last executing test programs: 3.588021761s ago: executing program 1 (id=277): unshare(0x2a020480) (async) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$igmp(0x2, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.461498288s ago: executing program 1 (id=279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) ioctl$EVIOCRMFF(r3, 0x4004550f, 0x0) ioctl(r2, 0x8b1a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001c00357424bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="4000a2040800b0f81c8b7b8a90457b2dc2c174e0f3ff4a010102d3777f85839e90dd135c9620996231fc001e7ee7fe5e0dd9f7ef35d8e19c444f20fa2b405507a84aefee72e8a3208b794aec9c7a67c8fc6b8db630624716b5ed414650311d2a7fe582814cf42f3a051c1e66ad5c8cc63583679ed694ef3a170d7b8aec4be388c99ee29ad65a6847a0576b80a8496b242e73c8befb933f0bddb36f91c17ce45e490a86be5c"], 0x24}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x3ed, 0x2, 0x70bd26, 0x25dfdbfc, "c34c0b7bc7875e899daa03c4b5269196451f2600dc7bc5f774e6c5af411b6b15a719a9b93ab41fb91954c554df7900022cf27c82f96ccbd202e4d6323c525e", ["", "", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f00000000c0)=0x9) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) 3.354636298s ago: executing program 2 (id=282): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000028c0)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}}]}, 0x3c}}, 0x0) 3.271657942s ago: executing program 2 (id=283): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./file0\x00', &(0x7f0000004000)='ufs\x00', 0x8024, &(0x7f0000000000)='ufstype=s\xd3\xe7\xd2T6\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r1, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, r2, r3, 0x0, 0x0, 0x1000000}}}, 0x78) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@sg0, r2, &(0x7f00000000c0)={0x80000001, 0xfffffffffffffff8, 0x568000000000, 0xfffffffffffffffe, 0x40, 0x2, 0x4, 0x33, 0x6}) 3.27086519s ago: executing program 2 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x33) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x38}}, 0x0) 3.111250129s ago: executing program 2 (id=285): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) r2 = syz_ublk_setup_io_uring(0x2104, &(0x7f0000000080)={0x0, 0xb5b6, 0x10, 0x2, 0x1d7}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x210003, 0x0, 0x210ca8, 0x200000a00000}) (rerun: 64) 3.111115965s ago: executing program 2 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x408c0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 1.391496745s ago: executing program 0 (id=295): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000b4, 0x0, 0x21}]}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev}, 'veth1_to_bridge\x00'}) (async) r6 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x1, @multicast}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0xaf01, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008051}, 0x4040000) 1.258385262s ago: executing program 0 (id=296): syz_emit_ethernet(0xfc, &(0x7f0000000000)={@multicast, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x23, 0xee, 0xfffc, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x9, [@multicast2, @empty, @private=0xa010100]}, @timestamp={0x44, 0x4, 0x12}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1}, {"a852e0d63372f559a108f4a6c9951499ecdd52beea9a50d05b73896a676c74790cba9f62108da4cbec5363b7278089102526611f2396c2079030ce6e1b8415ed03227b577078d0adb9266bdde2c891eb81b8e73fc4e318c4e7d6b2dba6dc0efd3d5eaffeb012410bc9ea5fbcab5586685d314d490f3c30e3749ce07578d92771039a0f00ed5c252137f7a73b993412e18b85351a8d64f9d6a4869767b374ed93b5bde991ff8485f52a9c06ada878"}}}}}}, 0x0) 1.25757535s ago: executing program 1 (id=297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x101}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) 1.256987795s ago: executing program 0 (id=298): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000001100bf06000000000000bf610000000000000701000004000000850000005d000000bf616000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.19074119s ago: executing program 1 (id=300): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000000)) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000098}, 0xd7983ab608da75d7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8b, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x9, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f00000002c0)="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", 0x17b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x827, 0x47) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) 1.190080644s ago: executing program 0 (id=302): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x41) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x4, 0x8, 0x4, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f00000000c0)="510003000000", 0x6) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x41) (async) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x4, 0x8, 0x4, 0xffffffffffffffff}) (async) 1.091393989s ago: executing program 0 (id=303): r0 = inotify_init() (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1.090994995s ago: executing program 0 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000002980)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) syz_emit_ethernet(0x25c, &(0x7f0000000400)={@remote, @multicast, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}], @ipv6=@udp={0x3, 0x6, "47bf7b", 0x21e, 0x11, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@fragment={0xc, 0x0, 0x3, 0x0, 0x0, 0xc, 0x65}, @fragment={0x0, 0x0, 0xff, 0x0, 0x0, 0x1b, 0x65}, @fragment={0x3a, 0x0, 0xd, 0x1, 0x0, 0x2, 0x64}, @fragment={0x32, 0x0, 0x6, 0x1, 0x0, 0x15, 0x67}, @srh={0x2c, 0x12, 0x4, 0x9, 0x4, 0x0, 0x3, [@local, @mcast1, @empty, @private1, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @empty]}, @srh={0x21, 0xc, 0x4, 0x6, 0x4, 0x50, 0xfffd, [@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}, @hopopts={0x0, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @generic={0xfa, 0x3f, "0116029cc0f8e90b8703497fda05ef1800fbf5557081e2aeab31c8d1732c988d333bf4df35de8c0a3b0ff8bda4a616a3e781ce1629fcce4cd1f99617472d1b"}]}], {0x4e24, 0x4e24, 0xae, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x940acb93a54a7a4c}, "870aae7162882af75dad622eafcf384eea3de6e37dfd2791d7c76384ae7d11239c5f10aef992678e64c09e6f091eb69098bc431a4493cef0e8dfa2bbc44a851bff47d9f556ed4fe19a44aedb6ddaa64dd72fc97aedb9e87621fd115d504992cc5caa5c743bd017635595338ecdc1036753a6bf9cb76d79400baca404c774717a672387df8106b5330fe1f012627251a74477d79a215f35d2797d7fca8cfb"}}}}}}}}, 0x0) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x2}, @const={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x38}, 0x20) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x2f, 0x7, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf258900000008000300", @ANYRES32, @ANYBLOB="10001d800c00008015000500b0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x44) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r6, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000000140009050000000000000000021088fe", @ANYRES32=r8, @ANYBLOB="08000800660400000c000200ac14"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 960.032145ms ago: executing program 3 (id=305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$I2C_TIMEOUT(r3, 0x702, 0x9) dup3(r3, r1, 0x80000) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000000)=@arm64) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x31, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 959.173783ms ago: executing program 1 (id=306): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0xb5) unshare(0x20000000) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd400a843500280601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22c1e5c8"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x3, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000040)={0x1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x474, 0x65, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff7}, {0xe, 0xa}, {0x5, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0xffff8000}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_route={{0xa}, {0x41c, 0x2, [@TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x2, 0x10001, 0x5, 0x3, 0x92, 0x1, 0x8, 0x9, 0xff, 0x10001, 0x8, 0x2, 0xf84, 0x7, 0x8, 0xfff, 0x50b3e9c2, 0x4, 0x7fff, 0x7, 0x0, 0xd1e, 0xde, 0x7, 0x6, 0x7, 0x80, 0x1, 0x10, 0x8, 0x5, 0x2, 0x8, 0x6, 0x40, 0x6, 0x2, 0x0, 0x0, 0x7, 0x3, 0x7, 0x3, 0x3, 0x6, 0x10000000, 0x331e, 0x7f5406ed, 0x5, 0x1ff, 0x9, 0x5, 0xd, 0x0, 0x2, 0x68, 0xba, 0x0, 0x7, 0x2, 0xb70, 0x8000, 0xf, 0x3f, 0x8, 0x3, 0x2, 0x10001, 0x100, 0x401, 0x10, 0xfffffff8, 0xffff, 0x4, 0x8, 0xffffff9f, 0x2, 0x5, 0xfffffff8, 0xffff0000, 0x6, 0xc, 0x81, 0x1, 0xffff0000, 0x6, 0x38, 0x6, 0x9, 0xd, 0x52, 0x3, 0x9, 0x205, 0x8000, 0xff, 0xb, 0x8, 0x80000000, 0x5, 0xfffffff7, 0x5, 0xf, 0x200, 0x5, 0x2, 0x800, 0x27ac5498, 0xae5, 0x4, 0x0, 0xf, 0x5, 0x80, 0x1ff, 0x2, 0xfffffff4, 0x4, 0x4, 0x5, 0x17d, 0xc342, 0x6, 0x7fffffff, 0x3, 0x9, 0x5, 0x3, 0x40, 0x5aeb, 0x7fff, 0x40, 0xffffffff, 0xed9, 0x6, 0xffff, 0x6, 0x7fffffff, 0xc, 0x7, 0x46, 0x7, 0xff, 0x2, 0x4, 0xfffffff7, 0x4, 0x7, 0x6, 0x7, 0x6, 0x6, 0x80000000, 0x3, 0x8, 0x9, 0x9, 0x5, 0x6, 0xe5ee, 0x3, 0x1, 0x42, 0x1, 0x9, 0x7f, 0x9, 0x10b, 0x1, 0x10, 0xf, 0x9, 0x800, 0x200, 0xc, 0x94, 0x7, 0x4, 0x800, 0x6, 0x34, 0x3, 0x5, 0xffffffff, 0x2, 0x4f, 0xfffffff8, 0x2718, 0x5, 0x3, 0x4, 0x8001, 0x9, 0x7f, 0x8, 0x7, 0x800, 0x1, 0x6, 0x7f, 0x3, 0x80000000, 0x6, 0x3, 0x30f, 0x0, 0x1, 0x2, 0xa75e, 0x8, 0x7, 0x3ff, 0xfff, 0x4, 0x4, 0x81, 0xfffffff1, 0xe, 0x2, 0x2, 0xffff, 0x2, 0x78f, 0x7fff, 0x0, 0x66, 0xfffffffc, 0x8, 0xe1b9, 0x8, 0x6, 0xfffffffe, 0x7fffffff, 0x10001, 0x4, 0xffff, 0x8, 0xc3a, 0x1ff, 0x6, 0xd, 0x1, 0x7fffffff, 0x7, 0x8, 0x6, 0x5, 0x8, 0x1c7, 0x1, 0x81, 0xfffffffd, 0x401, 0x3, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40008}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x474}}, 0x4814) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e4adca54eb5a86215a1421855000000010000104", @ANYRESDEC=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) write(r4, &(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) pwrite64(r4, &(0x7f0000001540)="a2a3d175", 0x4, 0x7) write(r0, &(0x7f00000002c0)='0', 0x1) 849.869269ms ago: executing program 3 (id=307): timerfd_create(0x1, 0x80000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a009b8a140000003b000000000000000000000200000000", 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 761.411538ms ago: executing program 3 (id=308): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\xf5', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r3 = accept$inet(r0, 0x0, 0x0) read(r3, &(0x7f0000000100), 0x4) read(r3, &(0x7f0000000304), 0x4) write(r3, &(0x7f0000000300), 0x100) 491.686545ms ago: executing program 3 (id=309): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x138, 0x16, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x4000, 0x4e24, 0x8002, 0x0, 0x80}, {@in=@empty, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x5, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 490.742581ms ago: executing program 3 (id=310): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="bd211f0807000000e4bc42e2b0db0436c16d0a2fd88773abb81b2dc2372961df48fbce186a858ace324b96e58fae1c1a6c"], 0x28}}, 0x10) r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2f, 0x8, 0x7fffffff, 0x8, 0x31, 0x2, 0x9, 0x8, 0xd2d, 0x2, 0x0, 0x7, 0xffffffff, 0x1000004, 0xfff, 0x2, 0xffffffa8, 0x6, 0x1eb, 0x200009ea, 0x9, 0x20000055, 0x8, 0x4008, 0x746f, 0x7, 0x0, 0x4, 0xee, 0x4, 0x7ffd]}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000030000000000000008000000850000008b807ed6d000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001bc81a07acc3f9d4f4723a0a6d090400"/33, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800140063040000"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x38) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="bd211f0807000000e4bc42e2b0db0436c16d0a2fd88773abb81b2dc2372961df48fbce186a858ace324b96e58fae1c1a6c"], 0x28}}, 0x10) (async) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2f, 0x8, 0x7fffffff, 0x8, 0x31, 0x2, 0x9, 0x8, 0xd2d, 0x2, 0x0, 0x7, 0xffffffff, 0x1000004, 0xfff, 0x2, 0xffffffa8, 0x6, 0x1eb, 0x200009ea, 0x9, 0x20000055, 0x8, 0x4008, 0x746f, 0x7, 0x0, 0x4, 0xee, 0x4, 0x7ffd]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000030000000000000008000000850000008b807ed6d000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001bc81a07acc3f9d4f4723a0a6d090400"/33, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800140063040000"], 0x3c}}, 0x0) (async) 399.348855ms ago: executing program 3 (id=311): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r1, r2, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) 1.460969ms ago: executing program 1 (id=312): getrandom(&(0x7f0000000140)=""/115, 0x73, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x5801}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="20072d33b8b3df552991bd8f00fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24040010) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d648c5fabf9f9a958f5f3656661756c743d72656c61746976653a"]) 0s ago: executing program 2 (id=313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, 0x0, &(0x7f0000003240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)="00f5", 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mount(&(0x7f0000000140)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ncpfs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:53286' (ED25519) to the list of known hosts. [ 40.378082][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 40.378096][ T43] audit: type=1400 audit(1789257939.619:138): avc: denied { name_bind } for pid=5712 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.420208][ T43] audit: type=1400 audit(1789257939.659:139): avc: denied { execute } for pid=5713 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.420745][ T43] audit: type=1400 audit(1789257939.659:140): avc: denied { execute_no_trans } for pid=5713 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.139795][ T43] audit: type=1400 audit(1789257942.379:141): avc: denied { mounton } for pid=5713 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.141824][ T43] audit: type=1400 audit(1789257942.379:142): avc: denied { mount } for pid=5713 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.145365][ T5713] cgroup: Unknown subsys name 'net' [ 43.147396][ T43] audit: type=1400 audit(1789257942.389:143): avc: denied { unmount } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.267051][ T5713] cgroup: Unknown subsys name 'cpuset' [ 43.269306][ T5713] cgroup: Unknown subsys name 'rlimit' [ 43.402511][ T43] audit: type=1400 audit(1789257942.639:144): avc: denied { setattr } for pid=5713 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.404400][ T43] audit: type=1400 audit(1789257942.639:145): avc: denied { create } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.404452][ T43] audit: type=1400 audit(1789257942.639:146): avc: denied { write } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.404486][ T43] audit: type=1400 audit(1789257942.639:147): avc: denied { read } for pid=5713 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.470499][ T5718] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.143339][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.382699][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 48.382712][ T43] audit: type=1400 audit(1789257947.619:158): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.592237][ T43] audit: type=1400 audit(1789257947.829:159): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.592274][ T43] audit: type=1400 audit(1789257947.829:160): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.592302][ T43] audit: type=1400 audit(1789257947.829:161): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.602047][ T43] audit: type=1400 audit(1789257947.839:162): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[2423]" dev="sockfs" ino=2423 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.642292][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.643483][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.644967][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.646590][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.647223][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.648201][ T5740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.648613][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.648815][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.649474][ T5735] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.650278][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.650355][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.650501][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.652496][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.652664][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.652697][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.653163][ T5729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.653212][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.654094][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.654867][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.661525][ T43] audit: type=1400 audit(1789257947.899:164): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.661553][ T43] audit: type=1400 audit(1789257947.899:163): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.661572][ T43] audit: type=1400 audit(1789257947.899:165): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.661593][ T43] audit: type=1400 audit(1789257947.899:166): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.666714][ T5739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.666717][ T43] audit: type=1400 audit(1789257947.909:167): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.297846][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.297992][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.298192][ T5725] bridge_slave_0: entered allmulticast mode [ 49.300726][ T5725] bridge_slave_0: entered promiscuous mode [ 49.303349][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.303438][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.303505][ T5725] bridge_slave_1: entered allmulticast mode [ 49.304303][ T5725] bridge_slave_1: entered promiscuous mode [ 49.340072][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.361499][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.414694][ T5725] team0: Port device team_slave_0 added [ 49.452934][ T5725] team0: Port device team_slave_1 added [ 49.459551][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.459668][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.459762][ T5731] bridge_slave_0: entered allmulticast mode [ 49.460869][ T5731] bridge_slave_0: entered promiscuous mode [ 49.463185][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.463224][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.463366][ T5731] bridge_slave_1: entered allmulticast mode [ 49.464044][ T5731] bridge_slave_1: entered promiscuous mode [ 49.501447][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.501523][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.501623][ T5733] bridge_slave_0: entered allmulticast mode [ 49.502642][ T5733] bridge_slave_0: entered promiscuous mode [ 49.522492][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.522504][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.522516][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.524540][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.524605][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.524687][ T5733] bridge_slave_1: entered allmulticast mode [ 49.525817][ T5733] bridge_slave_1: entered promiscuous mode [ 49.535372][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.541880][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.541895][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.541908][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.559210][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.559352][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.559663][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.559739][ T5724] bridge_slave_0: entered allmulticast mode [ 49.560916][ T5724] bridge_slave_0: entered promiscuous mode [ 49.577632][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.577695][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.577838][ T5724] bridge_slave_1: entered allmulticast mode [ 49.578551][ T5724] bridge_slave_1: entered promiscuous mode [ 49.595465][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.623780][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.625184][ T5731] team0: Port device team_slave_0 added [ 49.626890][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.630175][ T5725] hsr_slave_0: entered promiscuous mode [ 49.630697][ T5725] hsr_slave_1: entered promiscuous mode [ 49.638652][ T5731] team0: Port device team_slave_1 added [ 49.646228][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.682636][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.682648][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.682660][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.684540][ T5724] team0: Port device team_slave_0 added [ 49.686193][ T5733] team0: Port device team_slave_0 added [ 49.687171][ T5724] team0: Port device team_slave_1 added [ 49.698274][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.698288][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.698307][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.707663][ T5733] team0: Port device team_slave_1 added [ 49.760336][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.760353][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.760375][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.784921][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.784937][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.784957][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.797280][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.797293][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.797310][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.814632][ T5731] hsr_slave_0: entered promiscuous mode [ 49.815467][ T5731] hsr_slave_1: entered promiscuous mode [ 49.815913][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 49.815987][ T5731] Cannot create hsr debugfs directory [ 49.816804][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.816814][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.816830][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.875950][ T5724] hsr_slave_0: entered promiscuous mode [ 49.876610][ T5724] hsr_slave_1: entered promiscuous mode [ 49.877102][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 49.877119][ T5724] Cannot create hsr debugfs directory [ 49.957328][ T5733] hsr_slave_0: entered promiscuous mode [ 49.958793][ T5733] hsr_slave_1: entered promiscuous mode [ 49.959367][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.959383][ T5733] Cannot create hsr debugfs directory [ 50.150680][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.154952][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.176240][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.180266][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.195077][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.201270][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.210656][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.215043][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.257215][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.266661][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.276626][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.281094][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.281806][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.284975][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.288109][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.292427][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.362519][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.366100][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.369086][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.371940][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.375312][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.379146][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.380309][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.382404][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.455011][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.458739][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.463088][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.466473][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.469991][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.470917][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.476665][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.477413][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.481074][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.521479][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.540986][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.554768][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.554844][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.557221][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.557278][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.595008][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.605278][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.605328][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.619968][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.620048][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.646852][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.682334][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.688397][ T5731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.710766][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.714806][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.714854][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.723409][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.723461][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.734954][ T5739] Bluetooth: hci2: command tx timeout [ 50.735378][ T5739] Bluetooth: hci1: command tx timeout [ 50.735491][ T5739] Bluetooth: hci0: command tx timeout [ 50.735565][ T5739] Bluetooth: hci3: command tx timeout [ 50.756663][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.770801][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.770924][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.783562][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.783653][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.991800][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.021276][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.035400][ T5725] veth0_vlan: entered promiscuous mode [ 51.050621][ T5725] veth1_vlan: entered promiscuous mode [ 51.092221][ T5731] veth0_vlan: entered promiscuous mode [ 51.101749][ T5731] veth1_vlan: entered promiscuous mode [ 51.114002][ T5725] veth0_macvtap: entered promiscuous mode [ 51.123632][ T5725] veth1_macvtap: entered promiscuous mode [ 51.144797][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.151332][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.167645][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.168367][ T5731] veth0_macvtap: entered promiscuous mode [ 51.176116][ T5805] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.176271][ T5805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.176307][ T5805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.176336][ T5805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.186348][ T5731] veth1_macvtap: entered promiscuous mode [ 51.209990][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.236095][ T5724] veth0_vlan: entered promiscuous mode [ 51.257028][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.264306][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.264327][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.270193][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.277190][ T5724] veth1_vlan: entered promiscuous mode [ 51.300934][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.300955][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.335514][ T5805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335566][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335591][ T5805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.335614][ T5805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.339376][ T5733] veth0_vlan: entered promiscuous mode [ 51.364112][ T5733] veth1_vlan: entered promiscuous mode [ 51.369404][ T5724] veth0_macvtap: entered promiscuous mode [ 51.391622][ T5725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.394398][ T5724] veth1_macvtap: entered promiscuous mode [ 51.406354][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.406372][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.450689][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.450710][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.455273][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.458807][ T5733] veth0_macvtap: entered promiscuous mode [ 51.468223][ T5733] veth1_macvtap: entered promiscuous mode [ 51.470802][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.495723][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.496311][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.496452][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.499816][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.518858][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.534578][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.554774][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.555091][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.560510][ T5877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 51.608276][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.608289][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.638981][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.639002][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.666443][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.666463][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.688484][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.688498][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.688756][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 51.696834][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.697118][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.830813][ T5886] ======================================================= [ 51.830813][ T5886] WARNING: The mand mount option has been deprecated and [ 51.830813][ T5886] and is ignored by this kernel. Remove the mand [ 51.830813][ T5886] option from the mount to silence this warning. [ 51.830813][ T5886] ======================================================= [ 51.982785][ T5900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5900 comm=syz.3.8 [ 52.071517][ T5896] Zero length message leads to an empty skb [ 52.147672][ T5909] mmap: syz.1.2 (5909) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.152580][ T5910] fuse: Unknown parameter 'user_id00000000000000000000' [ 52.253372][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.378777][ T5920] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 52.458796][ T5922] netlink: 'syz.1.13': attribute type 2 has an invalid length. [ 52.458812][ T5922] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.13'. [ 52.815113][ T5735] Bluetooth: hci3: command tx timeout [ 52.815137][ T5735] Bluetooth: hci0: command tx timeout [ 52.815174][ T5735] Bluetooth: hci1: command tx timeout [ 52.815188][ T5735] Bluetooth: hci2: command tx timeout [ 53.110709][ T5949] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20000 [ 53.174409][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.174452][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.174481][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.174509][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.226084][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 53.426512][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 53.426530][ T43] audit: type=1400 audit(1789257952.669:258): avc: denied { create } for pid=5960 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.461713][ T43] audit: type=1400 audit(1789257952.699:259): avc: denied { allowed } for pid=5960 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.472597][ T43] audit: type=1400 audit(1789257952.709:260): avc: denied { create } for pid=5960 comm="syz.3.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.582761][ T43] audit: type=1400 audit(1789257952.819:261): avc: denied { read write } for pid=5965 comm="syz.2.26" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.582948][ T43] audit: type=1400 audit(1789257952.819:262): avc: denied { open } for pid=5965 comm="syz.2.26" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.600311][ T43] audit: type=1400 audit(1789257952.839:263): avc: denied { ioctl } for pid=5965 comm="syz.2.26" path="socket:[8981]" dev="sockfs" ino=8981 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.601736][ T43] audit: type=1400 audit(1789257952.839:264): avc: denied { bind } for pid=5965 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.602361][ T43] audit: type=1400 audit(1789257952.839:265): avc: denied { setopt } for pid=5965 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.602714][ T43] audit: type=1400 audit(1789257952.839:266): avc: denied { listen } for pid=5965 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.604655][ T43] audit: type=1400 audit(1789257952.849:267): avc: denied { listen } for pid=5965 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 53.848457][ T5979] vlan2: entered promiscuous mode [ 53.848482][ T5979] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 53.982395][ T5982] nfs4: Bad value for 'source' [ 54.155028][ T5989] ip_tables: iptables: counters copy to user failed while replacing table [ 54.170705][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5994 comm=syz.1.38 [ 54.215139][ T5998] openvswitch: netlink: Duplicate or invalid key (type 0). [ 54.277086][ T5997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.277155][ T5997] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.301626][ T5997] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 54.315644][ T5997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.315736][ T5997] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.318941][ T5997] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 54.321864][ T5997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.321919][ T5997] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.328833][ T5997] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 54.338272][ T5997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 54.338448][ T5997] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.350315][ T5997] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 54.352210][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 54.352227][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 54.352247][ T6000] netlink: 'syz.0.39': attribute type 15 has an invalid length. [ 54.354445][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 54.354461][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 54.354480][ T5998] netlink: 'syz.0.39': attribute type 15 has an invalid length. [ 54.370507][ T5997] syz.1.40 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 54.370528][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 54.370541][ T5997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.370548][ T5997] Call Trace: [ 54.370553][ T5997] [ 54.370558][ T5997] dump_stack_lvl+0x100/0x190 [ 54.370578][ T5997] dump_header+0xfb/0x606 [ 54.370591][ T5997] oom_kill_process.cold+0xd/0x380 [ 54.370606][ T5997] out_of_memory+0x340/0x14f0 [ 54.370624][ T5997] ? __pfx_out_of_memory+0x10/0x10 [ 54.370642][ T5997] mem_cgroup_out_of_memory+0xc6/0x130 [ 54.370654][ T5997] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 54.370664][ T5997] ? find_held_lock+0x2b/0x80 [ 54.370688][ T5997] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.370707][ T5997] ? _raw_spin_unlock+0x28/0x50 [ 54.370728][ T5997] try_charge_memcg+0x783/0xf60 [ 54.370757][ T5997] ? __pfx_try_charge_memcg+0x10/0x10 [ 54.370775][ T5997] ? find_held_lock+0x2b/0x80 [ 54.370790][ T5997] ? rcu_read_unlock+0x17/0x60 [ 54.370805][ T5997] ? rcu_read_unlock+0x17/0x60 [ 54.370827][ T5997] obj_cgroup_charge_pages+0x22/0x1d0 [ 54.370844][ T5997] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 54.370862][ T5997] memcg_charge_kernel_stack+0xb4/0x1e0 [ 54.370873][ T5997] ? memcpy_and_pad+0x5a/0x90 [ 54.370895][ T5997] copy_process+0x409c/0x8370 [ 54.370919][ T5997] ? __pfx___futex_wait+0x10/0x10 [ 54.370936][ T5997] ? futex_hash+0x311/0x400 [ 54.370969][ T5997] ? __pfx_copy_process+0x10/0x10 [ 54.371001][ T5997] kernel_clone+0x176/0x9d0 [ 54.371016][ T5997] ? __pfx_kernel_clone+0x10/0x10 [ 54.371035][ T5997] __do_sys_clone+0xd9/0x120 [ 54.371063][ T5997] ? __pfx___do_sys_clone+0x10/0x10 [ 54.371088][ T5997] do_syscall_64+0x123/0x790 [ 54.371104][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.371117][ T5997] RIP: 0033:0x7f4e7af9e159 [ 54.371128][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.371138][ T5997] RSP: 002b:00007f4e7bec0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 54.371149][ T5997] RAX: ffffffffffffffda RBX: 00007f4e7b225fa0 RCX: 00007f4e7af9e159 [ 54.371156][ T5997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 54.371162][ T5997] RBP: 00007f4e7b03503b R08: 0000000000000000 R09: 0000000000000000 [ 54.371168][ T5997] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 54.371174][ T5997] R13: 00007f4e7b226038 R14: 00007f4e7b225fa0 R15: 00007fff1745d958 [ 54.371188][ T5997] [ 54.371893][ T5997] memory: usage 96kB, limit 96kB, failcnt 43 [ 54.371903][ T5997] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 54.371911][ T5997] kmem: usage 88kB, limit 9007199254740988kB, failcnt 0 [ 54.371918][ T5997] Memory cgroup stats for /syz1/test: [ 54.372062][ T5997] cache 0 [ 54.372067][ T5997] rss 0 [ 54.372071][ T5997] rss_huge 0 [ 54.372075][ T5997] shmem 0 [ 54.372078][ T5997] mapped_file 0 [ 54.372082][ T5997] dirty 0 [ 54.372087][ T5997] writeback 0 [ 54.372091][ T5997] workingset_refault_anon 0 [ 54.372095][ T5997] workingset_refault_file 0 [ 54.372100][ T5997] swap 0 [ 54.372104][ T5997] swapcached 0 [ 54.372108][ T5997] pgpgin 0 [ 54.372112][ T5997] pgpgout 0 [ 54.372116][ T5997] pgfault 0 [ 54.372119][ T5997] pgmajfault 0 [ 54.372123][ T5997] inactive_anon 0 [ 54.372127][ T5997] active_anon 0 [ 54.372131][ T5997] inactive_file 0 [ 54.372135][ T5997] active_file 0 [ 54.372139][ T5997] unevictable 0 [ 54.372142][ T5997] hierarchical_memory_limit 98304 [ 54.372147][ T5997] hierarchical_memsw_limit 9223372036854771712 [ 54.372151][ T5997] total_cache 0 [ 54.372156][ T5997] total_rss 0 [ 54.372160][ T5997] total_rss_huge 0 [ 54.372164][ T5997] total_shmem 0 [ 54.372167][ T5997] total_mapped_file 0 [ 54.372171][ T5997] total_dirty 0 [ 54.372175][ T5997] total_writeback 0 [ 54.372179][ T5997] total_workingset_refault_anon 0 [ 54.372183][ T5997] total_workingset_refault_file 0 [ 54.372187][ T5997] total_swap 0 [ 54.372191][ T5997] total_swapcached 0 [ 54.372195][ T5997] total_pgpgin 0 [ 54.372198][ T5997] total_pgpgout 0 [ 54.372202][ T5997] total_pgfault 0 [ 54.372206][ T5997] total_pgmajfault 0 [ 54.372210][ T5997] total_inactive_anon 0 [ 54.372214][ T5997] total_active_anon 0 [ 54.372217][ T5997] total_inactive_file 0 [ 54.372221][ T5997] total_active_file 0 [ 54.372225][ T5997] total_unevictable 0 [ 54.372229][ T5997] anon_cost 0 [ 54.372233][ T5997] file_cost 0 [ 54.372237][ T5997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.40,pid=5995,uid=0 [ 54.372859][ T5997] Memory cgroup out of memory: Killed process 5995 (syz.1.40) total-vm:102384kB, anon-rss:1428kB, file-rss:23568kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 54.407038][ T5160] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.581812][ T6022] bridge0: port 3(veth0) entered blocking state [ 54.582266][ T6022] bridge0: port 3(veth0) entered disabled state [ 54.582390][ T6022] veth0: entered allmulticast mode [ 54.583759][ T6022] veth0: entered promiscuous mode [ 54.586060][ T5160] usb 7-1: Using ep0 maxpacket: 8 [ 54.588921][ T5160] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 54.590376][ T6022] bridge0: port 3(veth0) entered blocking state [ 54.590596][ T6022] bridge0: port 3(veth0) entered forwarding state [ 54.591329][ T5160] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.591364][ T5160] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.596502][ T5160] usb 7-1: config 0 descriptor?? [ 54.719164][ T6026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6026 comm=syz.3.46 [ 54.818538][ T5160] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 55.011659][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.012037][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.021986][ T5987] ip_tables: iptables: counters copy to user failed while replacing table [ 55.029349][ T5160] usb 7-1: USB disconnect, device number 2 [ 55.220234][ T6038] ip_tables: iptables: counters copy to user failed while replacing table [ 55.333820][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.334629][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.335121][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.335593][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.336046][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.337002][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.337456][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.337982][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.338427][ T6044] xt_NETMAP: bad MAP_IPS. [ 55.338817][ T6044] xt_NETMAP: bad MAP_IPS. [ 56.112204][ T6076] process 'syz.1.62' launched './file1' with NULL argv: empty string added [ 56.230899][ T6084] netlink: 'syz.1.64': attribute type 21 has an invalid length. [ 56.230920][ T6084] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.231115][ T6084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.231124][ T6084] IPv6: NLM_F_CREATE should be set when creating new route [ 56.231165][ T6084] IPv6: NLM_F_CREATE should be set when creating new route [ 56.231184][ T6084] IPv6: NLM_F_CREATE should be set when creating new route [ 56.232111][ T6084] netlink: 'syz.1.64': attribute type 21 has an invalid length. [ 56.232167][ T6084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.334925][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 56.335021][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 56.335065][ T5728] Bluetooth: hci1: command 0x0419 tx timeout [ 56.415056][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 56.452646][ T6060] syz.2.57 (6060): drop_caches: 1 [ 57.197114][ T6096] fuse: Bad value for 'fd' [ 57.255856][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 57.255878][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 57.265281][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 57.265304][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 57.274778][ T5778] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.274808][ T5778] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.274829][ T5778] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.274846][ T5778] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.291243][ T6106] netlink: 'syz.0.72': attribute type 12 has an invalid length. [ 57.420894][ T6110] syz.3.73 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.492354][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.75'. [ 57.501602][ T6123] netlink: 'syz.3.75': attribute type 4 has an invalid length. [ 58.053856][ T5735] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 58.064443][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.088228][ T6165] befs: (loop3): No write support. Marking filesystem read-only [ 58.089491][ T6167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 58.089562][ T6165] befs: (loop3): unable to read superblock [ 58.135579][ T6173] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.136816][ T6173] kernel profiling enabled (shift: 63) [ 58.136824][ T6173] profiling shift: 63 too large [ 58.171154][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 58.171470][ T6175] hsr_slave_0: left promiscuous mode [ 58.171898][ T6175] hsr_slave_1: left promiscuous mode [ 58.224354][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 58.231362][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 58.235165][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 58.235193][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 58.235213][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.237098][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.237117][ T10] usb 5-1: Product: syz [ 58.237129][ T10] usb 5-1: Manufacturer: syz [ 58.237141][ T10] usb 5-1: SerialNumber: syz [ 58.242229][ T10] usb 5-1: config 0 descriptor?? [ 58.250681][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 58.257127][ T5122] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 58.264114][ T5122] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 58.278904][ T5122] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 58.280054][ T5122] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 58.315471][ T6179] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 58.315487][ T6179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.316167][ T6179] vhci_hcd vhci_hcd.0: Device attached [ 58.317592][ T6180] netlink: 'syz.2.92': attribute type 10 has an invalid length. [ 58.317608][ T6180] netlink: 55 bytes leftover after parsing attributes in process `syz.2.92'. [ 58.334921][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.387923][ T5730] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 58.414254][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 58.424303][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 58.494360][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 58.500043][ T5836] usb 5-1: USB disconnect, device number 2 [ 58.516682][ T25] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 58.517470][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.517483][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 58.517501][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.536961][ T25] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 58.554348][ T42] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 59.141517][ T6182] vhci_hcd: connection reset by peer [ 59.144327][ T13] vhci_hcd vhci_hcd.2: stop threads [ 59.144654][ T13] vhci_hcd vhci_hcd.2: release socket [ 59.145969][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 59.248103][ T43] kauditd_printk_skb: 72 callbacks suppressed [ 59.248122][ T43] audit: type=1400 audit(1789257958.489:340): avc: denied { mount } for pid=6189 comm="syz.1.94" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.248546][ T43] audit: type=1400 audit(1789257958.489:341): avc: denied { search } for pid=6189 comm="syz.1.94" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 59.249100][ T43] audit: type=1400 audit(1789257958.489:342): avc: denied { write } for pid=6189 comm="syz.1.94" name="error_log" dev="tracefs" ino=3675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.249369][ T43] audit: type=1400 audit(1789257958.489:343): avc: denied { open } for pid=6189 comm="syz.1.94" path="/20/trace/error_log" dev="tracefs" ino=3675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 59.281923][ T43] audit: type=1400 audit(1789257958.519:344): avc: denied { read } for pid=6189 comm="syz.1.94" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.358569][ T43] audit: type=1400 audit(1789257958.599:345): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 59.427225][ T43] audit: type=1400 audit(1789257958.669:346): avc: denied { read write } for pid=6156 comm="syz.3.87" name="idmouse0" dev="devtmpfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 59.427514][ T43] audit: type=1400 audit(1789257958.669:347): avc: denied { open } for pid=6156 comm="syz.3.87" path="/dev/idmouse0" dev="devtmpfs" ino=2851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 59.438357][ T43] audit: type=1400 audit(1789257958.679:348): avc: denied { create } for pid=6191 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.439647][ T43] audit: type=1400 audit(1789257958.679:349): avc: denied { ioctl } for pid=6191 comm="syz.1.95" path="socket:[10800]" dev="sockfs" ino=10800 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.888984][ T6207] overlayfs: failed to resolve './file0': -2 [ 60.318305][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'. [ 60.390109][ T5836] usb 8-1: USB disconnect, device number 2 [ 60.408105][ T5836] idmouse 8-1:1.0: disconnected [ 60.494451][ T5735] Bluetooth: hci1: command 0x0419 tx timeout [ 60.494484][ T5735] Bluetooth: hci0: command 0x0419 tx timeout [ 60.524625][ T6024] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 60.574270][ T5739] Bluetooth: hci3: command 0x0419 tx timeout [ 60.675868][ T6024] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 60.679424][ T6024] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 60.679464][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 60.679486][ T6024] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.679505][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.679526][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 60.680422][ T6024] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 60.680457][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 60.680478][ T6024] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.680497][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.680518][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 60.681433][ T6024] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 60.681465][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 60.681485][ T6024] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.681504][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 60.681524][ T6024] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 60.686434][ T6024] usb 5-1: string descriptor 0 read error: -22 [ 60.686533][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.698096][ T6024] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 60.901626][ T852] usb 5-1: USB disconnect, device number 3 [ 61.424303][ T2133] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.504848][ T6273] binder: binder_mmap: 6272 200000000000-200000200000 bad vm_flags failed -1 [ 61.574432][ T2133] usb 8-1: Using ep0 maxpacket: 32 [ 61.576354][ T2133] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 61.577199][ T2133] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 61.577212][ T2133] usb 8-1: config 0 has no interface number 0 [ 61.578817][ T2133] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.578829][ T2133] usb 8-1: Product: syz [ 61.578836][ T2133] usb 8-1: Manufacturer: syz [ 61.578843][ T2133] usb 8-1: SerialNumber: syz [ 61.580691][ T2133] usb 8-1: config 0 descriptor?? [ 61.583095][ T2133] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 61.583107][ T2133] usb 8-1: selecting invalid altsetting 1 [ 61.583115][ T2133] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 61.589218][ T2133] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 61.589456][ T2133] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 61.589487][ T2133] usb 8-1: media controller created [ 61.597481][ T2133] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.855306][ T6303] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 61.960071][ T6310] syzkaller0: entered promiscuous mode [ 61.960084][ T6310] syzkaller0: entered allmulticast mode [ 62.453812][ T6024] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 62.531566][ T6344] fuse: Unknown parameter '0x0000000000000003' [ 62.533096][ T6340] fido_id[6340]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.574400][ T5739] Bluetooth: hci0: command 0x0419 tx timeout [ 62.574426][ T5739] Bluetooth: hci1: command 0x0419 tx timeout [ 62.654311][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 62.667464][ T2133] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 62.667767][ T2133] zl10353_read_register: readreg error (reg=127, ret==-110) [ 62.695814][ T6269] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 62.704356][ T2133] usb 8-1: USB disconnect, device number 3 [ 63.039097][ T6347] 8021q: VLANs not supported on gre0 [ 63.419825][ T6379] FAULT_INJECTION: forcing a failure. [ 63.419825][ T6379] name failslab, interval 1, probability 0, space 0, times 1 [ 63.419845][ T6379] CPU: 1 UID: 0 PID: 6379 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 63.419864][ T6379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.419870][ T6379] Call Trace: [ 63.419874][ T6379] [ 63.419879][ T6379] dump_stack_lvl+0x100/0x190 [ 63.419909][ T6379] should_fail_ex.cold+0x5/0xa [ 63.419927][ T6379] should_failslab+0xc2/0x120 [ 63.419946][ T6379] __kmalloc_cache_noprof+0x91/0x6d0 [ 63.419962][ T6379] ? do_raw_spin_lock+0x128/0x260 [ 63.419976][ T6379] ? alloc_fdtable+0xbd/0x2d0 [ 63.419991][ T6379] alloc_fdtable+0xbd/0x2d0 [ 63.420005][ T6379] dup_fd+0x995/0xd10 [ 63.420024][ T6379] copy_process+0x2d11/0x8370 [ 63.420045][ T6379] ? __pfx_copy_process+0x10/0x10 [ 63.420057][ T6379] ? futex_wake+0x4ea/0x5e0 [ 63.420079][ T6379] kernel_clone+0x176/0x9d0 [ 63.420092][ T6379] ? __pfx_kernel_clone+0x10/0x10 [ 63.420111][ T6379] __do_sys_clone+0xd9/0x120 [ 63.420123][ T6379] ? __pfx___do_sys_clone+0x10/0x10 [ 63.420134][ T6379] ? find_held_lock+0x2b/0x80 [ 63.420148][ T6379] ? __fget_files+0x215/0x3d0 [ 63.420171][ T6379] do_syscall_64+0x123/0x790 [ 63.420190][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.420201][ T6379] RIP: 0033:0x7ff5fe99e159 [ 63.420210][ T6379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.420220][ T6379] RSP: 002b:00007ff5ff8d2fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 63.420231][ T6379] RAX: ffffffffffffffda RBX: 00007ff5fec25fa0 RCX: 00007ff5fe99e159 [ 63.420238][ T6379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.420244][ T6379] RBP: 00007ff5fea3503b R08: 0000000000000000 R09: 0000000000000000 [ 63.420251][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.420257][ T6379] R13: 00007ff5fec26038 R14: 00007ff5fec25fa0 R15: 00007ffd472cdaf8 [ 63.420270][ T6379] [ 63.668822][ T6403] fuse: Unknown parameter '0x0000000000000003' [ 63.697986][ T42] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 63.718925][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719071][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719209][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719337][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719475][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719652][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719785][ T6392] 9pnet_virtio: no channels available for device syz [ 63.719972][ T6392] 9pnet_virtio: no channels available for device syz [ 63.720213][ T6392] 9pnet_virtio: no channels available for device syz [ 63.720468][ T6392] 9pnet_virtio: no channels available for device syz [ 63.721424][ T6392] 9pnet_virtio: no channels available for device syz [ 63.721682][ T6392] 9pnet_virtio: no channels available for device syz [ 63.721933][ T6392] 9pnet_virtio: no channels available for device syz [ 63.722206][ T6392] 9pnet_virtio: no channels available for device syz [ 63.722465][ T6392] 9pnet_virtio: no channels available for device syz [ 63.722730][ T6392] 9pnet_virtio: no channels available for device syz [ 63.729556][ T6392] 9pnet_virtio: no channels available for device syz [ 63.729835][ T6392] 9pnet_virtio: no channels available for device syz [ 63.733623][ T6392] 9pnet_virtio: no channels available for device syz [ 63.733861][ T6392] 9pnet_virtio: no channels available for device syz [ 63.734096][ T6392] 9pnet_virtio: no channels available for device syz [ 63.734833][ T6392] 9pnet_virtio: no channels available for device syz [ 63.735065][ T6392] 9pnet_virtio: no channels available for device syz [ 63.735292][ T6392] 9pnet_virtio: no channels available for device syz [ 63.735527][ T6392] 9pnet_virtio: no channels available for device syz [ 63.735792][ T6392] 9pnet_virtio: no channels available for device syz [ 63.740969][ T6392] 9pnet_virtio: no channels available for device syz [ 63.741218][ T6392] 9pnet_virtio: no channels available for device syz [ 63.741455][ T6392] 9pnet_virtio: no channels available for device syz [ 63.741682][ T6392] 9pnet_virtio: no channels available for device syz [ 63.741914][ T6392] 9pnet_virtio: no channels available for device syz [ 63.742139][ T6392] 9pnet_virtio: no channels available for device syz [ 63.742398][ T6392] 9pnet_virtio: no channels available for device syz [ 63.742640][ T6392] 9pnet_virtio: no channels available for device syz [ 63.742876][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745099][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745271][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745410][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745545][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745707][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745844][ T6392] 9pnet_virtio: no channels available for device syz [ 63.745985][ T6392] 9pnet_virtio: no channels available for device syz [ 63.746385][ T6392] 9pnet_virtio: no channels available for device syz [ 63.746529][ T6392] 9pnet_virtio: no channels available for device syz [ 63.746731][ T6392] 9pnet_virtio: no channels available for device syz [ 63.746865][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747003][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747138][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747312][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747446][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747579][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747713][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747849][ T6392] 9pnet_virtio: no channels available for device syz [ 63.747988][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748120][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748251][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748384][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748517][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748650][ T6392] 9pnet_virtio: no channels available for device syz [ 63.748783][ T6392] 9pnet_virtio: no channels available for device syz [ 63.749001][ T6392] 9pnet_virtio: no channels available for device syz [ 63.749134][ T6392] 9pnet_virtio: no channels available for device syz [ 63.749277][ T6392] 9pnet_virtio: no channels available for device syz [ 63.749414][ T6392] 9pnet_virtio: no channels available for device syz [ 63.768873][ T6412] tls_set_device_offload_rx: netdev not found [ 63.808697][ T5735] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 64.305154][ T43] kauditd_printk_skb: 64 callbacks suppressed [ 64.305173][ T43] audit: type=1400 audit(1789257963.549:414): avc: denied { prog_load } for pid=6437 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.307585][ T43] audit: type=1400 audit(1789257963.549:415): avc: denied { prog_run } for pid=6437 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.454358][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.553287][ T43] audit: type=1400 audit(1789257963.789:416): avc: denied { getopt } for pid=6440 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.585804][ T5813] usb 6-1: device descriptor read/64, error -71 [ 64.585926][ T6439] capability: warning: `syz.0.161' uses deprecated v2 capabilities in a way that may be insecure [ 64.746737][ T5735] Bluetooth: hci3: command 0x0419 tx timeout [ 64.814475][ T5836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.824408][ T5813] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.964300][ T5813] usb 6-1: device descriptor read/64, error -71 [ 64.984204][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 64.984703][ T5836] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 64.985600][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 64.985616][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 64.985628][ T5836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 64.987467][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.987479][ T5836] usb 8-1: Product: syz [ 64.987486][ T5836] usb 8-1: Manufacturer: syz [ 64.987493][ T5836] usb 8-1: SerialNumber: syz [ 64.993115][ T5836] usb 8-1: config 0 descriptor?? [ 65.001972][ T5836] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input6 [ 65.003237][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.011589][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.014277][ T2330] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 65.015597][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.020760][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.042608][ T5730] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.046930][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.062462][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.068042][ T5122] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.085623][ T5813] usb usb6-port1: attempt power cycle [ 65.164999][ T2330] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 65.167002][ T2330] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 65.167039][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 65.167060][ T2330] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.167080][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 65.167099][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 65.169721][ T2330] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 65.169752][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 65.169770][ T2330] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.169790][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 65.169810][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 65.177463][ T2330] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 65.177496][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 65.177516][ T2330] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.177534][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 65.177553][ T2330] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 65.187957][ T2330] usb 7-1: string descriptor 0 read error: -22 [ 65.188052][ T2330] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.202926][ T43] audit: type=1400 audit(1789257964.439:417): avc: denied { read } for pid=6440 comm="syz.3.162" name="event4" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.203210][ T43] audit: type=1400 audit(1789257964.439:418): avc: denied { open } for pid=6440 comm="syz.3.162" path="/dev/input/event4" dev="devtmpfs" ino=2869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.203239][ T6441] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 65.211554][ T2330] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.212426][ T6024] usb 8-1: USB disconnect, device number 4 [ 65.260688][ T6442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.260708][ T6442] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 65.268225][ T6442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.268243][ T6442] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 65.274323][ T6442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.274340][ T6442] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 65.277793][ T6442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.278285][ T6442] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 65.405283][ T6444] ubi0: attaching mtd0 [ 65.405298][ T6444] ubi0 error: ubi_attach_mtd_dev: bad VID header (54) or data offsets (118) [ 65.408048][ T43] audit: type=1400 audit(1789257964.649:419): avc: denied { write } for pid=6443 comm="syz.2.163" name="core" dev="configfs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.408316][ T43] audit: type=1400 audit(1789257964.649:420): avc: denied { add_name } for pid=6443 comm="syz.2.163" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.408617][ T43] audit: type=1400 audit(1789257964.649:421): avc: denied { create } for pid=6443 comm="syz.2.163" name="rd_mcp_0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 65.409544][ T43] audit: type=1400 audit(1789257964.649:422): avc: denied { read } for pid=6443 comm="syz.2.163" name="rd_mcp_0" dev="configfs" ino=14377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.409734][ T43] audit: type=1400 audit(1789257964.649:423): avc: denied { read open } for pid=6443 comm="syz.2.163" path="/27/my_configfs/target/core/rd_mcp_0" dev="configfs" ino=14377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.423407][ T6444] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.435568][ T5813] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.438679][ T2133] usb 7-1: USB disconnect, device number 3 [ 65.464875][ T5813] usb 6-1: device descriptor read/8, error -71 [ 65.664325][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.714327][ T5813] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.747341][ T5813] usb 6-1: device descriptor read/8, error -71 [ 65.827809][ T5836] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 65.829136][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.829161][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.829191][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.833099][ T5836] usb 5-1: config 0 descriptor?? [ 65.854621][ T5813] usb usb6-port1: unable to enumerate USB device [ 66.002804][ T6461] capability: warning: `syz.2.166' uses 32-bit capabilities (legacy support in use) [ 66.250052][ T5836] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 66.250109][ T5836] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 66.254452][ T5836] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input7 [ 66.281834][ T5836] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 66.394286][ T6024] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 66.556695][ T6024] usb 8-1: not running at top speed; connect to a high speed hub [ 66.556724][ T6024] usb 8-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.40 [ 66.557666][ T6024] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.560307][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.560330][ T6024] usb 8-1: Product: ы [ 66.560340][ T6024] usb 8-1: Manufacturer: 㧨퐗鵍䴋鶕輵ڧྌ搀㘩滮㦠炛蘝㓱촰埗ꐒ䞥霧䡔䅯腽⊣れ홹촭ㆅ듎෗찖䓨⪅捻흣Ⓘ闩恝ឿॿ洞Ž廬茺㔴῾驨酁厸农Ҧ鰠礱膢쟋ᾤ冀뙖틻⽸㬫毋蕖ｺ螲偊봤䳿᯻⛑侷ຬ躡壦☒칆앮᪘ [ 66.560361][ T6024] usb 8-1: SerialNumber: и [ 66.980483][ T6024] usbhid 8-1:1.0: can't add hid device: -71 [ 66.980530][ T6024] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 66.985392][ T6024] usb 8-1: USB disconnect, device number 5 [ 67.127109][ T6493] bad cache= option: none [ 67.127109][ T6493] [ 67.127238][ T6493] CIFS: VFS: bad cache= option: none [ 67.165280][ T6495] bridge1: entered promiscuous mode [ 67.165304][ T6495] bridge1: entered allmulticast mode [ 67.233275][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 67.350926][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 67.350948][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'. [ 67.397248][ T6505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.400193][ T6505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 67.400340][ T6505] netlink: 'syz.1.180': attribute type 4 has an invalid length. [ 67.400349][ T6505] netlink: 152 bytes leftover after parsing attributes in process `syz.1.180'. [ 67.404716][ T6505] .`: renamed from bond0 (while UP) [ 67.505913][ T6024] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 67.571001][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 67.647613][ T6533] ip6erspan0: entered allmulticast mode [ 67.815720][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 67.815741][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 67.862240][ T6543] Bluetooth: (null): Invalid header checksum [ 68.119362][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.400523][ T6573] SELinux: policydb version 0 does not match my version range 15-35 [ 68.400702][ T6573] SELinux: failed to load policy [ 68.477701][ T6582] FAULT_INJECTION: forcing a failure. [ 68.477701][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.477729][ T6582] CPU: 3 UID: 0 PID: 6582 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) [ 68.477748][ T6582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 68.477758][ T6582] Call Trace: [ 68.477764][ T6582] [ 68.477771][ T6582] dump_stack_lvl+0x100/0x190 [ 68.477805][ T6582] should_fail_ex.cold+0x5/0xa [ 68.477822][ T6582] _copy_from_user+0x2e/0xd0 [ 68.477845][ T6582] iommufd_fops_ioctl+0x300/0x520 [ 68.477867][ T6582] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 68.477886][ T6582] ? __fget_files+0x34/0x3d0 [ 68.477913][ T6582] ? selinux_file_ioctl+0x13b/0x290 [ 68.477924][ T6582] ? selinux_file_ioctl+0xb6/0x290 [ 68.477937][ T6582] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 68.477951][ T6582] __x64_sys_ioctl+0x18e/0x210 [ 68.477963][ T6582] do_syscall_64+0x123/0x790 [ 68.477982][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.477994][ T6582] RIP: 0033:0x7fa0ec19e159 [ 68.478003][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.478013][ T6582] RSP: 002b:00007fa0ecfee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.478025][ T6582] RAX: ffffffffffffffda RBX: 00007fa0ec425fa0 RCX: 00007fa0ec19e159 [ 68.478031][ T6582] RDX: 0000200000000240 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 68.478038][ T6582] RBP: 00007fa0ecfee090 R08: 0000000000000000 R09: 0000000000000000 [ 68.478044][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.478050][ T6582] R13: 00007fa0ec426038 R14: 00007fa0ec425fa0 R15: 00007fff2d7fd3c8 [ 68.478064][ T6582] [ 68.877997][ T6619] input: syz0 as /devices/virtual/input/input8 [ 68.890738][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.213'. [ 69.024363][ T5813] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.063885][ T6622] netlink: 14 bytes leftover after parsing attributes in process `syz.3.216'. [ 69.161813][ T6184] usb 5-1: USB disconnect, device number 4 [ 69.204857][ T5813] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 69.205801][ T5813] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 69.205824][ T5813] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 69.205843][ T5813] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.205864][ T5813] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 69.207815][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.207834][ T5813] usb 7-1: Product: syz [ 69.207846][ T5813] usb 7-1: Manufacturer: syz [ 69.207858][ T5813] usb 7-1: SerialNumber: syz [ 69.217208][ T6615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.217366][ T6615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.221456][ T5813] oti6858 7-1:1.0: oti6858 converter detected [ 69.225396][ T5813] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 69.419636][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.419833][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.420330][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.420529][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.421019][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.421261][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.431882][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.434816][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.438822][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.440513][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.456015][ T43] kauditd_printk_skb: 128 callbacks suppressed [ 69.456027][ T43] audit: type=1400 audit(1789257968.699:552): avc: denied { create } for pid=6626 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.456508][ T43] audit: type=1400 audit(1789257968.699:553): avc: denied { bind } for pid=6626 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.459819][ T43] audit: type=1400 audit(1789257968.699:554): avc: denied { setopt } for pid=6626 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.469904][ T43] audit: type=1400 audit(1789257968.709:555): avc: denied { write } for pid=6626 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.473321][ T6184] usb 7-1: USB disconnect, device number 4 [ 69.502234][ T6184] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 69.502774][ T6184] oti6858 7-1:1.0: device disconnected [ 69.524139][ T6628] SELinux: policydb string does not match my string SE Linux [ 69.524637][ T6628] SELinux: failed to load policy [ 69.527097][ T43] audit: type=1400 audit(1789257968.769:556): avc: denied { ioctl } for pid=6626 comm="syz.3.218" path="socket:[13705]" dev="sockfs" ino=13705 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.569386][ T43] audit: type=1400 audit(1789257968.809:557): avc: denied { sys_module } for pid=6626 comm="syz.3.218" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.596519][ T43] audit: type=1400 audit(1789257968.839:558): avc: denied { mount } for pid=6637 comm="syz.1.219" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.609150][ T43] audit: type=1400 audit(1789257968.849:559): avc: denied { mounton } for pid=6637 comm="syz.1.219" path="/65/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 69.654976][ T43] audit: type=1400 audit(1789257968.889:560): avc: denied { read write } for pid=6643 comm="syz.3.220" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 69.655004][ T43] audit: type=1400 audit(1789257968.889:561): avc: denied { open } for pid=6643 comm="syz.3.220" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.160428][ T852] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 70.163485][ T852] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 70.164011][ T852] wiimote 0005:057E:0306.0004: New device registered [ 70.344363][ T5813] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.380723][ T6659] ip6t_srh: unknown srh match flags 7700 [ 70.404917][ T5812] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 70.504956][ T5813] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 70.507327][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 70.507354][ T5813] usb 7-1: Product: syz [ 70.507366][ T5813] usb 7-1: Manufacturer: syz [ 70.555795][ T5812] usb 5-1: Using ep0 maxpacket: 8 [ 70.556707][ T5812] usb 5-1: New USB device found, idVendor=0008, idProduct=000c, bcdDevice= 0.40 [ 70.559110][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.559122][ T5812] usb 5-1: Product: syz [ 70.559129][ T5812] usb 5-1: Manufacturer: syz [ 70.559136][ T5812] usb 5-1: SerialNumber: syz [ 70.631636][ T6668] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 70.776476][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.777214][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.780265][ T6655] autofs: Unknown parameter '[-OdI_ [ 71.295974][ T6687] dump_stack_lvl+0x100/0x190 [ 71.296008][ T6687] should_fail_ex.cold+0x5/0xa [ 71.296037][ T6687] should_failslab+0xc2/0x120 [ 71.296061][ T6687] __kvmalloc_node_noprof+0x113/0x9b0 [ 71.296080][ T6687] ? do_raw_spin_lock+0x128/0x260 [ 71.296121][ T6687] ? bucket_table_alloc.isra.0+0x88/0x460 [ 71.296156][ T6687] bucket_table_alloc.isra.0+0x88/0x460 [ 71.296185][ T6687] __rhashtable_init_noprof+0x43a/0x890 [ 71.296217][ T6687] ipc_init_ids+0x99/0x280 [ 71.296249][ T6687] msg_init_ns+0x13d/0x190 [ 71.296277][ T6687] copy_ipcs+0x59c/0x7e0 [ 71.296299][ T6687] create_new_namespaces+0x20a/0xac0 [ 71.296320][ T6687] ? security_capable+0x80/0x260 [ 71.296349][ T6687] unshare_nsproxy_namespaces+0xf2/0x220 [ 71.296372][ T6687] ksys_unshare+0x4a2/0xa70 [ 71.296395][ T6687] ? __pfx_ksys_unshare+0x10/0x10 [ 71.296417][ T6687] ? ksys_write+0x1ac/0x250 [ 71.296443][ T6687] __x64_sys_unshare+0x31/0x40 [ 71.296465][ T6687] do_syscall_64+0x123/0x790 [ 71.296493][ T6687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.296512][ T6687] RIP: 0033:0x7f8dc9d9e159 [ 71.296528][ T6687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.296546][ T6687] RSP: 002b:00007f8dcac0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 71.296565][ T6687] RAX: ffffffffffffffda RBX: 00007f8dca026090 RCX: 00007f8dc9d9e159 [ 71.296577][ T6687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 71.296589][ T6687] RBP: 00007f8dc9e3503b R08: 0000000000000000 R09: 0000000000000000 [ 71.296601][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.296613][ T6687] R13: 00007f8dca026128 R14: 00007f8dca026090 R15: 00007ffc018eced8 [ 71.296640][ T6687] [ 71.299062][ T852] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input11 [ 71.322759][ T852] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input9 [ 71.491343][ T6693] netlink: 'syz.1.232': attribute type 2 has an invalid length. [ 71.493084][ T6694] SELinux: DCCP has been removed, pid=6694 comm=syz.1.232 [ 71.498490][ T6694] Cannot find set identified by id 0 to match [ 71.498965][ T6693] netlink: 'syz.1.232': attribute type 12 has an invalid length. [ 71.498975][ T6693] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 71.499069][ T6694] netlink: 'syz.1.232': attribute type 12 has an invalid length. [ 71.499083][ T6694] netlink: 'syz.1.232': attribute type 29 has an invalid length. [ 71.572831][ T6700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.577564][ T6702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.609201][ T6705] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 72.524381][ T6024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 72.675080][ T6024] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 72.676069][ T6024] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.676089][ T6024] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 72.676119][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.691782][ T6024] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 73.101303][ C1] usb 7-1: cmd cmplt err -71 [ 73.101536][ T2133] usb 7-1: USB disconnect, device number 5 [ 73.108287][ T2133] scsi 6:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 73.108328][ T2133] scsi 6:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 73.295757][ T5735] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 73.645277][ T5812] usb 6-1: USB disconnect, device number 6 [ 73.649785][ T5812] idmouse 6-1:1.0: disconnected [ 73.963937][ T6754] fuse: Unknown parameter '0x0000000000000003' [ 74.026210][ T6757] __nla_validate_parse: 2 callbacks suppressed [ 74.026229][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 74.034254][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 74.045096][ T5778] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.045145][ T5778] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.045182][ T5778] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.045211][ T5778] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.335941][ T6770] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 74.336115][ T6770] CIFS: Attempting to mount //127.0.0.1/share [ 74.429797][ T6775] syzkaller1: entered promiscuous mode [ 74.429811][ T6775] syzkaller1: entered allmulticast mode [ 75.168735][ T6770] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 75.169007][ T6770] CIFS: VFS: cifs_mount failed w/return code = -11 [ 75.218249][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 75.218268][ T43] audit: type=1400 audit(1789257974.459:601): avc: denied { bind } for pid=6785 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.219155][ T43] audit: type=1400 audit(1789257974.459:602): avc: denied { write } for pid=6785 comm="syz.3.264" path="socket:[15492]" dev="sockfs" ino=15492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.220089][ T43] audit: type=1400 audit(1789257974.459:603): avc: denied { create } for pid=6785 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.246666][ T6786] can: request_module (can-proto-4) failed. [ 75.277869][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.277902][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.278018][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.278043][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.287853][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.287880][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.288523][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.288546][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'. [ 75.349495][ T43] audit: type=1400 audit(1789257974.589:604): avc: denied { read write } for pid=6795 comm="syz.2.266" name="2:0:0:0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.349548][ T43] audit: type=1400 audit(1789257974.589:605): avc: denied { open } for pid=6795 comm="syz.2.266" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.407226][ T6796] syzkaller0: entered promiscuous mode [ 75.407246][ T6796] syzkaller0: entered allmulticast mode [ 75.410502][ T43] audit: type=1400 audit(1789257974.649:606): avc: denied { write } for pid=6794 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.411022][ T6796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.546474][ T43] audit: type=1400 audit(1789257974.789:607): avc: denied { create } for pid=6810 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 75.549705][ T43] audit: type=1400 audit(1789257974.789:608): avc: denied { getopt } for pid=6810 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.631395][ T6820] syzkaller0: entered promiscuous mode [ 75.631411][ T6820] syzkaller0: entered allmulticast mode [ 75.655985][ T43] audit: type=1400 audit(1789257974.899:609): avc: denied { wake_alarm } for pid=6823 comm="syz.2.273" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.664955][ T43] audit: type=1400 audit(1789257974.909:610): avc: denied { ioctl } for pid=6823 comm="syz.2.273" path="socket:[16668]" dev="sockfs" ino=16668 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.721794][ T6834] warning: `syz.3.275' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.756268][ T5778] netdevsim netdevsim14 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.756289][ T5778] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.965244][ T6862] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 77.038330][ T6866] CUSE: info not properly terminated [ 77.292986][ T6874] syzkaller0: entered promiscuous mode [ 77.293010][ T6874] syzkaller0: entered allmulticast mode [ 77.484329][ T5734] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.634289][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 77.635144][ T5734] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 77.636093][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.637228][ T5734] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 77.637247][ T5734] usb 6-1: Manufacturer: syz [ 77.643427][ T5734] usb 6-1: config 0 descriptor?? [ 77.988458][ T6885] NILFS (nullb0): couldn't find nilfs on the device [ 78.219085][ T6889] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 78.223486][ T6889] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 78.508992][ T6878] bridge0: port 4(ipvlan2) entered blocking state [ 78.509604][ T6878] bridge0: port 4(ipvlan2) entered disabled state [ 78.509709][ T6878] ipvlan2: entered allmulticast mode [ 78.509720][ T6878] bridge0: entered allmulticast mode [ 78.512104][ T6878] ipvlan2: left allmulticast mode [ 78.512115][ T6878] bridge0: left allmulticast mode [ 78.537738][ T5734] usbhid 6-1:0.0: can't add hid device: -71 [ 78.537794][ T5734] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 78.539903][ T5734] usb 6-1: USB disconnect, device number 7 [ 79.084782][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 79.084803][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 79.084832][ T6907] netlink: 'syz.1.297': attribute type 7 has an invalid length. [ 79.084843][ T6907] netlink: 'syz.1.297': attribute type 13 has an invalid length. [ 79.160366][ T6918] Bluetooth: MGMT ver 1.23 [ 79.162409][ T6918] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 79.165475][ T6920] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 79.272151][ T6929] netlink: 'syz.0.304': attribute type 29 has an invalid length. [ 79.394603][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x5ac6 instead [ 79.394625][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xb924 instead [ 79.394639][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x62f7 instead [ 79.394651][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xd2b6 instead [ 79.394662][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xf83f instead [ 79.394671][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xfa79 instead [ 79.394685][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xfc59 instead [ 79.394698][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x386e instead [ 79.394710][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x379b instead [ 79.394723][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x8b7d instead [ 79.394736][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.395059][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x1aa6 instead [ 79.395069][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x72dd instead [ 79.395082][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x1abc instead [ 79.395095][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0xacd6 instead [ 79.395108][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x6f29 instead [ 79.395121][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xed01 instead [ 79.395134][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x488b instead [ 79.395147][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xce96 instead [ 79.395155][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x9d25 instead [ 79.395167][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x254b instead [ 79.395180][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.395527][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xbb2e instead [ 79.395540][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x452b instead [ 79.395553][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xe3b8 instead [ 79.395566][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0x62f3 instead [ 79.395579][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0xb4ac instead [ 79.395592][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x225e instead [ 79.395603][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xf3cb instead [ 79.395615][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x2bed instead [ 79.395628][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xfde8 instead [ 79.395642][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0xaad5 instead [ 79.395655][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.395977][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x21da instead [ 79.395991][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x6871 instead [ 79.396002][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0xb4af instead [ 79.396010][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x0f6d instead [ 79.396023][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x6fd5 instead [ 79.396035][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0x7c54 instead [ 79.396048][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4df9 instead [ 79.396061][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x0af7 instead [ 79.396074][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xf9fe instead [ 79.396087][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0xe787 instead [ 79.396099][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.396458][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x0bd9 instead [ 79.396472][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x6672 instead [ 79.396485][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x59da instead [ 79.396498][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x0f98 instead [ 79.396510][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0xb22f instead [ 79.396524][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xee56 instead [ 79.396537][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xf870 instead [ 79.396547][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0xdf42 instead [ 79.396560][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x1da7 instead [ 79.396574][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x58d0 instead [ 79.396587][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.396907][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xe036 instead [ 79.396917][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x8330 instead [ 79.396930][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xbae2 instead [ 79.396943][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0x0153 instead [ 79.396957][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xbf94 instead [ 79.396971][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0xece8 instead [ 79.396985][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x657f instead [ 79.396999][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x4212 instead [ 79.397012][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0xe3d6 instead [ 79.397022][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x30fa instead [ 79.397036][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.397371][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xddcc instead [ 79.397387][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x3844 instead [ 79.397400][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0xbeb2 instead [ 79.397414][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x355e instead [ 79.397426][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0x6d25 instead [ 79.397435][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x70dc instead [ 79.397448][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x0bc8 instead [ 79.397460][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x23a4 instead [ 79.397474][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xe0b2 instead [ 79.397488][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0xadea instead [ 79.397501][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.397823][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x0f5d instead [ 79.397837][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xdc1d instead [ 79.397850][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x90ac instead [ 79.397858][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xa99e instead [ 79.397871][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x6766 instead [ 79.397884][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xa49d instead [ 79.397897][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x895c instead [ 79.397911][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x277f instead [ 79.397924][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x768e instead [ 79.397936][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x3131 instead [ 79.397945][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.399742][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x7f46 instead [ 79.399763][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xd8ea instead [ 79.399777][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0x666e instead [ 79.399792][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0xab88 instead [ 79.399806][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0x576a instead [ 79.399821][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x2af2 instead [ 79.399835][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4b50 instead [ 79.399844][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xa4a0 instead [ 79.399857][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xfc89 instead [ 79.399872][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5e6b instead [ 79.399886][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.400215][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xcd11 instead [ 79.400230][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x61e4 instead [ 79.400244][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x70bf instead [ 79.400257][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xd2cf instead [ 79.400270][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x56a2 instead [ 79.400284][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x6bad instead [ 79.400296][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x6fb8 instead [ 79.400307][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xba36 instead [ 79.400321][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xcb30 instead [ 79.400334][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x38f8 instead [ 79.400347][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.400673][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x3306 instead [ 79.400687][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x8e08 instead [ 79.400701][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xae90 instead [ 79.400714][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x76dd instead [ 79.400723][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x609b instead [ 79.400735][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x40fa instead [ 79.400748][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4c64 instead [ 79.400761][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0xa552 instead [ 79.400775][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xc71b instead [ 79.400789][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xefdf instead [ 79.400802][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.402235][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x584d instead [ 79.402253][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x3311 instead [ 79.402267][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xfc66 instead [ 79.402281][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x0526 instead [ 79.402295][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x3b1f instead [ 79.402304][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0x4700 instead [ 79.402316][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x6561 instead [ 79.402330][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x8dac instead [ 79.402342][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x716f instead [ 79.402356][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0x0087 instead [ 79.402369][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.402687][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x7f83 instead [ 79.402701][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x6868 instead [ 79.402715][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x78a2 instead [ 79.402728][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0xf631 instead [ 79.402742][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xb269 instead [ 79.402753][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x7151 instead [ 79.402763][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2c68 instead [ 79.402776][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x6710 instead [ 79.402790][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x6811 instead [ 79.402803][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x0719 instead [ 79.402815][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.403129][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2390 instead [ 79.403143][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xb0bf instead [ 79.403156][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0xb9e9 instead [ 79.403169][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x0e79 instead [ 79.403182][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xd244 instead [ 79.403198][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xd495 instead [ 79.403206][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xc055 instead [ 79.403219][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xe79c instead [ 79.403232][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0xc719 instead [ 79.403245][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x1dcd instead [ 79.403258][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.403576][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x2de4 instead [ 79.403586][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x7e57 instead [ 79.403600][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xca95 instead [ 79.403613][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xd142 instead [ 79.403626][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xec39 instead [ 79.403639][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xfe1f instead [ 79.403653][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x416e instead [ 79.403665][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x6508 instead [ 79.403674][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x9da1 instead [ 79.403687][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x1540 instead [ 79.403700][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.404021][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x168b instead [ 79.404035][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xd9a5 instead [ 79.404048][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x2da9 instead [ 79.404061][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x861e instead [ 79.404075][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0x992f instead [ 79.404085][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0xbcfd instead [ 79.404096][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xae91 instead [ 79.404110][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0x5506 instead [ 79.404123][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xaec8 instead [ 79.404137][ T6934] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x6015 instead [ 79.404261][ T6934] jffs2: Further such events for this erase block will not be printed [ 79.405177][ T6934] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 79.405188][ T6934] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32 [ 79.556906][ T5836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.795070][ T5836] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.816612][ T5836] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.816636][ T5836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.816651][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.816687][ T5836] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.824855][ T6941] netlink: 64 bytes leftover after parsing attributes in process `syz.3.309'. [ 79.868773][ T6943] comedi comedi0: Minor 47 could not be opened [ 79.869755][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 79.871117][ T6944] comedi comedi0: Minor 47 could not be opened [ 79.875122][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 79.886134][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.886154][ T5836] usb 5-1: Product: syz [ 79.886164][ T5836] usb 5-1: Manufacturer: syz [ 79.982299][ T5836] cdc_wdm 5-1:1.0: skipping garbage [ 79.982316][ T5836] cdc_wdm 5-1:1.0: skipping garbage [ 79.988558][ T5836] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 79.988578][ T5836] cdc_wdm 5-1:1.0: Unknown control protocol [ 80.342916][ T6960] check_preemption_disabled: 28 callbacks suppressed [ 80.342930][ T6960] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.313/6960 [ 80.342940][ T6960] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 80.342963][ T6960] CPU: 3 UID: 0 PID: 6960 Comm: syz.2.313 Not tainted syzkaller #0 PREEMPT(full) [ 80.342976][ T6960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.342983][ T6960] Call Trace: [ 80.342987][ T6960] [ 80.342993][ T6960] dump_stack_lvl+0x100/0x190 [ 80.343011][ T6960] check_preemption_disabled+0xd2/0xe0 [ 80.343029][ T6960] ? tcp_data_queue+0x23d0/0x4fb0 [ 80.343045][ T6960] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 80.343061][ T6960] ? tcp_data_queue+0x23d0/0x4fb0 [ 80.343082][ T6960] trace_kfree_skb+0x18b/0x230 [ 80.343104][ T6960] sk_skb_reason_drop+0xb7/0x1b0 [ 80.343128][ T6960] tcp_data_queue+0x23d0/0x4fb0 [ 80.343158][ T6960] ? find_held_lock+0x2b/0x80 [ 80.343174][ T6957] tmpfs: Bad value for 'mpol' [ 80.343183][ T6960] ? tcp_urg+0x10f/0xb80 [ 80.343204][ T6960] ? __pfx_tcp_data_queue+0x10/0x10 [ 80.343237][ T6960] ? tcp_ecn_create_request+0x7f0/0x8d0 [ 80.343261][ T6960] ? sock_def_wakeup+0x118/0x2c0 [ 80.343284][ T6960] tcp_rcv_state_process+0x1063/0x7190 [ 80.343319][ T6960] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 80.343353][ T6960] ? lock_acquire+0x1d1/0x380 [ 80.343374][ T6960] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 80.343400][ T6960] ? tcp_v4_do_rcv+0x691/0x1260 [ 80.343425][ T6960] tcp_v4_do_rcv+0x691/0x1260 [ 80.343444][ T6960] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 80.343460][ T6960] __release_sock+0x35a/0x440 [ 80.343484][ T6960] release_sock+0x1e5/0x280 [ 80.343505][ T6960] __inet_stream_connect+0x619/0xf90 [ 80.343534][ T6960] ? __pfx___inet_stream_connect+0x10/0x10 [ 80.343556][ T6960] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 80.343579][ T6960] ? __pfx_woken_wake_function+0x10/0x10 [ 80.343604][ T6960] ? __local_bh_enable_ip+0xa5/0x120 [ 80.343626][ T6960] inet_stream_connect+0x57/0xa0 [ 80.343651][ T6960] __sys_connect_file+0x146/0x1a0 [ 80.343671][ T6960] __sys_connect+0x141/0x170 [ 80.343687][ T6960] ? __pfx___sys_connect+0x10/0x10 [ 80.343720][ T6960] __x64_sys_connect+0x72/0xb0 [ 80.343737][ T6960] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.343759][ T6960] do_syscall_64+0x123/0x790 [ 80.343779][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.343790][ T6960] RIP: 0033:0x7f8dc9d9e159 [ 80.343801][ T6960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.343812][ T6960] RSP: 002b:00007f8dcac2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 80.343823][ T6960] RAX: ffffffffffffffda RBX: 00007f8dca025fa0 RCX: 00007f8dc9d9e159 [ 80.343830][ T6960] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 80.343836][ T6960] RBP: 00007f8dc9e3503b R08: 0000000000000000 R09: 0000000000000000 [ 80.343843][ T6960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.343849][ T6960] R13: 00007f8dca026038 R14: 00007f8dca025fa0 R15: 00007ffc018eced8 [ 80.343863][ T6960] [ 80.575174][ T6959] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.313/6959 [ 80.575204][ T6959] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 80.575236][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.2.313 Not tainted syzkaller #0 PREEMPT(full) [ 80.575257][ T6959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.575268][ T6959] Call Trace: [ 80.575274][ T6959] [ 80.575281][ T6959] dump_stack_lvl+0x100/0x190 [ 80.575308][ T6959] check_preemption_disabled+0xd2/0xe0 [ 80.575336][ T6959] ? sk_stream_kill_queues+0x115/0x390 [ 80.575354][ T6959] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 80.575381][ T6959] ? sk_stream_kill_queues+0x115/0x390 [ 80.575400][ T6959] trace_kfree_skb+0x18b/0x230 [ 80.575426][ T6959] sk_skb_reason_drop+0xb7/0x1b0 [ 80.575450][ T6959] sk_stream_kill_queues+0x115/0x390 [ 80.575470][ T6959] inet_csk_destroy_sock+0x1aa/0x3d0 [ 80.575495][ T6959] tcp_done+0x257/0x360 [ 80.575514][ T6959] tcp_rcv_state_process+0x259e/0x7190 [ 80.575543][ T6959] ? sk_reset_timer+0x35/0xd0 [ 80.575562][ T6959] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 80.575583][ T6959] ? tcp_write_xmit+0x18cb/0x8470 [ 80.575603][ T6959] ? lock_acquire+0x1d1/0x380 [ 80.575622][ T6959] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 80.575642][ T6959] ? tcp_v4_do_rcv+0x691/0x1260 [ 80.575661][ T6959] tcp_v4_do_rcv+0x691/0x1260 [ 80.575682][ T6959] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 80.575702][ T6959] __release_sock+0x35a/0x440 [ 80.575723][ T6959] __tcp_close+0x572/0x10d0 [ 80.575738][ T6959] ? __local_bh_enable_ip+0xa5/0x120 [ 80.575762][ T6959] tcp_close+0x28/0x110 [ 80.575779][ T6959] inet_release+0xed/0x200 [ 80.575804][ T6959] __sock_release+0xb3/0x260 [ 80.575826][ T6959] ? __pfx_sock_close+0x10/0x10 [ 80.575847][ T6959] sock_close+0x1c/0x30 [ 80.575866][ T6959] __fput+0x3ff/0xb50 [ 80.575902][ T6959] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.575925][ T6959] task_work_run+0x150/0x240 [ 80.575953][ T6959] ? __pfx_task_work_run+0x10/0x10 [ 80.575986][ T6959] exit_to_user_mode_loop+0x1d8/0x700 [ 80.576007][ T6959] ? rcu_is_watching+0x13/0xc0 [ 80.576032][ T6959] do_syscall_64+0x661/0x790 [ 80.576056][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.576074][ T6959] RIP: 0033:0x7f8dc9d9e159 [ 80.576089][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.576106][ T6959] RSP: 002b:00007ffc018ed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 80.576125][ T6959] RAX: 0000000000000000 RBX: 00007ffc018ed120 RCX: 00007f8dc9d9e159 [ 80.576137][ T6959] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 80.576147][ T6959] RBP: 000000000001396a R08: 0000000000000001 R09: 0000000000000000 [ 80.576158][ T6959] R10: 0000001b31a20000 R11: 0000000000000246 R12: 00007ffc018ed160 [ 80.576169][ T6959] R13: 00007f8dca025fac R14: 0000000000013a6a R15: 00007f8dca025fa0 [ 80.576194][ T6959] [ 82.277280][ T852] usb 5-1: USB disconnect, device number 6