][ T6159] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.764050][ T6267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6267 comm=syz.3.68 [ 59.764582][ T6268] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 59.797278][ T6273] openvswitch: netlink: IPv6 tunnel dst address is zero [ 59.839458][ T6278] bridge_slave_0: left allmulticast mode [ 59.841306][ T6278] bridge_slave_0: left promiscuous mode [ 59.843114][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.847903][ T6278] bridge_slave_1: left allmulticast mode [ 59.850075][ T6278] bridge_slave_1: left promiscuous mode [ 59.851944][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.852824][ T6280] Invalid ELF header type: 0 != 1 [ 59.856095][ T6280] Invalid ELF header type: 0 != 1 [ 59.859165][ T6280] Invalid ELF header type: 0 != 1 [ 59.859490][ T6278] bond0: (slave bond_slave_0): Releasing backup interface [ 59.860901][ T6280] Invalid ELF header type: 0 != 1 [ 59.864703][ T6280] Invalid ELF header type: 0 != 1 [ 59.867584][ T6278] bond0: (slave bond_slave_1): Releasing backup interface [ 59.869534][ T6280] Invalid ELF header type: 0 != 1 [ 59.871866][ T6280] Invalid ELF header type: 0 != 1 [ 59.873590][ T6280] Invalid ELF header type: 0 != 1 [ 59.875269][ T6280] Invalid ELF header type: 0 != 1 [ 59.877132][ T6280] Invalid ELF header type: 0 != 1 [ 59.878847][ T6280] Invalid ELF header type: 0 != 1 [ 59.879014][ T6278] team0: Port device team_slave_0 removed [ 59.880458][ T6280] Invalid ELF header type: 0 != 1 [ 59.884763][ T6280] Invalid ELF header type: 0 != 1 [ 59.886419][ T6280] Invalid ELF header type: 0 != 1 [ 59.888510][ T6280] Invalid ELF header type: 0 != 1 [ 59.888744][ T6278] team0: Port device team_slave_1 removed [ 59.890151][ T6280] Invalid ELF header type: 0 != 1 [ 59.892726][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.893790][ T6280] Invalid ELF header type: 0 != 1 [ 59.896184][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.898920][ T6280] Invalid ELF header type: 0 != 1 [ 59.899131][ T24] usb 6-1: USB disconnect, device number 2 [ 59.904151][ T6280] Invalid ELF header type: 0 != 1 [ 59.905444][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.906005][ T6280] Invalid ELF header type: 0 != 1 [ 59.911500][ T6280] Invalid ELF header type: 0 != 1 [ 59.912128][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.913450][ T6280] Invalid ELF header type: 0 != 1 [ 59.913541][ T6280] Invalid ELF header type: 0 != 1 [ 59.917846][ T6159] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 59.918573][ T6280] Invalid ELF header type: 0 != 1 [ 59.920274][ T6159] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 59.922839][ T6280] Invalid ELF header type: 0 != 1 [ 59.924852][ T6159] usb 7-1: config 0 interface 0 has no altsetting 0 [ 59.929157][ T6280] Invalid ELF header type: 0 != 1 [ 59.933473][ T6159] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 59.933976][ T6280] Invalid ELF header type: 0 != 1 [ 59.935971][ T6159] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 59.938598][ T6281] team0: Mode changed to "activebackup" [ 59.940443][ T6280] Invalid ELF header type: 0 != 1 [ 59.940906][ T6278] vlan0: entered promiscuous mode [ 59.941727][ T6159] usb 7-1: Product: syz [ 59.944488][ T6278] team0: Port device vlan0 added [ 59.945364][ T6280] Invalid ELF header type: 0 != 1 [ 59.945988][ T6278] tipc: Started in network mode [ 59.946003][ T6278] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 59.946074][ T6278] tipc: Enabled bearer , priority 0 [ 59.947423][ T6159] usb 7-1: Manufacturer: syz [ 59.950030][ T6280] Invalid ELF header type: 0 != 1 [ 59.951636][ T6159] usb 7-1: SerialNumber: syz [ 59.953824][ T6159] usb 7-1: config 0 descriptor?? [ 59.960164][ T6280] Invalid ELF header type: 0 != 1 [ 59.963837][ T6159] hub 7-1:0.0: bad descriptor, ignoring hub [ 59.966041][ T6280] Invalid ELF header type: 0 != 1 [ 59.967951][ T6159] hub 7-1:0.0: probe with driver hub failed with error -5 [ 59.969991][ T6280] Invalid ELF header type: 0 != 1 [ 59.974034][ T6159] usb 7-1: selecting invalid altsetting 0 [ 59.974737][ T6280] Invalid ELF header type: 0 != 1 [ 59.987814][ T6280] Invalid ELF header type: 0 != 1 [ 59.989595][ T6280] Invalid ELF header type: 0 != 1 [ 59.991290][ T6280] Invalid ELF header type: 0 != 1 [ 59.993217][ T6280] Invalid ELF header type: 0 != 1 [ 59.994964][ T6280] Invalid ELF header type: 0 != 1 [ 59.996893][ T6280] Invalid ELF header type: 0 != 1 [ 59.998696][ T6280] Invalid ELF header type: 0 != 1 [ 60.000316][ T6280] Invalid ELF header type: 0 != 1 [ 60.002225][ T6280] Invalid ELF header type: 0 != 1 [ 60.003821][ T6280] Invalid ELF header type: 0 != 1 [ 60.005462][ T6280] Invalid ELF header type: 0 != 1 [ 60.008517][ T6280] Invalid ELF header type: 0 != 1 [ 60.010593][ T6280] Invalid ELF header type: 0 != 1 [ 60.012584][ T6280] Invalid ELF header type: 0 != 1 [ 60.014361][ T6280] Invalid ELF header type: 0 != 1 [ 60.015977][ T6280] Invalid ELF header type: 0 != 1 [ 60.017727][ T6280] Invalid ELF header type: 0 != 1 [ 60.019489][ T6280] Invalid ELF header type: 0 != 1 [ 60.021107][ T6280] Invalid ELF header type: 0 != 1 [ 60.022726][ T6280] Invalid ELF header type: 0 != 1 [ 60.024305][ T6280] Invalid ELF header type: 0 != 1 [ 60.025875][ T6280] Invalid ELF header type: 0 != 1 [ 60.027608][ T6280] Invalid ELF header type: 0 != 1 [ 60.029270][ T6280] Invalid ELF header type: 0 != 1 [ 60.030889][ T6280] Invalid ELF header type: 0 != 1 [ 60.032458][ T6280] Invalid ELF header type: 0 != 1 [ 60.034205][ T6280] Invalid ELF header type: 0 != 1 [ 60.035869][ T6280] Invalid ELF header type: 0 != 1 [ 60.037881][ T6280] Invalid ELF header type: 0 != 1 [ 60.039689][ T6280] Invalid ELF header type: 0 != 1 [ 60.041610][ T6280] Invalid ELF header type: 0 != 1 [ 60.047951][ T5971] Bluetooth: hci0: command tx timeout [ 60.157699][ T6296] tipc: Started in network mode [ 60.159347][ T6296] tipc: Node identity ced516e1f784, cluster identity 4711 [ 60.161965][ T6296] tipc: Enabled bearer , priority 0 [ 60.166762][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.170370][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.173852][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.179657][ T6295] tipc: Resetting bearer [ 60.180146][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.185363][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.189533][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.193758][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.197702][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.236760][ T1029] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.316837][ T6020] usb 7-1: USB disconnect, device number 3 [ 60.408751][ T1029] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 60.411485][ T1029] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 60.414616][ T1029] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.418669][ T1029] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 60.421742][ T1029] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 60.424221][ T1029] usb 6-1: Product: syz [ 60.425582][ T1029] usb 6-1: Manufacturer: syz [ 60.428196][ T1029] usb 6-1: SerialNumber: syz [ 60.433661][ T1029] usb 6-1: config 0 descriptor?? [ 60.439311][ T1029] hub 6-1:0.0: bad descriptor, ignoring hub [ 60.441301][ T1029] hub 6-1:0.0: probe with driver hub failed with error -5 [ 60.448070][ T1029] usb 6-1: selecting invalid altsetting 0 [ 60.749829][ T6315] binder: 6314:6315 ioctl 9360 4 returned -22 [ 60.756180][ T6317] binder: 6314:6317 ioctl 9360 4 returned -22 [ 60.757647][ T1960] usb 6-1: USB disconnect, device number 3 [ 60.822057][ T6322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.930198][ T6295] tipc: Disabling bearer [ 61.057858][ T5074] tipc: Node number set to 11578026 [ 61.176368][ T6351] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 61.186001][ T6352] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 61.192966][ T6356] ip_vti0: entered promiscuous mode [ 61.269500][ T6365] ubi31: attaching mtd0 [ 61.271987][ T6365] ubi31: scanning is finished [ 61.273546][ T6365] ubi31: empty MTD device detected [ 61.309205][ T6369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48824 sclass=netlink_route_socket pid=6369 comm=syz.0.95 [ 61.351339][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.355550][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.358216][ T6365] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 61.361071][ T6365] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 61.363342][ T6365] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 61.365534][ T6365] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 61.369084][ T6365] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 61.371424][ T6365] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 61.374334][ T6365] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1411550971 [ 61.386646][ T6365] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 61.390620][ T6378] ubi31: background thread "ubi_bgt31d" started, PID 6378 [ 61.425174][ T6381] netlink: 'syz.3.98': attribute type 6 has an invalid length. [ 61.459456][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.466830][ T6375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.497251][ T5971] Bluetooth: hci3: command tx timeout [ 61.515246][ T6382] kvm: MONITOR instruction emulated as NOP! [ 61.562146][ T102] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.564938][ T102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.568975][ T102] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.571837][ T102] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.576715][ T102] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.577030][ T5971] Bluetooth: hci2: command tx timeout [ 61.580652][ T102] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.586456][ T102] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.591796][ T102] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.690897][ T6396] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 61.694080][ T6396] overlayfs: overlapping lowerdir path [ 61.967013][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.099839][ T6429] syz.2.110 uses obsolete (PF_INET,SOCK_PACKET) [ 62.140417][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 62.143252][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.145752][ T24] usb 6-1: Product: syz [ 62.147172][ T24] usb 6-1: Manufacturer: syz [ 62.148804][ T24] usb 6-1: SerialNumber: syz [ 62.158825][ T24] usb 6-1: config 0 descriptor?? [ 62.261646][ T6435] __nla_validate_parse: 21 callbacks suppressed [ 62.261657][ T6435] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 62.261900][ T6436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 62.270187][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.365472][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'. [ 62.448802][ T10] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 62.451405][ T10] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 62.454526][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.458681][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 62.461616][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 62.464247][ T10] usb 8-1: Product: syz [ 62.466077][ T10] usb 8-1: Manufacturer: syz [ 62.468434][ T10] usb 8-1: SerialNumber: syz [ 62.472175][ T10] usb 8-1: config 0 descriptor?? [ 62.475207][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 62.477262][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 62.481394][ T10] usb 8-1: selecting invalid altsetting 0 [ 62.796912][ T10] usb 8-1: USB disconnect, device number 3 [ 62.875139][ T10] usb 6-1: USB disconnect, device number 4 [ 62.904743][ T6452] Bluetooth: MGMT ver 1.23 [ 62.972318][ T6458] netlink: 'syz.1.119': attribute type 39 has an invalid length. [ 63.128426][ T1029] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 63.150516][ T6468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.276752][ T1029] usb 8-1: Invalid ep0 maxpacket: 64 [ 63.390856][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 63.390880][ T40] audit: type=1400 audit(1756922817.735:1275): avc: denied { validate_trans } for pid=6472 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.407058][ T1029] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 63.430372][ T6476] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 63.433974][ T6476] overlayfs: overlapping lowerdir path [ 63.499933][ T6483] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 63.557620][ T1029] usb 8-1: Invalid ep0 maxpacket: 64 [ 63.560021][ T1029] usb usb8-port1: attempt power cycle [ 63.646367][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.651486][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.661940][ T6286] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.664641][ T6286] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.665739][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.668409][ T6286] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.672071][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.673745][ T6286] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.686726][ T6007] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.732204][ T40] audit: type=1400 audit(1756922818.075:1276): avc: denied { append } for pid=6497 comm="syz.0.132" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.736204][ T6498] dlm: non-version read from control device 0 [ 63.748690][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.751880][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 63.853049][ T6007] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 63.857286][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.860716][ T6007] usb 6-1: Product: syz [ 63.862519][ T6007] usb 6-1: Manufacturer: syz [ 63.864473][ T6007] usb 6-1: SerialNumber: syz [ 63.877531][ T6007] usb 6-1: config 0 descriptor?? [ 63.896713][ T1029] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 63.920028][ T6502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6502 comm=syz.2.133 [ 63.926487][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'. [ 63.932586][ T1029] usb 8-1: Invalid ep0 maxpacket: 64 [ 63.932730][ T6502] overlay: ./file0 is not a directory [ 63.993170][ T40] audit: type=1400 audit(1756922818.335:1277): avc: denied { execute } for pid=6504 comm="syz.2.134" name="file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.002453][ T40] audit: type=1400 audit(1756922818.335:1278): avc: denied { execute_no_trans } for pid=6504 comm="syz.2.134" path="/34/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.049793][ T40] audit: type=1400 audit(1756922818.395:1279): avc: denied { ioctl } for pid=6508 comm="syz.0.135" path="socket:[11753]" dev="sockfs" ino=11753 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.066884][ T1029] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 64.088191][ T1029] usb 8-1: Invalid ep0 maxpacket: 64 [ 64.090147][ T1029] usb usb8-port1: unable to enumerate USB device [ 64.203756][ T40] audit: type=1400 audit(1756922818.545:1280): avc: denied { setopt } for pid=6522 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.222382][ T40] audit: type=1400 audit(1756922818.565:1281): avc: denied { bind } for pid=6522 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.234112][ T40] audit: type=1400 audit(1756922818.575:1282): avc: denied { write } for pid=6522 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.240942][ T40] audit: type=1400 audit(1756922818.575:1283): avc: denied { setopt } for pid=6522 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.248119][ T40] audit: type=1400 audit(1756922818.575:1284): avc: denied { shutdown } for pid=6522 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.591467][ T1029] usb 6-1: USB disconnect, device number 5 [ 64.629204][ T6527] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 64.686173][ T6521] syz.2.138 (6521): drop_caches: 2 [ 64.754165][ T6534] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 64.757634][ T6534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.762919][ T6534] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 64.769921][ T6534] netlink: 'syz.2.143': attribute type 4 has an invalid length. [ 64.906290][ T6548] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 64.910511][ T6548] overlayfs: overlapping lowerdir path [ 65.080162][ T6556] input: syz1 as /devices/virtual/input/input7 [ 65.150104][ T1029] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.154364][ T6561] capability: warning: `syz.1.153' uses 32-bit capabilities (legacy support in use) [ 65.225320][ T6559] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 65.228368][ T6559] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 65.312120][ T1029] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 65.315135][ T1029] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.318237][ T1029] usb 7-1: Product: syz [ 65.319557][ T1029] usb 7-1: Manufacturer: syz [ 65.324797][ T1029] usb 7-1: SerialNumber: syz [ 65.327773][ T1029] usb 7-1: config 0 descriptor?? [ 65.856787][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.925035][ T6610] netlink: 'syz.3.166': attribute type 1 has an invalid length. [ 65.947913][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.989082][ T6613] binder: 6612:6613 ioctl c00c620f 200000000140 returned -22 [ 66.006809][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 66.010809][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 66.013977][ T10] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 66.017161][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 66.019990][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.050016][ T1029] usb 7-1: USB disconnect, device number 4 [ 66.379876][ T6634] xt_HMARK: spi-set and port-set can't be combined [ 66.505490][ T6637] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 66.516189][ T6637] netlink: 'syz.1.175': attribute type 1 has an invalid length. [ 66.582908][ T6642] netlink: 'syz.0.163': attribute type 29 has an invalid length. [ 66.584926][ T6643] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 66.590288][ T6643] overlayfs: overlapping lowerdir path [ 66.782071][ T6656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=6656 comm=syz.3.182 [ 66.968528][ T6675] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 66.971702][ T6675] overlayfs: overlapping lowerdir path [ 67.449021][ T6694] __nla_validate_parse: 12 callbacks suppressed [ 67.449033][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'. [ 67.585260][ T6702] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 67.590445][ T6702] overlayfs: overlapping lowerdir path [ 67.889232][ T6725] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 68.136272][ T6748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.204'. [ 68.285673][ T6765] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 68.290202][ T6765] overlayfs: overlapping lowerdir path [ 68.341023][ T6769] evm: overlay not supported [ 68.345862][ T6769] netlink: 'syz.2.207': attribute type 29 has an invalid length. [ 68.350438][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 68.423929][ T6780] efs: device does not support 512 byte blocks [ 68.425961][ T6780] device does not support 512 byte blocks [ 68.425961][ T6780] [ 68.432837][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 68.432846][ T40] audit: type=1400 audit(1756922822.775:1328): avc: denied { append } for pid=6781 comm="syz.2.211" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.434969][ T6782] netlink: 32 bytes leftover after parsing attributes in process `syz.2.211'. [ 68.448186][ T6782] fuse: Invalid rootmode [ 68.450000][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6782 comm=syz.2.211 [ 68.455235][ T40] audit: type=1400 audit(1756922822.795:1329): avc: denied { watch } for pid=6783 comm="syz.1.212" path="/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.499883][ T6789] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.500491][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 68.502862][ T6789] efs: cannot read volume header [ 68.510265][ T40] audit: type=1400 audit(1756922822.855:1330): avc: denied { append } for pid=6787 comm="syz.1.213" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.512031][ T6789] loop6: detected capacity change from 0 to 63 [ 68.522681][ T40] audit: type=1400 audit(1756922822.865:1331): avc: denied { map } for pid=6787 comm="syz.1.213" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.524143][ T6789] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.530814][ T40] audit: type=1400 audit(1756922822.865:1332): avc: denied { execute } for pid=6787 comm="syz.1.213" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.534110][ T6789] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.545125][ T5074] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.547875][ T6255] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.549717][ T6792] ubi: mtd0 is already attached to ubi31 [ 68.551954][ T6255] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.557782][ T6255] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.560808][ T6255] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.564376][ T6255] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.711878][ T6020] usb 5-1: USB disconnect, device number 3 [ 68.723132][ T5074] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 68.727141][ T5074] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.729963][ T5074] usb 8-1: Product: syz [ 68.731351][ T5074] usb 8-1: Manufacturer: syz [ 68.733241][ T5074] usb 8-1: SerialNumber: syz [ 68.745876][ T5074] usb 8-1: config 0 descriptor?? [ 68.784298][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 68.788792][ T6812] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 68.791949][ T6812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.986076][ T40] audit: type=1400 audit(1756922823.325:1333): avc: denied { mount } for pid=6820 comm="syz.2.222" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.995064][ T40] audit: type=1400 audit(1756922823.325:1334): avc: denied { mounton } for pid=6820 comm="syz.2.222" path="/60/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 69.032666][ T40] audit: type=1400 audit(1756922823.375:1335): avc: denied { unmount } for pid=5979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.073624][ T40] audit: type=1400 audit(1756922823.415:1336): avc: denied { bind } for pid=6829 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.081741][ T40] audit: type=1400 audit(1756922823.415:1337): avc: denied { listen } for pid=6829 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.248770][ T6838] kernel profiling enabled (shift: 63) [ 69.250555][ T6838] profiling shift: 63 too large [ 69.269334][ T6840] warning: `syz.2.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 69.363686][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.366952][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.370786][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.373434][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.376076][ T6844] batman_adv: batadv0: Interface deactivated: macvtap1 [ 69.378636][ T6844] batman_adv: batadv0: Removing interface: macvtap1 [ 69.469418][ T5074] usb 8-1: USB disconnect, device number 8 [ 69.533229][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.536303][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.540614][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.543346][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.656081][ T6872] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 69.660576][ T6872] overlayfs: overlapping lowerdir path [ 69.722075][ T6882] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 69.725119][ T6882] netlink: 'syz.1.242': attribute type 4 has an invalid length. [ 69.812100][ T6895] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 69.814174][ T6895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.820548][ T6895] vhci_hcd vhci_hcd.0: Device attached [ 69.824299][ T6897] vhci_hcd: cannot find the pending unlink 4294967287 [ 69.827330][ T6897] vhci_hcd: connection closed [ 69.828711][ T6287] vhci_hcd: stop threads [ 69.832055][ T6287] vhci_hcd: release socket [ 69.833613][ T6287] vhci_hcd: disconnect device [ 69.927057][ T6020] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.101754][ T6020] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 70.105480][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.109251][ T6020] usb 5-1: Product: syz [ 70.111041][ T6020] usb 5-1: Manufacturer: syz [ 70.113095][ T6020] usb 5-1: SerialNumber: syz [ 70.117665][ T6020] usb 5-1: config 0 descriptor?? [ 70.152433][ T6922] fuse: Bad value for 'user_id' [ 70.154534][ T6922] fuse: Bad value for 'user_id' [ 70.190333][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6924 comm=syz.3.253 [ 70.195147][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=6924 comm=syz.3.253 [ 70.202723][ T6924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6924 comm=syz.3.253 [ 70.284215][ T6929] syzkaller1: entered promiscuous mode [ 70.286520][ T6929] syzkaller1: entered allmulticast mode [ 70.291872][ T6929] nbd: must specify a device to reconfigure [ 70.403779][ T6939] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 70.409356][ T6940] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.257' resets device [ 70.412896][ T6939] usb usb8: usbfs: process 6939 (syz.2.257) did not claim interface 8 before use [ 70.527070][ T6943] geneve2: entered promiscuous mode [ 70.528866][ T6943] geneve2: entered allmulticast mode [ 70.623850][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 70.626113][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 70.826728][ T24] usb 5-1: USB disconnect, device number 4 [ 70.851300][ T6965] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 70.879347][ T6965] bond1: (slave geneve2): making interface the new active one [ 70.882977][ T6965] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 70.885770][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.889513][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 70.892144][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 70.893100][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.898125][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.901779][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 70.925217][ T6968] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 71.118799][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.122800][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.172246][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.175791][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.245041][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.260845][ T6978] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 71.260911][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.262962][ T6978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.269563][ T6978] vhci_hcd vhci_hcd.0: Device attached [ 71.273602][ T6978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.279265][ T6984] vhci_hcd: connection closed [ 71.280363][ T1199] vhci_hcd: stop threads [ 71.283347][ T1199] vhci_hcd: release socket [ 71.284788][ T1199] vhci_hcd: disconnect device [ 71.381460][ T1199] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.385828][ T1199] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.389915][ T1199] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.393612][ T1199] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.398355][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 71.400329][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 71.405716][ T1199] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.409222][ T1199] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.412104][ T1199] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.415035][ T1199] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 71.442448][ T6946] ceph: No mds server is up or the cluster is laggy [ 71.498966][ T7000] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 71.502228][ T7000] overlayfs: overlapping lowerdir path [ 71.756881][ T6020] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 71.920083][ T6020] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 71.923965][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.928193][ T6020] usb 8-1: Product: syz [ 71.930023][ T6020] usb 8-1: Manufacturer: syz [ 71.932061][ T6020] usb 8-1: SerialNumber: syz [ 71.936361][ T6020] usb 8-1: config 0 descriptor?? [ 71.936428][ T7018] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 71.942661][ T7018] overlayfs: missing 'lowerdir' [ 72.155301][ T6020] usb 8-1: USB disconnect, device number 9 [ 72.211067][ T7055] x_tables: ip_tables: udp match: only valid for protocol 17 [ 72.257398][ T7061] overlay: Bad value for 'workdir' [ 72.465976][ T7076] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 72.468710][ T7076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.472024][ T7076] vhci_hcd vhci_hcd.0: Device attached [ 72.474324][ T7078] vhci_hcd: connection closed [ 72.474780][ T6287] vhci_hcd: stop threads [ 72.479393][ T6287] vhci_hcd: release socket [ 72.481357][ T6287] vhci_hcd: disconnect device [ 72.593909][ T7082] bond1: entered allmulticast mode [ 72.596427][ T7082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.013016][ T7112] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 73.018274][ T7112] overlayfs: overlapping lowerdir path [ 73.030568][ T7113] cgroup: No subsys list or none specified [ 73.258596][ T1960] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 73.305271][ T7123] veth0_vlan: left promiscuous mode [ 73.308549][ T7123] veth0_vlan: entered promiscuous mode [ 73.410432][ T1960] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 73.414076][ T1960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.417521][ T1960] usb 8-1: Product: syz [ 73.419292][ T1960] usb 8-1: Manufacturer: syz [ 73.421274][ T1960] usb 8-1: SerialNumber: syz [ 73.426427][ T1960] usb 8-1: config 0 descriptor?? [ 73.477573][ T7134] /dev/sr0: Can't open blockdev [ 73.507582][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 73.507598][ T40] audit: type=1400 audit(1756922827.855:1374): avc: denied { write } for pid=7136 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.519071][ T40] audit: type=1400 audit(1756922827.855:1375): avc: denied { map } for pid=7136 comm="syz.0.319" path="socket:[16589]" dev="sockfs" ino=16589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.528078][ T40] audit: type=1400 audit(1756922827.855:1376): avc: denied { accept } for pid=7136 comm="syz.0.319" path="socket:[16589]" dev="sockfs" ino=16589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.538446][ T40] audit: type=1400 audit(1756922827.855:1377): avc: denied { ioctl } for pid=7136 comm="syz.0.319" path="socket:[16589]" dev="sockfs" ino=16589 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.549290][ T40] audit: type=1400 audit(1756922827.855:1378): avc: denied { write } for pid=7136 comm="syz.0.319" path="socket:[16589]" dev="sockfs" ino=16589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.593957][ T7144] __nla_validate_parse: 6 callbacks suppressed [ 73.593968][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.321'. [ 73.633286][ T1960] usb 8-1: USB disconnect, device number 10 [ 73.633830][ T7146] 9pnet_fd: p9_fd_create_unix (7146): problem connecting socket: éq‰Y’3aK: -91 [ 73.635796][ T40] audit: type=1400 audit(1756922827.975:1379): avc: denied { mounton } for pid=7145 comm="syz.0.322" path=2F35312FE91F7189591E9233614B dev="tmpfs" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 73.753943][ T40] audit: type=1400 audit(1756922828.095:1380): avc: denied { connect } for pid=7152 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.882521][ T7164] "syz.1.328" (7164) uses obsolete ecb(arc4) skcipher [ 74.204806][ T40] audit: type=1400 audit(1756922828.545:1381): avc: denied { lock } for pid=7173 comm="syz.0.331" path="socket:[19300]" dev="sockfs" ino=19300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 74.206995][ T7176] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 74.242828][ T40] audit: type=1400 audit(1756922828.585:1382): avc: denied { read } for pid=7184 comm="syz.1.334" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.250438][ T40] audit: type=1400 audit(1756922828.585:1383): avc: denied { open } for pid=7184 comm="syz.1.334" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.333554][ T7204] binder: 7200:7204 ioctl c0306201 200000000080 returned -14 [ 74.337282][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 74.341352][ T7206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=7206 comm=syz.1.336 [ 74.420831][ T7211] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 74.424412][ T7211] overlayfs: overlapping lowerdir path [ 74.671771][ T7228] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 74.674140][ T7228] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 74.808119][ T6006] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.858848][ T7234] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.350'. [ 74.864174][ T7236] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 74.938426][ T7240] ALSA: seq fatal error: cannot create timer (-22) [ 74.960210][ T6006] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 74.963383][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.965965][ T6006] usb 6-1: Product: syz [ 74.968751][ T6006] usb 6-1: Manufacturer: syz [ 74.970226][ T6006] usb 6-1: SerialNumber: syz [ 74.974153][ T6006] usb 6-1: config 0 descriptor?? [ 75.180460][ T59] usb 6-1: USB disconnect, device number 6 [ 75.433869][ T7266] bridge1: entered allmulticast mode [ 75.722756][ T7284] tmpfs: Unknown parameter '<[ino1' [ 76.058119][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 76.061059][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.369'. [ 76.142413][ T7309] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 76.146234][ T7309] overlayfs: overlapping lowerdir path [ 76.247748][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 76.250403][ T1116] ata1: failed to read log page 10h (errno=-5) [ 76.252852][ T1116] ata1.00: exception Emask 0x1 SAct 0x200 SErr 0x0 action 0x0 [ 76.255957][ T1116] ata1.00: irq_stat 0x40000000 [ 76.258796][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 76.261329][ T1116] ata1.00: cmd 61/00:48:36:11:08/01:00:00:00:00/40 tag 9 ncq dma 131072 out [ 76.261329][ T1116] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 76.267863][ T1116] ata1.00: status: { DRDY } [ 76.272731][ T1116] ata1.00: configured for UDMA/100 [ 76.274634][ T1116] ata1: EH complete [ 76.287584][ T1960] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 76.330888][ T7316] kvm: kvm [7315]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 76.334752][ T7316] kvm: kvm [7315]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 76.388304][ T59] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 76.466820][ T1960] usb 7-1: Using ep0 maxpacket: 32 [ 76.470832][ T7300] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.370'. [ 76.492097][ T1960] usb 7-1: unable to get BOS descriptor or descriptor too short [ 76.496429][ T1960] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 76.499212][ T1960] usb 7-1: can't read configurations, error -71 [ 76.519036][ T7324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 76.562848][ T59] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 76.565628][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.568233][ T59] usb 6-1: Product: syz [ 76.569535][ T59] usb 6-1: Manufacturer: syz [ 76.570994][ T59] usb 6-1: SerialNumber: syz [ 76.574180][ T59] usb 6-1: config 0 descriptor?? [ 76.676445][ T7338] fuse: Bad value for 'user_id' [ 76.678623][ T7338] fuse: Bad value for 'user_id' [ 76.767910][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 76.778409][ T840] usb 6-1: USB disconnect, device number 7 [ 76.884260][ T7342] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.887130][ T7342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.895006][ T7342] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.899248][ T7342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.901242][ T7342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.905053][ T7342] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.910274][ T7342] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.913038][ T7342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.916881][ T7342] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.921230][ T7342] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.923716][ T7342] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.927760][ T7342] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.963640][ T7360] binder: 7359:7360 ioctl 4018620d 0 returned -22 [ 77.111407][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 77.365202][ T7385] futex_wake_op: syz.3.398 tries to shift op by -1; fix this program [ 77.591320][ T7406] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 77.594765][ T7407] input: syz1 as /devices/virtual/input/input9 [ 77.595606][ T7406] overlayfs: overlapping lowerdir path [ 77.646256][ T7410] tipc: Started in network mode [ 77.648792][ T7410] tipc: Node identity c, cluster identity 4711 [ 77.650708][ T7410] tipc: Node number set to 12 [ 77.697021][ T7410] tmpfs: Bad value for 'huge' [ 77.766848][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 77.774160][ T7425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.777602][ T7425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.836806][ T840] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 77.993325][ T840] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.997704][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.001077][ T840] usb 8-1: Product: syz [ 78.002852][ T840] usb 8-1: Manufacturer: syz [ 78.004835][ T840] usb 8-1: SerialNumber: syz [ 78.006923][ T6020] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 78.013445][ T840] usb 8-1: config 0 descriptor?? [ 78.015808][ T7434] bond0: Error: Cannot enslave bond to itself. [ 78.156691][ T6020] usb 7-1: Using ep0 maxpacket: 8 [ 78.159543][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 78.161594][ T6020] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 78.164407][ T6020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.168218][ T6020] usb 7-1: config 0 descriptor?? [ 78.218156][ T5074] usb 8-1: USB disconnect, device number 11 [ 78.286713][ T6006] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.373980][ T6020] usbhid 7-1:0.0: can't add hid device: -71 [ 78.377588][ T6020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 78.382000][ T6020] usb 7-1: USB disconnect, device number 7 [ 78.449413][ T6006] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.453543][ T6006] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.458415][ T6006] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.462188][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.464868][ T6006] usb 5-1: Product: syz [ 78.466199][ T6006] usb 5-1: Manufacturer: syz [ 78.467964][ T6006] usb 5-1: SerialNumber: syz [ 78.470687][ T6006] usb 5-1: config 0 descriptor?? [ 78.474556][ T6006] usb 5-1: selecting invalid altsetting 0 [ 78.571303][ T7438] netlink: 'syz.1.416': attribute type 20 has an invalid length. [ 78.578230][ T7438] loop2: detected capacity change from 0 to 7 [ 78.584707][ T7438] Dev loop2: unable to read RDB block 7 [ 78.587410][ T7438] loop2: unable to read partition table [ 78.589974][ T7438] loop2: partition table beyond EOD, truncated [ 78.595069][ T7438] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 78.723931][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 78.723947][ T40] audit: type=1400 audit(1756922833.065:1402): avc: denied { accept } for pid=7444 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.730753][ T6020] usb 5-1: USB disconnect, device number 5 [ 78.821641][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 78.825510][ T7448] netlink: 'syz.3.419': attribute type 3 has an invalid length. [ 78.828500][ T7448] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 78.831002][ T7448] netlink: 192 bytes leftover after parsing attributes in process `syz.3.419'. [ 78.833697][ T7448] NCSI netlink: No device for ifindex 0 [ 78.856825][ T5971] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.894248][ T7454] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 78.898155][ T7454] exFAT-fs (nullb0): invalid boot record signature [ 78.900153][ T7454] exFAT-fs (nullb0): failed to read boot sector [ 78.902127][ T7454] exFAT-fs (nullb0): failed to recognize exfat type [ 78.936898][ T5971] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.936932][ T5978] Bluetooth: hci3: command 0x0405 tx timeout [ 78.936953][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.963523][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.424'. [ 78.967602][ T7463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.424'. [ 79.161337][ T7474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.208593][ T40] audit: type=1400 audit(1756922833.555:1403): avc: denied { add_name } for pid=7480 comm="syz.2.429" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.217034][ T40] audit: type=1400 audit(1756922833.555:1404): avc: denied { create } for pid=7480 comm="syz.2.429" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.224303][ T40] audit: type=1400 audit(1756922833.555:1405): avc: denied { associate } for pid=7480 comm="syz.2.429" name="cpuset.effective_cpus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.233484][ T40] audit: type=1400 audit(1756922833.575:1406): avc: denied { read append open } for pid=7480 comm="syz.2.429" path="/116/file0/cpuset.effective_cpus" dev="9p" ino=35913957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.243299][ T40] audit: type=1400 audit(1756922833.575:1407): avc: denied { lock } for pid=7480 comm="syz.2.429" path="/116/file0/cpuset.effective_cpus" dev="9p" ino=35913957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.251304][ T40] audit: type=1400 audit(1756922833.585:1408): avc: denied { write } for pid=7480 comm="syz.2.429" name="cpuset.effective_cpus" dev="9p" ino=35913957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.299283][ T40] audit: type=1400 audit(1756922833.645:1409): avc: denied { mounton } for pid=7480 comm="syz.2.429" path="/116/file0/file0" dev="9p" ino=35913891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.299335][ T7481] 9pnet_virtio: no channels available for device syz [ 79.324990][ T40] audit: type=1400 audit(1756922833.665:1410): avc: denied { map } for pid=7480 comm="syz.2.429" path="/116/file0/net_prio.prioidx" dev="9p" ino=35913958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.436913][ T1960] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 79.438665][ T40] audit: type=1400 audit(1756922833.785:1411): avc: denied { getopt } for pid=7483 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.600968][ T1960] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 79.604768][ T1960] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.608256][ T1960] usb 8-1: Product: syz [ 79.610047][ T1960] usb 8-1: Manufacturer: syz [ 79.612186][ T1960] usb 8-1: SerialNumber: syz [ 79.616900][ T1960] usb 8-1: config 0 descriptor?? [ 79.690358][ T7497] overlayfs: missing 'lowerdir' [ 79.822098][ T1029] usb 8-1: USB disconnect, device number 12 [ 80.237712][ T7515] netlink: 'syz.1.439': attribute type 6 has an invalid length. [ 80.389860][ T7531] 9pnet_fd: Insufficient options for proto=fd [ 80.394804][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'. [ 80.472681][ T7537] ======================================================= [ 80.472681][ T7537] WARNING: The mand mount option has been deprecated and [ 80.472681][ T7537] and is ignored by this kernel. Remove the mand [ 80.472681][ T7537] option from the mount to silence this warning. [ 80.472681][ T7537] ======================================================= [ 80.715972][ T7558] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 80.718401][ T7557] ntfs3(sr0): Primary boot signature is not NTFS. [ 80.722321][ T7557] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 80.756806][ T1960] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.910585][ T1960] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 80.914462][ T1960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.918829][ T1960] usb 7-1: Product: syz [ 80.920605][ T1960] usb 7-1: Manufacturer: syz [ 80.922569][ T1960] usb 7-1: SerialNumber: syz [ 80.926700][ T1960] usb 7-1: config 0 descriptor?? [ 80.926754][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.939175][ T7566] 9pnet_virtio: no channels available for device syz [ 80.945788][ T7566] tmpfs: Bad value for 'mpol' [ 81.006769][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.006789][ T5971] Bluetooth: hci3: command 0x0405 tx timeout [ 81.006930][ T5981] Bluetooth: hci2: command 0x0c1a tx timeout [ 81.134955][ T6020] usb 7-1: USB disconnect, device number 8 [ 81.155063][ T7574] netlink: 100 bytes leftover after parsing attributes in process `syz.0.456'. [ 81.195494][ T7577] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 81.423408][ T7594] ipvlan2: entered promiscuous mode [ 81.424831][ T53] cfg80211: failed to load regulatory.db [ 81.474109][ T7600] bridge_slave_0: left allmulticast mode [ 81.476425][ T7600] bridge_slave_0: left promiscuous mode [ 81.479336][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.484091][ T7600] bridge_slave_1: left allmulticast mode [ 81.486475][ T7600] bridge_slave_1: left promiscuous mode [ 81.490220][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.495683][ T7600] bond0: (slave bond_slave_0): Releasing backup interface [ 81.500510][ T7600] bond0: (slave bond_slave_1): Releasing backup interface [ 81.505400][ T7600] team0: Port device team_slave_0 removed [ 81.514767][ T7600] team0: Port device team_slave_1 removed [ 81.517538][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.521844][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.527424][ T7600] bond1: (slave geneve2): Releasing active interface [ 81.663301][ T7614] comedi comedi3: pcl730: a I/O base address must be specified [ 81.690492][ T7620] nfs: Unknown parameter '' [ 81.701424][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.470'. [ 81.739576][ T7618] ================================================================== [ 81.739586][ T7618] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 81.739620][ T7618] Write of size 8 at addr ffffc9000540b000 by task syz.3.469/7618 [ 81.739628][ T7618] [ 81.739633][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.3.469 Not tainted syzkaller #0 PREEMPT(full) [ 81.739645][ T7618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.739651][ T7618] Call Trace: [ 81.739654][ T7618] [ 81.739658][ T7618] dump_stack_lvl+0x116/0x1f0 [ 81.739677][ T7618] print_report+0xcd/0x630 [ 81.739689][ T7618] ? __virt_addr_valid+0x81/0x610 [ 81.739704][ T7618] ? sys_imageblit+0x1a6f/0x1e60 [ 81.739716][ T7618] kasan_report+0xe0/0x110 [ 81.739728][ T7618] ? sys_imageblit+0x1a6f/0x1e60 [ 81.739742][ T7618] sys_imageblit+0x1a6f/0x1e60 [ 81.739758][ T7618] ? __pfx_sys_imageblit+0x10/0x10 [ 81.739772][ T7618] ? lock_acquire+0x179/0x350 [ 81.739788][ T7618] ? __page_table_check_ptes_set+0x1ae/0x420 [ 81.739799][ T7618] ? find_held_lock+0x2b/0x80 [ 81.739811][ T7618] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 81.739821][ T7618] ? pfn_valid+0x26a/0x4d0 [ 81.739835][ T7618] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 81.739849][ T7618] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 81.739861][ T7618] bit_putcs+0x90f/0xde0 [ 81.739875][ T7618] ? __pfx_bit_putcs+0x10/0x10 [ 81.739885][ T7618] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 81.739901][ T7618] ? fb_get_color_depth+0x120/0x250 [ 81.739911][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.739924][ T7618] ? __pfx_bit_putcs+0x10/0x10 [ 81.739934][ T7618] fbcon_putcs+0x384/0x4a0 [ 81.739950][ T7618] do_update_region+0x2e6/0x3f0 [ 81.739965][ T7618] invert_screen+0x1e4/0x590 [ 81.739976][ T7618] ? __pfx_invert_screen+0x10/0x10 [ 81.739985][ T7618] ? __pfx_complement_pos+0x10/0x10 [ 81.739995][ T7618] ? vc_do_resize+0x24d/0x10e0 [ 81.740003][ T7618] ? __vmalloc_node_noprof+0xad/0xf0 [ 81.740018][ T7618] clear_selection+0x59/0x70 [ 81.740033][ T7618] vc_do_resize+0xd9b/0x10e0 [ 81.740045][ T7618] ? __pfx_vc_do_resize+0x10/0x10 [ 81.740057][ T7618] fbcon_set_disp+0x7ad/0xe50 [ 81.740073][ T7618] set_con2fb_map+0x703/0x1080 [ 81.740084][ T7618] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 81.740095][ T7618] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 81.740107][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.740119][ T7618] do_fb_ioctl+0x328/0x7e0 [ 81.740131][ T7618] ? __pfx_do_fb_ioctl+0x10/0x10 [ 81.740146][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.740164][ T7618] ? selinux_file_ioctl+0x180/0x270 [ 81.740180][ T7618] fb_ioctl+0xe5/0x150 [ 81.740191][ T7618] ? __pfx_fb_ioctl+0x10/0x10 [ 81.740202][ T7618] __x64_sys_ioctl+0x18e/0x210 [ 81.740218][ T7618] do_syscall_64+0xcd/0x4c0 [ 81.740234][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.740244][ T7618] RIP: 0033:0x7f660af8ebe9 [ 81.740253][ T7618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.740263][ T7618] RSP: 002b:00007f66091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.740273][ T7618] RAX: ffffffffffffffda RBX: 00007f660b1c6090 RCX: 00007f660af8ebe9 [ 81.740279][ T7618] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 000000000000007c [ 81.740285][ T7618] RBP: 00007f660b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.740291][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.740297][ T7618] R13: 00007f660b1c6128 R14: 00007f660b1c6090 R15: 00007ffd03bd7248 [ 81.740307][ T7618] [ 81.740310][ T7618] [ 81.740312][ T7618] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90005409000 allocated at pcpu_mem_zalloc+0x54/0xb0 [ 81.740335][ T7618] Memory state around the buggy address: [ 81.740340][ T7618] ffffc9000540af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.740347][ T7618] ffffc9000540af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 81.740354][ T7618] >ffffc9000540b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.740359][ T7618] ^ [ 81.740364][ T7618] ffffc9000540b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.740370][ T7618] ffffc9000540b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 81.740375][ T7618] ================================================================== [ 81.740381][ T7618] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.740387][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.3.469 Not tainted syzkaller #0 PREEMPT(full) [ 81.740398][ T7618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.740404][ T7618] Call Trace: [ 81.740407][ T7618] [ 81.740410][ T7618] dump_stack_lvl+0x3d/0x1f0 [ 81.740421][ T7618] vpanic+0x6e8/0x7a0 [ 81.740437][ T7618] ? __pfx_vpanic+0x10/0x10 [ 81.740452][ T7618] ? __pfx_vprintk_emit+0x10/0x10 [ 81.740466][ T7618] ? sys_imageblit+0x1a6f/0x1e60 [ 81.740479][ T7618] panic+0xca/0xd0 [ 81.740494][ T7618] ? __pfx_panic+0x10/0x10 [ 81.740511][ T7618] ? check_panic_on_warn+0x1f/0xb0 [ 81.740520][ T7618] check_panic_on_warn+0xab/0xb0 [ 81.740530][ T7618] end_report+0x107/0x170 [ 81.740544][ T7618] kasan_report+0xee/0x110 [ 81.740556][ T7618] ? sys_imageblit+0x1a6f/0x1e60 [ 81.740571][ T7618] sys_imageblit+0x1a6f/0x1e60 [ 81.740587][ T7618] ? __pfx_sys_imageblit+0x10/0x10 [ 81.740601][ T7618] ? lock_acquire+0x179/0x350 [ 81.740616][ T7618] ? __page_table_check_ptes_set+0x1ae/0x420 [ 81.740627][ T7618] ? find_held_lock+0x2b/0x80 [ 81.740639][ T7618] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 81.740649][ T7618] ? pfn_valid+0x26a/0x4d0 [ 81.740662][ T7618] ? vmap_small_pages_range_noflush+0xc47/0xdb0 [ 81.740676][ T7618] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 81.740687][ T7618] bit_putcs+0x90f/0xde0 [ 81.740701][ T7618] ? __pfx_bit_putcs+0x10/0x10 [ 81.740711][ T7618] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 81.740726][ T7618] ? fb_get_color_depth+0x120/0x250 [ 81.740736][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.740748][ T7618] ? __pfx_bit_putcs+0x10/0x10 [ 81.740758][ T7618] fbcon_putcs+0x384/0x4a0 [ 81.740775][ T7618] do_update_region+0x2e6/0x3f0 [ 81.740789][ T7618] invert_screen+0x1e4/0x590 [ 81.740799][ T7618] ? __pfx_invert_screen+0x10/0x10 [ 81.740808][ T7618] ? __pfx_complement_pos+0x10/0x10 [ 81.740819][ T7618] ? vc_do_resize+0x24d/0x10e0 [ 81.740827][ T7618] ? __vmalloc_node_noprof+0xad/0xf0 [ 81.740842][ T7618] clear_selection+0x59/0x70 [ 81.740857][ T7618] vc_do_resize+0xd9b/0x10e0 [ 81.740869][ T7618] ? __pfx_vc_do_resize+0x10/0x10 [ 81.740881][ T7618] fbcon_set_disp+0x7ad/0xe50 [ 81.740897][ T7618] set_con2fb_map+0x703/0x1080 [ 81.740909][ T7618] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 81.740920][ T7618] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 81.740932][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.740944][ T7618] do_fb_ioctl+0x328/0x7e0 [ 81.740956][ T7618] ? __pfx_do_fb_ioctl+0x10/0x10 [ 81.740971][ T7618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 81.740990][ T7618] ? selinux_file_ioctl+0x180/0x270 [ 81.741005][ T7618] fb_ioctl+0xe5/0x150 [ 81.741016][ T7618] ? __pfx_fb_ioctl+0x10/0x10 [ 81.741028][ T7618] __x64_sys_ioctl+0x18e/0x210 [ 81.741043][ T7618] do_syscall_64+0xcd/0x4c0 [ 81.741055][ T7618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.741065][ T7618] RIP: 0033:0x7f660af8ebe9 [ 81.741072][ T7618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.741081][ T7618] RSP: 002b:00007f66091f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.741091][ T7618] RAX: ffffffffffffffda RBX: 00007f660b1c6090 RCX: 00007f660af8ebe9 [ 81.741097][ T7618] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 000000000000007c [ 81.741103][ T7618] RBP: 00007f660b011e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.741109][ T7618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.741115][ T7618] R13: 00007f660b1c6128 R14: 00007f660b1c6090 R15: 00007ffd03bd7248 [ 81.741125][ T7618] [ 81.741839][ T7618] Kernel Offset: disabled VM DIAGNOSIS: 18:07:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffffffff8e2977c0 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9fe75729a0 CR3=0000000033b05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f588d75b420a09ab 99f41e883fad76ec ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e5e9352ed80bf1b2 63e0b62e53f69573 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 586b9ede3db5d1f3 9271660019e575d7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa17ac11ed002b08 188e1fe0f086e5ae ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007640 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0807ee0032aeecf2 2600000016000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32aeb65c00001c2e 32aef06200006049 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32aee55eca000000 1c0000001255773a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2200000058000000 32aeeda0000032ae ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 760bb791d6708623 e56be3e43c887a52 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4ab2d17a5bda7e0 0874ebd63fa3114f ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 746e6576652f7475 706e692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 574d4655460c5756 534d4a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85644675 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90005f9ef30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b112060 R15=ffffffff85644610 RIP=ffffffff8564469f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f66091f66c0 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9fe84c8f98 CR3=000000002571b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 00007ffe02878a3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe77974a8 00007f9fe77974a0 00007f9fe7797498 00007f9fe7797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe82fd100 00007f9fe7797460 00007f9fe7797478 00007f9fe77974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe77974b8 00007f9fe77974b0 00007f9fe77974a8 00007f9fe77974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888025530000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000033b05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 00007ffe02878a3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2b0000 RSI=ffffffff81608c38 RDI=ffffffff93db9fe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b73fc R10=ffffffff93db9fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9fe84a7f98 CR3=0000000033b05000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe02878a36 00007ffe02878a3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe7612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe77974a8 00007f9fe77974a0 00007f9fe7797498 00007f9fe7797470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe82fd100 00007f9fe7797460 00007f9fe7797478 00007f9fe77974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9fe77974b8 00007f9fe77974b0 00007f9fe77974a8 00007f9fe77974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000