last executing test programs: 3.134375912s ago: executing program 3 (id=759): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r2, 0x0, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0x5c}, 0x24000080) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00'}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8c00000004080104000000000000000002000000340004800800014000000007080001400000040108000140000000080800014000000000080001400000000408000140000007ff4400048008000640000100000800044000000052080800e73f0000000208000840b0578c59ffffffe5080009400000036b0800ec3f000000040800094000000100699878da75f8051a62c3f9357a24d434e0d85c22c3d9ae34810a2c0046333ceccd75eab227da346eac58f3c24a716c2dbeec4ed32e811d4a"], 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @private, 0x0}, &(0x7f0000000400)=0xc) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986f3", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@mpls_getnetconf={0x54, 0x52, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r10}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x401}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x54}}, 0x0) 3.060029465s ago: executing program 3 (id=760): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x4040094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket(0x22, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x10}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[], 0x884}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000180)=""/96, 0x60, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r11 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 2.959971236s ago: executing program 3 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x90}, 0x1, 0x0, 0x0, 0x20040004}, 0x4) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) 2.958915272s ago: executing program 3 (id=764): mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x8010, 0xffffffffffffffff, 0x8000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x7d93, &(0x7f00000005c0)={0x0, 0xc6e3, 0x8000, 0x800, 0x12db}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x9, 0x0, r5, 0x0, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x682400, 0x12345, {0x0, r4}}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r7, r7, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x4000010, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x3a, 0x0, @fd_index=0x9, 0xb, 0x0, 0x80000008, 0x0, 0x0, {0x0, r6}}) r9 = socket(0x40000000015, 0x5, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c", @ANYRESHEX], 0x7) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000380)={0x6e}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/75, 0x4b, 0x1, &(0x7f00000002c0)=""/4, 0x4}, &(0x7f0000000340)=0x40) openat$cgroup_ro(r5, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) 2.889296792s ago: executing program 3 (id=766): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e20000000000000000000a00"}}) 2.740368196s ago: executing program 3 (id=767): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x52, 0x1, 0x2, "f83bebf45608e255d91c5debf11c7fffffffffffffff000400080000e9feff00", 0x31324d59}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r4, &(0x7f0000006cc0)=[{{0x0, 0x0, 0x0}, 0xc34}], 0x1, 0x40010044, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x4, 0x50565559, 0x2, 0x6, 0x46, 0x2, 0x3, 0x1, 0x7, 0x0, 0x7}}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201003ec908cd0cb300ea2d010203010902"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r7, 0x4161, 0x0) close(r6) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x80, {[@window={0x3, 0x3, 0xda}]}}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4004550a, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) 2.358129513s ago: executing program 0 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x804004, &(0x7f0000000100)={'trans=virtio,', {[{@access_any}]}}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x60081, 0x120, 0x28}, 0x18) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x10801, 0x104, 0x20}, 0x18) renameat2(r0, &(0x7f0000000180)='./file1\x00', r1, &(0x7f0000000240)='.\x00', 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 2.289271568s ago: executing program 0 (id=775): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x8, 0x2}, 0x74) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x50, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x528}}, 0x40080) 2.180367164s ago: executing program 0 (id=778): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x225a949b, 0x4}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$nci(r1, &(0x7f00000007c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0xe}, 0x5) 2.180142407s ago: executing program 0 (id=779): syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000017c0)='cgroup.controllers\x00', 0x5000000, 0x0) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000000040)={0x4, "30b4747a0000f8c02c12eb45af341500000000000000000000e2fffe00"}}) 2.119571741s ago: executing program 0 (id=780): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) mkdirat(r1, &(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x60}}, 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x45, "e8371f2eec97854700"}}}, 0x4000) 2.009354657s ago: executing program 1 (id=784): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='nfs4\x00', 0x208000, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff}, [@ldst={0x2, 0x3, 0x2, 0x5, 0x2, 0x0, 0xffffffffffffffff}, @generic={0x4, 0x9, 0x0, 0xfff1, 0x136}, @alu={0x7, 0x0, 0xd, 0xb, 0x9, 0xfffffffffffffff8, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5ce8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x80, &(0x7f0000000440)=""/128, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x2, 0x8, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xd9e, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x2, 0x0, 0xf, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./cgroup\x00', 0x0, 0xc000}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002e00)={0x2020}, 0x16e7) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r5, r3, 0x38, 0x10, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') 1.800050175s ago: executing program 1 (id=785): mkdir(&(0x7f0000000240)='./file1\x00', 0x85) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3630c9e6cf515b03bf70d20134d1f5bfbaa339b9b931033431640e", 0x28}], 0x20, &(0x7f0000002780)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/104, 0xa7) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x440, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x5}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file1\x00', &(0x7f0000000480), &(0x7f00000004c0)={'U-', 0x997}, 0x16, 0x3) umount2(&(0x7f0000000100)='./file0\x00', 0xb) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b7030000000000008500f6ff1a00000095000000000000001b63bf03b4d0e29513deabe6c2c80486729fa5bcb84cfee3773da8db9a64af1d612a6fe769f765ac386e8565d5ce90a04e912734d48910d0a1ebac964ef8007a74"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r4, 0x3) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYRES8=r4, @ANYRES16=r8, @ANYBLOB="eb1d60ecfa763be1ea274f59af097be951dfb8529e9f9aa1b03125ebe10399301f2059a9a81c3f02f862314ba3deba74e7228b7824027b5ff5583dbf2a7ce627154a1d21c2b88858d839462425931ea707f412daa46adb5e799078ff371cd4dd7bbbf724f15867a352578df651203e880b6a5886ebb0c588fa81c3c0e30e6910d4be765c815dc829860f9c119c8d53738a0f"], 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x24040014) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x4000040000, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 1.7402287s ago: executing program 1 (id=786): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ncpfs\x00', 0x10000, 0x0) 1.739996972s ago: executing program 1 (id=787): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x6, 0x200, &(0x7f0000000880)="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"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r2, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="068f53bd622d2e574bbc6e3ac09b6bfbd662ca08c3d1778771bc7d802da1277caee6d061e364e0606deb68980174b7e9af48be34c9b4f28a74150a3bed9b2216ffec3057f83d826ca152dc872ce4b5c100"/92], 0xf}, 0x1, 0x0, 0x0, 0x80}, 0x5fb01bda587a8e16) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) setsockopt$bt_BT_VOICE(r5, 0x112, 0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r6, &(0x7f0000000240)="b44ad380e0e36bb503849c0f1ae1359cdb0aa62fdc71f4ad92d6c021a42d8f947a2cd2e7e36f491b404fb82e7464092f16b90443947aa7e0e991e42960b06f8e5b1ea33d285e823e98b2a70ba92ba8f77edbc19198f8d18a8f7037fd8da10193450ab33eee14f1b7d23b", 0x6a, 0x80, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) 1.650098712s ago: executing program 1 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r2, @ANYRES32, @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=r2], 0x58}, 0x1, 0x0, 0x0, 0x40855}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x90, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}]}, 0x90}}, 0x20008004) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r5 = openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0x0, 0x162) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0xfff, 0x1, 0x0, 0x1, r4}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) ioctl$BLKSECDISCARD(r9, 0x127d, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x148, 0x24, 0xf0b, 0x4, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffff0000, 0x3, 0x3, 0x0, 0x1a, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x8000) 1.64977758s ago: executing program 1 (id=789): r0 = syz_open_dev$video(&(0x7f0000000040), 0x400, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0xa6) (async, rerun: 64) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 64) io_setup(0x222, &(0x7f0000000180)=0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) (async, rerun: 64) io_setup(0x202, &(0x7f0000000200)=0x0) (rerun: 64) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r5, &(0x7f00000003c0)="6a7e2c1e", 0x4, 0x1}]) (async) syz_fuse_handle_req(r3, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xfffffffffffffffd, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) r7 = eventfd2(0x1, 0x80800) io_submit(r2, 0x47f, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000a00)="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", 0x200, 0x200, 0x0, 0x1, r7}]) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x5, 0x6, @broadcast}, 0x14) (async) r11 = socket(0x10, 0x3, 0x0) (async) sendto$packet(r8, &(0x7f00000001c0)="7f2058746ec52f1a46085e7c44319a8cd5644e5f15bb407eec8ca06e9f8c80a3d006c08f86c2889e79582da180daea7cb57b7d3c896ad5238fed8318d85f802c8aed6e5a1231fd0845c572fb89d48e7b", 0x50, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fcd000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_NESTED_STATE(r14, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) (rerun: 32) 1.049970178s ago: executing program 2 (id=792): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x14) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01082ebd7000000005000a00200008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00\n'], 0x40}, 0x1, 0x0, 0x0, 0xba83542b86c80fd7}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xfc, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc8, 0xbe, "315ae92344db4fb2a7be9117967cb0962304a90c3ba122307fc4144825b19f6297e12eaf38c40368339e4997d4b7805e8d94340308afb9bd8325a3499f29d6115606603cf14131373796d0d6bff10d7ae67a3edd3692f9b828217e24153ae52137939648296db5c3535b2f41c73f04653e7a4a46c4618aa25536485e00ef64f2f7a1882d1ccc56272d914c7233195ddf599c345184c2ab8a32abb721db0713aab76c953e67aab079239fbf4030ba97180448f9193c3c36425a3f628969e7243ed6b5964d"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r8, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000300)="9b2152a276941f9fd70244ea8d31364df66915ce439a5fae6f98bf0635353d7cb480000000000000005efcc246", &(0x7f0000000580)=@tcp6=r1}, 0x20) close_range(r7, 0xffffffffffffffff, 0x0) 1.048886277s ago: executing program 2 (id=793): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x20000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000790408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={r2, r3+60000000}, &(0x7f0000000180)={[0xfffffffffffffffe]}, 0x8) 150.131678ms ago: executing program 2 (id=794): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x420443, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="1f582659eca88b12ffa907ac39b97474271160e3802de0dfcde328d2648c4d4699b2a1a565fd8a6215f7f24c11990b1e393c24247b7cda4d499e68390b92c0aa6249c992439f9ffa6f12d2bae07b09d47455df9f5a6933866945ba6c6822668f4948d35ab642bd193736b45e219f6ec69f3b3700ec98c5a1ca153294ee90a2065ba6260ee363af36d01a38cfb3528dcefc1bc7f8900cd0c4e42c4388928cd046b934c6e1"]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) write$proc_mixer(r1, 0x0, 0x0) r2 = creat(0x0, 0x2) openat$cgroup_int(r1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x24000000) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000780)={0xfffffffffffffffa, 0x104e}) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f00000007c0)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x4, 0x80, 0x6ee, 0x4}}}, 0xa) sendmsg$NFNL_MSG_ACCT_DEL(r1, 0x0, 0x4000) r3 = syz_open_dev$sndmidi(&(0x7f0000000bc0), 0x9, 0x20041) pwritev2(r3, 0x0, 0x0, 0x100, 0x8, 0x8) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x4}], 0x1, 0xfffffffb) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f00000010c0)={0x5, 0x9, 0x0, 0x2, 0x0, 0x1}) 149.914059ms ago: executing program 2 (id=795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x30}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x7) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x30}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(r2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x7) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) (async) 55.881245ms ago: executing program 2 (id=796): write(0xffffffffffffffff, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f7508", 0x19) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0xb0000018}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=', @ANYRESDEC=0x0]) 55.059857ms ago: executing program 2 (id=797): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x2, 0x2, [0x0], [0x0, 0x0, 0x400], [0x0, 0x0, 0x6, 0x3], [0x0, 0x0, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000240)={0x0, 0xc1, 0x81, 0x20203143, 0x0, [0x2, 0x0, 0x0, r6], [0x800, 0x0, 0xfffffff9], [0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x400000000000000, 0x8]}) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000300)=""/88) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000200)={0x8, @pix={0x9, 0x0, 0x31364d59, 0x5, 0x7, 0x7ff, 0xa, 0x6, 0x0, 0x7, 0x2, 0x6}}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r8, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) pidfd_getfd(0xffffffffffffffff, r7, 0x0) 0s ago: executing program 0 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f00000002c0)={{}, {0x1, 0x1}, [], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x0, 0xff}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = dup(r7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) dup3(r6, r4, 0x80000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) inotify_init1(0x80000) close(0x3) 0s ago: executing program 0 (id=799): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266ef66ba4200b8010000000f01c166ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000008f8978cb3ec4033921820f47a753fd", 0x4f}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000400)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd22, 0x1a1802) capset(0x0, &(0x7f0000000100)={0x200000, 0x4, 0x4, 0x0, 0x6b20, 0x8}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) kernel console output (not intermixed with test programs): _slave_1): Enslaving as an active interface with an up link [ 46.539585][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.547296][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.570843][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.573100][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.575462][ T5938] bridge_slave_0: entered allmulticast mode [ 46.578156][ T5938] bridge_slave_0: entered promiscuous mode [ 46.609838][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 46.646295][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.648615][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.651066][ T5938] bridge_slave_1: entered allmulticast mode [ 46.653654][ T5938] bridge_slave_1: entered promiscuous mode [ 46.674139][ T5934] team0: Port device team_slave_0 added [ 46.680670][ T5934] team0: Port device team_slave_1 added [ 46.684535][ T5943] team0: Port device team_slave_0 added [ 46.706739][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.725885][ T5943] team0: Port device team_slave_1 added [ 46.742352][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.791834][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.794562][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.804530][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.822829][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.825535][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.835589][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.856742][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.859021][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.867603][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.875175][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.877556][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.888071][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.921879][ T5938] team0: Port device team_slave_0 added [ 46.927739][ T5938] team0: Port device team_slave_1 added [ 46.961966][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.964171][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.966360][ T5942] bridge_slave_0: entered allmulticast mode [ 46.969089][ T5942] bridge_slave_0: entered promiscuous mode [ 46.973276][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.975569][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.977830][ T5942] bridge_slave_1: entered allmulticast mode [ 46.980866][ T5942] bridge_slave_1: entered promiscuous mode [ 46.997347][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.999612][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.007413][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.012166][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.014362][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.022336][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.113397][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.118024][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.123739][ T5934] hsr_slave_0: entered promiscuous mode [ 47.126017][ T5934] hsr_slave_1: entered promiscuous mode [ 47.131100][ T5943] hsr_slave_0: entered promiscuous mode [ 47.133296][ T5943] hsr_slave_1: entered promiscuous mode [ 47.135296][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.137830][ T5943] Cannot create hsr debugfs directory [ 47.237724][ T5942] team0: Port device team_slave_0 added [ 47.274727][ T5938] hsr_slave_0: entered promiscuous mode [ 47.276992][ T5938] hsr_slave_1: entered promiscuous mode [ 47.279065][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.281726][ T5938] Cannot create hsr debugfs directory [ 47.307941][ T5942] team0: Port device team_slave_1 added [ 47.404371][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.406435][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.414889][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.422386][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.424629][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.433775][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.570263][ T5942] hsr_slave_0: entered promiscuous mode [ 47.572535][ T5942] hsr_slave_1: entered promiscuous mode [ 47.574702][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.577081][ T5942] Cannot create hsr debugfs directory [ 47.710787][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.719033][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.734821][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.748380][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.774556][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.780843][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.784907][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.792165][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.833462][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.838564][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.846836][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.851007][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.901103][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.905050][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.913904][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.918167][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.940408][ T5948] Bluetooth: hci0: command tx timeout [ 47.940438][ T5301] Bluetooth: hci3: command tx timeout [ 47.944352][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.949610][ T5301] Bluetooth: hci1: command tx timeout [ 47.969911][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.977120][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.992246][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994613][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.998131][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.000441][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.013650][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.019827][ T5301] Bluetooth: hci2: command tx timeout [ 48.031379][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.048976][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.051934][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.065385][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.075333][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.078310][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.097319][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.099640][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.120004][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.123820][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.126733][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.133538][ T40] audit: type=1400 audit(1750136527.883:89): avc: denied { sys_module } for pid=5943 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.153074][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.170108][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.172402][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.183048][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.185347][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.220092][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.254862][ T5943] veth0_vlan: entered promiscuous mode [ 48.260491][ T5943] veth1_vlan: entered promiscuous mode [ 48.286588][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.292386][ T5943] veth0_macvtap: entered promiscuous mode [ 48.296196][ T5943] veth1_macvtap: entered promiscuous mode [ 48.307836][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.316550][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.323839][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.326666][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.329418][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.332295][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.355749][ T5934] veth0_vlan: entered promiscuous mode [ 48.362859][ T5934] veth1_vlan: entered promiscuous mode [ 48.369268][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.377367][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.405664][ T5934] veth0_macvtap: entered promiscuous mode [ 48.413736][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.416269][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.418162][ T5942] veth0_vlan: entered promiscuous mode [ 48.420936][ T5934] veth1_macvtap: entered promiscuous mode [ 48.440486][ T5942] veth1_vlan: entered promiscuous mode [ 48.457690][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.457762][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.462717][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.464004][ T5938] veth0_vlan: entered promiscuous mode [ 48.470377][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.474729][ T5934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.477446][ T5934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.480839][ T5934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.484143][ T5934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.491698][ T5942] veth0_macvtap: entered promiscuous mode [ 48.496444][ T5938] veth1_vlan: entered promiscuous mode [ 48.503046][ T5942] veth1_macvtap: entered promiscuous mode [ 48.503458][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.526463][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.543437][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.549054][ T5938] veth0_macvtap: entered promiscuous mode [ 48.556167][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.559035][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.562338][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.565104][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.572102][ T5938] veth1_macvtap: entered promiscuous mode [ 48.585678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.588247][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.611298][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.617517][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.622224][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.626104][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.641418][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.644129][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.646895][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.649908][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.661306][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.663834][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.702834][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.705307][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.721475][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.726044][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.747684][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.757202][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.771337][ T6025] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.773513][ T6028] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5'. [ 48.863196][ T6039] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 48.879481][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'. [ 48.882463][ T6044] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 48.884798][ T6044] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 48.887125][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 48.905061][ T6046] pimreg: entered allmulticast mode [ 48.913011][ T6046] pimreg: left allmulticast mode [ 48.922459][ T5948] Bluetooth: hci2: Malformed Event: 0x02 [ 48.966516][ T6054] ======================================================= [ 48.966516][ T6054] WARNING: The mand mount option has been deprecated and [ 48.966516][ T6054] and is ignored by this kernel. Remove the mand [ 48.966516][ T6054] option from the mount to silence this warning. [ 48.966516][ T6054] ======================================================= [ 48.980189][ T6054] new mount options do not match the existing superblock, will be ignored [ 48.993763][ T6057] usb usb8: usbfs: process 6057 (syz.2.14) did not claim interface 0 before use [ 49.067923][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 49.076046][ T6060] IPVS: Error connecting to the multicast addr [ 49.111197][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 49.117140][ T6070] overlayfs: failed to resolve './file0': -2 [ 49.129133][ T6072] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001 [ 49.158476][ T5948] Bluetooth: hci1: Malformed Event: 0x02 [ 49.196144][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 49.198976][ T6080] netlink: 'syz.3.21': attribute type 2 has an invalid length. [ 49.201701][ T6080] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 49.204044][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 49.243226][ T6082] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 49.331405][ T6090] mmap: syz.3.26 (6090) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.430453][ T6097] netlink: 52 bytes leftover after parsing attributes in process `syz.1.27'. [ 49.989855][ T6099] team0: Device gtp0 is of different type [ 50.019806][ T5948] Bluetooth: hci1: command tx timeout [ 50.019919][ T5941] Bluetooth: hci0: command tx timeout [ 50.021659][ T63] Bluetooth: hci3: command tx timeout [ 50.101778][ T63] Bluetooth: hci2: Malformed Event: 0x02 [ 50.109639][ T63] Bluetooth: hci2: command tx timeout [ 50.217831][ T6119] usb usb8: usbfs: process 6119 (syz.3.35) did not claim interface 0 before use [ 50.357723][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.360461][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.381863][ T6139] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 50.385938][ T6141] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 50.419365][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.426833][ T6134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.427759][ T6144] dlm: non-version read from control device 0 [ 50.475790][ T6134] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.478541][ T6134] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.483077][ T6134] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.485891][ T6134] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.657338][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.50'. [ 50.660372][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 50.660976][ T5301] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 50.707034][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 50.707044][ T40] audit: type=1400 audit(1750136530.453:207): avc: denied { execute } for pid=6166 comm="syz.0.53" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.707251][ T6168] process 'syz.0.53' launched '/dev/fd/37' with NULL argv: empty string added [ 50.709038][ T40] audit: type=1400 audit(1750136530.453:208): avc: denied { append } for pid=6163 comm="syz.1.52" name="v4l-subdev2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.727218][ T40] audit: type=1400 audit(1750136530.473:209): avc: denied { execute_no_trans } for pid=6166 comm="syz.0.53" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.744053][ T40] audit: type=1400 audit(1750136530.483:210): avc: denied { create } for pid=6171 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.752533][ T40] audit: type=1400 audit(1750136530.493:211): avc: denied { ioctl } for pid=6171 comm="syz.3.54" path="socket:[7899]" dev="sockfs" ino=7899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.762931][ T40] audit: type=1400 audit(1750136530.493:212): avc: denied { setopt } for pid=6171 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.771100][ T6174] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 50.775688][ T40] audit: type=1400 audit(1750136530.493:213): avc: denied { write } for pid=6171 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.784124][ T40] audit: type=1400 audit(1750136530.493:214): avc: denied { create } for pid=6171 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.788365][ T6174] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 50.794239][ T40] audit: type=1400 audit(1750136530.493:215): avc: denied { create } for pid=6171 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.804359][ T40] audit: type=1400 audit(1750136530.513:216): avc: denied { read write } for pid=6173 comm="syz.0.55" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.870295][ T6185] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 50.872882][ T6185] nbd: error processing sock list [ 50.888213][ T6185] dvmrp1: entered allmulticast mode [ 50.919136][ T6191] QAT: Device 7 not found [ 50.921556][ T6191] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 51.073758][ T6204] usb usb8: usbfs: process 6204 (syz.0.69) did not claim interface 0 before use [ 51.107222][ T6205] geneve2: entered allmulticast mode [ 51.218023][ T6207] Bluetooth: MGMT ver 1.23 [ 51.360502][ T1141] Bluetooth: Error in BCSP hdr checksum [ 51.627367][ C2] IPv4: Oversized IP packet from 172.20.20.24 [ 51.629889][ T1142] Bluetooth: Error in BCSP hdr checksum [ 51.748916][ T6230] usb usb8: usbfs: process 6230 (syz.0.72) did not claim interface 0 before use [ 51.896658][ T6238] sp0: Synchronizing with TNC [ 51.899458][ T6238] [U] è [ 51.909761][ T1333] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.005837][ T6238] openvswitch: netlink: Missing key (keys=40, expected=100) [ 52.069617][ T1333] usb 7-1: Using ep0 maxpacket: 16 [ 52.074477][ T1333] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 52.077140][ T1333] usb 7-1: config 0 has no interface number 0 [ 52.079130][ T1333] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.082739][ T1333] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 52.087314][ T1333] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 52.090377][ T1333] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 52.092970][ T1333] usb 7-1: Product: syz [ 52.094289][ T1333] usb 7-1: SerialNumber: syz [ 52.100191][ T63] Bluetooth: hci3: command tx timeout [ 52.100313][ T5948] Bluetooth: hci1: command tx timeout [ 52.101952][ T63] Bluetooth: hci0: command tx timeout [ 52.103744][ T1333] usb 7-1: config 0 descriptor?? [ 52.110808][ T1333] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 52.115807][ T1333] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input5 [ 52.179885][ T5948] Bluetooth: hci2: command tx timeout [ 52.311069][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 52.353896][ T6255] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 52.381847][ T6257] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 52.434606][ T6261] usb usb8: usbfs: process 6261 (syz.3.83) did not claim interface 0 before use [ 52.499038][ T6266] xt_cgroup: invalid path, errno=-2 [ 52.522262][ T6224] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 52.529228][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.531845][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.534532][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 52.534590][ T9] usb 7-1: USB disconnect, device number 2 [ 52.536662][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 52.549196][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 52.655661][ T6279] trusted_key: syz.3.90 sent an empty control message without MSG_MORE. [ 52.826476][ T6288] Zero length message leads to an empty skb [ 52.890444][ T6290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.093238][ T6305] warning: `syz.3.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.139668][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 53.139969][ T5301] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 53.155971][ T6309] netlink: 'syz.3.102': attribute type 6 has an invalid length. [ 53.177986][ T5301] Bluetooth: hci0: Malformed Event: 0x02 [ 53.208390][ T6314] netlink: 'syz.3.104': attribute type 5 has an invalid length. [ 53.319301][ T6333] program syz.3.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.375683][ T5301] Bluetooth: hci1: Malformed Event: 0x02 [ 53.418802][ T6345] bond0: entered promiscuous mode [ 53.422127][ T6345] bond_slave_0: entered promiscuous mode [ 53.424019][ T6345] bond_slave_1: entered promiscuous mode [ 53.497841][ T6363] capability: warning: `syz.2.121' uses 32-bit capabilities (legacy support in use) [ 53.514413][ T6362] xt_socket: unknown flags 0xc [ 53.538973][ T6362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 53.542026][ T6366] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 53.555607][ T5301] Bluetooth: hci2: Malformed Event: 0x02 [ 53.701964][ T6390] Invalid source name [ 53.703613][ T6390] UBIFS error (pid: 6390): cannot open "./file0", error -22 [ 53.746301][ T6393] syz.1.131: attempt to access beyond end of device [ 53.746301][ T6393] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 53.789096][ T6407] kvm: user requested TSC rate below hardware speed [ 53.807913][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.814483][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.815062][ T5948] Bluetooth: hci3: Malformed Event: 0x02 [ 53.818577][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818622][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818656][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818691][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818724][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818759][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818793][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.818826][ T6412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6412 comm=syz.1.134 [ 53.855320][ T6416] loop6: detected capacity change from 0 to 524287487 [ 53.861384][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.863984][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.866592][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.869049][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.871837][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.874551][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.878046][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.883394][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.889644][ T5950] ldm_validate_partition_table(): Disk read failed. [ 53.892440][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.895288][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 53.897877][ T5950] Dev loop6: unable to read RDB block 0 [ 53.901036][ T5950] loop6: unable to read partition table [ 53.909367][ T6416] ldm_validate_partition_table(): Disk read failed. [ 53.911954][ T6416] Dev loop6: unable to read RDB block 0 [ 53.914141][ T6416] loop6: unable to read partition table [ 53.916044][ T6416] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 53.928171][ T6422] syz.3.138: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 53.933450][ T6422] CPU: 2 UID: 0 PID: 6422 Comm: syz.3.138 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 53.933466][ T6422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 53.933473][ T6422] Call Trace: [ 53.933478][ T6422] [ 53.933483][ T6422] dump_stack_lvl+0x16c/0x1f0 [ 53.933505][ T6422] warn_alloc+0x248/0x3a0 [ 53.933521][ T6422] ? __pfx_warn_alloc+0x10/0x10 [ 53.933535][ T6422] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.933552][ T6422] ? stack_depot_save_flags+0x3e0/0xa40 [ 53.933571][ T6422] ? kasan_save_stack+0x42/0x60 [ 53.933584][ T6422] ? kasan_save_stack+0x33/0x60 [ 53.933597][ T6422] ? kasan_save_track+0x14/0x30 [ 53.933611][ T6422] ? xskq_create+0x52/0x1d0 [ 53.933624][ T6422] ? xsk_setsockopt+0x640/0x840 [ 53.933636][ T6422] ? do_sock_setsockopt+0x221/0x470 [ 53.933649][ T6422] ? xskq_create+0xfb/0x1d0 [ 53.933663][ T6422] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 53.933688][ T6422] ? xskq_create+0xfb/0x1d0 [ 53.933707][ T6422] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 53.933724][ T6422] ? xskq_create+0xfb/0x1d0 [ 53.933738][ T6422] vmalloc_user_noprof+0x9e/0xe0 [ 53.933751][ T6422] ? xskq_create+0xfb/0x1d0 [ 53.933765][ T6422] xskq_create+0xfb/0x1d0 [ 53.933781][ T6422] xsk_setsockopt+0x640/0x840 [ 53.933796][ T6422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 53.933809][ T6422] ? __lock_acquire+0x622/0x1c90 [ 53.933829][ T6422] ? selinux_socket_setsockopt+0x6a/0x80 [ 53.933844][ T6422] ? __pfx_xsk_setsockopt+0x10/0x10 [ 53.933857][ T6422] do_sock_setsockopt+0x221/0x470 [ 53.933868][ T6422] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 53.933887][ T6422] __sys_setsockopt+0x1a0/0x230 [ 53.933905][ T6422] __x64_sys_setsockopt+0xbd/0x160 [ 53.933919][ T6422] ? do_syscall_64+0x91/0x4c0 [ 53.933935][ T6422] ? lockdep_hardirqs_on+0x7c/0x110 [ 53.933950][ T6422] do_syscall_64+0xcd/0x4c0 [ 53.933968][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.933979][ T6422] RIP: 0033:0x7fca0178e929 [ 53.933988][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.933998][ T6422] RSP: 002b:00007fca02521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.934008][ T6422] RAX: ffffffffffffffda RBX: 00007fca019b5fa0 RCX: 00007fca0178e929 [ 53.934015][ T6422] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 53.934021][ T6422] RBP: 00007fca01810b39 R08: 0000000000000004 R09: 0000000000000000 [ 53.934027][ T6422] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.934033][ T6422] R13: 0000000000000000 R14: 00007fca019b5fa0 R15: 00007ffcbf90afb8 [ 53.934047][ T6422] [ 53.934051][ T6422] Mem-Info: [ 53.956063][ T6424] syz.1.139: attempt to access beyond end of device [ 53.956063][ T6424] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 53.956963][ T6422] active_anon:7996 inactive_anon:0 isolated_anon:0 [ 53.956963][ T6422] active_file:10939 inactive_file:40574 isolated_file:0 [ 53.956963][ T6422] unevictable:1768 dirty:1797 writeback:0 [ 53.956963][ T6422] slab_reclaimable:11454 slab_unreclaimable:68635 [ 53.956963][ T6422] mapped:24509 shmem:2397 pagetables:1258 [ 53.956963][ T6422] sec_pagetables:295 bounce:0 [ 53.956963][ T6422] kernel_misc_reclaimable:0 [ 53.956963][ T6422] free:450780 free_pcp:27298 free_cma:0 [ 53.960625][ T6424] SQUASHFS error: Failed to read block 0x0: -5 [ 53.960666][ T6424] unable to read squashfs_super_block [ 54.007691][ T6427] netfs: Couldn't get user pages (rc=-14) [ 54.010653][ T6422] Node 0 active_anon:31984kB inactive_anon:0kB active_file:43756kB inactive_file:162092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98036kB dirty:7148kB writeback:0kB shmem:6052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12592kB pagetables:4936kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB [ 54.066580][ T6422] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 54.076991][ T6422] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 54.087660][ T6422] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 54.089460][ T6422] Node 0 DMA32 free:173044kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31984kB inactive_anon:0kB active_file:43756kB inactive_file:162092kB unevictable:3536kB writepending:7148kB present:2080628kB managed:1264716kB mlocked:0kB bounce:0kB free_pcp:96336kB local_pcp:27032kB free_cma:0kB [ 54.101460][ T6422] lowmem_reserve[]: 0 0 0 0 0 [ 54.103064][ T6422] Node 1 Normal free:1614044kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:40kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:12892kB local_pcp:3492kB free_cma:0kB [ 54.112837][ T6422] lowmem_reserve[]: 0 0 0 0 0 [ 54.114624][ T6422] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 54.119005][ T6422] Node 0 DMA32: 399*4kB (UM) 73*8kB (UM) 219*16kB (UM) 126*32kB (UME) 218*64kB (UM) 5*128kB (ME) 3*256kB (ME) 3*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 34*4096kB (UM) = 173044kB [ 54.125095][ T6422] Node 1 Normal: 5*4kB (UME) 4*8kB (UE) 7*16kB (ME) 8*32kB (UME) 9*64kB (UME) 7*128kB (UME) 1*256kB (U) 4*512kB (ME) 0*1024kB 2*2048kB (ME) 392*4096kB (M) = 1613924kB [ 54.130464][ T6422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.133438][ T6422] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 54.136323][ T6422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 54.139273][ T6422] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 54.142193][ T6422] 53876 total pagecache pages [ 54.144020][ T6422] 0 pages in swap cache [ 54.145826][ T6422] Free swap = 124996kB [ 54.147320][ T6422] Total swap = 124996kB [ 54.148633][ T6422] 1048443 pages RAM [ 54.150132][ T6422] 0 pages HighMem/MovableOnly [ 54.151659][ T6422] 282937 pages reserved [ 54.152993][ T6422] 0 pages cma reserved [ 54.180013][ T5948] Bluetooth: hci1: command tx timeout [ 54.190954][ T5948] Bluetooth: hci0: command tx timeout [ 54.190976][ T5941] Bluetooth: hci3: command tx timeout [ 54.211118][ T5941] Bluetooth: hci1: Malformed Event: 0x02 [ 54.223049][ T6438] __nla_validate_parse: 12 callbacks suppressed [ 54.223060][ T6438] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 54.228298][ T6438] netlink: 264 bytes leftover after parsing attributes in process `syz.0.143'. [ 54.231512][ T6438] netlink: 56 bytes leftover after parsing attributes in process `syz.0.143'. [ 54.236929][ T6440] binder: 6439:6440 ioctl c0306201 200000000080 returned -14 [ 54.237357][ T6440] binder: BINDER_SET_CONTEXT_MGR already set [ 54.237427][ T6440] binder: 6439:6440 ioctl 4018620d 200000000040 returned -16 [ 54.237745][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 54.237773][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 54.259641][ T5941] Bluetooth: hci2: command tx timeout [ 54.347526][ T6459] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 54.402772][ T6462] netlink: ct family unspecified [ 54.404430][ T6462] openvswitch: netlink: Actions may not be safe on all matching packets [ 54.425867][ T5941] Bluetooth: hci1: Malformed Event: 0x02 [ 54.670352][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 54.673971][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 54.724769][ T6514] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 54.727632][ T6515] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 54.894453][ T5941] Bluetooth: hci1: Malformed Event: 0x02 [ 54.923600][ T6538] capability: warning: `syz.3.167' uses deprecated v2 capabilities in a way that may be insecure [ 54.950507][ T6543] x_tables: duplicate underflow at hook 2 [ 55.136367][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 55.183713][ T6575] validate_nla: 2 callbacks suppressed [ 55.183724][ T6575] netlink: 'syz.3.172': attribute type 2 has an invalid length. [ 55.188066][ T6575] netlink: 119 bytes leftover after parsing attributes in process `syz.3.172'. [ 55.212469][ T6578] overlay: Unknown parameter 'fowner' [ 55.224189][ T6582] qnx4: no qnx4 filesystem (no root dir). [ 55.348607][ T6597] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 55.356313][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 55.364285][ T6599] syz.1.178: attempt to access beyond end of device [ 55.364285][ T6599] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 55.366148][ T6597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.368410][ T6599] EXT4-fs (nbd1): unable to read superblock [ 55.381446][ T6597] bond1: (slave gretap1): making interface the new active one [ 55.385517][ T6597] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 55.453772][ T6613] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 55.463350][ T6613] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 55.466161][ T6613] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 55.471455][ T6615] netlink: 'syz.0.183': attribute type 20 has an invalid length. [ 55.518633][ T6618] tmpfs: Bad value for 'mpol' [ 55.541561][ T6620] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 55.561363][ T6624] Bluetooth: MGMT ver 1.23 [ 55.601080][ T6626] loop6: detected capacity change from 0 to 524287487 [ 55.603941][ T6626] ldm_validate_partition_table(): Disk read failed. [ 55.606879][ T6626] Dev loop6: unable to read RDB block 0 [ 55.609358][ T6626] loop6: unable to read partition table [ 55.612047][ T6626] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 55.748812][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 55.748824][ T40] audit: type=1400 audit(1750136535.473:346): avc: denied { shutdown } for pid=6639 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.790038][ T40] audit: type=1400 audit(1750136535.473:347): avc: denied { lock } for pid=6639 comm="syz.0.192" path="socket:[10978]" dev="sockfs" ino=10978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 55.810060][ T40] audit: type=1326 audit(1750136535.543:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.2.194" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe341d8e929 code=0x0 [ 55.816896][ T40] audit: type=1326 audit(1750136535.543:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6648 comm="syz.2.194" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe341d8e929 code=0x0 [ 55.838584][ T40] audit: type=1400 audit(1750136535.573:350): avc: denied { remount } for pid=6644 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 55.859322][ T6651] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 55.897219][ T40] audit: type=1400 audit(1750136535.643:351): avc: denied { ioctl } for pid=6653 comm="syz.0.197" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x4b31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 55.900708][ T6654] pim6reg1: entered promiscuous mode [ 55.906655][ T6654] pim6reg1: entered allmulticast mode [ 55.933396][ T40] audit: type=1400 audit(1750136535.683:352): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 56.008376][ T40] audit: type=1400 audit(1750136535.753:353): avc: denied { search } for pid=5652 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.015606][ T40] audit: type=1400 audit(1750136535.753:354): avc: denied { search } for pid=5652 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.024920][ T40] audit: type=1400 audit(1750136535.753:355): avc: denied { search } for pid=5652 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.026720][ T6661] loop6: detected capacity change from 0 to 524287487 [ 56.035236][ T6661] ldm_validate_partition_table(): Disk read failed. [ 56.037646][ T6661] Dev loop6: unable to read RDB block 0 [ 56.043305][ T6661] loop6: unable to read partition table [ 56.049663][ T6661] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 56.238208][ T6670] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 56.251604][ T6682] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 56.269640][ T5941] Bluetooth: hci3: command 0x0405 tx timeout [ 56.466493][ T5301] Bluetooth: hci3: Malformed Event: 0x02 [ 56.493936][ T6706] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.583281][ T6718] netlink: 'syz.0.214': attribute type 11 has an invalid length. [ 56.618760][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.692769][ T6731] loop6: detected capacity change from 0 to 524287487 [ 56.695592][ T6731] ldm_validate_partition_table(): Disk read failed. [ 56.697774][ T6731] Dev loop6: unable to read RDB block 0 [ 56.700493][ T6731] loop6: unable to read partition table [ 56.709603][ T6731] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 56.731175][ T6737] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 56.767679][ T6742] xt_limit: Overflow, try lower: 1207959552/384 [ 56.901875][ T6753] misc userio: No port type given on /dev/userio [ 57.021497][ T5301] Bluetooth: hci3: Malformed Event: 0x02 [ 57.051153][ T6785] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 57.064056][ T6789] IPv6: syztnl0: Disabled Multicast RS [ 57.092483][ T6789] ipt_REJECT: ECHOREPLY no longer supported. [ 57.300046][ T5023] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.412323][ T6817] sp0: Synchronizing with TNC [ 57.417336][ T6817] ocfs2: Unknown parameter 'usrquotaeo#' [ 57.419395][ T6817] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 57.470188][ T5023] usb 6-1: Using ep0 maxpacket: 8 [ 57.473390][ T5023] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 57.476265][ T5023] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.479411][ T5023] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.482921][ T5023] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.486455][ T5023] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.490981][ T5023] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.493920][ T5023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.703402][ T5023] usb 6-1: GET_CAPABILITIES returned 0 [ 57.705701][ T5023] usbtmc 6-1:16.0: can't read capabilities [ 57.759614][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.866643][ T6827] netlink: 'syz.3.255': attribute type 21 has an invalid length. [ 57.910337][ T6785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.914793][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 57.916208][ T1333] usb 6-1: USB disconnect, device number 2 [ 57.917698][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.919688][ T6827] xt_hashlimit: size too large, truncated to 1048576 [ 57.922894][ T9] usb 7-1: Product: syz [ 57.927100][ T9] usb 7-1: Manufacturer: syz [ 57.928996][ T9] usb 7-1: SerialNumber: syz [ 57.934809][ T9] usb 7-1: config 0 descriptor?? [ 58.142285][ T5023] usb 7-1: USB disconnect, device number 3 [ 58.151559][ T1121] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 58.155807][ T1121] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 58.159066][ T1121] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 58.162697][ T1121] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 58.166218][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 58.489353][ T6886] netlink: 'syz.0.270': attribute type 13 has an invalid length. [ 58.678381][ T6920] overlay: Bad value for 'workdir' [ 59.040981][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 59.043214][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.055778][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 59.058162][ T6949] vhci_hcd: connection closed [ 59.059695][ T1142] vhci_hcd: stop threads [ 59.062999][ T1142] vhci_hcd: release socket [ 59.064559][ T1142] vhci_hcd: disconnect device [ 59.177744][ T6952] random: crng reseeded on system resumption [ 59.185213][ T6952] Restarting kernel threads ... [ 59.187887][ T6952] Done restarting kernel threads. [ 59.191599][ T6952] Restarting kernel threads ... [ 59.193381][ T6952] Done restarting kernel threads. [ 59.195114][ T6952] Restarting kernel threads ... [ 59.196892][ T6952] Done restarting kernel threads. [ 59.198655][ T6952] Restarting kernel threads ... [ 59.203243][ T6952] Done restarting kernel threads. [ 59.206200][ T6952] Restarting kernel threads ... [ 59.208209][ T6952] Done restarting kernel threads. [ 59.210710][ T6952] Restarting kernel threads ... [ 59.212493][ T6952] Done restarting kernel threads. [ 59.213125][ T5301] Bluetooth: hci0: Malformed Event: 0x02 [ 59.214217][ T6952] Restarting kernel threads ... [ 59.217652][ T6952] Done restarting kernel threads. [ 59.219390][ T6952] Restarting kernel threads ... [ 59.221240][ T6952] Done restarting kernel threads. [ 59.222997][ T6952] Restarting kernel threads ... [ 59.224754][ T6952] Done restarting kernel threads. [ 59.226557][ T6952] Restarting kernel threads ... [ 59.228313][ T6952] Done restarting kernel threads. [ 59.230143][ T6952] Restarting kernel threads ... [ 59.231952][ T6952] Done restarting kernel threads. [ 59.233793][ T6952] Restarting kernel threads ... [ 59.235676][ T6952] Done restarting kernel threads. [ 59.237453][ T6952] Restarting kernel threads ... [ 59.239246][ T6952] Done restarting kernel threads. [ 59.241066][ T6952] Restarting kernel threads ... [ 59.241328][ T6957] xt_ipcomp: unknown flags 12 [ 59.242884][ T6952] Done restarting kernel threads. [ 59.246542][ T6952] Restarting kernel threads ... [ 59.248371][ T6952] Done restarting kernel threads. [ 59.250107][ T6952] Restarting kernel threads ... [ 59.251624][ T6957] __nla_validate_parse: 13 callbacks suppressed [ 59.251633][ T6957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 59.251889][ T6952] Done restarting kernel threads. [ 59.260804][ T6952] Restarting kernel threads ... [ 59.263311][ T6952] Done restarting kernel threads. [ 59.265210][ T6952] Restarting kernel threads ... [ 59.267198][ T6952] Done restarting kernel threads. [ 59.269002][ T6952] Restarting kernel threads ... [ 59.271306][ T6952] Done restarting kernel threads. [ 59.273077][ T6952] Restarting kernel threads ... [ 59.274867][ T6952] Done restarting kernel threads. [ 59.276597][ T6952] Restarting kernel threads ... [ 59.278355][ T6952] Done restarting kernel threads. [ 59.280223][ T6952] Restarting kernel threads ... [ 59.282036][ T6952] Done restarting kernel threads. [ 59.283694][ T6952] Restarting kernel threads ... [ 59.285456][ T6952] Done restarting kernel threads. [ 59.287211][ T6952] Restarting kernel threads ... [ 59.288946][ T6952] Done restarting kernel threads. [ 59.290774][ T6952] Restarting kernel threads ... [ 59.292561][ T6952] Done restarting kernel threads. [ 59.294299][ T6952] Restarting kernel threads ... [ 59.296077][ T6952] Done restarting kernel threads. [ 59.297808][ T6952] Restarting kernel threads ... [ 59.299606][ T6952] Done restarting kernel threads. [ 59.301334][ T6952] Restarting kernel threads ... [ 59.303651][ T6952] Done restarting kernel threads. [ 59.305329][ T6952] Restarting kernel threads ... [ 59.307099][ T6952] Done restarting kernel threads. [ 59.308767][ T6952] Restarting kernel threads ... [ 59.310560][ T6952] Done restarting kernel threads. [ 59.312235][ T6952] Restarting kernel threads ... [ 59.313979][ T6952] Done restarting kernel threads. [ 59.315674][ T6952] Restarting kernel threads ... [ 59.317404][ T6952] Done restarting kernel threads. [ 59.319095][ T6952] Restarting kernel threads ... [ 59.320834][ T6952] Done restarting kernel threads. [ 59.352622][ T6959] netlink: 'syz.0.293': attribute type 7 has an invalid length. [ 59.355610][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 59.368709][ T6961] hpfs: Bad magic ... probably not HPFS [ 59.603662][ T6975] tmpfs: Unknown parameter 'mpo' [ 59.680064][ T5301] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 59.683227][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: kworker/u33:1 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 59.683243][ T5301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.683251][ T5301] Workqueue: hci3 hci_rx_work [ 59.683282][ T5301] Call Trace: [ 59.683286][ T5301] [ 59.683292][ T5301] dump_stack_lvl+0x16c/0x1f0 [ 59.683311][ T5301] sysfs_warn_dup+0x7f/0xa0 [ 59.683333][ T5301] sysfs_create_dir_ns+0x24b/0x2b0 [ 59.683348][ T5301] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 59.683364][ T5301] ? find_held_lock+0x2b/0x80 [ 59.683381][ T5301] ? do_raw_spin_unlock+0x172/0x230 [ 59.683396][ T5301] kobject_add_internal+0x2c4/0x9b0 [ 59.683411][ T5301] kobject_add+0x16e/0x240 [ 59.683423][ T5301] ? __pfx_kobject_add+0x10/0x10 [ 59.683435][ T5301] ? do_raw_spin_unlock+0x172/0x230 [ 59.683448][ T5301] ? kobject_put+0xab/0x5a0 [ 59.683470][ T5301] device_add+0x288/0x1a70 [ 59.683481][ T5301] ? __pfx_dev_set_name+0x10/0x10 [ 59.683493][ T5301] ? __pfx_device_add+0x10/0x10 [ 59.683504][ T5301] ? mgmt_send_event_skb+0x2fb/0x460 [ 59.683525][ T5301] hci_conn_add_sysfs+0x17e/0x230 [ 59.683544][ T5301] le_conn_complete_evt+0x1075/0x1d70 [ 59.683565][ T5301] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 59.683583][ T5301] ? hci_event_packet+0x459/0x11c0 [ 59.683605][ T5301] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 59.683623][ T5301] ? skb_pull_data+0x166/0x210 [ 59.683642][ T5301] hci_le_meta_evt+0x354/0x5e0 [ 59.683652][ T5301] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 59.683673][ T5301] hci_event_packet+0x685/0x11c0 [ 59.683690][ T5301] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 59.683701][ T5301] ? __pfx_hci_event_packet+0x10/0x10 [ 59.683719][ T5301] ? kcov_remote_start+0x3c9/0x6d0 [ 59.683731][ T5301] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.683765][ T5301] hci_rx_work+0x2c5/0x16b0 [ 59.683777][ T5301] ? rcu_is_watching+0x12/0xc0 [ 59.683794][ T5301] process_one_work+0x9cc/0x1b70 [ 59.683813][ T5301] ? __pfx_process_one_work+0x10/0x10 [ 59.683830][ T5301] ? assign_work+0x1a0/0x250 [ 59.683849][ T5301] worker_thread+0x6c8/0xf10 [ 59.683866][ T5301] ? __kthread_parkme+0x19e/0x250 [ 59.683883][ T5301] ? __pfx_worker_thread+0x10/0x10 [ 59.683894][ T5301] kthread+0x3c2/0x780 [ 59.683904][ T5301] ? __pfx_kthread+0x10/0x10 [ 59.683915][ T5301] ? rcu_is_watching+0x12/0xc0 [ 59.683928][ T5301] ? __pfx_kthread+0x10/0x10 [ 59.683938][ T5301] ret_from_fork+0x5d4/0x6f0 [ 59.683954][ T5301] ? __pfx_kthread+0x10/0x10 [ 59.683964][ T5301] ret_from_fork_asm+0x1a/0x30 [ 59.683983][ T5301] [ 59.684012][ T5301] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.789345][ T5301] Bluetooth: hci3: failed to register connection device [ 59.825273][ T6992] input: syz1 as /devices/virtual/input/input8 [ 59.827799][ T6992] input: failed to attach handler leds to device input8, error: -6 [ 59.954145][ T5941] Bluetooth: hci0: Malformed Event: 0x02 [ 59.978302][ T7009] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 60.489950][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 60.607158][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 60.657444][ T7042] binder: BINDER_SET_CONTEXT_MGR already set [ 60.664259][ T7042] binder: 7040:7042 ioctl 4018620d 2000000000c0 returned -16 [ 60.668185][ T7041] binder_alloc: binder_alloc_mmap_handler: 7040 200000ffd000-200001000000 already mapped failed -16 [ 60.671850][ T7046] 9pnet_fd: p9_fd_create_unix (7046): problem connecting socket: éq‰Y’3aK: -91 [ 60.674961][ T7041] binder_alloc: 7040: binder_alloc_buf, no vma [ 60.675132][ T7042] binder_alloc: 7040: binder_alloc_buf, no vma [ 60.748287][ T7062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.322'. [ 60.838377][ T5941] Bluetooth: hci2: Malformed Event: 0x02 [ 60.881308][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 60.881319][ T40] audit: type=1400 audit(1750136796.627:407): avc: denied { setopt } for pid=7086 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.893604][ T7085] loop6: detected capacity change from 0 to 524287487 [ 60.896009][ T7085] buffer_io_error: 76 callbacks suppressed [ 60.896017][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.900562][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.903042][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.905475][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.907918][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.910523][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.913706][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.916435][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.918889][ T7085] ldm_validate_partition_table(): Disk read failed. [ 60.921705][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.924157][ T7085] Buffer I/O error on dev loop6, logical block 0, async page read [ 60.926664][ T7085] Dev loop6: unable to read RDB block 0 [ 60.928554][ T7085] loop6: unable to read partition table [ 60.932517][ T7085] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 60.999449][ T40] audit: type=1400 audit(1750136796.737:408): avc: denied { ioctl } for pid=7098 comm="syz.3.336" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.011253][ T7100] netlink: 168 bytes leftover after parsing attributes in process `syz.3.336'. [ 61.015197][ T7100] netlink: 168 bytes leftover after parsing attributes in process `syz.3.336'. [ 61.043743][ T5941] Bluetooth: hci2: Malformed Event: 0x02 [ 61.103149][ T40] audit: type=1400 audit(1750136796.847:409): avc: denied { mount } for pid=7111 comm="syz.3.340" name="/" dev="configfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 61.105256][ T7118] devpts: Bad value for 'max' [ 61.110722][ T40] audit: type=1400 audit(1750136796.847:410): avc: denied { search } for pid=7111 comm="syz.3.340" name="/" dev="configfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.127919][ T40] audit: type=1400 audit(1750136796.847:411): avc: denied { search } for pid=7111 comm="syz.3.340" name="/" dev="configfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.139652][ T40] audit: type=1400 audit(1750136796.847:412): avc: denied { read open } for pid=7111 comm="syz.3.340" path="/" dev="configfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.141350][ T7120] validate_nla: 1 callbacks suppressed [ 61.141359][ T7120] netlink: 'syz.1.343': attribute type 2 has an invalid length. [ 61.155987][ T7120] netlink: 244 bytes leftover after parsing attributes in process `syz.1.343'. [ 61.187999][ T7125] bond1: entered promiscuous mode [ 61.188511][ T7126] loop6: detected capacity change from 0 to 524287487 [ 61.189731][ T7125] bond1: entered allmulticast mode [ 61.189921][ T7125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.193122][ T5950] ldm_validate_partition_table(): Disk read failed. [ 61.194145][ T7122] netlink: 20 bytes leftover after parsing attributes in process `syz.3.344'. [ 61.195936][ T5950] Dev loop6: unable to read RDB block 0 [ 61.203760][ T5950] loop6: unable to read partition table [ 61.205367][ T7122] IPVS: Unknown mcast interface: bridge_s [ 61.210983][ T7126] ldm_validate_partition_table(): Disk read failed. [ 61.216084][ T7126] Dev loop6: unable to read RDB block 0 [ 61.218020][ T7126] loop6: unable to read partition table [ 61.222511][ T7126] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 61.279382][ T5941] Bluetooth: hci2: Malformed Event: 0x02 [ 61.285661][ T40] audit: type=1326 audit(1750136797.027:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.1.351" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41ec38e929 code=0x0 [ 61.338781][ T7148] IPVS: Error connecting to the multicast addr [ 61.378127][ T7150] overlayfs: unescaped trailing colons in lowerdir mount option. [ 61.419315][ T7158] devtmpfs: Cannot change global quota limit on remount [ 61.425795][ T40] audit: type=1400 audit(1750136797.157:414): avc: denied { mount } for pid=7157 comm="syz.3.356" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.437782][ T40] audit: type=1400 audit(1750136797.157:415): avc: denied { remount } for pid=7157 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.443608][ T40] audit: type=1400 audit(1750136797.177:416): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.522420][ T5941] Bluetooth: hci1: Malformed Event: 0x02 [ 61.566918][ T7182] kernel profiling enabled (shift: 63) [ 61.569124][ T7182] profiling shift: 63 too large [ 61.581965][ T7183] loop6: detected capacity change from 0 to 524287487 [ 61.582258][ T7186] tmpfs: Unknown parameter 'íœÿ2' [ 61.586539][ T5950] ldm_validate_partition_table(): Disk read failed. [ 61.588767][ T5950] Dev loop6: unable to read RDB block 0 [ 61.593919][ T5950] loop6: unable to read partition table [ 61.597450][ T7183] ldm_validate_partition_table(): Disk read failed. [ 61.599882][ T7183] Dev loop6: unable to read RDB block 0 [ 61.601794][ T7183] loop6: unable to read partition table [ 61.604173][ T7183] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 61.617932][ T7191] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 61.661772][ T7197] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 61.705587][ T7205] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 61.708253][ T7205] netlink: 172 bytes leftover after parsing attributes in process `syz.2.371'. [ 61.753136][ T7209] selinux_netlink_send: 25 callbacks suppressed [ 61.753147][ T7209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=7209 comm=syz.2.372 [ 61.771888][ T5941] Bluetooth: hci1: Malformed Event: 0x02 [ 61.917843][ T7221] binder: 7220:7221 ioctl 4018620d 200000000100 returned -22 [ 61.917926][ T7222] binder: 7220:7222 ioctl 4018620d 200000000100 returned -22 [ 62.150657][ T7225] loop6: detected capacity change from 0 to 524287487 [ 62.153439][ T7225] ldm_validate_partition_table(): Disk read failed. [ 62.156085][ T7225] Dev loop6: unable to read RDB block 0 [ 62.158526][ T7225] loop6: unable to read partition table [ 62.160902][ T7225] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 62.296518][ T5941] Bluetooth: hci0: Malformed Event: 0x02 [ 62.370154][ T5941] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 62.373793][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: kworker/u33:4 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 62.373810][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.373818][ T5941] Workqueue: hci2 hci_rx_work [ 62.373845][ T5941] Call Trace: [ 62.373850][ T5941] [ 62.373854][ T5941] dump_stack_lvl+0x16c/0x1f0 [ 62.373873][ T5941] sysfs_warn_dup+0x7f/0xa0 [ 62.373890][ T5941] sysfs_create_dir_ns+0x24b/0x2b0 [ 62.373907][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 62.373922][ T5941] ? find_held_lock+0x2b/0x80 [ 62.373939][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 62.373952][ T5941] kobject_add_internal+0x2c4/0x9b0 [ 62.373966][ T5941] kobject_add+0x16e/0x240 [ 62.373977][ T5941] ? __pfx_kobject_add+0x10/0x10 [ 62.373990][ T5941] ? do_raw_spin_unlock+0x172/0x230 [ 62.374002][ T5941] ? kobject_put+0xab/0x5a0 [ 62.374023][ T5941] device_add+0x288/0x1a70 [ 62.374034][ T5941] ? __pfx_dev_set_name+0x10/0x10 [ 62.374045][ T5941] ? __pfx_device_add+0x10/0x10 [ 62.374055][ T5941] ? mgmt_send_event_skb+0x2fb/0x460 [ 62.374076][ T5941] hci_conn_add_sysfs+0x17e/0x230 [ 62.374088][ T5941] le_conn_complete_evt+0x1075/0x1d70 [ 62.374108][ T5941] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 62.374124][ T5941] ? hci_event_packet+0x459/0x11c0 [ 62.374144][ T5941] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 62.374161][ T5941] ? skb_pull_data+0x166/0x210 [ 62.374178][ T5941] hci_le_meta_evt+0x354/0x5e0 [ 62.374188][ T5941] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 62.374206][ T5941] hci_event_packet+0x685/0x11c0 [ 62.374223][ T5941] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.374234][ T5941] ? __pfx_hci_event_packet+0x10/0x10 [ 62.374252][ T5941] ? kcov_remote_start+0x3c9/0x6d0 [ 62.374270][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 62.374299][ T5941] hci_rx_work+0x2c5/0x16b0 [ 62.374342][ T5941] ? rcu_is_watching+0x12/0xc0 [ 62.374360][ T5941] process_one_work+0x9cc/0x1b70 [ 62.374379][ T5941] ? __pfx_process_one_work+0x10/0x10 [ 62.374396][ T5941] ? assign_work+0x1a0/0x250 [ 62.374417][ T5941] worker_thread+0x6c8/0xf10 [ 62.374432][ T5941] ? __kthread_parkme+0x19e/0x250 [ 62.374449][ T5941] ? __pfx_worker_thread+0x10/0x10 [ 62.374459][ T5941] kthread+0x3c2/0x780 [ 62.374469][ T5941] ? __pfx_kthread+0x10/0x10 [ 62.374480][ T5941] ? rcu_is_watching+0x12/0xc0 [ 62.374493][ T5941] ? __pfx_kthread+0x10/0x10 [ 62.374508][ T5941] ret_from_fork+0x5d4/0x6f0 [ 62.374524][ T5941] ? __pfx_kthread+0x10/0x10 [ 62.374534][ T5941] ret_from_fork_asm+0x1a/0x30 [ 62.374554][ T5941] [ 62.374583][ T5941] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.376025][ T7255] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.379160][ T5941] Bluetooth: hci2: failed to register connection device [ 62.470632][ T7255] netlink: 'syz.1.385': attribute type 29 has an invalid length. [ 62.485507][ T7255] netlink: 'syz.1.385': attribute type 29 has an invalid length. [ 62.657410][ T7275] xt_HMARK: spi-set and port-set can't be combined [ 62.680547][ T7276] loop6: detected capacity change from 0 to 524287487 [ 62.683305][ T7276] ldm_validate_partition_table(): Disk read failed. [ 62.685620][ T7276] Dev loop6: unable to read RDB block 0 [ 62.687820][ T7276] loop6: unable to read partition table [ 62.689854][ T7276] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 62.700918][ T7279] xt_hashlimit: size too large, truncated to 1048576 [ 62.717993][ T7269] input: syz1 as /devices/virtual/input/input9 [ 62.979631][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 63.164137][ T7307] loop6: detected capacity change from 0 to 524287487 [ 63.168718][ T7307] ldm_validate_partition_table(): Disk read failed. [ 63.171503][ T7307] Dev loop6: unable to read RDB block 0 [ 63.173924][ T7307] loop6: unable to read partition table [ 63.176280][ T7307] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.312815][ T7313] netlink: 248 bytes leftover after parsing attributes in process `syz.2.403'. [ 63.611530][ T7337] loop6: detected capacity change from 0 to 524287487 [ 63.614377][ T7337] ldm_validate_partition_table(): Disk read failed. [ 63.616571][ T7337] Dev loop6: unable to read RDB block 0 [ 63.618489][ T7337] loop6: unable to read partition table [ 63.624594][ T7337] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.691599][ T7348] cifs: Unknown parameter 'UMŒ/3yèÎÓãkVÙû×÷rWUš.exÅ1?À' [ 63.833602][ T7362] geneve1: entered allmulticast mode [ 63.888668][ T7366] batadv1: entered promiscuous mode [ 63.894051][ T7370] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.937626][ T7372] loop6: detected capacity change from 0 to 524287487 [ 63.940656][ T7372] ldm_validate_partition_table(): Disk read failed. [ 63.942918][ T7372] Dev loop6: unable to read RDB block 0 [ 63.944843][ T7372] loop6: unable to read partition table [ 63.947509][ T7372] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 63.953937][ T7374] netlink: 'syz.1.423': attribute type 4 has an invalid length. [ 63.962818][ T7374] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 64.036284][ T5301] Bluetooth: hci2: Malformed Event: 0x02 [ 64.222243][ T7386] could not allocate digest TFM handle cryptd(blake2b-160) [ 64.227265][ T7410] loop6: detected capacity change from 0 to 524287487 [ 64.230417][ T7410] ldm_validate_partition_table(): Disk read failed. [ 64.233093][ T7410] Dev loop6: unable to read RDB block 0 [ 64.235096][ T7410] loop6: unable to read partition table [ 64.238314][ T7410] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 64.274790][ T5301] Bluetooth: hci0: Malformed Event: 0x02 [ 64.304119][ T7421] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 64.306791][ T7421] __nla_validate_parse: 8 callbacks suppressed [ 64.306799][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.441'. [ 64.341273][ T5301] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 64.344838][ T7428] syz.0.444: attempt to access beyond end of device [ 64.344838][ T7428] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 64.349130][ T7428] syz.0.444: attempt to access beyond end of device [ 64.349130][ T7428] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 64.353895][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 64.357075][ T7428] syz.0.444: attempt to access beyond end of device [ 64.357075][ T7428] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 64.362392][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 64.366085][ T7428] syz.0.444: attempt to access beyond end of device [ 64.366085][ T7428] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 64.370962][ T7428] syz.0.444: attempt to access beyond end of device [ 64.370962][ T7428] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 64.375514][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 64.378591][ T7428] syz.0.444: attempt to access beyond end of device [ 64.378591][ T7428] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 64.382859][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 64.386228][ T7428] syz.0.444: attempt to access beyond end of device [ 64.386228][ T7428] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 64.390398][ T7428] syz.0.444: attempt to access beyond end of device [ 64.390398][ T7428] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 64.394410][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 64.397518][ T7428] syz.0.444: attempt to access beyond end of device [ 64.397518][ T7428] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 64.402390][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 64.403400][ T6002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.406271][ T7428] syz.0.444: attempt to access beyond end of device [ 64.406271][ T7428] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 64.411788][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 64.414703][ T7428] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 64.417582][ T7428] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 64.535913][ T7433] binder: BC_ATTEMPT_ACQUIRE not supported [ 64.537784][ T7433] binder: 7431:7433 ioctl c0306201 200000000a80 returned -22 [ 64.560965][ T6002] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.563801][ T6002] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 64.567033][ T6002] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.570148][ T6002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 64.573603][ T6002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 64.579362][ T6002] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.583845][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.587439][ T6002] usb 7-1: Product: syz [ 64.588909][ T6002] usb 7-1: Manufacturer: syz [ 64.590768][ T5301] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 64.594598][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 64.595988][ T7443] tmpfs: Bad value for 'mpol' [ 64.596257][ T6002] cdc_wdm 7-1:1.0: skipping garbage [ 64.603008][ T6002] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 64.604894][ T6002] cdc_wdm 7-1:1.0: Unknown control protocol [ 64.846915][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.849783][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.852268][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.854462][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.856824][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.859354][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.862135][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.864771][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.867411][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.870097][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.872379][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.874473][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.876574][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.878748][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.880836][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.882899][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.884982][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.887084][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.889820][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 64.892583][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 64.897859][ T6002] usb 7-1: USB disconnect, device number 4 [ 64.900024][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 65.049274][ T5941] Bluetooth: hci2: Malformed LE Event: 0x1b [ 65.344077][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 65.732371][ T7463] loop6: detected capacity change from 0 to 524287487 [ 65.735634][ T7463] ldm_validate_partition_table(): Disk read failed. [ 65.738419][ T7463] Dev loop6: unable to read RDB block 0 [ 65.740994][ T7463] loop6: unable to read partition table [ 65.743670][ T7463] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 66.580082][ T7432] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.354828][ T7432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.362097][ T7432] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 67.365184][ T7432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 67.367393][ T7432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.371559][ T7432] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 67.374015][ T7432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 67.375953][ T7432] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.378462][ T7432] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 67.382598][ T7432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 67.384495][ T7432] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.387168][ T7432] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 67.413641][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 67.413651][ T40] audit: type=1400 audit(1750136803.157:440): avc: denied { create } for pid=7464 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.423515][ T40] audit: type=1400 audit(1750136803.157:441): avc: denied { connect } for pid=7464 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.457099][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'. [ 67.489742][ T7474] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 67.496255][ T7474] vlan3: entered promiscuous mode [ 67.497880][ T7474] bridge0: entered promiscuous mode [ 67.500504][ T7474] vlan3: entered allmulticast mode [ 67.502156][ T7474] bridge0: entered allmulticast mode [ 67.506148][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.458'. [ 67.570797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 67.575922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 67.579350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.773086][ T40] audit: type=1400 audit(1750136803.517:442): avc: denied { getopt } for pid=7483 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.871955][ T7492] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 67.878555][ T7492] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.947749][ T7494] loop6: detected capacity change from 0 to 524287487 [ 67.950928][ T7494] buffer_io_error: 191 callbacks suppressed [ 67.950937][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.955351][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.957925][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.961108][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.963724][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.966245][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.968809][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.971598][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.974102][ T7494] ldm_validate_partition_table(): Disk read failed. [ 67.976256][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.978847][ T7494] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.982925][ T7494] Dev loop6: unable to read RDB block 0 [ 67.986018][ T7494] loop6: unable to read partition table [ 67.988143][ T7494] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 68.081642][ T40] audit: type=1400 audit(1750136803.827:443): avc: denied { listen } for pid=7495 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.089984][ T40] audit: type=1400 audit(1750136803.827:444): avc: denied { accept } for pid=7495 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.263683][ T40] audit: type=1400 audit(1750136804.007:445): avc: denied { setopt } for pid=7500 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.313682][ T7510] mkiss: ax0: crc mode is auto. [ 68.319689][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 68.333788][ T7512] netlink: 2872 bytes leftover after parsing attributes in process `syz.3.471'. [ 68.484452][ T7516] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 68.514428][ T40] audit: type=1400 audit(1750136804.257:446): avc: denied { accept } for pid=7517 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 68.549643][ T7520] loop6: detected capacity change from 0 to 524287487 [ 68.552434][ T7520] ldm_validate_partition_table(): Disk read failed. [ 68.557211][ T7520] Dev loop6: unable to read RDB block 0 [ 68.562904][ T7520] loop6: unable to read partition table [ 68.565494][ T7520] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 68.606667][ T40] audit: type=1400 audit(1750136804.347:447): avc: granted { setsecparam } for pid=7515 comm="syz.2.472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 68.651681][ T7529] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 68.660495][ T7529] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.661998][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.664003][ T7529] bond0: (slave team0): Enslaving as an active interface with an up link [ 68.694848][ T7532] xfrm1: entered allmulticast mode [ 68.727508][ T7538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.480'. [ 68.731775][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 68.734745][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 68.737557][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 68.801221][ T7550] xt_ecn: cannot match TCP bits for non-tcp packets [ 68.809605][ T5023] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 68.974121][ T5023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.979070][ T5023] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.982695][ T5023] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.987101][ T5023] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.991781][ T5023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.000168][ T5023] usb 8-1: config 0 descriptor?? [ 69.220087][ T5023] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xe [ 69.220097][ T7582] binder: 7579:7582 ioctl c00c6211 0 returned -14 [ 69.225113][ T5023] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 69.228432][ T5023] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 69.243271][ T5023] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.247909][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 69.250900][ T5023] usb 8-1: USB disconnect, device number 2 [ 69.290125][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.491'. [ 69.290448][ T7589] fido_id[7589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 69.316515][ T40] audit: type=1400 audit(1750136805.057:448): avc: denied { module_request } for pid=7597 comm="syz.3.492" kmod="netdev-cifs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 69.318196][ T7600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7600 comm=syz.3.492 [ 69.376003][ T40] audit: type=1400 audit(1750136805.117:449): avc: denied { read } for pid=7607 comm="syz.0.495" name="file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.379728][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 69.384859][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.397302][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.494'. [ 69.397302][ T7612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.494'. [ 69.435361][ T7616] loop6: detected capacity change from 0 to 524287487 [ 69.438716][ T5950] ldm_validate_partition_table(): Disk read failed. [ 69.445180][ T5950] Dev loop6: unable to read RDB block 0 [ 69.447276][ T5950] loop6: unable to read partition table [ 69.450085][ T7616] ldm_validate_partition_table(): Disk read failed. [ 69.452329][ T7616] Dev loop6: unable to read RDB block 0 [ 69.454927][ T7616] loop6: unable to read partition table [ 69.456811][ T7616] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 69.469921][ T5301] Bluetooth: hci3: command 0x0405 tx timeout [ 69.472700][ T7620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'. [ 69.477715][ T7620] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 69.526038][ T5301] Bluetooth: hci3: Malformed Event: 0x02 [ 69.648083][ T7630] QAT: Invalid ioctl -1065308482 [ 69.716551][ T7639] binder: 7636:7639 ioctl c0306201 200000000080 returned -14 [ 69.719024][ T7638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.722177][ T7638] IPv6: NLM_F_CREATE should be set when creating new route [ 69.725029][ T7638] IPv6: NLM_F_CREATE should be set when creating new route [ 69.731609][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.507'. [ 69.836740][ T5301] Bluetooth: hci2: Malformed Event: 0x02 [ 69.869232][ T7655] nfs4: Bad value for 'source' [ 69.931841][ T7667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.512'. [ 69.934496][ T7668] dlm: non-version read from control device 0 [ 69.934916][ T7662] SELinux: truncated policydb string identifier [ 69.938939][ T7662] SELinux: failed to load policy [ 69.967326][ T7670] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.996876][ T7664] sd 0:0:0:0: PR command failed: 1026 [ 69.998653][ T7664] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 70.001245][ T7664] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 70.065208][ T7683] overlay: Bad value for 'workdir' [ 70.171797][ T7711] FAULT_INJECTION: forcing a failure. [ 70.171797][ T7711] name failslab, interval 1, probability 0, space 0, times 1 [ 70.177383][ T7711] CPU: 3 UID: 0 PID: 7711 Comm: syz.3.534 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 70.177400][ T7711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.177406][ T7711] Call Trace: [ 70.177410][ T7711] [ 70.177421][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 70.177458][ T7711] should_fail_ex+0x512/0x640 [ 70.177476][ T7711] ? fs_reclaim_acquire+0xae/0x150 [ 70.177488][ T7711] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.177505][ T7711] should_failslab+0xc2/0x120 [ 70.177521][ T7711] __kmalloc_noprof+0xd2/0x510 [ 70.177538][ T7711] tomoyo_realpath_from_path+0xc2/0x6e0 [ 70.177557][ T7711] ? tomoyo_profile+0x47/0x60 [ 70.177582][ T7711] tomoyo_path_number_perm+0x245/0x580 [ 70.177598][ T7711] ? tomoyo_path_number_perm+0x237/0x580 [ 70.177621][ T7711] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.177642][ T7711] ? find_held_lock+0x2b/0x80 [ 70.177683][ T7711] ? find_held_lock+0x2b/0x80 [ 70.177701][ T7711] ? hook_file_ioctl_common+0x145/0x410 [ 70.177721][ T7711] ? __fget_files+0x20e/0x3c0 [ 70.177745][ T7711] security_file_ioctl+0x9b/0x240 [ 70.177768][ T7711] __x64_sys_ioctl+0xb7/0x210 [ 70.177788][ T7711] do_syscall_64+0xcd/0x4c0 [ 70.177812][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.177828][ T7711] RIP: 0033:0x7fca0178e929 [ 70.177840][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.177855][ T7711] RSP: 002b:00007fca02521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.177870][ T7711] RAX: ffffffffffffffda RBX: 00007fca019b5fa0 RCX: 00007fca0178e929 [ 70.177881][ T7711] RDX: 0000000000000003 RSI: 0000000000005325 RDI: 0000000000000003 [ 70.177890][ T7711] RBP: 00007fca02521090 R08: 0000000000000000 R09: 0000000000000000 [ 70.177899][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.177908][ T7711] R13: 0000000000000000 R14: 00007fca019b5fa0 R15: 00007ffcbf90afb8 [ 70.177930][ T7711] [ 70.177936][ T7711] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.254072][ T7718] dummy0: entered promiscuous mode [ 70.414216][ T7742] 9pnet_virtio: no channels available for device syz [ 70.434109][ T1186] tipc: Subscription rejected, illegal request [ 70.605853][ T7751] FAULT_INJECTION: forcing a failure. [ 70.605853][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 70.611221][ T7751] CPU: 2 UID: 0 PID: 7751 Comm: syz.2.547 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 70.611244][ T7751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.611254][ T7751] Call Trace: [ 70.611260][ T7751] [ 70.611267][ T7751] dump_stack_lvl+0x16c/0x1f0 [ 70.611311][ T7751] should_fail_ex+0x512/0x640 [ 70.611332][ T7751] ? fs_reclaim_acquire+0xae/0x150 [ 70.611351][ T7751] ? tomoyo_encode2+0x100/0x3e0 [ 70.611371][ T7751] should_failslab+0xc2/0x120 [ 70.611394][ T7751] __kmalloc_noprof+0xd2/0x510 [ 70.611414][ T7751] ? d_absolute_path+0x136/0x1a0 [ 70.611441][ T7751] tomoyo_encode2+0x100/0x3e0 [ 70.611466][ T7751] tomoyo_encode+0x29/0x50 [ 70.611487][ T7751] tomoyo_realpath_from_path+0x18f/0x6e0 [ 70.611516][ T7751] tomoyo_path_number_perm+0x245/0x580 [ 70.611533][ T7751] ? tomoyo_path_number_perm+0x237/0x580 [ 70.611554][ T7751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.611573][ T7751] ? find_held_lock+0x2b/0x80 [ 70.611614][ T7751] ? find_held_lock+0x2b/0x80 [ 70.611632][ T7751] ? hook_file_ioctl_common+0x145/0x410 [ 70.611656][ T7751] ? __fget_files+0x20e/0x3c0 [ 70.611683][ T7751] security_file_ioctl+0x9b/0x240 [ 70.611709][ T7751] __x64_sys_ioctl+0xb7/0x210 [ 70.611730][ T7751] do_syscall_64+0xcd/0x4c0 [ 70.611757][ T7751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.611774][ T7751] RIP: 0033:0x7fe341d8e929 [ 70.611788][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.611805][ T7751] RSP: 002b:00007fe342c3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.611821][ T7751] RAX: ffffffffffffffda RBX: 00007fe341fb5fa0 RCX: 00007fe341d8e929 [ 70.611833][ T7751] RDX: 0000000000000003 RSI: 0000000000005325 RDI: 0000000000000003 [ 70.611844][ T7751] RBP: 00007fe342c3a090 R08: 0000000000000000 R09: 0000000000000000 [ 70.611853][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.611862][ T7751] R13: 0000000000000000 R14: 00007fe341fb5fa0 R15: 00007ffeeb521798 [ 70.611885][ T7751] [ 70.611902][ T7751] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.711667][ T7749] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 70.739622][ T5301] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.968301][ T7762] bio_check_eod: 2 callbacks suppressed [ 70.968312][ T7762] syz.3.552: attempt to access beyond end of device [ 70.968312][ T7762] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 70.977777][ T7762] (syz.3.552,7762,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 70.980859][ T7762] (syz.3.552,7762,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 70.983172][ T7762] (syz.3.552,7762,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 70.985794][ T7762] (syz.3.552,7762,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 70.995952][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.553'. [ 71.023440][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'. [ 71.070792][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.072974][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.130465][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 71.284062][ T7778] FAULT_INJECTION: forcing a failure. [ 71.284062][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 71.288029][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.1.558 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 71.288045][ T7778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.288051][ T7778] Call Trace: [ 71.288056][ T7778] [ 71.288060][ T7778] dump_stack_lvl+0x16c/0x1f0 [ 71.288094][ T7778] should_fail_ex+0x512/0x640 [ 71.288113][ T7778] ? fs_reclaim_acquire+0xae/0x150 [ 71.288125][ T7778] ? bio_kmalloc+0x41/0x70 [ 71.288141][ T7778] should_failslab+0xc2/0x120 [ 71.288157][ T7778] __kmalloc_noprof+0xd2/0x510 [ 71.288171][ T7778] ? __pfx___debug_object_init+0x10/0x10 [ 71.288184][ T7778] bio_kmalloc+0x41/0x70 [ 71.288198][ T7778] blk_rq_map_kern+0x387/0x6d0 [ 71.288213][ T7778] scsi_execute_cmd+0xbd9/0xef0 [ 71.288236][ T7778] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 71.288257][ T7778] sr_check_events+0x1f1/0xad0 [ 71.288273][ T7778] ? find_held_lock+0x2b/0x80 [ 71.288286][ T7778] ? __pfx_sr_check_events+0x10/0x10 [ 71.288300][ T7778] ? avc_has_extended_perms+0x33a/0x1090 [ 71.288321][ T7778] ? __lock_acquire+0xb8a/0x1c90 [ 71.288341][ T7778] cdrom_ioctl_media_changed+0x2ab/0x480 [ 71.288352][ T7778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.288366][ T7778] cdrom_ioctl+0x1072/0x3190 [ 71.288377][ T7778] ? __pfx_cdrom_ioctl+0x10/0x10 [ 71.288387][ T7778] ? rpm_resume+0x80c/0x1310 [ 71.288401][ T7778] ? rcu_is_watching+0x12/0xc0 [ 71.288415][ T7778] ? rpm_resume+0x80c/0x1310 [ 71.288429][ T7778] ? trace_rpm_return_int+0x196/0x220 [ 71.288443][ T7778] ? rpm_resume+0x811/0x1310 [ 71.288461][ T7778] ? __pfx_rpm_resume+0x10/0x10 [ 71.288475][ T7778] ? do_raw_spin_lock+0x12c/0x2b0 [ 71.288487][ T7778] ? find_held_lock+0x2b/0x80 [ 71.288500][ T7778] ? mark_held_locks+0x49/0x80 [ 71.288520][ T7778] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 71.288535][ T7778] ? lockdep_hardirqs_on+0x7c/0x110 [ 71.288551][ T7778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 71.288566][ T7778] ? __pm_runtime_resume+0xc3/0x170 [ 71.288583][ T7778] sr_block_ioctl+0x1b0/0x250 [ 71.288598][ T7778] ? __pfx_sr_block_ioctl+0x10/0x10 [ 71.288614][ T7778] blkdev_ioctl+0x274/0x6d0 [ 71.288625][ T7778] ? __pfx_blkdev_ioctl+0x10/0x10 [ 71.288635][ T7778] ? selinux_file_ioctl+0x180/0x270 [ 71.288652][ T7778] ? selinux_file_ioctl+0xb4/0x270 [ 71.288667][ T7778] ? __pfx_blkdev_ioctl+0x10/0x10 [ 71.288679][ T7778] __x64_sys_ioctl+0x18b/0x210 [ 71.288693][ T7778] do_syscall_64+0xcd/0x4c0 [ 71.288710][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.288721][ T7778] RIP: 0033:0x7f41ec38e929 [ 71.288730][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.288741][ T7778] RSP: 002b:00007f41ed2a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.288751][ T7778] RAX: ffffffffffffffda RBX: 00007f41ec5b5fa0 RCX: 00007f41ec38e929 [ 71.288758][ T7778] RDX: 0000000000000003 RSI: 0000000000005325 RDI: 0000000000000003 [ 71.288766][ T7778] RBP: 00007f41ed2a9090 R08: 0000000000000000 R09: 0000000000000000 [ 71.288772][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.288778][ T7778] R13: 0000000000000000 R14: 00007f41ec5b5fa0 R15: 00007ffef28a2f48 [ 71.288792][ T7778] [ 71.396997][ T7784] netlink: 'syz.0.561': attribute type 2 has an invalid length. [ 71.400733][ T7784] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 71.431720][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 71.459784][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.461754][ T5301] Bluetooth: hci2: command 0x0406 tx timeout [ 71.539356][ T7797] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 71.544366][ T1186] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.546522][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.549619][ T5301] Bluetooth: hci3: command 0x0405 tx timeout [ 71.575177][ T7799] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 71.715601][ T7813] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 71.718041][ T7813] netlink: 17 bytes leftover after parsing attributes in process `syz.0.571'. [ 72.663375][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 72.663387][ T40] audit: type=1326 audit(1750136808.414:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7829 comm="syz.2.576" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe341d8e929 code=0x0 [ 72.730751][ T40] audit: type=1326 audit(1750136808.484:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7831 comm="syz.0.577" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f198e929 code=0x0 [ 73.540156][ T5301] Bluetooth: hci2: command 0x0406 tx timeout [ 73.540173][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.598437][ T7840] fuse: Bad value for 'rootmode' [ 73.629855][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 73.629927][ T5301] Bluetooth: hci4: command 0x1003 tx timeout [ 73.632620][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.643070][ T7836] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 73.708909][ T1142] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 73.712313][ T7838] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7838 comm=syz.2.578 [ 73.785019][ T40] audit: type=1400 audit(1750136809.534:480): avc: denied { read write } for pid=7863 comm="syz.1.584" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.792175][ T40] audit: type=1400 audit(1750136809.544:481): avc: denied { open } for pid=7863 comm="syz.1.584" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.805220][ T40] audit: type=1400 audit(1750136809.554:482): avc: denied { map } for pid=7863 comm="syz.1.584" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.812288][ T40] audit: type=1400 audit(1750136809.554:483): avc: denied { execute } for pid=7863 comm="syz.1.584" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.814700][ T7864] loop6: detected capacity change from 0 to 524287487 [ 73.823289][ T7864] buffer_io_error: 57 callbacks suppressed [ 73.823299][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.827804][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.830554][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.833049][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.835555][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.838030][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.840891][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.843376][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.845841][ T7864] ldm_validate_partition_table(): Disk read failed. [ 73.847946][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.850633][ T7864] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.853179][ T7864] Dev loop6: unable to read RDB block 0 [ 73.855128][ T7864] loop6: unable to read partition table [ 73.857015][ T7864] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 73.887806][ T7871] netlink: 'syz.0.586': attribute type 9 has an invalid length. [ 73.984665][ T7879] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 74.075441][ T40] audit: type=1400 audit(1750136809.824:484): avc: denied { append } for pid=7890 comm="syz.3.593" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.218805][ T5941] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 74.394105][ T7909] netlink: 'syz.1.599': attribute type 30 has an invalid length. [ 74.396792][ T7909] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 74.399838][ T7909] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 74.403231][ T7909] __nla_validate_parse: 3 callbacks suppressed [ 74.403240][ T7909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.599'. [ 74.456478][ T40] audit: type=1400 audit(1750136810.204:485): avc: denied { watch } for pid=7922 comm="syz.2.604" path="/130/file0" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.466995][ T40] audit: type=1400 audit(1750136810.204:486): avc: denied { watch_sb watch_reads } for pid=7922 comm="syz.2.604" path="/130/file0" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.471784][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 74.508570][ T7931] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 74.516046][ T7931] bond0: (slave team0): Releasing backup interface [ 74.525150][ T7931] batman_adv: batadv0: Adding interface: team0 [ 74.527080][ T7931] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.535036][ T7931] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 74.549321][ T7931] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 74.553185][ T7931] netlink: 2 bytes leftover after parsing attributes in process `syz.0.606'. [ 74.556159][ T7931] team0: entered promiscuous mode [ 74.559152][ T7931] team_slave_0: entered promiscuous mode [ 74.559662][ T1333] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.562345][ T7931] team_slave_1: entered promiscuous mode [ 74.565679][ T7931] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.567919][ T7931] batman_adv: batadv0: Interface activated: team0 [ 74.570257][ T7931] batman_adv: batadv0: Interface deactivated: team0 [ 74.572499][ T7931] batman_adv: batadv0: Removing interface: team0 [ 74.575450][ T7931] bridge0: port 3(team0) entered blocking state [ 74.577508][ T7931] bridge0: port 3(team0) entered disabled state [ 74.579678][ T7931] team0: entered allmulticast mode [ 74.581405][ T7931] team_slave_0: entered allmulticast mode [ 74.583330][ T7931] team_slave_1: entered allmulticast mode [ 74.675545][ T7941] loop2: detected capacity change from 0 to 7 [ 74.686755][ T5950] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 74.688700][ T5950] loop2: partition table partially beyond EOD, truncated [ 74.691880][ T5950] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 74.705067][ T7941] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 74.707024][ T7941] loop2: partition table partially beyond EOD, truncated [ 74.710594][ T7941] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 74.713878][ T1333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.718391][ T1333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.722641][ T1333] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.727876][ T1333] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.734758][ T1333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.740627][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.741292][ T1333] usb 8-1: config 0 descriptor?? [ 74.765468][ T5950] udevd[5950]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.945571][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.613'. [ 74.948253][ T40] audit: type=1400 audit(1750136810.694:487): avc: denied { ioctl } for pid=7905 comm="syz.3.598" path="socket:[21552]" dev="sockfs" ino=21552 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.000083][ T7963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.008131][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 75.096035][ T7966] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 75.159824][ T1333] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 75.163977][ T1333] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 75.170645][ T1333] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 75.271943][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 75.274686][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 75.420884][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.598'. [ 75.436983][ T6002] usb 8-1: USB disconnect, device number 3 [ 75.446477][ T7983] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.523500][ T7992] overlay: Bad value for 'workdir' [ 75.554613][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 75.557724][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.627'. [ 75.625062][ T7997] tmpfs: Bad value for 'mpol' [ 75.631107][ T8008] xt_hashlimit: size too large, truncated to 1048576 [ 75.696232][ T8013] batadv1: entered promiscuous mode [ 75.724134][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 75.732157][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.631'. [ 75.791512][ T8028] raw_sendmsg: syz.0.633 forgot to set AF_INET. Fix it! [ 75.965461][ T8046] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 75.985614][ T8048] fuse: Unknown parameter 'rootmodd' [ 76.084688][ T8057] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 77.021557][ T8086] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.037531][ T8091] tmpfs: Unknown parameter 'm[°l' [ 77.040033][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.044604][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.289641][ T836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.463931][ T836] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.467408][ T836] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 77.470762][ T836] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 77.474348][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.479624][ T8087] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.484859][ T836] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.683491][ T1471] usb 8-1: USB disconnect, device number 4 [ 77.779647][ T8128] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 77.814913][ T8130] wg1: entered promiscuous mode [ 77.816642][ T8130] wg1: entered allmulticast mode [ 77.880509][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 77.880520][ T40] audit: type=1400 audit(1750136813.634:597): avc: denied { ioctl } for pid=8132 comm="syz.0.666" path="socket:[21004]" dev="sockfs" ino=21004 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.892491][ T8086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.894855][ T8086] IPv6: NLM_F_CREATE should be set when creating new route [ 77.953143][ T8123] autofs4:pid:8123:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(132694.524047), cmd(0xc018937b) [ 77.957440][ T8123] autofs4:pid:8123:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 78.048528][ T40] audit: type=1400 audit(1750136813.794:598): avc: denied { create } for pid=8140 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 78.858184][ T40] audit: type=1400 audit(1750136814.604:599): avc: denied { read write } for pid=8162 comm="syz.0.676" name="uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 78.859616][ T8163] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 78.867694][ T40] audit: type=1400 audit(1750136814.604:600): avc: denied { open } for pid=8162 comm="syz.0.676" path="/dev/uhid" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.058264][ T8174] fuse: Unknown parameter 'rootmodd' [ 79.249414][ T40] audit: type=1400 audit(1750136814.994:601): avc: denied { associate } for pid=8189 comm="syz.3.684" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.258188][ T40] audit: type=1400 audit(1750136815.004:602): avc: denied { read } for pid=8189 comm="syz.3.684" name="file0" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.265178][ T40] audit: type=1400 audit(1750136815.004:603): avc: denied { open } for pid=8189 comm="syz.3.684" path="/195/file0/file0" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.274837][ T40] audit: type=1400 audit(1750136815.024:604): avc: denied { lock } for pid=8189 comm="syz.3.684" path="/195/file0/file0" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.287005][ T40] audit: type=1400 audit(1750136815.034:605): avc: denied { mounton } for pid=8189 comm="syz.3.684" path="/195/file0/file0" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.297091][ T40] audit: type=1400 audit(1750136815.044:606): avc: denied { ioctl } for pid=8189 comm="syz.3.684" path="/195/file0/file0" dev="9p" ino=35913954 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.297863][ T8194] SET target dimension over the limit! [ 79.383109][ T8199] batadv_slave_1: entered promiscuous mode [ 79.452656][ T8199] team0 (unregistering): Port device team_slave_0 removed [ 79.457970][ T8199] team0 (unregistering): Port device team_slave_1 removed [ 79.529562][ T5023] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.595827][ T8198] batadv_slave_1: left promiscuous mode [ 79.683063][ T8202] overlayfs: upper fs does not support tmpfile. [ 79.689552][ T5023] usb 5-1: Using ep0 maxpacket: 8 [ 79.702016][ T5023] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 79.704819][ T5023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.707248][ T5023] usb 5-1: Product: syz [ 79.708544][ T5023] usb 5-1: Manufacturer: syz [ 79.719533][ T5023] usb 5-1: SerialNumber: syz [ 79.722278][ T5023] usb 5-1: config 0 descriptor?? [ 79.928841][ T5023] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 79.931381][ T5023] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 79.937067][ T5023] usb 5-1: USB disconnect, device number 2 [ 80.066297][ T8208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.362612][ T5941] Bluetooth: hci2: Malformed Event: 0x02 [ 80.546203][ T8228] kvm: user requested TSC rate below hardware speed [ 81.068423][ T8248] __nla_validate_parse: 12 callbacks suppressed [ 81.068440][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.704'. [ 81.263570][ T8263] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 81.265791][ T8263] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.268876][ T8263] vhci_hcd vhci_hcd.0: Device attached [ 81.283370][ T8267] vhci_hcd: connection closed [ 81.284478][ T7955] vhci_hcd: stop threads [ 81.288343][ T7955] vhci_hcd: release socket [ 81.293870][ T7955] vhci_hcd: disconnect device [ 81.296656][ T8274] binder: 8273:8274 ioctl 7cb 200000000600 returned -22 [ 81.306327][ T1024] cfg80211: failed to load regulatory.db [ 81.311697][ T8274] xt_l2tp: v2 doesn't support IP mode [ 81.314803][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.712'. [ 81.317929][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'. [ 81.358406][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.713'. [ 81.361333][ T8284] nbd: illegal input index -5120 [ 81.363454][ T8284] syz.0.713: attempt to access beyond end of device [ 81.363454][ T8284] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 81.367448][ T8284] EXT4-fs (nbd0): unable to read superblock [ 81.714050][ T5941] Bluetooth: hci1: ACL packet for unknown connection handle 3014 [ 81.738554][ T8315] overlay: Unknown parameter 'smackfstransmute' [ 81.831468][ T8318] SELinux: Context system_u:system_r:kernel_t:s0 is not valid (left unmapped). [ 82.099562][ T1024] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 82.251098][ T1024] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.254671][ T1024] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.257807][ T1024] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.262050][ T8322] netlink: 52 bytes leftover after parsing attributes in process `syz.2.723'. [ 82.263069][ T1024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.272485][ T8320] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.277369][ T1024] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.478250][ T8320] macvlan2: entered promiscuous mode [ 82.480104][ T8320] macvlan2: entered allmulticast mode [ 82.486185][ T1471] usb 8-1: USB disconnect, device number 5 [ 82.504860][ T8336] overlayfs: conflicting options: userxattr,metacopy=on [ 82.617835][ T8351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.733'. [ 82.852396][ T8361] delete_channel: no stack [ 82.887205][ T8365] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 82.890826][ T8365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.943693][ T8367] SELinux: failed to load policy [ 83.274201][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.742'. [ 83.427493][ T8395] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.429777][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 83.429790][ T40] audit: type=1400 audit(1750136819.174:623): avc: denied { mounton } for pid=8394 comm="syz.3.746" path="/bus" dev="ramfs" ino=20333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 83.430798][ T8395] overlayfs: failed to set xattr on upper [ 83.443909][ T8395] overlayfs: ...falling back to redirect_dir=nofollow. [ 83.446727][ T8395] overlayfs: ...falling back to index=off. [ 83.449092][ T8395] overlayfs: ...falling back to uuid=null. [ 83.452625][ T8395] overlayfs: ...falling back to xino=off. [ 83.455327][ T8395] overlayfs: conflicting lowerdir path [ 83.841465][ T40] audit: type=1400 audit(1750136819.594:624): avc: denied { shutdown } for pid=8411 comm="syz.3.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.374998][ T8419] loop6: detected capacity change from 0 to 524287487 [ 84.379076][ T5950] buffer_io_error: 7 callbacks suppressed [ 84.379090][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.386439][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.388904][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.392042][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.395606][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.398714][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.401521][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.403950][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.406378][ T5950] ldm_validate_partition_table(): Disk read failed. [ 84.408407][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.411394][ T5950] Buffer I/O error on dev loop6, logical block 0, async page read [ 84.413900][ T5950] Dev loop6: unable to read RDB block 0 [ 84.415814][ T5950] loop6: unable to read partition table [ 84.421262][ T8419] ldm_validate_partition_table(): Disk read failed. [ 84.423670][ T8422] SELinux: ebitmap: truncated map [ 84.424337][ T8419] Dev loop6: unable to read RDB block 0 [ 84.428290][ T8419] loop6: unable to read partition table [ 84.429924][ T8422] SELinux: failed to load policy [ 84.431263][ T8419] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 84.508045][ T8428] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 84.511828][ T40] audit: type=1400 audit(1750136820.264:625): avc: denied { getopt } for pid=8426 comm="syz.0.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.529773][ T8429] vivid-000: ================= START STATUS ================= [ 84.533532][ T8429] vivid-000: Test Pattern: 75% Colorbar [ 84.535921][ T40] audit: type=1400 audit(1750136820.284:626): avc: denied { ioctl } for pid=8427 comm="syz.1.757" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.536080][ T8429] vivid-000: Fill Percentage of Frame: 100 [ 84.548454][ T8429] vivid-000: Horizontal Movement: No Movement [ 84.552426][ T8429] vivid-000: Vertical Movement: No Movement [ 84.555014][ T8429] vivid-000: OSD Text Mode: All [ 84.557339][ T8429] vivid-000: Show Border: false [ 84.559472][ T8429] vivid-000: Show Square: false [ 84.561725][ T8429] vivid-000: Sensor Flipped Horizontally: false [ 84.564359][ T8429] vivid-000: Sensor Flipped Vertically: false [ 84.566998][ T8429] vivid-000: Insert SAV Code in Image: false [ 84.570006][ T8429] vivid-000: Insert EAV Code in Image: false [ 84.572670][ T8429] vivid-000: Insert Video Guard Band: false [ 84.575190][ T8429] vivid-000: Reduced Framerate: false [ 84.577447][ T8429] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 84.580827][ T8429] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 84.582881][ T5301] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 84.584251][ T8429] vivid-000: Enable Capture Cropping: true grabbed [ 84.591903][ T8429] vivid-000: Enable Capture Composing: true grabbed [ 84.594671][ T8429] vivid-000: Enable Capture Scaler: true grabbed [ 84.597265][ T8429] vivid-000: Timestamp Source: End of Frame [ 84.599950][ T8429] vivid-000: Colorspace: SMPTE 170M [ 84.601697][ T8429] vivid-000: Transfer Function: Default [ 84.603492][ T8429] vivid-000: Y'CbCr Encoding: Default [ 84.605198][ T8429] vivid-000: HSV Encoding: Hue 0-179 [ 84.606920][ T8429] vivid-000: Quantization: Default [ 84.608577][ T8429] vivid-000: Apply Alpha To Red Only: false [ 84.610680][ T8429] vivid-000: Standard Aspect Ratio: 4x3 [ 84.612592][ T8429] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 84.615205][ T8429] vivid-000: DV Timings: 640x480p59 inactive [ 84.617109][ T8429] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 84.619421][ T8429] vivid-000: Maximum EDID Blocks: 2 [ 84.621291][ T8429] vivid-000: Limited RGB Range (16-235): false [ 84.623266][ T8429] vivid-000: Rx RGB Quantization Range: Automatic [ 84.630169][ T8429] vivid-000: Power Present: 0x00000001 [ 84.632562][ T8429] tpg source WxH: 720x576 (R'G'B) [ 84.634426][ T8429] tpg field: 4 [ 84.635706][ T8429] tpg crop: (0,0)/720x64 [ 84.636998][ T8429] tpg compose: (0,0)/720x16 [ 84.638478][ T8429] tpg colorspace: 1 [ 84.640827][ T8429] tpg transfer function: 0/1 [ 84.641196][ T8434] netlink: 'syz.3.759': attribute type 2 has an invalid length. [ 84.642406][ T8429] tpg quantization: 0/1 [ 84.646716][ T8429] tpg RGB range: 0/2 [ 84.648004][ T8429] vivid-000: ================== END STATUS ================== [ 84.681360][ T40] audit: type=1400 audit(1750136820.434:627): avc: denied { write } for pid=8438 comm="syz.3.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.752707][ T40] audit: type=1400 audit(1750136820.504:628): avc: denied { read } for pid=8440 comm="syz.0.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.814915][ T5301] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 84.816238][ T8449] tun0: tun_chr_ioctl cmd 1074025675 [ 84.819581][ T8449] tun0: persist enabled [ 84.821299][ T8449] tun0: tun_chr_ioctl cmd 1074025675 [ 84.823250][ T8449] tun0: persist enabled [ 84.830064][ T40] audit: type=1400 audit(1750136820.584:629): avc: denied { ioctl } for pid=8448 comm="syz.3.764" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.877007][ T8454] loop6: detected capacity change from 0 to 524287487 [ 84.880983][ T8454] ldm_validate_partition_table(): Disk read failed. [ 84.884103][ T8454] Dev loop6: unable to read RDB block 0 [ 84.886797][ T8454] loop6: unable to read partition table [ 84.889284][ T8454] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 85.002450][ T40] audit: type=1400 audit(1750136820.754:630): avc: denied { read } for pid=8456 comm="syz.3.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.069156][ T8462] tmpfs: Bad value for 'mpol' [ 85.072810][ T40] audit: type=1400 audit(1750136820.824:631): avc: denied { map } for pid=8461 comm="syz.0.769" path="socket:[22674]" dev="sockfs" ino=22674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.080366][ T40] audit: type=1400 audit(1750136820.824:632): avc: denied { read } for pid=8461 comm="syz.0.769" path="socket:[22674]" dev="sockfs" ino=22674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.177244][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 85.239609][ T140] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 85.369561][ T140] usb 8-1: device descriptor read/64, error -71 [ 85.506040][ T8484] netlink: 596 bytes leftover after parsing attributes in process `syz.1.777'. [ 85.609569][ T140] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.625429][ T88] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.626385][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 85.627507][ T7957] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.631399][ T8497] overlayfs: failed to resolve './file0': -2 [ 85.739630][ T140] usb 8-1: device descriptor read/64, error -71 [ 85.806215][ T8508] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.816603][ T8508] CIFS mount error: No usable UNC path provided in device string! [ 85.816603][ T8508] [ 85.821490][ T8508] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.850527][ T140] usb usb8-port1: attempt power cycle [ 85.859622][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 86.209652][ T140] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 86.240274][ T140] usb 8-1: device descriptor read/8, error -71 [ 86.489684][ T140] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 86.510293][ T140] usb 8-1: device descriptor read/8, error -71 [ 86.620074][ T140] usb usb8-port1: unable to enumerate USB device [ 86.696463][ T8533] __nla_validate_parse: 1 callbacks suppressed [ 86.696475][ T8533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.792'. [ 87.606570][ T5941] Bluetooth: hci2: Malformed Event: 0x02 [ 87.644213][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 87.647057][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 87.691868][ T8544] fuse: Invalid rootmode [ 87.699969][ T5301] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 87.823850][ T8550] sp0: Synchronizing with TNC [ 87.880153][ T8547] [U] è [ 87.991417][ T8554] ------------[ cut here ]------------ [ 87.993187][ T8554] WARNING: CPU: 0 PID: 8554 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 87.996350][ T8554] Modules linked in: [ 87.997955][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.0.799 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 88.003714][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.007068][ T8554] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 88.009168][ T8554] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 88.015890][ T8554] RSP: 0018:ffffc90006bdf4f8 EFLAGS: 00010246 [ 88.017824][ T8554] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 88.020890][ T8554] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 88.023454][ T8554] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 88.025916][ T8554] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 88.028611][ T8554] R13: 1ffff92000d7beb4 R14: 0000000400000000 R15: 0000000000000016 [ 88.031774][ T8554] FS: 00007f03ef7f66c0(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 88.034712][ T8554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.036778][ T8554] CR2: 0000200000006000 CR3: 000000005d741000 CR4: 0000000000352ef0 [ 88.039273][ T8554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.042198][ T8554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.045337][ T8554] Call Trace: [ 88.046881][ T8554] [ 88.047876][ T8554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.050167][ T8554] ? rcu_is_watching+0x12/0xc0 [ 88.052077][ T8554] ? trace_kmem_cache_alloc+0x28/0xc0 [ 88.053879][ T8554] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 88.055792][ T8554] ? hashtab_init+0x1b1/0x290 [ 88.057370][ T8554] __alloc_pages_noprof+0xb/0x1b0 [ 88.058985][ T8554] ___kmalloc_large_node+0x84/0x1e0 [ 88.061269][ T8554] ? hashtab_init+0x1b1/0x290 [ 88.062899][ T8554] __kmalloc_large_node_noprof+0x1c/0x70 [ 88.064724][ T8554] ? __pfx_ebitmap_read+0x10/0x10 [ 88.066481][ T8554] __kmalloc_noprof.cold+0xc/0x61 [ 88.068110][ T8554] hashtab_init+0x1b1/0x290 [ 88.070059][ T8554] ? __asan_memcpy+0x3c/0x60 [ 88.071674][ T8554] policydb_read+0x7b4/0x3220 [ 88.073215][ T8554] ? __pfx_policydb_read+0x10/0x10 [ 88.074973][ T8554] security_load_policy+0x15c/0x12c0 [ 88.076718][ T8554] ? irqentry_exit+0x3b/0x90 [ 88.078249][ T8554] ? __pfx_security_load_policy+0x10/0x10 [ 88.080579][ T8554] ? _copy_from_user+0x93/0xd0 [ 88.082219][ T8554] sel_write_load+0x332/0x1bd0 [ 88.083760][ T8554] ? __lock_acquire+0xb8a/0x1c90 [ 88.085346][ T8554] ? __pfx_sel_write_load+0x10/0x10 [ 88.087023][ T8554] ? __pfx_sel_write_load+0x10/0x10 [ 88.088662][ T8554] vfs_write+0x2a0/0x1150 [ 88.090166][ T8554] ? __pfx___mutex_lock+0x10/0x10 [ 88.091715][ T8554] ? __pfx_vfs_write+0x10/0x10 [ 88.093184][ T8554] ? __fget_files+0x20e/0x3c0 [ 88.094678][ T8554] ksys_write+0x12a/0x250 [ 88.096063][ T8554] ? __pfx_ksys_write+0x10/0x10 [ 88.097646][ T8554] do_syscall_64+0xcd/0x4c0 [ 88.099100][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.101190][ T8554] RIP: 0033:0x7f03f198e929 [ 88.102646][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.108538][ T8554] RSP: 002b:00007f03ef7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.111111][ T8554] RAX: ffffffffffffffda RBX: 00007f03f1bb5fa0 RCX: 00007f03f198e929 [ 88.113588][ T8554] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 88.116077][ T8554] RBP: 00007f03f1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.118530][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.121224][ T8554] R13: 0000000000000000 R14: 00007f03f1bb5fa0 R15: 00007fff1dd870d8 [ 88.123696][ T8554] [ 88.124685][ T8554] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.126937][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.0.799 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 88.130574][ T8554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.133888][ T8554] Call Trace: [ 88.134973][ T8554] [ 88.135950][ T8554] dump_stack_lvl+0x3d/0x1f0 [ 88.137421][ T8554] panic+0x71c/0x800 [ 88.138675][ T8554] ? __pfx_panic+0x10/0x10 [ 88.140083][ T8554] ? show_trace_log_lvl+0x29b/0x3e0 [ 88.141725][ T8554] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 88.143631][ T8554] check_panic_on_warn+0xab/0xb0 [ 88.145202][ T8554] __warn+0xf6/0x3c0 [ 88.146455][ T8554] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 88.148344][ T8554] report_bug+0x3c3/0x580 [ 88.149708][ T8554] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 88.151621][ T8554] handle_bug+0x184/0x210 [ 88.152978][ T8554] exc_invalid_op+0x17/0x50 [ 88.154384][ T8554] asm_exc_invalid_op+0x1a/0x20 [ 88.155873][ T8554] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 88.157937][ T8554] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6e 7a 0e 00 75 0b c6 05 7a 6e 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 88.163824][ T8554] RSP: 0018:ffffc90006bdf4f8 EFLAGS: 00010246 [ 88.165709][ T8554] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 88.168163][ T8554] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 88.170617][ T8554] RBP: 0000000400000000 R08: 0000000000000005 R09: 0000000000000000 [ 88.173067][ T8554] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000016 [ 88.175528][ T8554] R13: 1ffff92000d7beb4 R14: 0000000400000000 R15: 0000000000000016 [ 88.178008][ T8554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.180000][ T8554] ? rcu_is_watching+0x12/0xc0 [ 88.181514][ T8554] ? trace_kmem_cache_alloc+0x28/0xc0 [ 88.183209][ T8554] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 88.184976][ T8554] ? hashtab_init+0x1b1/0x290 [ 88.186472][ T8554] __alloc_pages_noprof+0xb/0x1b0 [ 88.188060][ T8554] ___kmalloc_large_node+0x84/0x1e0 [ 88.189694][ T8554] ? hashtab_init+0x1b1/0x290 [ 88.191198][ T8554] __kmalloc_large_node_noprof+0x1c/0x70 [ 88.192953][ T8554] ? __pfx_ebitmap_read+0x10/0x10 [ 88.194548][ T8554] __kmalloc_noprof.cold+0xc/0x61 [ 88.196141][ T8554] hashtab_init+0x1b1/0x290 [ 88.197581][ T8554] ? __asan_memcpy+0x3c/0x60 [ 88.199047][ T8554] policydb_read+0x7b4/0x3220 [ 88.200560][ T8554] ? __pfx_policydb_read+0x10/0x10 [ 88.202189][ T8554] security_load_policy+0x15c/0x12c0 [ 88.203853][ T8554] ? irqentry_exit+0x3b/0x90 [ 88.205327][ T8554] ? __pfx_security_load_policy+0x10/0x10 [ 88.207118][ T8554] ? _copy_from_user+0x93/0xd0 [ 88.208630][ T8554] sel_write_load+0x332/0x1bd0 [ 88.210154][ T8554] ? __lock_acquire+0xb8a/0x1c90 [ 88.211727][ T8554] ? __pfx_sel_write_load+0x10/0x10 [ 88.213364][ T8554] ? __pfx_sel_write_load+0x10/0x10 [ 88.214986][ T8554] vfs_write+0x2a0/0x1150 [ 88.216355][ T8554] ? __pfx___mutex_lock+0x10/0x10 [ 88.217925][ T8554] ? __pfx_vfs_write+0x10/0x10 [ 88.219450][ T8554] ? __fget_files+0x20e/0x3c0 [ 88.220937][ T8554] ksys_write+0x12a/0x250 [ 88.222314][ T8554] ? __pfx_ksys_write+0x10/0x10 [ 88.223849][ T8554] do_syscall_64+0xcd/0x4c0 [ 88.225295][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.227146][ T8554] RIP: 0033:0x7f03f198e929 [ 88.228554][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.234479][ T8554] RSP: 002b:00007f03ef7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.237074][ T8554] RAX: ffffffffffffffda RBX: 00007f03f1bb5fa0 RCX: 00007f03f198e929 [ 88.239534][ T8554] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 88.241992][ T8554] RBP: 00007f03f1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 88.244453][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.246935][ T8554] R13: 0000000000000000 R14: 00007f03f1bb5fa0 R15: 00007fff1dd870d8 [ 88.249401][ T8554] [ 88.251048][ T8554] Kernel Offset: disabled [ 88.252427][ T8554] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:02:47 Registers: info registers vcpu 0 CPU#0 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc90006bdee60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f03ef7f66c0 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=000000005d741000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010000 0000000000030000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000c0021 RBX=0000000000000001 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19da0 RDI=ffffffff8c1579e0 RBP=ffffed1003bde488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801def2440 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe342c18f98 CR3=00000000337cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555679d7498 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555679e09ba 00005555679dfe00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555679e2ffd 00005555679e2d90 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0049b00064616f6c 2f78756e696c6573 2f01ffffffffffff ffffe3080380031e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fffffffffffff 0400100002100003 80040ff480800401 0800010000060806 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0886c5bac6080001 000008080606011d 8a00080010880301 f608001080030010 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffe108 01800300100005ba 8008000100000808 0606011eae108004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84100034c4100001 8004060173ee0023 647261632f697264 2f7665642f01ffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010381d810000004 0100000008060601 7be80480040fffff ffffffff04040103 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc10080004a80303 acc0080004a00300 0800049803080800 0490030808000488 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302808080080004 800301d0e0841000 34c4100001800406 0173ee0023647261 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f6972642f7665 642f01ffffffffff ffffffe108018003 00100005ba800800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffc900062076e8 RCX=ffffc90006208000 RDX=ffffc90006207a01 RSI=ffffc90006207ad0 RDI=ffffc900062076e8 RBP=ffffc90006207ad0 RSP=ffffc90006207638 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000117ef R12=0000000000000008 R13=ffffc900062076f8 R14=ffffc900062076f0 R15=ffffc90006200000 RIP=ffffffff816ac631 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f03ef7f5f98 CR3=0000000051eeb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1dd87460 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f03f1a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=ffff88806a73bc98 RCX=ffffffff93d3bfc0 RDX=0000000000000000 RSI=ffffffff8ddf48cb RDI=ffffffff8c1579e0 RBP=0000000000000000 RSP=ffffc9000731f7e0 R8 =2c1f16d45a674522 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81987e4a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555594c500 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f03f1b80ab8 CR3=000000005e6e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341e11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341f84488 00007fe341f84480 00007fe341f84478 00007fe341f84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe342aed100 00007fe341f84440 00007fe341f80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe341f84498 00007fe341f84490 00007fe341f84488 00007fe341f84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000