last executing test programs: 6.211305934s ago: executing program 3 (id=235): exit(0x0) exit(0x5) exit(0x3) (async) exit(0x3) exit(0xb9d) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0xf1, 0x11, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x0, 0x4, 0xe, 0x1, [0x0, 0x8000000000000000]}}, @generic={0x2, 0x49, "a347e113b693a48a63cb19f8a3beaa9ee6cf89429a14a528b7474ab7425cda6934915708142bec071d8e911803a8b318d665040640ba52278fa32e554ededfb1ad84a4c64edece47dc"}, @pad1, @ra={0x5, 0x2, 0x101}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x98) exit(0x7) recvmmsg(r0, &(0x7f0000008280)=[{{&(0x7f00000000c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/24, 0x18}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/168, 0xa8}], 0x3, &(0x7f0000000300)=""/125, 0x7d}, 0x1}, {{&(0x7f0000000380)=@ax25={{0x3, @rose}, [@null, @netrom, @netrom, @remote, @rose, @netrom, @default, @default]}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/196, 0xc4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/31, 0x1f}, {&(0x7f0000001640)=""/233, 0xe9}, {&(0x7f0000001740)=""/85, 0x55}, {&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000001880)=""/53, 0x35}, {&(0x7f00000018c0)=""/168, 0xa8}, {&(0x7f0000001980)=""/86, 0x56}], 0xa, &(0x7f0000001ac0)=""/246, 0xf6}, 0x9}, {{&(0x7f0000001bc0), 0x80, &(0x7f0000003ec0)=[{&(0x7f0000001c40)=""/88, 0x58}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/130, 0x82}, {&(0x7f0000002d80)=""/141, 0x8d}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/74, 0x4a}], 0x6, &(0x7f0000003f40)=""/187, 0xbb}, 0x3ff}, {{&(0x7f0000004000)=@sco, 0x80, &(0x7f0000005300)=[{&(0x7f0000004080)=""/82, 0x52}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/73, 0x49}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/74, 0x4a}], 0x5, &(0x7f0000005380)=""/179, 0xb3}, 0x2}, {{&(0x7f0000005440)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000006540)=[{&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/66, 0x42}], 0x2, &(0x7f0000006580)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000007580)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007600)=""/154, 0x9a}, {&(0x7f00000076c0)=""/233, 0xe9}], 0x2, &(0x7f0000007800)=""/100, 0x64}, 0x8}, {{&(0x7f0000007880)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000007900)=""/131, 0x83}, {&(0x7f00000079c0)=""/231, 0xe7}, {&(0x7f0000007ac0)=""/221, 0xdd}, {&(0x7f0000007bc0)=""/254, 0xfe}, {&(0x7f0000007cc0)=""/95, 0x5f}, {&(0x7f0000007d40)=""/112, 0x70}], 0x6, &(0x7f0000007e40)}, 0x7}, {{&(0x7f0000007e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000008200)=[{&(0x7f0000007f00)=""/156, 0x9c}, {&(0x7f0000007fc0)=""/17, 0x11}, {&(0x7f0000008000)=""/201, 0xc9}, {&(0x7f0000008100)=""/208, 0xd0}], 0x4, &(0x7f0000008240)=""/51, 0x33}, 0x6}], 0x8, 0x2001, 0x0) exit(0x6) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x100000000) exit(0x9) (async) exit(0x9) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000008480)={[0x0, 0x9, 0x401, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5, 0x1, 0x3, 0xe, 0x4, 0x9, 0xfcc, 0xcd], 0x40000, 0x100000}) epoll_create(0xff) (async) r4 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000008540)={0x70000000}) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000008540)={0x70000000}) exit(0x2d0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000008580)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000008580)={0x0, 0x0}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000008600)={0x79, 0x0, 0xd70}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000008600)={0x79, 0x0, 0xd70}) wait4(r5, &(0x7f0000008680), 0x4c27cd7454f93917, &(0x7f00000086c0)) exit(0x7f) (async) exit(0x7f) syz_ublk_setup_io_uring(0x4f85, &(0x7f0000008780)={0x0, 0x1e8b, 0x2000, 0x2, 0x3aa}, &(0x7f0000008800), &(0x7f0000008840), &(0x7f0000008880)) (async) r6 = syz_ublk_setup_io_uring(0x4f85, &(0x7f0000008780)={0x0, 0x1e8b, 0x2000, 0x2, 0x3aa}, &(0x7f0000008800), &(0x7f0000008840), &(0x7f0000008880)) mmap$IORING_OFF_SQ_RING(0x0, 0x403, 0x2000000, 0x50, r6, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000088c0), 0x418000, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000089c0)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008980)={&(0x7f0000008940)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0xd517766645a8fb82) sendmmsg$inet6(r7, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000008b80)=[{&(0x7f0000008a00)="584b1b103d6af46d19bcd82656345ca785f6bc66e932be9495a0dd8171ea5379e735e1408b441ff698d4f05c0e3cbb5cf98d5d3e5da624d87218b47dbf99faa94c54b21573ddf412f59c", 0x4a}, {&(0x7f0000008a80)="440f4652946121330ba653141ae25e610c452ef1fa8e6323ab93da74057776cf202efe5d7d88763ee6deefbdb928e811e862a1564524912862c0e54369e5", 0x3e}, {&(0x7f0000008ac0)="2acf4a0421d41c9ef9ff1b88318d0c4bbab3550e8852238fd71e75fd24e675f427f16bd9348860bcf65f43f42a4da70c5895e2147d35877c2242fb61caab0f74f0d4b979aba80bef05f385c6058d575f72abacf7b090badf424d286d005f66447164aaaf1d0c1ceff7b1de2049a9a82ecce43c70bcb7b2f2176374a638c6ff947f8ee89921807a429d03fadfcf7390898903b08e8e4d96340670f46312bc381313f9cb9db8853a548c3561e62cf2c57a7b7a5ce3188e3a35babe7d801d3e9b", 0xbf}], 0x3, &(0x7f0000008bc0)=[@dstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x100, 0x29, 0x37, {0xff, 0x1c, '\x00', [@generic={0x2, 0xe4, "5bff8769ef83dfb89d1a71b51f52b19e0880c36ba4de0eaabad31b9c5cc72f2f8ff651b178f49182f69fd50b13b25a0221bc6f5bfab381e5ae0c63156e84b83e6c469061f20f9c71ba06e26aebb1d54a7821bd32e47f96f32b4228d9aece186059a90609a0c5c231eeb7fd65b79925944fbb48e0e38a4dd3f7ebfdd9a076791d3e4156ef0744300c9802501a5754ecd9cb0ef33fa87fb4560b0b335f44d2765460af3735b564deead0edb88b98a899aae0bf33dc0ceb70a195481ec39f7eed3dcb0cf0acf3bded84895cebddeb18a158108deb3365ef911ff61368ac22d4457bec3d05e1"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x1d, 0xa, 0x1, 0x4d, 0x0, [@loopback, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x1a0}}], 0x1, 0x44010) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000008dc0), &(0x7f0000008e00)={'L-', 0x10000}, 0x16, 0x2) connect$vsock_stream(r7, &(0x7f0000008e40)={0x28, 0x0, 0x2711}, 0x10) exit(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000008f00)={'ip6gre0\x00', &(0x7f0000008e80)={'syztnl1\x00', r1, 0x29, 0x8, 0x8a, 0x7, 0x52, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x80, 0x10, 0x200, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000008f00)={'ip6gre0\x00', &(0x7f0000008e80)={'syztnl1\x00', r1, 0x29, 0x8, 0x8a, 0x7, 0x52, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x80, 0x10, 0x200, 0x1}}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000008f40)={r7, 0xfff, 0x1, r7}) 5.341695823s ago: executing program 3 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='proc\x00', 0x100000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/block/sda/device/scsi_disk/0:0:0:0/max_write_same_blocks\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 5.281304081s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000380)=@filename='./config/usb_gadget/g1\x00', &(0x7f00000003c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', &(0x7f0000000400)='ext2\x00', 0x24804, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r2, &(0x7f00000011c0)=""/4137, 0x1029, 0x100005ffffbff) r3 = socket(0x10, 0x3, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000600)={0x24, &(0x7f0000000440)={0x0, 0xa, 0x57, {0x57, 0x24, "a3db91759aa118d7f973b4b93662b43a4924c9b6927a24cc8a8dbada9067a8b6d63fcb85ce6d3a16967d91d63cf7894a87feaabfa403a4fd8d0b5112138641807f307d3bed10df23048814483ce1f78921a49b8c2a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000000500)={0x0, 0x22, 0x1f, {[@main=@item_4={0x3, 0x0, 0xa, "5d210151"}, @global=@item_4={0x3, 0x1, 0xa, "57dadb0b"}, @main=@item_4={0x3, 0x0, 0xc, "fa95cb4f"}, @local=@item_012={0x2, 0x2, 0x1, '=D'}, @global=@item_012={0x1, 0x1, 0x8, 'k'}, @local=@item_012={0x2, 0x2, 0x3, "3e14"}, @local=@item_012={0x2, 0x2, 0x0, "38de"}, @global=@item_4={0x3, 0x1, 0x7, "b0ea37d0"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x7bf}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x0, 0xb, 0x82, "610ab69c59c7c74437d950e0ea22a88f50ce36bc365465c46e843d226082154850839612e47b706308e5ef841835e655b479f4d55143ee53a6f68d1187b47dc563ab5cbe0c1d2be78dae627f98aa39e81b0be54ab1bde405a604a4dc147bfcaef7cd09902d05af77fc5f75f5d8745ac265921d846e1debd3be0c7e32a6af86d4f429"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x1, 0x27, "bf2443102b28313ad50c83d421bfc2995e4ecde402c6219fbacd2956d49a666223a9c690da47a5"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xb}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc", 0x1) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='hfsplus\x00', 0x4418, &(0x7f0000000100)='barrier') splice(r6, 0x0, r5, 0x0, 0x1, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x10, 0x9}, {0xffff, 0xffff}, {0xa, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0xfffffffffffffd29}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', r4, 0x7, 0x80, 0x3, 0x9, {{0x2f, 0x4, 0x0, 0x8, 0xbc, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x24, 0x50, 0x0, 0x2, [0x4, 0x5, 0x3, 0x1, 0x6, 0xa, 0x0, 0xfff]}, @end, @ssrr={0x89, 0x17, 0x92, [@multicast2, @private=0xa010100, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x2c}]}, @cipso={0x86, 0x42, 0x1, [{0x5, 0x3, "1a"}, {0x2, 0x10, "10309d076de5a6b044aa26abc599"}, {0x0, 0x11, "5894fad257afc8bf5c703c7cc9cdc4"}, {0x1, 0xe, "d8278a7303ee65d166cf4b5b"}, {0x5, 0xa, "74872f646d4ef387"}]}, @timestamp_addr={0x44, 0xc, 0x19, 0x1, 0xe, [{@remote, 0x5}]}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0x8, [{@multicast1, 0x6}, {@broadcast}, {@broadcast, 0x9}]}]}}}}}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g1/functions/phonet.usb0\x00', &(0x7f0000000140)={0x200, 0x6b, 0x50}, 0x18) mknodat$loop(r8, &(0x7f00000001c0)='./config\x00', 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 2.626905706s ago: executing program 1 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x100c008, &(0x7f0000000080)={[{@userxattr}, {@redirect_dir_on}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='m', 0x1) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 2.565933246s ago: executing program 1 (id=292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x7, 0xffe5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001fc0)={0x24, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x4, 0x3}]}, 0x6b}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x108) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x20102, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="ffffffffffff0211223344550806000108000604000243054305123400000000ff430502fe9a00000000", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x2000, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 2.458167049s ago: executing program 1 (id=294): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519dc00fb1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x12) close(r0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='trylock no\x00\x00\x00'], 0x1001) 1.528898216s ago: executing program 1 (id=300): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008}, 0x18) fcntl$addseals(r0, 0x409, 0x3) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x1f4) close_range(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x453, 0x2, 0x70bd2c, 0x25dfdbfe, "fcb10e26a0544df5abcd2cbc50f1377f04843f747f3cbc721aec", ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000001c0)={0x0, "7e14e96b39d7b9a0489a4c3fa0862c64e80115ed2292b0cf6786c2f0c0bdf978"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x412583, 0x0) close(r1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0/file1\x00'}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4044, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@subj_user={'subj_user', 0x3d, '/dev/btrfs-control\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000005c0)={0x1d, r6, 0x1, {0x2, 0xf0, 0x4}, 0x1}, 0x18) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000600)={0x105000}) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000640)={@remote, @mcast2}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000680)=0x2) sendto(r2, &(0x7f00000006c0), 0x0, 0x804, &(0x7f0000000700)=@pppoe={0x18, 0x0, {0x4, @empty, 'ip6_vti0\x00'}}, 0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000780)={0x1, 0x2000}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)='%pK \x00'}, 0x20) r7 = open(&(0x7f0000000880)='./file0/file1\x00', 0x18280, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000940)={0x1, 0x1, @stop_pts=0x1}) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0/file1\x00', 0x0, 0x4000, r0}, 0x18) close_range(r4, r4, 0x2) sendto(r7, &(0x7f0000000a40)="16872100b1e566fc28e764ae5d4dc5b37f926479beef9dd6d25442fe40a72af10dbc677ccb1e638a3d8554e68378b56aa4254f4060c3903faf1267ef8fad86a3fa8d188913fda244354cfd0995d0f83ae0d121f7642453c6fe3675e732bf5666b45fbd4ebb4e7f63f2d3ae36548088f15efa56236e373508af0cacfa5aa3390378cce1581d7638a87353da0d8b4e4202d477d52389317cd78c4dcaf20af4", 0x9e, 0x0, &(0x7f0000000b00)=@l2={0x1f, 0x7, @any, 0x9281, 0x2}, 0x80) splice(r8, &(0x7f0000000b80)=0x5a, r9, &(0x7f0000000bc0)=0x7, 0x7, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.526132976s ago: executing program 1 (id=302): keyctl$set_reqkey_keyring(0xe, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f) keyctl$set_reqkey_keyring(0xe, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.474919006s ago: executing program 1 (id=304): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 1.474487761s ago: executing program 0 (id=305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x26000000, 0xd000000}) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="0c010000100001002abd700000000000000000000000000000000000000000010000000000000000000000000000000100000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000002b00000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e000000000000000000000000000000000108001d00ffff0000"], 0x10c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x2}}, 0xe8) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) close(0x3) 1.33830806s ago: executing program 0 (id=306): r0 = timerfd_create(0x8, 0x80000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xd, @none}, 0xe) listen(r1, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x1000000, 0x2, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) munmap$IORING_OFF_CQ_RING(r3, 0x80000000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) (async) bind(r1, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x80) (async) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='\r', 0x1) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000340)=0x4) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000900)={0x7, 0x7f, 0x200}) (async) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) (async) timerfd_gettime(r0, &(0x7f0000000040)) 1.177714466s ago: executing program 3 (id=307): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000054c0)={0x2020}, 0x2020) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0x6804, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}]}}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$DVB_DEMUX_DMX_DQBUF(r0, 0xc0186f40, &(0x7f0000000000)={0x3, 0x4770f570, 0x7ff, 0xf0f1, 0xb24ae899de65a1fd, 0x3}) 1.124300582s ago: executing program 3 (id=308): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x19, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000050000000000e50006000000185b0000d833eb296f0a0000000000000000000000185a000004000000000000000000001b2b86631e11abd814d1712671111f4bb8ef", @ANYRES32, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008500000031000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000008000085000000060000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x5, 0xe9, &(0x7f0000000640)=""/233, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x1, 0x1, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000007c0)=[r0], &(0x7f0000000800)=[{0x1, 0x2, 0xe, 0x2}, {0x1, 0x5, 0xb, 0x2}, {0x0, 0x5, 0xa, 0x3}], 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000002c0), &(0x7f0000000900)=r2}, 0x20) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0010809ed61b77d9f16a96c594a1961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b7120f9b5cb852eaa3c6ad1b90f"], 0xb4}}, 0x0) (async) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) preadv(r5, &(0x7f0000002bc0)=[{&(0x7f0000002a40)=""/172, 0xac}], 0x1, 0x9d, 0x80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 32) setns(0xc9, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)="1edacfce24228d0b5f708b404862a0332cb7", 0x12}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000001040)={{0x2ffc, 0xdddd1000, 0x8, 0xf4, 0xe, 0x32, 0x5, 0x5, 0xd1, 0xc, 0x0, 0x5b}, {0x71ffe, 0xa000, 0x9, 0x80, 0x36, 0x4, 0x4, 0xa6, 0x8, 0xbd, 0xb8, 0x7}, {0x8000000, 0x0, 0x429e58bc389f0e3b, 0xb5, 0x7f, 0xfe, 0x5, 0x1, 0x7, 0xfe, 0xbb, 0x8}, {0x8080000, 0xeeee0000, 0xf, 0x1, 0x2, 0x4, 0xd, 0x9, 0x80, 0x9, 0x8, 0xc}, {0xdddd0000, 0xffc, 0xf, 0x0, 0x9b, 0x6, 0xff, 0xf, 0x1, 0x3, 0x1, 0x1}, {0x1ffc, 0x1ffe, 0xf, 0x90, 0xfe, 0x5, 0x0, 0x81, 0x1, 0x1, 0x7, 0x5}, {0xffe, 0x80a0000, 0x0, 0x9, 0x1, 0xfb, 0x2, 0x2, 0x1, 0xfc, 0x80, 0xf0}, {0x70000, 0x26000, 0xf, 0x4, 0x81, 0x0, 0xc3, 0x5, 0x7, 0xd, 0x9, 0x5}, {0xa000, 0x7fff}, {0x25000, 0x1}, 0x24, 0x0, 0x5000, 0x240022, 0xc, 0x0, 0x4000, [0x49, 0x9, 0x400, 0xffffffffffff1a4f]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000001c0)={0xe, 0x101, 0xb97e, 0xae1, 0xfff, 0xd, "b4f3b10f28bc23fdad921099a46cf70f", 0x46, 0x0, 0x3, 0x1d, 0x4, 0x1, 0x6}) (async) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x1, '\x00', 0x1, 0x1}) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000100)) (async) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000006800010025bd7000000000000200000004000000080006000000000008000500", @ANYRES32=0x0, @ANYBLOB="060007d4f81ad8db"], 0x30}, 0x1, 0x0, 0x0, 0x2000c001}, 0x240048c0) 1.123232634s ago: executing program 0 (id=309): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48824482}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xca59}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80008c1}, 0x40080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newsa={0x15c, 0x10, 0x1, 0x100000, 0xfffffffe, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {@in=@empty, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'gretap0\x00', {0xfff}, 0x4}) 1.026116324s ago: executing program 0 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000440)={0x0, 0xfc, "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"}) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x325806, 0x41) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x44, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r1, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008ec0)={0x2020}, 0x205b) read$qrtrtun(r0, &(0x7f0000000240)=""/80, 0x50) r2 = socket$inet6(0xa, 0xa, 0x7) sendto$inet6(r2, &(0x7f0000000300)="9f29b75d07a331e8e65192656a5175814552ed304f73ea33b51ea3e3cd719bb6d1723dd08a782d1ee439d7aa5e917ac22d52a12fcc6aec3a76c75f7c5ee5c3a4619138a3d537dc9ddb67bde51a91cb1b272a0b4d90ca7064936c906530b61ef109324520d9458fa1c1e26286d06eb70f8eb836d43bea0386315df58c02f885d94491a195e48ecbb037e9c9da033ba809c44968180654422d98f3e77b08d8f57049b715519aabc1316180c7c57ad411d5ff8a7b433eb844be38d1d30bb4796b50372a1129b339b4d413935e564b135c4f9b4756ea1e44430f104b", 0xda, 0x90, &(0x7f0000000400)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcb2}, 0x1c) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="5166ddd282c1ec39b9d0ff827df5369c3a6b19a88c9ac9c7ae1130bb693daa826587d8d783389e8dd60f543bc32b2a5813f3e2ba99dce9f15e3d6458fc425cd117b7fb185225add92631bccd028af6d9397c55c43cbb4ab80dfb72b5cef2063dcc9d4ecac75c6cebb4338c0bf0d6009f674c4343359b2a97d0e842bd454e3fc4b2caa3349af6c1ef3c56857abd2fbd88bdae25f115a456a20e30f305b079c2028fb13d13f21236", 0xa7, r3) 910.151028ms ago: executing program 2 (id=313): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) r2 = fsmount(0xffffffffffffffff, 0x0, 0xfe) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'hugetlb'}]}, 0x9) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x91ac7e, &(0x7f0000000040)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r1, @ANYBLOB="1084041177f24c4654998d6914f2c88059a8240af8e1a978066688c5453e45c8d3dc0fe0d66d359200cf52b05ca6b63762489983f90a89241639c84e96fe1fa0d61fe27507fc8c7e174cf5dc48f0b83c5c0794be"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) 909.869901ms ago: executing program 0 (id=314): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket(0x28, 0x6, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/ram1/make-it-fail\x00', 0x1, 0x0) (async) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x0) write(r1, &(0x7f0000000340)='1', 0x1) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff0000000000000000000010003f00f8ff07002b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 908.603998ms ago: executing program 2 (id=315): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000061a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x18, 0x18, 0x121, 0x0, 0x0, {0x23}}, 0x18}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYRES16], 0x28}}, 0x8080) 908.388538ms ago: executing program 3 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) r2 = io_uring_setup(0x6618, &(0x7f0000000000)={0x0, 0x0, 0x800}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r2, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x2, 0x7, 0x7f, 0x27, 0x31, {0x0, 0x6fd8e86b}, 0x3, 0xed}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0xfffa}, {0x1, 0x1}, {0x7, 0xb}}, [@TCA_RATE={0x6, 0x5, {0xe7, 0x8e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x800000, 0x100, 0xffffffff, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x48, 0x1002, 0x7, 0x10004, 0x8000020, 0x7fffc, 0x0, 0x20000}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r8, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x178, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8}]}}]}, 0x178}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xe400) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) 813.800528ms ago: executing program 2 (id=317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000080)="5779c8887e4f8d08024f7e82b516b54cd58b8b05ccc8b1ffdb47ee6aaaeab94f34bfa08c3eea174bdee1d8", 0x2b}], 0x2}, 0x4) 813.52167ms ago: executing program 2 (id=318): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000010bac0, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) 813.035925ms ago: executing program 0 (id=319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a0", 0x1}], 0x1, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x845}, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x81, 0x6}]}) syz_open_pts(0xffffffffffffffff, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0x0, 0x0, 0x0, {0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf2529000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 703.670364ms ago: executing program 2 (id=320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f0000000000)="442e2717", 0x4000, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x200}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) r4 = syz_io_uring_setup(0x6877, &(0x7f0000000080)={0x0, 0xf58a, 0x400, 0x1, 0x114}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 0s ago: executing program 2 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0xc1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc70000000000000000000000000000000000000000001fe8800000000000000000000000000010000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101010000000000000000000000000000000032000000fc020000000000000000000500000001fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000080010000000000000000084000000000000600000000000000920200000000e2ffff0f0000000000000000000000000000073500000a0004002c000000000000006000020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000c0"], 0x19c}, 0x1, 0x0, 0x0, 0xc881}, 0x4044050) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, 0x0, 0xc1) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}}, 0x4044890) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9c010000100001002cbc70000000000000000000000000000000000000000001fe8800000000000000000000000000010000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101010000000000000000000000000000000032000000fc020000000000000000000500000001fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000080010000000000000000084000000000000600000000000000920200000000e2ffff0f0000000000000000000000000000073500000a0004002c000000000000006000020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000c0"], 0x19c}, 0x1, 0x0, 0x0, 0xc881}, 0x4044050) (async) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) (async) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async) kernel console output (not intermixed with test programs): [ 28.981080][ T44] audit: type=1400 audit(1789838841.795:113): avc: denied { write } for pid=5631 comm="sh" path="pipe:[3810]" dev="pipefs" ino=3810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 28.981344][ T44] audit: type=1400 audit(1789838841.795:114): avc: denied { rlimitinh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 28.981571][ T44] audit: type=1400 audit(1789838841.795:115): avc: denied { siginh } for pid=5631 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:58102' (ED25519) to the list of known hosts. [ 30.972503][ T44] audit: type=1400 audit(1789838843.785:116): avc: denied { write } for pid=5638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.979889][ T44] audit: type=1400 audit(1789838843.795:117): avc: denied { name_bind } for pid=5640 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.020780][ T44] audit: type=1400 audit(1789838843.835:118): avc: denied { write } for pid=5643 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.030982][ T44] audit: type=1400 audit(1789838843.845:119): avc: denied { execute } for pid=5642 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.031543][ T44] audit: type=1400 audit(1789838843.845:120): avc: denied { execute_no_trans } for pid=5642 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 31.400209][ T44] audit: type=1400 audit(1789838844.215:121): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.444077][ T44] audit: type=1400 audit(1789838844.255:122): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.526330][ T44] audit: type=1400 audit(1789838844.335:123): avc: denied { write } for pid=5652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.570223][ T44] audit: type=1400 audit(1789838844.385:124): avc: denied { write } for pid=5655 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.747819][ T44] audit: type=1400 audit(1789838844.565:125): avc: denied { write } for pid=5658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.427156][ T5642] cgroup: Unknown subsys name 'net' [ 33.550699][ T5642] cgroup: Unknown subsys name 'cpuset' [ 33.553932][ T5642] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.747903][ T5707] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.433089][ T5642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.902323][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 37.902335][ T44] audit: type=1400 audit(1789838850.715:161): avc: denied { execmem } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.116153][ T44] audit: type=1400 audit(1789838850.925:162): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.119916][ T44] audit: type=1400 audit(1789838850.935:163): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.119943][ T44] audit: type=1400 audit(1789838850.935:164): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.127576][ T44] audit: type=1400 audit(1789838850.945:165): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[1591]" dev="sockfs" ino=1591 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.146817][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.147433][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.149399][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.149869][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.150283][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.150381][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.151049][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.151159][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.151466][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.151596][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.152397][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.152556][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.153756][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.153839][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.154658][ T5739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.154746][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.154826][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.155256][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.155640][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.156840][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.167885][ T44] audit: type=1400 audit(1789838850.975:166): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.167912][ T44] audit: type=1400 audit(1789838850.975:167): avc: denied { open } for pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.167933][ T44] audit: type=1400 audit(1789838850.975:168): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.174169][ T44] audit: type=1400 audit(1789838850.985:169): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 38.199581][ T44] audit: type=1400 audit(1789838851.005:170): avc: denied { sys_module } for pid=5724 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.691377][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.691497][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.691602][ T5724] bridge_slave_0: entered allmulticast mode [ 38.693061][ T5724] bridge_slave_0: entered promiscuous mode [ 38.721007][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.721086][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.721172][ T5724] bridge_slave_1: entered allmulticast mode [ 38.722247][ T5724] bridge_slave_1: entered promiscuous mode [ 38.813980][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.814059][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.814155][ T5725] bridge_slave_0: entered allmulticast mode [ 38.815789][ T5725] bridge_slave_0: entered promiscuous mode [ 38.818873][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.818948][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.819247][ T5725] bridge_slave_1: entered allmulticast mode [ 38.820644][ T5725] bridge_slave_1: entered promiscuous mode [ 38.834076][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.834155][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.834244][ T5730] bridge_slave_0: entered allmulticast mode [ 38.836069][ T5730] bridge_slave_0: entered promiscuous mode [ 38.843892][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.865943][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.866018][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.866108][ T5730] bridge_slave_1: entered allmulticast mode [ 38.868239][ T5730] bridge_slave_1: entered promiscuous mode [ 38.870289][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.882568][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.882612][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.882750][ T5727] bridge_slave_0: entered allmulticast mode [ 38.883710][ T5727] bridge_slave_0: entered promiscuous mode [ 38.886342][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.886413][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.886709][ T5727] bridge_slave_1: entered allmulticast mode [ 38.888054][ T5727] bridge_slave_1: entered promiscuous mode [ 38.913428][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.916826][ T5724] team0: Port device team_slave_0 added [ 38.950896][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.952247][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.953772][ T5724] team0: Port device team_slave_1 added [ 38.955159][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.956967][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.981051][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.011142][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.011154][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.011167][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.020950][ T5725] team0: Port device team_slave_0 added [ 39.022045][ T5730] team0: Port device team_slave_0 added [ 39.022347][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.022355][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.022368][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.024099][ T5725] team0: Port device team_slave_1 added [ 39.024987][ T5727] team0: Port device team_slave_0 added [ 39.043798][ T5730] team0: Port device team_slave_1 added [ 39.054960][ T5727] team0: Port device team_slave_1 added [ 39.075667][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.075682][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.075701][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.077342][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.077350][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.077363][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.078514][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.078527][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.078545][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.089656][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.089670][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.089691][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.105594][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.105609][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.105627][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.128493][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.128508][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.128529][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.171656][ T5724] hsr_slave_0: entered promiscuous mode [ 39.172644][ T5724] hsr_slave_1: entered promiscuous mode [ 39.194551][ T5725] hsr_slave_0: entered promiscuous mode [ 39.194954][ T5725] hsr_slave_1: entered promiscuous mode [ 39.195254][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 39.195309][ T5725] Cannot create hsr debugfs directory [ 39.201084][ T5730] hsr_slave_0: entered promiscuous mode [ 39.201896][ T5730] hsr_slave_1: entered promiscuous mode [ 39.202431][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 39.202448][ T5730] Cannot create hsr debugfs directory [ 39.255692][ T5727] hsr_slave_0: entered promiscuous mode [ 39.256114][ T5727] hsr_slave_1: entered promiscuous mode [ 39.256465][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 39.256477][ T5727] Cannot create hsr debugfs directory [ 39.579191][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.584819][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.587155][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.592210][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.592711][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.595847][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.601936][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.604666][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.644409][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.647462][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.648143][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.650512][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.655675][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.661189][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.662601][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.664484][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.707894][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.711665][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.712420][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.715036][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.717724][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.721562][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.728690][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.731178][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.803295][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.807032][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.807619][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.810912][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.817902][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.819966][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.825963][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.830473][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.847252][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.872286][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.878563][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.890119][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.890191][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.897770][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.900475][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.911642][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.911686][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.923624][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.925409][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.925484][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.936052][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.936127][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.950848][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.950893][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.961770][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.961837][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.007234][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.028522][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.034431][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.034498][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.049856][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.049939][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.248986][ T5737] Bluetooth: hci3: command tx timeout [ 40.249228][ T5737] Bluetooth: hci0: command tx timeout [ 40.249378][ T5737] Bluetooth: hci2: command tx timeout [ 40.249553][ T5739] Bluetooth: hci1: command tx timeout [ 40.301698][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.325246][ T5725] veth0_vlan: entered promiscuous mode [ 40.331655][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.333492][ T5725] veth1_vlan: entered promiscuous mode [ 40.345094][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.348404][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.385946][ T5725] veth0_macvtap: entered promiscuous mode [ 40.391373][ T5725] veth1_macvtap: entered promiscuous mode [ 40.412427][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.427955][ T5730] veth0_vlan: entered promiscuous mode [ 40.429995][ T5724] veth0_vlan: entered promiscuous mode [ 40.434828][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.440449][ T5727] veth0_vlan: entered promiscuous mode [ 40.442943][ T5724] veth1_vlan: entered promiscuous mode [ 40.455382][ T5730] veth1_vlan: entered promiscuous mode [ 40.462294][ T5727] veth1_vlan: entered promiscuous mode [ 40.501051][ T5724] veth0_macvtap: entered promiscuous mode [ 40.513856][ T5724] veth1_macvtap: entered promiscuous mode [ 40.535280][ T5730] veth0_macvtap: entered promiscuous mode [ 40.539470][ T5727] veth0_macvtap: entered promiscuous mode [ 40.540236][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.540247][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.542882][ T5730] veth1_macvtap: entered promiscuous mode [ 40.548501][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.551232][ T5727] veth1_macvtap: entered promiscuous mode [ 40.560269][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.571708][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.571721][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.576106][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.577482][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.580281][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.584633][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.593228][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.650771][ T5725] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.662512][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.662539][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.687033][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.687053][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.710071][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.710091][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.743246][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.743258][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.770425][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.783311][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.783324][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.839315][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.841872][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.841886][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.867437][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867463][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867482][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867499][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867516][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867532][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867549][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867565][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867582][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867599][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867615][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867632][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867648][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.867665][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.883611][ T5879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1'. [ 41.009558][ T5893] process 'syz.3.8' launched '/dev/fd/4' with NULL argv: empty string added [ 41.037832][ T5899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56086 sclass=netlink_route_socket pid=5899 comm=syz.3.10 [ 41.041812][ T5887] vlan2: entered promiscuous mode [ 41.041824][ T5887] bridge0: entered promiscuous mode [ 41.161579][ T5921] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14'. [ 41.224046][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 41.224059][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15'. [ 41.292992][ T5929] EXT4-fs: Conflicting test_dummy_encryption options [ 41.864168][ T5943] FAULT_INJECTION: forcing a failure. [ 41.864168][ T5943] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.864200][ T5943] CPU: 2 UID: 0 PID: 5943 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 41.864221][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 41.864232][ T5943] Call Trace: [ 41.864238][ T5943] [ 41.864246][ T5943] dump_stack_lvl+0x100/0x190 [ 41.864280][ T5943] should_fail_ex.cold+0x5/0xa [ 41.864304][ T5943] ? prepare_alloc_pages+0x16d/0x5b0 [ 41.864331][ T5943] should_fail_alloc_page+0xeb/0x140 [ 41.864358][ T5943] prepare_alloc_pages+0x1f0/0x5b0 [ 41.864383][ T5943] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 41.864414][ T5943] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 41.864441][ T5943] ? __lock_acquire+0x5c0/0x1f40 [ 41.864463][ T5943] ? __lock_acquire+0x5c0/0x1f40 [ 41.864487][ T5943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 41.864509][ T5943] ? lock_acquire+0x1d1/0x380 [ 41.864528][ T5943] ? finish_task_switch.isra.0+0x149/0x10d0 [ 41.864552][ T5943] ? find_held_lock+0x2b/0x80 [ 41.864579][ T5943] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 41.864601][ T5943] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 41.864626][ T5943] ? rcu_is_watching+0x13/0xc0 [ 41.864652][ T5943] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 41.864681][ T5943] ? trace_sched_exit_tp+0x120/0x160 [ 41.864719][ T5943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 41.864745][ T5943] ? policy_nodemask+0xed/0x4f0 [ 41.864775][ T5943] alloc_pages_mpol+0x201/0x550 [ 41.864803][ T5943] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 41.864833][ T5943] ? avc_has_perm_noaudit+0x145/0x3b0 [ 41.864865][ T5943] alloc_pages_noprof+0x1a/0x160 [ 41.864895][ T5943] anon_pipe_prefill_and_lock+0x102/0x580 [ 41.864921][ T5943] ? __pfx_avc_has_perm+0x10/0x10 [ 41.864949][ T5943] ? __pfx_anon_pipe_prefill_and_lock+0x10/0x10 [ 41.864980][ T5943] ? inode_has_perm+0x16d/0x1d0 [ 41.865013][ T5943] anon_pipe_write+0x164/0x1b50 [ 41.865045][ T5943] ? __pfx_anon_pipe_write+0x10/0x10 [ 41.865068][ T5943] ? selinux_file_permission+0x8f/0x6d0 [ 41.865094][ T5943] ? bpf_lsm_file_permission+0x9/0x10 [ 41.865118][ T5943] ? security_file_permission+0x76/0x210 [ 41.865143][ T5943] ? rw_verify_area+0xce/0x6d0 [ 41.865174][ T5943] vfs_write+0x6af/0x1050 [ 41.865194][ T5943] ? __pfx_anon_pipe_write+0x10/0x10 [ 41.865218][ T5943] ? __pfx_vfs_write+0x10/0x10 [ 41.865236][ T5943] ? find_held_lock+0x2b/0x80 [ 41.865278][ T5943] ksys_write+0x1f8/0x250 [ 41.865297][ T5943] ? __pfx_ksys_write+0x10/0x10 [ 41.865323][ T5943] do_syscall_64+0x123/0x790 [ 41.865354][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.865374][ T5943] RIP: 0033:0x7f164b19e159 [ 41.865390][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.865408][ T5943] RSP: 002b:00007f164c045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.865428][ T5943] RAX: ffffffffffffffda RBX: 00007f164b425fa0 RCX: 00007f164b19e159 [ 41.865440][ T5943] RDX: 00000000ffffff9a RSI: 0000200000000000 RDI: 0000000000000004 [ 41.865452][ T5943] RBP: 00007f164b23506b R08: 0000000000000000 R09: 0000000000000000 [ 41.865463][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.865475][ T5943] R13: 00007f164b426038 R14: 00007f164b425fa0 R15: 00007ffc34a7dd68 [ 41.865500][ T5943] [ 41.952448][ T5946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5946 comm=syz.1.21 [ 41.973503][ T5953] netlink: 'syz.3.20': attribute type 4 has an invalid length. [ 41.973517][ T5953] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20'. [ 41.978216][ T5953] .`: renamed from bond0 (while UP) [ 42.178360][ T5958] ip6t_srh: unknown srh invflags 51E8 [ 42.193858][ T5958] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=15934209 (31868418 ns) > initial count (16783362 ns). Using initial count to start timer. [ 42.199249][ T5960] ip6t_srh: unknown srh invflags 51E8 [ 42.316454][ T5732] Bluetooth: hci1: command tx timeout [ 42.316476][ T5732] Bluetooth: hci2: command tx timeout [ 42.316487][ T5732] Bluetooth: hci0: command tx timeout [ 43.026583][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 43.085227][ T44] kauditd_printk_skb: 99 callbacks suppressed [ 43.085251][ T44] audit: type=1400 audit(1789838855.895:270): avc: denied { write } for pid=6000 comm="syz.3.30" name="hidraw0" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.138223][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 43.192304][ T6001] Zero length message leads to an empty skb [ 43.195561][ T6001] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 43.195577][ T6001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.197216][ T6001] vhci_hcd vhci_hcd.0: Device attached [ 43.198081][ T6003] vhci_hcd: connection closed [ 43.202211][ T5801] vhci_hcd vhci_hcd.3: stop threads [ 43.202227][ T5801] vhci_hcd vhci_hcd.3: release socket [ 43.202258][ T5801] vhci_hcd vhci_hcd.3: disconnect device [ 43.436900][ T5739] Bluetooth: hci3: command tx timeout [ 44.245079][ T44] audit: type=1400 audit(1789838857.055:271): avc: denied { map_read map_write } for pid=6007 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 44.298523][ T6008] nvme nvme0: rdma_resolve_addr failed (-19). [ 44.320108][ T44] audit: type=1400 audit(1789838857.135:272): avc: denied { create } for pid=6007 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.396706][ T5739] Bluetooth: hci0: command tx timeout [ 44.396729][ T5739] Bluetooth: hci2: command tx timeout [ 44.396740][ T5739] Bluetooth: hci1: command tx timeout [ 44.423216][ T6011] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 44.442035][ T6011] veth3: entered allmulticast mode [ 44.442295][ T6011] bridge0: port 3(veth3) entered blocking state [ 44.442425][ T6011] bridge0: port 3(veth3) entered disabled state [ 44.443616][ T6011] veth3: entered promiscuous mode [ 44.459500][ T44] audit: type=1400 audit(1789838857.275:273): avc: denied { create } for pid=6010 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.460658][ T44] audit: type=1400 audit(1789838857.275:274): avc: denied { read } for pid=6010 comm="syz.0.33" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.460690][ T44] audit: type=1400 audit(1789838857.275:275): avc: denied { open } for pid=6010 comm="syz.0.33" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 45.460055][ T5977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.499629][ T44] audit: type=1400 audit(1789838858.315:276): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.519008][ T5732] Bluetooth: hci3: command tx timeout [ 45.520535][ T44] audit: type=1400 audit(1789838858.335:277): avc: denied { mount } for pid=6025 comm="syz.3.36" name="/" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.520938][ T44] audit: type=1400 audit(1789838858.335:278): avc: denied { search } for pid=6025 comm="syz.3.36" name="/" dev="configfs" ino=2128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.525018][ T6023] overlay: Unknown parameter './file0/file2' [ 45.525265][ T44] audit: type=1400 audit(1789838858.335:279): avc: denied { search } for pid=6025 comm="syz.3.36" name="usb_gadget" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.526034][ T6028] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 45.526044][ T6028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.37'. [ 45.528639][ T6023] overlay: Unknown parameter './file0/file2' [ 45.557861][ T6038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 45.560225][ T6023] overlay: Unknown parameter './file0/file2' [ 45.569382][ T6023] overlay: Unknown parameter './file0/file2' [ 45.571597][ T6023] overlay: Unknown parameter './file0/file2' [ 45.576146][ T6023] overlay: Unknown parameter './file0/file2' [ 45.579712][ T6023] overlay: Unknown parameter './file0/file2' [ 45.585980][ T6023] overlay: Unknown parameter './file0/file2' [ 45.589395][ T6023] overlay: Unknown parameter './file0/file2' [ 45.591363][ T6023] overlay: Unknown parameter './file0/file2' [ 45.591843][ T6023] overlay: Unknown parameter './file0/file2' [ 45.595016][ T6023] overlay: Unknown parameter './file0/file2' [ 45.595906][ T6023] overlay: Unknown parameter './file0/file2' [ 45.598364][ T6023] overlay: Unknown parameter './file0/file2' [ 45.635168][ T6036] kvm: user requested TSC rate below hardware speed [ 45.636070][ T6036] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (1080055392 ns). Using initial count to start timer. [ 45.670958][ T6036] kvm: pic: non byte write [ 45.719478][ T6043] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 45.766586][ T851] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.888610][ T6071] ======================================================= [ 45.888610][ T6071] WARNING: The mand mount option has been deprecated and [ 45.888610][ T6071] and is ignored by this kernel. Remove the mand [ 45.888610][ T6071] option from the mount to silence this warning. [ 45.888610][ T6071] ======================================================= [ 45.918604][ T851] usb 6-1: Using ep0 maxpacket: 8 [ 45.919406][ T851] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 45.920745][ T851] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 45.920758][ T851] usb 6-1: config 0 has no interface number 0 [ 45.920775][ T851] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.920786][ T851] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 45.921063][ T851] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 163, changing to 11 [ 45.921126][ T851] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 33912, setting to 1024 [ 45.921140][ T851] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 45.921160][ T851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.923150][ T851] usb 6-1: config 0 descriptor?? [ 45.924619][ T6030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 45.933989][ T851] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 45.965495][ T6068] bond0: Removing last ns target with arp_interval on [ 45.975569][ T6069] bond1: Removing last ns target with arp_interval on [ 46.029687][ T6084] syzkaller0: entered promiscuous mode [ 46.029700][ T6084] syzkaller0: entered allmulticast mode [ 46.142089][ T5604] usb 6-1: USB disconnect, device number 2 [ 46.154527][ T5604] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 46.477000][ T5732] Bluetooth: hci2: command tx timeout [ 46.477020][ T5739] Bluetooth: hci1: command tx timeout [ 46.477797][ T6141] FAULT_INJECTION: forcing a failure. [ 46.477797][ T6141] name failslab, interval 1, probability 0, space 0, times 1 [ 46.477817][ T6141] CPU: 0 UID: 0 PID: 6141 Comm: syz.2.57 Not tainted syzkaller #0 PREEMPT(full) [ 46.477831][ T6141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 46.477838][ T6141] Call Trace: [ 46.477842][ T6141] [ 46.477847][ T6141] dump_stack_lvl+0x100/0x190 [ 46.477869][ T6141] should_fail_ex.cold+0x5/0xa [ 46.477886][ T6141] should_failslab+0xc2/0x120 [ 46.477902][ T6141] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 46.477918][ T6141] ? alloc_inode+0x183/0x250 [ 46.477931][ T6141] alloc_inode+0x183/0x250 [ 46.477942][ T6141] alloc_anon_inode+0x2a/0x3e0 [ 46.477960][ T6141] anon_inode_make_secure_inode+0x2f/0x140 [ 46.477975][ T6141] __anon_inode_getfile+0x1cf/0x280 [ 46.477986][ T6141] ? _copy_to_user+0xaf/0xd0 [ 46.477999][ T6141] io_uring_setup.cold+0x19ce/0x1cde [ 46.478013][ T6141] ? __pfx_io_uring_setup+0x10/0x10 [ 46.478026][ T6141] ? find_held_lock+0x2b/0x80 [ 46.478052][ T6141] ? xfd_validate_state+0x129/0x190 [ 46.478068][ T6141] __x64_sys_io_uring_setup+0xc2/0x170 [ 46.478083][ T6141] do_syscall_64+0x123/0x790 [ 46.478101][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.478112][ T6141] RIP: 0033:0x7f33ea39e159 [ 46.478122][ T6141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.478132][ T6141] RSP: 002b:00007f33eb22e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 46.478144][ T6141] RAX: ffffffffffffffda RBX: 00007f33ea625fa0 RCX: 00007f33ea39e159 [ 46.478150][ T6141] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000007dad [ 46.478157][ T6141] RBP: 00007f33ea43506b R08: 0000000000000000 R09: 0000000000000000 [ 46.478163][ T6141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.478170][ T6141] R13: 00007f33ea626038 R14: 00007f33ea625fa0 R15: 00007ffd03db2fa8 [ 46.478184][ T6141] [ 46.563341][ T6157] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 46.563440][ T6157] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 46.622108][ T6180] fuse: Bad value for 'fd' [ 46.628187][ T6185] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 46.643877][ T6185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 46.670467][ T6185] bond2: (slave veth3): Enslaving as an active interface with a down link [ 46.671949][ T6185] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 46.671960][ T6185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.63'. [ 46.676468][ T6189] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 46.678878][ T6187] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 46.678889][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.3.63'. [ 46.699088][ T6193] bond2: (slave veth5): Enslaving as an active interface with a down link [ 46.699251][ T6195] lo: entered allmulticast mode [ 46.700003][ T6195] bond0: entered allmulticast mode [ 46.700367][ T6195] dummy0: entered allmulticast mode [ 46.700984][ T6195] eql: entered allmulticast mode [ 46.701145][ T6195] ifb0: entered allmulticast mode [ 46.701279][ T6195] ifb1: entered allmulticast mode [ 46.703747][ T6195] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 46.711406][ T6195] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 46.714581][ T6195] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 46.714745][ T6195] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 46.715020][ T6195] hwsim0: entered allmulticast mode [ 46.715085][ T6195] ieee802154 phy0 wpan0: entered allmulticast mode [ 46.715171][ T6195] teql0: entered allmulticast mode [ 46.715222][ T6195] tunl0: entered allmulticast mode [ 46.715325][ T6195] gre0: entered allmulticast mode [ 46.715373][ T6195] gretap0: entered allmulticast mode [ 46.715428][ T6195] erspan0: entered allmulticast mode [ 46.715476][ T6195] ip_vti0: entered allmulticast mode [ 46.715530][ T6195] ip6_vti0: entered allmulticast mode [ 46.715952][ T6195] sit0: entered allmulticast mode [ 46.716055][ T6195] ip6tnl0: entered allmulticast mode [ 46.716204][ T6195] ip6gre0: entered allmulticast mode [ 46.716479][ T6195] lapb0: entered allmulticast mode [ 46.716576][ T6195] lapb1: entered allmulticast mode [ 46.717080][ T6195] lapb2: entered allmulticast mode [ 46.717211][ T6195] lapb3: entered allmulticast mode [ 46.717331][ T6195] lapb4: entered allmulticast mode [ 46.717410][ T6195] lapb5: entered allmulticast mode [ 46.717526][ T6195] lapb6: entered allmulticast mode [ 46.717742][ T6195] lowpan0: entered allmulticast mode [ 62.996991][ T44] kauditd_printk_skb: 70 callbacks suppressed [ 62.997003][ T44] audit: type=1400 audit(1789838875.815:350): avc: denied { name_bind } for pid=6217 comm="syz.0.67" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 62.997133][ T44] audit: type=1400 audit(1789838875.815:351): avc: denied { read } for pid=6217 comm="syz.0.67" name="rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.997288][ T44] audit: type=1400 audit(1789838875.815:352): avc: denied { open } for pid=6217 comm="syz.0.67" path="/dev/rtc0" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.997923][ T44] audit: type=1400 audit(1789838875.815:353): avc: denied { ioctl } for pid=6217 comm="syz.0.67" path="/dev/rtc0" dev="devtmpfs" ino=943 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 62.998275][ T6219] FAULT_INJECTION: forcing a failure. [ 62.998275][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 62.998291][ T6219] CPU: 3 UID: 0 PID: 6219 Comm: syz.2.69 Not tainted syzkaller #0 PREEMPT(full) [ 62.998304][ T6219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.998310][ T6219] Call Trace: [ 62.998314][ T6219] [ 62.998319][ T6219] dump_stack_lvl+0x100/0x190 [ 62.998340][ T6219] should_fail_ex.cold+0x5/0xa [ 62.998357][ T6219] should_failslab+0xc2/0x120 [ 62.998374][ T6219] __kmalloc_noprof+0xfc/0x840 [ 62.998386][ T6219] ? find_held_lock+0x2b/0x80 [ 62.998402][ T6219] ? _iommufd_object_alloc+0x25/0x210 [ 62.998427][ T6219] _iommufd_object_alloc+0x25/0x210 [ 62.998443][ T6219] iommufd_ioas_alloc_ioctl+0xae/0x3c0 [ 62.998460][ T6219] iommufd_fops_ioctl+0x358/0x520 [ 62.998476][ T6219] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 62.998491][ T6219] ? __fget_files+0x34/0x3d0 [ 62.998512][ T6219] ? selinux_file_ioctl+0x13b/0x290 [ 62.998526][ T6219] ? selinux_file_ioctl+0xb6/0x290 [ 62.998539][ T6219] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 62.998554][ T6219] __x64_sys_ioctl+0x18e/0x210 [ 62.998567][ T6219] do_syscall_64+0x123/0x790 [ 62.998585][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.998597][ T6219] RIP: 0033:0x7f33ea39e159 [ 62.998606][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.998617][ T6219] RSP: 002b:00007f33eb22e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.998628][ T6219] RAX: ffffffffffffffda RBX: 00007f33ea625fa0 RCX: 00007f33ea39e159 [ 62.998636][ T6219] RDX: 0000200000000080 RSI: 0000000000003b81 RDI: 0000000000000007 [ 62.998642][ T6219] RBP: 00007f33ea43506b R08: 0000000000000000 R09: 0000000000000000 [ 62.998648][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.998655][ T6219] R13: 00007f33ea626038 R14: 00007f33ea625fa0 R15: 00007ffd03db2fa8 [ 62.998669][ T6219] [ 63.004928][ T44] audit: type=1400 audit(1789838875.815:354): avc: denied { create } for pid=6218 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.006139][ T44] audit: type=1400 audit(1789838875.815:355): avc: denied { write } for pid=6218 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.012012][ T44] audit: type=1400 audit(1789838875.825:356): avc: denied { nlmsg_write } for pid=6218 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.259527][ T44] audit: type=1400 audit(1789838876.075:357): avc: denied { mounton } for pid=6225 comm="syz.0.74" path="/12/my_tracefs" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.295685][ T44] audit: type=1400 audit(1789838876.105:358): avc: denied { mount } for pid=6229 comm="syz.2.71" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.309710][ T44] audit: type=1400 audit(1789838876.125:359): avc: denied { mount } for pid=6225 comm="syz.0.74" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.510632][ T6246] fuse: Bad value for 'fd' [ 64.149131][ T6275] loop7: detected capacity change from 0 to 7 [ 64.201490][ T6275] Dev loop7: unable to read RDB block 7 [ 64.201526][ T6275] loop7: unable to read partition table [ 64.201697][ T6275] loop7: partition table beyond EOD, truncated [ 64.201731][ T6275] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 64.464797][ T6216] netlink: 132 bytes leftover after parsing attributes in process `syz.1.68'. [ 64.646467][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.762565][ T6306] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.767056][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.767912][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.796296][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 64.796828][ T35] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.797759][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.797793][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.805535][ T35] usb 5-1: config 0 descriptor?? [ 65.016186][ T35] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.063696][ T6313] fuse: Bad value for 'fd' [ 65.074403][ T6315] fuse: Bad value for 'user_id' [ 65.074419][ T6315] fuse: Bad value for 'user_id' [ 65.124384][ T6318] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 65.162955][ T6318] IPVS: ip_vs_add_dest(): server weight less than zero [ 65.163880][ T56] IPVS: starting estimator thread 0... [ 65.209421][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 65.246667][ T6321] IPVS: using max 26 ests per chain, 62400 per kthread [ 65.327279][ T6287] IPv4: Oversized IP packet from 127.202.26.0 [ 65.420959][ T35] usb 5-1: USB disconnect, device number 2 [ 65.956826][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 65.956848][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 66.062970][ T6346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 66.064114][ T6346] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 66.153117][ T6353] netlink: 116 bytes leftover after parsing attributes in process `syz.2.98'. [ 66.483263][ T6359] FAULT_INJECTION: forcing a failure. [ 66.483263][ T6359] name failslab, interval 1, probability 0, space 0, times 0 [ 66.483292][ T6359] CPU: 2 UID: 0 PID: 6359 Comm: syz.3.99 Not tainted syzkaller #0 PREEMPT(full) [ 66.483312][ T6359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.483323][ T6359] Call Trace: [ 66.483329][ T6359] [ 66.483336][ T6359] dump_stack_lvl+0x100/0x190 [ 66.483367][ T6359] should_fail_ex.cold+0x5/0xa [ 66.483394][ T6359] should_failslab+0xc2/0x120 [ 66.483416][ T6359] __kvmalloc_node_noprof+0x113/0x9b0 [ 66.483439][ T6359] ? seq_read_iter+0x819/0x1270 [ 66.483466][ T6359] seq_read_iter+0x819/0x1270 [ 66.483485][ T6359] ? lock_acquire+0x1d1/0x380 [ 66.483503][ T6359] ? fdget_pos+0x2aa/0x380 [ 66.483537][ T6359] kernfs_fop_read_iter+0x46c/0x610 [ 66.483559][ T6359] ? rw_verify_area+0xce/0x6d0 [ 66.483586][ T6359] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 66.483608][ T6359] vfs_read+0x82e/0xb40 [ 66.483630][ T6359] ? __pfx_vfs_read+0x10/0x10 [ 66.483646][ T6359] ? find_held_lock+0x2b/0x80 [ 66.483704][ T6359] ksys_read+0x12a/0x250 [ 66.483723][ T6359] ? __pfx_ksys_read+0x10/0x10 [ 66.483749][ T6359] do_syscall_64+0x123/0x790 [ 66.483779][ T6359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.483797][ T6359] RIP: 0033:0x7f164b19e159 [ 66.483813][ T6359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.483829][ T6359] RSP: 002b:00007f164c045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.483847][ T6359] RAX: ffffffffffffffda RBX: 00007f164b425fa0 RCX: 00007f164b19e159 [ 66.483858][ T6359] RDX: 0000000000002020 RSI: 0000200000000180 RDI: 0000000000000003 [ 66.483869][ T6359] RBP: 00007f164c045090 R08: 0000000000000000 R09: 0000000000000000 [ 66.483897][ T6359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.483907][ T6359] R13: 00007f164b426038 R14: 00007f164b425fa0 R15: 00007ffc34a7dd68 [ 66.483933][ T6359] [ 66.536693][ T6363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.101'. [ 66.536710][ T6363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.101'. [ 66.536721][ T6363] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 66.538026][ T6363] xt_policy: neither incoming nor outgoing policy selected [ 66.541721][ T6363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.101'. [ 66.541737][ T6363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.101'. [ 66.541746][ T6363] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 66.542225][ T6363] xt_policy: neither incoming nor outgoing policy selected [ 66.675469][ T6373] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 67.300709][ T6380] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.321290][ T6382] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 15 (only 8 groups) [ 67.371388][ T6387] FAULT_INJECTION: forcing a failure. [ 67.371388][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.371410][ T6387] CPU: 0 UID: 0 PID: 6387 Comm: syz.2.110 Not tainted syzkaller #0 PREEMPT(full) [ 67.371422][ T6387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.371429][ T6387] Call Trace: [ 67.371433][ T6387] [ 67.371437][ T6387] dump_stack_lvl+0x100/0x190 [ 67.371458][ T6387] should_fail_ex.cold+0x5/0xa [ 67.371475][ T6387] _copy_to_iter+0x1f3/0x1720 [ 67.371488][ T6387] ? __mutex_unlock_slowpath+0x35d/0x930 [ 67.371506][ T6387] ? __pfx__copy_to_iter+0x10/0x10 [ 67.371518][ T6387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.371537][ T6387] ? kernfs_put_active+0x93/0xe0 [ 67.371556][ T6387] seq_read_iter+0xdab/0x1270 [ 67.371576][ T6387] kernfs_fop_read_iter+0x46c/0x610 [ 67.371588][ T6387] ? rw_verify_area+0xce/0x6d0 [ 67.371605][ T6387] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 67.371618][ T6387] vfs_read+0x82e/0xb40 [ 67.371631][ T6387] ? __pfx_vfs_read+0x10/0x10 [ 67.371640][ T6387] ? find_held_lock+0x2b/0x80 [ 67.371665][ T6387] ksys_read+0x12a/0x250 [ 67.371675][ T6387] ? __pfx_ksys_read+0x10/0x10 [ 67.371690][ T6387] do_syscall_64+0x123/0x790 [ 67.371707][ T6387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.371719][ T6387] RIP: 0033:0x7f33ea39e159 [ 67.371728][ T6387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.371738][ T6387] RSP: 002b:00007f33eb22e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.371749][ T6387] RAX: ffffffffffffffda RBX: 00007f33ea625fa0 RCX: 00007f33ea39e159 [ 67.371756][ T6387] RDX: 0000000000002020 RSI: 0000200000000180 RDI: 0000000000000003 [ 67.371762][ T6387] RBP: 00007f33eb22e090 R08: 0000000000000000 R09: 0000000000000000 [ 67.371768][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.371774][ T6387] R13: 00007f33ea626038 R14: 00007f33ea625fa0 R15: 00007ffd03db2fa8 [ 67.371788][ T6387] [ 67.398608][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.398693][ T6389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.398826][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.398896][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.451457][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.467936][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.477036][ T6402] netlink: 'syz.3.114': attribute type 2 has an invalid length. [ 67.477054][ T6402] netlink: 'syz.3.114': attribute type 2 has an invalid length. [ 67.487758][ T5801] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.487784][ T5801] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.487801][ T5801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.487817][ T5801] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.526831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.527004][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 67.687012][ T6432] FAULT_INJECTION: forcing a failure. [ 67.687012][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.687030][ T6432] CPU: 0 UID: 0 PID: 6432 Comm: syz.3.120 Not tainted syzkaller #0 PREEMPT(full) [ 67.687043][ T6432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.687049][ T6432] Call Trace: [ 67.687053][ T6432] [ 67.687058][ T6432] dump_stack_lvl+0x100/0x190 [ 67.687078][ T6432] should_fail_ex.cold+0x5/0xa [ 67.687095][ T6432] _copy_to_user+0x32/0xd0 [ 67.687108][ T6432] simple_read_from_buffer+0xcb/0x170 [ 67.687124][ T6432] proc_fail_nth_read+0x1af/0x230 [ 67.687138][ T6432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.687153][ T6432] ? rw_verify_area+0xce/0x6d0 [ 67.687169][ T6432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.687183][ T6432] vfs_read+0x1e4/0xb40 [ 67.687193][ T6432] ? lock_acquire+0x1d1/0x380 [ 67.687205][ T6432] ? __fget_files+0x34/0x3d0 [ 67.687218][ T6432] ? __pfx_vfs_read+0x10/0x10 [ 67.687227][ T6432] ? find_held_lock+0x2b/0x80 [ 67.687243][ T6432] ? __fget_files+0x215/0x3d0 [ 67.687259][ T6432] ? __fget_files+0x21f/0x3d0 [ 67.687276][ T6432] ksys_read+0x12a/0x250 [ 67.687286][ T6432] ? __pfx_ksys_read+0x10/0x10 [ 67.687301][ T6432] do_syscall_64+0x123/0x790 [ 67.687319][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.687330][ T6432] RIP: 0033:0x7f164b15e98e [ 67.687339][ T6432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.687350][ T6432] RSP: 002b:00007f164c044fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.687361][ T6432] RAX: ffffffffffffffda RBX: 00007f164c0456c0 RCX: 00007f164b15e98e [ 67.687367][ T6432] RDX: 000000000000000f RSI: 00007f164c0450a0 RDI: 0000000000000004 [ 67.687374][ T6432] RBP: 00007f164c045090 R08: 0000000000000000 R09: 0000000000000000 [ 67.687380][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.687386][ T6432] R13: 00007f164b426038 R14: 00007f164b425fa0 R15: 00007ffc34a7dd68 [ 67.687399][ T6432] [ 67.826547][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.126325][ T5810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.289248][ T5810] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 68.290840][ T5810] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 68.290872][ T5810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.290882][ T5810] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 68.290903][ T5810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.292047][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 68.292059][ T5810] usb 5-1: Product: syz [ 68.292066][ T5810] usb 5-1: Manufacturer: syz [ 68.330508][ T5810] cdc_wdm 5-1:1.0: skipping garbage [ 68.330524][ T5810] cdc_wdm 5-1:1.0: skipping garbage [ 68.334207][ T5810] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 68.334224][ T5810] cdc_wdm 5-1:1.0: Unknown control protocol [ 68.510772][ T44] kauditd_printk_skb: 64 callbacks suppressed [ 68.510791][ T44] audit: type=1400 audit(1789838881.325:424): avc: denied { read write } for pid=6452 comm="syz.0.126" name="cdc-wdm0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 68.511178][ T44] audit: type=1400 audit(1789838881.325:425): avc: denied { open } for pid=6452 comm="syz.0.126" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 68.600404][ T44] audit: type=1400 audit(1789838881.415:426): avc: denied { cmd } for pid=6489 comm="iou-wrk-6490" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 68.611774][ T44] audit: type=1400 audit(1789838881.425:427): avc: denied { map } for pid=6489 comm="syz.2.127" path="/dev/ublkc0" dev="devtmpfs" ino=2853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.626299][ T44] audit: type=1400 audit(1789838881.435:428): avc: denied { ioctl } for pid=6489 comm="syz.2.127" path="/41/trace/trace" dev="tracefs" ino=6401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.628105][ T44] audit: type=1400 audit(1789838881.445:429): avc: denied { prog_load } for pid=6500 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.632099][ T44] audit: type=1400 audit(1789838881.445:430): avc: denied { mount } for pid=6500 comm="syz.3.129" name="/" dev="ramfs" ino=15623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.722039][ T44] audit: type=1400 audit(1789838881.535:431): avc: denied { ioctl } for pid=6506 comm="syz.3.132" path="/dev/bsg/0:0:0:0" dev="devtmpfs" ino=722 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.723758][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.769222][ T44] audit: type=1400 audit(1789838881.585:432): avc: denied { prog_run } for pid=6510 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.770175][ T44] audit: type=1400 audit(1789838881.585:433): avc: denied { map_create } for pid=6512 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.782343][ T5810] usb 5-1: USB disconnect, device number 3 [ 68.900486][ T6519] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 68.910648][ T6519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.929753][ T6519] bond1: (slave geneve2): making interface the new active one [ 68.931260][ T6519] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 69.128150][ T6528] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 69.237188][ T6530] syzkaller0: entered promiscuous mode [ 69.237202][ T6530] syzkaller0: entered allmulticast mode [ 69.273815][ T6534] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 69.273909][ T6533] ima: policy update failed [ 69.353777][ T6547] loop9: detected capacity change from 0 to 7 [ 69.356715][ T6547] Dev loop9: unable to read RDB block 7 [ 69.356736][ T6547] loop9: unable to read partition table [ 69.356818][ T6547] loop9: partition table beyond EOD, truncated [ 69.356834][ T6547] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 69.361473][ T6539] device-mapper: table: 248:0: : unknown target type [ 69.361483][ T6539] device-mapper: ioctl: error adding target to table [ 69.837457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 70.430334][ T6579] netlink: 'syz.3.155': attribute type 39 has an invalid length. [ 70.809993][ T6588] netlink: 'syz.1.158': attribute type 21 has an invalid length. [ 70.810005][ T6589] netlink: 'syz.1.158': attribute type 21 has an invalid length. [ 70.810056][ T6588] __nla_validate_parse: 2 callbacks suppressed [ 70.810067][ T6588] netlink: 152 bytes leftover after parsing attributes in process `syz.1.158'. [ 70.810119][ T6589] netlink: 152 bytes leftover after parsing attributes in process `syz.1.158'. [ 71.121936][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.125528][ T42] cfg80211: failed to load regulatory.db [ 72.338185][ T6547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.395360][ T6594] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.395379][ T6594] CIFS mount error: No usable UNC path provided in device string! [ 72.395379][ T6594] [ 72.395511][ T6594] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.501664][ T6605] netlink: 67 bytes leftover after parsing attributes in process `syz.1.164'. [ 72.506826][ T6605] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 72.506868][ T6605] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 72.506880][ T6605] netlink: 180 bytes leftover after parsing attributes in process `syz.1.164'. [ 72.506891][ T6605] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 72.645488][ T6619] key id 00000004 not found [ 72.927341][ T6654] SELinux: syz.2.178 (6654) wrote to checkreqprot. This is no longer supported. [ 72.969378][ T6654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6654 comm=syz.2.178 [ 73.131159][ T6664] veth1_macvtap: left promiscuous mode [ 73.589670][ T6685] jffs2: notice: (6685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 73.676969][ T44] kauditd_printk_skb: 76 callbacks suppressed [ 73.676982][ T44] audit: type=1400 audit(1789838886.485:510): avc: denied { search } for pid=6690 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.678192][ T44] audit: type=1400 audit(1789838886.495:511): avc: denied { read write } for pid=6690 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 73.678237][ T44] audit: type=1400 audit(1789838886.495:512): avc: denied { open } for pid=6690 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 73.678516][ T44] audit: type=1400 audit(1789838886.495:513): avc: denied { lock } for pid=6690 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 73.679215][ T44] audit: type=1400 audit(1789838886.495:514): avc: denied { read } for pid=6690 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 73.896352][ T2111] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.046446][ T2111] usb 6-1: Using ep0 maxpacket: 8 [ 74.047186][ T2111] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.048117][ T2111] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 74.048156][ T2111] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.048174][ T2111] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.048194][ T2111] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.048213][ T2111] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.048245][ T2111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.093334][ T44] audit: type=1400 audit(1789838886.905:515): avc: denied { mmap_zero } for pid=6691 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 74.095537][ T44] audit: type=1400 audit(1789838886.905:516): avc: denied { getopt } for pid=6691 comm="syz.2.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.104932][ T6694] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 74.104950][ T6694] netlink: 'syz.2.186': attribute type 2 has an invalid length. [ 74.163396][ T6697] EXT4-fs: Conflicting test_dummy_encryption options [ 74.207367][ T6705] netlink: 76 bytes leftover after parsing attributes in process `syz.2.189'. [ 74.229943][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 74.311201][ T2111] usb 6-1: usb_control_msg returned -32 [ 74.311225][ T2111] usbtmc 6-1:16.0: can't read capabilities [ 74.353197][ T44] audit: type=1400 audit(1789838887.165:517): avc: denied { getopt } for pid=6718 comm="syz.2.192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.359541][ T44] audit: type=1400 audit(1789838887.175:518): avc: denied { search } for pid=6718 comm="syz.2.192" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.359568][ T44] audit: type=1400 audit(1789838887.175:519): avc: denied { search } for pid=6718 comm="syz.2.192" name="events" dev="tracefs" ino=1202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.373088][ T6714] Bluetooth: MGMT ver 1.23 [ 74.477051][ T6729] fuse: blksize only supported for fuseblk [ 74.526113][ T6733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 74.539833][ T6733] macsec1: entered allmulticast mode [ 74.539850][ T6733] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 74.539921][ T6733] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 74.540216][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.541392][ T6733] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 74.569848][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 74.570622][ T6743] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '>N95xhˉpn [ 74.681772][ T6744] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 74.724850][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 74.724873][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 74.877134][ T6750] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 74.877770][ T6750] capability: warning: `syz.3.200' uses 32-bit capabilities (legacy support in use) [ 74.982415][ T6759] overlayfs: overlapping lowerdir path [ 74.985136][ T6760] capability: warning: `syz.3.203' uses deprecated v2 capabilities in a way that may be insecure [ 75.002724][ T6761] veth7: entered allmulticast mode [ 75.217773][ T6774] i2c i2c-1: dtv_property_process_set: SET cmd 0x818258e6 undefined [ 75.320460][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.466763][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.467583][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.467604][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 75.467623][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.469394][ T10] usb 8-1: config 0 descriptor?? [ 78.070228][ T6796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.103515][ T25] usb 8-1: USB disconnect, device number 2 [ 78.176739][ T6824] tipc: Started in network mode [ 78.176751][ T6824] tipc: Node identity 2000004, cluster identity 4711 [ 78.176758][ T6824] tipc: Node number set to 33554436 [ 78.181148][ T6821] __nla_validate_parse: 3 callbacks suppressed [ 78.181164][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 78.181176][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 78.225747][ T6828] afs: Unknown parameter 'flockJwrite' [ 78.258788][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 78.355536][ T6844] ftl_cs: FTL header not found. [ 78.375566][ T6844] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 78.470749][ T6850] Device name not specified. [ 78.470749][ T6850] [ 78.831725][ T44] kauditd_printk_skb: 31 callbacks suppressed [ 78.831743][ T44] audit: type=1400 audit(1789838891.645:551): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 78.854555][ T6852] loop8: detected capacity change from 0 to 16384 [ 79.059988][ T6853] I/O error, dev loop8, sector 14400 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 79.060053][ T6853] Buffer I/O error on dev loop8, logical block 1800, lost async page write [ 79.060081][ T6853] Buffer I/O error on dev loop8, logical block 1801, lost async page write [ 79.060091][ T6853] Buffer I/O error on dev loop8, logical block 1802, lost async page write [ 79.060151][ T6853] Buffer I/O error on dev loop8, logical block 1803, lost async page write [ 79.060163][ T6853] Buffer I/O error on dev loop8, logical block 1804, lost async page write [ 79.060173][ T6853] Buffer I/O error on dev loop8, logical block 1805, lost async page write [ 79.060183][ T6853] Buffer I/O error on dev loop8, logical block 1806, lost async page write [ 79.060193][ T6853] Buffer I/O error on dev loop8, logical block 1807, lost async page write [ 79.060204][ T6853] Buffer I/O error on dev loop8, logical block 1808, lost async page write [ 79.060214][ T6853] Buffer I/O error on dev loop8, logical block 1809, lost async page write [ 79.062245][ T6853] I/O error, dev loop8, sector 15424 op 0x1:(WRITE) flags 0x800800 phys_seg 120 prio class 2 [ 79.071647][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071689][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071720][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071751][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071781][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071822][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071861][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071892][ T6853] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 79.071911][ T6853] ldm_validate_partition_table(): Disk read failed. [ 79.071982][ T6853] Dev loop8: unable to read RDB block 0 [ 79.072124][ T6853] loop8: unable to read partition table [ 79.072272][ T6853] loop_reread_partitions: partition scan of loop8 (() failed (rc=-5) [ 79.181796][ T44] audit: type=1400 audit(1789838891.995:552): avc: denied { read } for pid=6857 comm="syz.2.230" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 79.181961][ T44] audit: type=1400 audit(1789838891.995:553): avc: denied { open } for pid=6857 comm="syz.2.230" path="/76/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 79.225394][ T44] audit: type=1400 audit(1789838892.035:554): avc: denied { ioctl } for pid=6857 comm="syz.2.230" path="/76/proc_mnt/kcore" dev="proc" ino=4026532046 ioctlcmd=0xaecf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 79.282285][ T6864] No control pipe specified [ 79.343520][ T44] audit: type=1400 audit(1789838892.155:555): avc: denied { create } for pid=6870 comm="syz.0.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.347164][ T44] audit: type=1400 audit(1789838892.155:556): avc: denied { read } for pid=6870 comm="syz.0.233" path="socket:[16222]" dev="sockfs" ino=16222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 79.393008][ T44] audit: type=1400 audit(1789838892.205:557): avc: denied { connect } for pid=6874 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.794155][ T44] audit: type=1400 audit(1789838892.605:558): avc: denied { block_suspend } for pid=6879 comm="syz.3.235" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.157704][ T6767] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 80.172801][ T25] usb 6-1: USB disconnect, device number 3 [ 80.251415][ T44] audit: type=1400 audit(1789838893.065:559): avc: denied { mounton } for pid=6905 comm="syz.0.239" path="/syzcgroup/cpu/syz0/memory.limit_in_bytes" dev="cgroup" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 80.251554][ T44] audit: type=1400 audit(1789838893.065:560): avc: denied { ioctl } for pid=6909 comm="syz.1.241" path="socket:[16322]" dev="sockfs" ino=16322 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 80.305178][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 80.493513][ T6937] vxcan0: tx address claim with dest, not broadcast [ 80.575560][ T5810] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.593821][ T6943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=144 sclass=netlink_xfrm_socket pid=6943 comm=syz.1.252 [ 80.610355][ T6943] bond2: entered allmulticast mode [ 80.610717][ T6943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.663728][ T6945] ipvlan2: entered allmulticast mode [ 80.663757][ T6945] batadv0: entered allmulticast mode [ 80.665035][ T6945] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 80.735947][ T5810] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.736747][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.736762][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.736773][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.738307][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.738319][ T5810] usb 8-1: Product: syz [ 80.738326][ T5810] usb 8-1: Manufacturer: syz [ 80.738333][ T5810] usb 8-1: SerialNumber: syz [ 80.739811][ T5810] usb 8-1: config 0 descriptor?? [ 80.958864][ T5810] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 80.973567][ T6978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.263'. [ 80.973588][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 81.016775][ T6982] netlink: 'syz.0.265': attribute type 7 has an invalid length. [ 81.016789][ T6982] netlink: 'syz.0.265': attribute type 3 has an invalid length. [ 81.016796][ T6982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.265'. [ 81.130352][ T7004] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20004 [ 81.262821][ T7008] v: renamed from veth0_vlan [ 81.376256][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.422158][ T5439] v: left promiscuous mode [ 81.425912][ T10] v: entered promiscuous mode [ 81.548926][ T42] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 81.549944][ T42] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 81.549964][ T42] usb 5-1: config 1 has no interface number 0 [ 81.551880][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.551898][ T42] usb 5-1: Product: syz [ 81.551910][ T42] usb 5-1: Manufacturer: syz [ 81.551922][ T42] usb 5-1: SerialNumber: syz [ 81.567204][ T42] usb 5-1: 3:1 : does not exist [ 81.567225][ T42] usb 5-1: 3:2 : does not exist [ 81.612927][ T7036] /dev/sr0: Can't open blockdev [ 82.381952][ T10] usb 5-1: USB disconnect, device number 4 [ 82.410545][ T7058] nvme_fcloop: unknown parameter or missing value 'ww' [ 82.410615][ T7059] nvme_fcloop: unknown parameter or missing value 'ww' [ 82.453400][ T7062] random: crng reseeded on system resumption [ 82.493678][ T7066] netlink: 76 bytes leftover after parsing attributes in process `syz.1.283'. [ 82.493691][ T7066] netlink: 76 bytes leftover after parsing attributes in process `syz.1.283'. [ 82.493698][ T7066] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 82.860185][ T7088] netlink: 'syz.1.289': attribute type 1 has an invalid length. [ 82.860205][ T7088] netlink: 244 bytes leftover after parsing attributes in process `syz.1.289'. [ 82.860218][ T7088] NCSI netlink: No device for ifindex 0 [ 82.996753][ T7092] overlayfs: conflicting options: userxattr,redirect_dir=on [ 83.091163][ T7096] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 83.149235][ T7107] fuse: Bad value for 'group_id' [ 83.149255][ T7107] fuse: Bad value for 'group_id' [ 83.616789][ T7116] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 83.992044][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 84.082222][ T7125] tipc: Started in network mode [ 84.082235][ T7125] tipc: Node identity 1000001, cluster identity 4369 [ 84.082241][ T7125] tipc: Node number set to 16777217 [ 84.083329][ T7125] tipc: Cannot configure node identity twice [ 84.091453][ T7125] tipc: New replicast peer: 127.0.0.1 [ 84.094862][ T7125] tipc: Enabled bearer , priority 10 [ 84.236375][ T44] kauditd_printk_skb: 42 callbacks suppressed [ 84.236387][ T44] audit: type=1400 audit(1789838896.792:603): avc: denied { wake_alarm } for pid=7137 comm="syz.0.306" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.238064][ T44] audit: type=1400 audit(1789838896.792:604): avc: denied { setopt } for pid=7137 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.250256][ T44] audit: type=1400 audit(1789838896.801:605): avc: denied { read } for pid=7137 comm="syz.0.306" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.250387][ T44] audit: type=1400 audit(1789838896.801:606): avc: denied { open } for pid=7137 comm="syz.0.306" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.407644][ T42] usb 8-1: USB disconnect, device number 3 [ 84.488362][ T7151] netlink: 80 bytes leftover after parsing attributes in process `syz.3.308'. [ 84.488582][ T44] audit: type=1400 audit(1789838897.035:607): avc: denied { append } for pid=7150 comm="syz.3.308" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.496815][ T44] audit: type=1400 audit(1789838897.035:608): avc: denied { create } for pid=7150 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.496955][ T44] audit: type=1400 audit(1789838897.045:609): avc: denied { write } for pid=7150 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.497157][ T7151] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.515250][ T7151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.628658][ T44] audit: type=1400 audit(1789838897.166:610): avc: denied { mount } for pid=7162 comm="syz.0.312" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.634719][ T7165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.311'. [ 84.637795][ T7165] bond0: entered promiscuous mode [ 84.637808][ T7165] bond_slave_0: entered promiscuous mode [ 84.637959][ T7165] bond_slave_1: entered promiscuous mode [ 84.640308][ T7165] gretap0: entered promiscuous mode [ 84.642070][ T7165] hsr1: entered promiscuous mode [ 84.687280][ T44] audit: type=1400 audit(1789838897.213:611): avc: denied { getopt } for pid=7168 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.687544][ T44] audit: type=1400 audit(1789838897.213:612): avc: denied { remount } for pid=7168 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 84.687610][ T7169] debugfs: Bad value for 'uid' [ 84.687619][ T7169] debugfs: Bad value for 'uid' [ 84.729169][ T7171] netlink: 'syz.0.314': attribute type 63 has an invalid length. [ 84.729183][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 84.779602][ T7179] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 84.826724][ T7180] FAULT_INJECTION: forcing a failure. [ 84.826724][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 84.826743][ T7180] CPU: 2 UID: 0 PID: 7180 Comm: syz.3.316 Not tainted syzkaller #0 PREEMPT(full) [ 84.826756][ T7180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.826763][ T7180] Call Trace: [ 84.826767][ T7180] [ 84.826771][ T7180] dump_stack_lvl+0x100/0x190 [ 84.826814][ T7180] should_fail_ex.cold+0x5/0xa [ 84.826832][ T7180] should_failslab+0xc2/0x120 [ 84.826853][ T7180] __kmalloc_cache_noprof+0x91/0x6d0 [ 84.826872][ T7180] ? shrinker_alloc+0xf5/0xd00 [ 84.826893][ T7180] shrinker_alloc+0xf5/0xd00 [ 84.826913][ T7180] ? mark_held_locks+0x40/0x70 [ 84.826926][ T7180] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 84.826943][ T7180] ? rcu_is_watching+0x13/0xc0 [ 84.826959][ T7180] ? __pfx_shrinker_alloc+0x10/0x10 [ 84.826978][ T7180] ? lockdep_init_map_type+0x5c/0x250 [ 84.826990][ T7180] ? lockdep_init_map_type+0x5c/0x250 [ 84.827003][ T7180] ? __raw_spin_lock_init+0x3a/0x110 [ 84.827018][ T7180] ? __init_rwsem+0x10e/0x180 [ 84.827033][ T7180] sget_fc+0x979/0x1f20 [ 84.827048][ T7180] ? __pfx_super_s_dev_test+0x10/0x10 [ 84.827065][ T7180] ? __pfx_super_s_dev_set+0x10/0x10 [ 84.827082][ T7180] ? __pfx_sget_fc+0x10/0x10 [ 84.827093][ T7180] ? __mutex_unlock_slowpath+0x35d/0x930 [ 84.827110][ T7180] ? _kstrtoull+0x144/0x200 [ 84.827125][ T7180] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.827146][ T7180] sget_dev+0x9b/0xe0 [ 84.827156][ T7180] ? __pfx_sget_dev+0x10/0x10 [ 84.827167][ T7180] ? get_mtd_device+0xde/0x1f0 [ 84.827181][ T7180] ? __pfx_get_mtd_device+0x10/0x10 [ 84.827194][ T7180] ? __pfx_jffs2_fill_super+0x10/0x10 [ 84.827208][ T7180] mtd_get_sb+0x53/0x4c0 [ 84.827223][ T7180] ? __pfx_jffs2_fill_super+0x10/0x10 [ 84.827236][ T7180] get_tree_mtd+0x6f9/0x8a0 [ 84.827250][ T7180] ? __pfx_get_tree_mtd+0x10/0x10 [ 84.827265][ T7180] ? cap_capable+0x107/0x430 [ 84.827285][ T7180] ? bpf_lsm_capable+0x9/0x10 [ 84.827301][ T7180] ? security_capable+0x80/0x260 [ 84.827319][ T7180] vfs_get_tree+0x92/0x320 [ 84.827337][ T7180] path_mount+0x7d0/0x24c0 [ 84.827356][ T7180] ? __pfx_path_mount+0x10/0x10 [ 84.827372][ T7180] ? lockdep_hardirqs_on+0x7d/0x110 [ 84.827390][ T7180] ? putname+0xb1/0x110 [ 84.827403][ T7180] ? kmem_cache_free+0x127/0x6c0 [ 84.827425][ T7180] ? __x64_sys_mount+0x293/0x310 [ 84.827441][ T7180] __x64_sys_mount+0x293/0x310 [ 84.827457][ T7180] ? __pfx___x64_sys_mount+0x10/0x10 [ 84.827479][ T7180] do_syscall_64+0x123/0x790 [ 84.827496][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.827508][ T7180] RIP: 0033:0x7f164b19e159 [ 84.827517][ T7180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.827534][ T7180] RSP: 002b:00007f164c024028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.827547][ T7180] RAX: ffffffffffffffda RBX: 00007f164b426090 RCX: 00007f164b19e159 [ 84.827554][ T7180] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080 [ 84.827561][ T7180] RBP: 00007f164b23506b R08: 0000000000000000 R09: 0000000000000000 [ 84.827569][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.827576][ T7180] R13: 00007f164b426128 R14: 00007f164b426090 R15: 00007ffc34a7dd68 [ 84.827591][ T7180] [ 85.635855][ T7194] netlink: 76 bytes leftover after parsing attributes in process `syz.2.321'. [ 85.638723][ T7196] netlink: 76 bytes leftover after parsing attributes in process `syz.2.321'. [ 85.684271][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 85.684879][ T7205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.323'. [ 85.693682][ T7207] ip6t_hbh: unknown flags 83 [ 85.722535][ T7210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 85.758998][ T7212] ip6t_hbh: too many supported opts specified [ 85.762425][ T7216] ip6t_hbh: too many supported opts specified [ 86.815450][ T10] ------------[ cut here ]------------ [ 86.815460][ T10] [CRTC:40:crtc-0] vblank wait timed out [ 86.815467][ T10] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1927 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#0: kworker/0:1/10 [ 86.824026][ T10] Modules linked in: [ 86.825295][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 86.828253][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.831409][ T10] Workqueue: events drm_fb_helper_damage_work [ 86.833287][ T10] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 86.835727][ T10] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d d8 1d 75 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 a3 87 30 fc e9 7c fe ff ff e8 d9 [ 86.841841][ T10] RSP: 0018:ffffc900000d76c0 EFLAGS: 00010246 [ 86.843744][ T10] RAX: 0000000000000000 RBX: ffff888100720040 RCX: 1ffff110200e4022 [ 86.846189][ T10] RDX: ffff8880282ca520 RSI: 0000000000000028 RDI: ffffffff9150b5d0 [ 86.848704][ T10] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 86.851481][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.854107][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801c7f9c00 [ 86.856633][ T10] FS: 0000000000000000(0000) GS:ffff8880d5b56000(0000) knlGS:0000000000000000 [ 86.859525][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.861545][ T10] CR2: 00007fe5e87b2fa8 CR3: 000000005243e000 CR4: 0000000000352ef0 [ 86.863970][ T10] Call Trace: [ 86.864993][ T10] [ 86.865883][ T10] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 86.868139][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.869952][ T10] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.871538][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.873397][ T10] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 86.875315][ T10] drm_atomic_helper_commit_tail+0xff/0x130 [ 86.877115][ T10] commit_tail+0x338/0x430 [ 86.878466][ T10] drm_atomic_helper_commit+0x303/0x380 [ 86.880264][ T10] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 86.882086][ T10] drm_atomic_commit+0x230/0x300 [ 86.883577][ T10] ? __pfx_drm_atomic_commit+0x10/0x10 [ 86.885200][ T10] ? __pfx___drm_printfn_info+0x10/0x10 [ 86.886946][ T10] ? modeset_lock+0x114/0x6d0 [ 86.888432][ T10] drm_atomic_helper_dirtyfb+0x603/0x790 [ 86.890309][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.892173][ T10] ? do_raw_spin_lock+0x128/0x260 [ 86.893692][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 86.895608][ T10] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 86.897536][ T10] drm_fb_helper_damage_work+0x4c8/0xab0 [ 86.899320][ T10] ? process_one_work+0xa2c/0x1b10 [ 86.901045][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.903008][ T10] ? process_one_work+0x906/0x1b10 [ 86.904616][ T10] ? process_one_work+0x906/0x1b10 [ 86.906219][ T10] process_one_work+0xac7/0x1b10 [ 86.907783][ T10] ? __pfx_process_one_work+0x10/0x10 [ 86.909466][ T10] ? lock_acquire+0x1d1/0x380 [ 86.910976][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 86.912986][ T10] worker_thread+0x5ef/0xe50 [ 86.914451][ T10] ? __pfx_worker_thread+0x10/0x10 [ 86.916104][ T10] ? kthread+0x13a/0x450 [ 86.917442][ T10] ? __pfx_worker_thread+0x10/0x10 [ 86.919055][ T10] kthread+0x373/0x450 [ 86.920344][ T10] ? __pfx_kthread+0x10/0x10 [ 86.921806][ T10] ret_from_fork+0x730/0xd60 [ 86.923469][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 86.925066][ T10] ? __switch_to+0x800/0x10f0 [ 86.926590][ T10] ? __pfx_kthread+0x10/0x10 [ 86.928059][ T10] ret_from_fork_asm+0x1a/0x30 [ 86.929595][ T10] [ 86.930575][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.932836][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 86.935660][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.938764][ T10] Workqueue: events drm_fb_helper_damage_work [ 86.940721][ T10] Call Trace: [ 86.941794][ T10] [ 86.942782][ T10] dump_stack_lvl+0x100/0x190 [ 86.944259][ T10] vpanic+0x553/0x970 [ 86.945514][ T10] ? __pfx_vpanic+0x10/0x10 [ 86.946953][ T10] panic+0xd1/0xe0 [ 86.948131][ T10] ? __pfx_panic+0x10/0x10 [ 86.949536][ T10] check_panic_on_warn.cold+0x19/0x34 [ 86.951211][ T10] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 86.953436][ T10] __warn.cold+0x191/0x318 [ 86.954835][ T10] __report_bug+0x30f/0x440 [ 86.956304][ T10] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 86.958532][ T10] ? __pfx___report_bug+0x10/0x10 [ 86.960115][ T10] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.961747][ T10] report_bug_entry+0xe2/0x290 [ 86.963266][ T10] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 86.965459][ T10] handle_bug+0x1cd/0x2a0 [ 86.966812][ T10] exc_invalid_op+0x17/0x50 [ 86.968231][ T10] asm_exc_invalid_op+0x1a/0x20 [ 86.969776][ T10] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 86.972180][ T10] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d d8 1d 75 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 a3 87 30 fc e9 7c fe ff ff e8 d9 [ 86.978087][ T10] RSP: 0018:ffffc900000d76c0 EFLAGS: 00010246 [ 86.979984][ T10] RAX: 0000000000000000 RBX: ffff888100720040 RCX: 1ffff110200e4022 [ 86.982460][ T10] RDX: ffff8880282ca520 RSI: 0000000000000028 RDI: ffffffff9150b5d0 [ 86.984900][ T10] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 86.987359][ T10] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 86.989809][ T10] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801c7f9c00 [ 86.992270][ T10] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 86.994595][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.996463][ T10] ? lockdep_hardirqs_on+0x7d/0x110 [ 86.998088][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.999990][ T10] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 87.001979][ T10] drm_atomic_helper_commit_tail+0xff/0x130 [ 87.003849][ T10] commit_tail+0x338/0x430 [ 87.005255][ T10] drm_atomic_helper_commit+0x303/0x380 [ 87.006997][ T10] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 87.008896][ T10] drm_atomic_commit+0x230/0x300 [ 87.010448][ T10] ? __pfx_drm_atomic_commit+0x10/0x10 [ 87.012145][ T10] ? __pfx___drm_printfn_info+0x10/0x10 [ 87.013868][ T10] ? modeset_lock+0x114/0x6d0 [ 87.015353][ T10] drm_atomic_helper_dirtyfb+0x603/0x790 [ 87.017113][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 87.019058][ T10] ? do_raw_spin_lock+0x128/0x260 [ 87.020636][ T10] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 87.022585][ T10] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 87.024506][ T10] drm_fb_helper_damage_work+0x4c8/0xab0 [ 87.026261][ T10] ? process_one_work+0xa2c/0x1b10 [ 87.027722][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 87.029650][ T10] ? process_one_work+0x906/0x1b10 [ 87.031265][ T10] ? process_one_work+0x906/0x1b10 [ 87.032892][ T10] process_one_work+0xac7/0x1b10 [ 87.034457][ T10] ? __pfx_process_one_work+0x10/0x10 [ 87.036096][ T10] ? lock_acquire+0x1d1/0x380 [ 87.037575][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 87.039527][ T10] worker_thread+0x5ef/0xe50 [ 87.040982][ T10] ? __pfx_worker_thread+0x10/0x10 [ 87.042598][ T10] ? kthread+0x13a/0x450 [ 87.043936][ T10] ? __pfx_worker_thread+0x10/0x10 [ 87.045539][ T10] kthread+0x373/0x450 [ 87.046828][ T10] ? __pfx_kthread+0x10/0x10 [ 87.048280][ T10] ret_from_fork+0x730/0xd60 [ 87.049822][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 87.051428][ T10] ? __switch_to+0x800/0x10f0 [ 87.052901][ T10] ? __pfx_kthread+0x10/0x10 [ 87.054345][ T10] ret_from_fork_asm+0x1a/0x30 [ 87.055867][ T10] [ 88.116288][ T10] Shutting down cpus with NMI [ 88.118279][ T10] Kernel Offset: disabled [ 88.119585][ T10] Rebooting in 86400 seconds..