last executing test programs: 9m27.15672912s ago: executing program 32 (id=201): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12100) 9m25.219019781s ago: executing program 33 (id=213): read(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)='timerslack_ns\x00') write$binfmt_format(r2, &(0x7f0000000280)='0\x00', 0x2) 8m44.232010344s ago: executing program 34 (id=315): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 8m11.743099852s ago: executing program 5 (id=514): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x9, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8m6.645811353s ago: executing program 5 (id=525): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 8m5.468066147s ago: executing program 5 (id=528): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m4.958287378s ago: executing program 5 (id=530): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 8m4.858110061s ago: executing program 5 (id=533): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1001}, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 8m3.762726337s ago: executing program 5 (id=535): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x90}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x5, &(0x7f0000000440)={0x0, 0x200023, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x7ebe15194cbacdd9, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="88dd030000720100140003006272696467655f736c6176655f300000040016800a000100aaaaaaaaaa1c"], 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f0000002d40)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000003ec0)=""/137, 0x89}, 0x8001}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004000)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000280)=""/37, 0x25}, 0x100}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000004700), 0x0, &(0x7f0000004780)=""/71, 0x47}, 0x8}], 0x3, 0x10022, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000140)={0x2, "28a076bdd8b9f61d2e590bba02313cfbace9b6cf5328ff6a65b5a9155541e792", 0x2, 0x40, 0x989db715178fc3d, 0x42a93e9ac30c4920, 0x10102, 0x2}) 8m3.200200753s ago: executing program 35 (id=535): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x90}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x5, &(0x7f0000000440)={0x0, 0x200023, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x7ebe15194cbacdd9, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="88dd030000720100140003006272696467655f736c6176655f300000040016800a000100aaaaaaaaaa1c"], 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f0000002d40)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000003ec0)=""/137, 0x89}, 0x8001}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004000)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000280)=""/37, 0x25}, 0x100}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000004700), 0x0, &(0x7f0000004780)=""/71, 0x47}, 0x8}], 0x3, 0x10022, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000140)={0x2, "28a076bdd8b9f61d2e590bba02313cfbace9b6cf5328ff6a65b5a9155541e792", 0x2, 0x40, 0x989db715178fc3d, 0x42a93e9ac30c4920, 0x10102, 0x2}) 4m18.688447185s ago: executing program 7 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4004662b, 0x0) 4m17.731168616s ago: executing program 7 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000580), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 4m16.428825179s ago: executing program 7 (id=1150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@broadcast]}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x0) 4m16.006929019s ago: executing program 7 (id=1151): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001500001900805fb292ce391a47d9ae48e3f0dc2bd3f6826612117964767a393a80010132865091d41426f4871236ba6bdce855cfffe76f733651ad48d5460d3a4837fba559ab206febaf13d41590a01d8a8fef9504e36c2a39b0"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = msgget$private(0x0, 0x193) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01080000000000000000000000a36b74a5c4fae1088fbabd8d960a"], 0x14}, 0x1, 0x0, 0x0, 0x845}, 0x2004c004) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYRES8], 0x3f9, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e28, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) msgrcv(r1, &(0x7f00000002c0), 0x8, 0x0, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000000)={0x3, 0x0, 0xfffffffc}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'wrr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x8000000010, 0x2, 0x0) 4m12.957336239s ago: executing program 7 (id=1163): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x4b) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unshare(0x20600) 4m10.353761525s ago: executing program 7 (id=1168): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m55.14128174s ago: executing program 36 (id=1168): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m46.835202901s ago: executing program 4 (id=1424): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2m43.875250155s ago: executing program 4 (id=1433): r0 = socket$inet(0x2, 0x1, 0x6) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 2m41.639308533s ago: executing program 4 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m41.37095192s ago: executing program 4 (id=1441): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8774da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdf06375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d68f1c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361b851de34ccb3c8071b96f1128d7ee79b41246e5628e70272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0ff22321e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6beffffffff5e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf21dad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d1150129176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040fa0200000000000000002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x40004, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d64000d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af78b49b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc21d2648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e09001af8bff5c81a581d35d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c177554be8c4925dacb5764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda2d42527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aeeb3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0f00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd03e5b04bfdb61f5e169b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf2828a6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x96, {0x5, 0x0, 0x0, 0x5, 0x3, 0x554, {0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x9, 0xffffffffffffff77, 0x0, 0x0, 0xffffffff, 0xc000, 0xfffffffc, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01d8f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b004874405f6165721e69d5acfd091b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9cefa7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970ccac619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d6e1e3d19a48b2d89ce74cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fc34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bad5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962f5cbb902db29a084e305b68f289df8112d19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c54367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c93378f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a790d3e9d44fe0438fe1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feebc0aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb76e865841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c00", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x8000000000000001, {0x3, 0x2, 0xb, 0x5, 0x2, 0x82c7, {0x2, 0xa, 0x9, 0x104, 0x1a20, 0xb, 0x5e5, 0x81, 0x6, 0x8000, 0x7, 0x0, r2, 0x8, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="adad768619ed2b2f70ceeb5c4801589795f250e0d73e423a345d5edf5ca8926d76878eeed90f24ec2e6e2561b79da4df21c6bb9a49c25d92498f31e52da516f095d17b48feb889bcf4b075af1eba3ab15899f804b8ba76c69e919d6034685eeb5a03e8932165d4fef268e9edef143d14bdc92705c67c22322446da5139d2cd0d4726cf3c833af43c4d10db9e325d8b1a6723522646cd12f6d1f4b40f3d055b8c7499691d9a6ea4c62cac4515dc608a38bc3516df979017d4c7a80c8aa441574e2f86a5dda35fa31e59cfc59c88e7898b1bf725f6f2aecfcfb274ee01a7a5382363e532615cbaa485ce06bbed28c46f1d0cc18bf22cfab3198b8a4bd88cd05c9f743bc7032065254d05e29aa83b3840b55469b038abd1c76f3cc13fbfd1dba7e12202112a8d8a932205b10f473a94895e383b7cf8ec83d9cf4c95ef02d8b436857c53e94c6d7ef335a66dfd0ee17e0978531142c8a9ba95dbab7612e6c24da51f137762642db88e535e743803761e5ef38cd2dcb86db609b4fe348270215b3c2d751782358a85e610edfba7e7f31c92ac4aeec3feda578afeafc69f98b8f7b647ac93fc185a2be0a247d7c4b06ba2f4209a6b45aefb27a43fc2111b1f4809f829e320b62ddb2280245f8512a52d23e6e8bf3850ab3544019a4fd4531e2a0e9349e1a9fafa57c8e899da5f3feccd5e052c319f528d846011f7afe1d42ea0e8c941d02a749ad913eeb7ba3d333e30ae82720bdf3737a48e3da8d3b0ff89edaf58652f0ce8337de3204eb73022ec1373d3475b4776de76e788f8dc61c79387086831dfb961244b8fa0aa732926f0ed8bb6d87eb81047e91c2c532bced9607fa971b726ca975cb5d5ea06a996d35ae71be53a12645739a26ff3c2b1bc5494ab098bd47b1ac0b5c891a2382223953a0dc53a5e712ab2cbf7e7172f9f1ee0d58d090c287ec637c1b664147faf2575bd52f3a80ee0a498b5d3d0f27e33e537f918c98d4f2483fe6713d02597a8abff0a34861db5f20b267daafd55a46b3ad74c78fb312d0e8e74d3e52a804eab2b73857bb629fa6c33d041c86abfba8e8f6e7cf128eb79c59abdedfc28273da4f4f6b18f2a218676e6090b2af1e8b55fc7c8d78087fdb1f8b0bdda9748ad9777994c8870763a745c5403dae14db2d3c2a532ca914b97362c8ea9d2981b6c57ff984fef57f62675f36bab8d1fffa92b35bf02b2c0492a2b1445bc30ac0e6a3136c6771599c05ec520d602432d7d4426c7e956a5368ffc073d238fe5c43692f874c0048e293567c40ff712ac39a161efcd12266eee444bb7b15b761f4aeb1cbe9c9d2dc25396826039c08ee17b4c3fbff5c10b380bf813bc854208c66d622450f36ce8ae1777bd1921003c6b1d1d8524cb2a1c206670318ccd7440b002900d42a01321ca680aa87b1cd28c4f2b702930144ac32b7d31fdd58e694c2b6ca80c0691523fd91fe64986e40b48b914a167e94fbf143fbba75305a72d14e52daa16473b726cf5fb666fbcea495bf31e98e2fc6ccbb7769704bf1c1d574f5ba2cae78d320291ff299777c8d67f1c2d33aa121c38d4c7efd82137f69f670585a10db6636969fd326143bc350a4b7d61bfe9b73de2364f64c4f1258dd2090a80264dcbfc56ead5691809d6584fb30106cc4c2f6f593c538b979166467d711c5e3cda4cd519f30213f9a51dc96fc2a2603c763f488d75fdad6bc44ea82ad01c43b66553e956c81cf353f0332520dd7caa366025d50c470194b7a34b3834e2b605fdbf55a848606429e6a1cfa3b67f4038981abfad6181e8aed475332641549343b43fefd8558a08161f2540de7a271e20fb5e2740ebc84c58a3ac356d0ae3725c893a380f954fca48c5d83d4610cdaabee2824f828113bee4f02c947d4a5e1c411e9fe68e28df50332cc0ff2c50ee9817c56184751ca17e832814113c62946d18555ae8b6112f865619f9a7aedca9722f7689c3162a31407db95ef5b5e6c72614a96c812fd62ebec0dbff6582e2d5e3ebced8218da189b467b4af3f03e6f8859a2139a42e07a82bab81bd0759b128ff3b5ee50581941ba6c35d23d0310f2cf34f6fa6a8760e048b966dca896e7f2d134ac0fb8b1bd2ac6d528250f87049afc240e1c859999510d62ac91e675b30478fefa75eae23ba6ece536e325880ff2c9f8a24b5d95c4a8e433b4557d66ce7cf350e8ff3ffe59960c2140e32e2c62182ed8c821fae1aadd47663cf60c6566e464f8f7a0f5e033ab17031b9f7650aba517ead4ef0c4ef95a3de27ef98a7b050d6ae47b247cffbd8eb0acd652a968e959d1904c0d26715c85c7a9d69719af548ab4d81b9bd443876256e41dd6dfe4edbf08ea0da8cd1ff8896273ce4291adffe42bb45ac8c69edfa8ea455c49b1b83d9313085b6b56653903288ddfe2c7816830226b9453455dc03ce9803cdb9b3a6c1b7aea04915486fea924e07061959da7d8c8db23926e48aac5d694f8893575b7789ad3a988cf7e205a815865b59a847244bb58f8d1038b2d5e99b6dbc2f65e4cd4da5ccc9f333c817bd82c8f88bfcc842a18cdb0063fd66d2483bae009300003d0413ec74e3dc55aeb6541504415802a39d2d23eda7f5bb62ae682e071b99fa39244c4c4fcfb7a6639fdb57d2889a1b89fa8a16c70e9e26707d51b29d22bfe904e3196287a21f2585e1012af3a50810b5b4bd1563e71353de14b41e4a9fdfa4d9ba08d7bbf2cdda88416d33191bb30e1c86af7122290f5312477b176878a7643e1b83d9e5931a91cc4bc1d116c4c86c717148f6e73a2a82f40eb6b1f20f68daaaf01b7c132deb660c8925b2fd7467904f33e6242a0d2b73a12b0f0866fcce3fa2a3a1361eba56bbb86b1d454eed1639315b757c13b91a986bba0fca369b5d8f40aae5d7c8313f405b01941d2ac389170dcc8904b1cf75c8e4bd80dfebc8bc0bf536f1fc82a9d90b6a5ddfa97889017f2e514ed4e800feaf021c08d666fdb2a2b266de0eec46418bcb38d9314c6e76ca42c814f3aafef3721532f249892b0999482885aecca16ae9b4b4b9960a738fa6b93af2a9568688b98547f5105dd56b2992a34040351102c0275578837e11f64deb284a82e61af5078cf872262b7f256e609a33fe61e719a4f7f06f6bb01029f73bec633620b58ff37dd71826fbac525d098b7609c84f50f3de6fac20228c05b186f772d4395865618b7acb031ffbc34281ded3c1b1fc0cb409c867f43180dbcd815de94dc287a750495dc0e2e06a70ef6b61e02b31790daacbf4980ef6aeb2e09166632b0b1e0e420ff40561d6de6a4acebb6cd219fa3e5f5a32c587f944a3399882e82a2267338669d4ac673cd0e57909dc8be660dfe3045817a264300e44d6ed68f66c1e25f8177467a59561b2534417e794dde6dec60a2f97faebd586f44c3bd5048612c9073d31f062b92a0a74ccaacc26668d32dc366fda5dfa51b5d80fc7c0c72de82acc656e90837f9f180b2f7237749a529dc159a7675045afc59aaf69eab1fb0c000d8a2248a30c8e6ff92dda554fead940da14d47f010ccc04bc0811c6a1d9f1dba22e07928df7bf0230de6b8ecf2ec70732eea3f9aee51ed30ae0c8304ff6eac0501efc85e0cf6dd8e519e80537cee1dc19749b0b2ed7a6a8d6e261b358c7655cfb02b982a58a1d5f895cd1ace37758f6851bcc34a602d63d6fba7eb5e097e0446ee08b6a3b2b83c88346dd39b907e57822ecf18619fb55520a17d47e589ea07a784fbe67e1d8ff8d9d8580d33fbe9e5d6554180984d059ebc96110a0ec46ad5ba6aac7af77e6b39292e9822cd1872febd5729a1199db432c8aa31ef9a00e678be2de5278b1c3f703588a76a6ceb37329b5989d47c2cfee15e24ef8862a1f99450fd78b99b1da71b85fe3d7ee997e9c77e9c23edbdfad801e16b268ccffa57161fa605cca8f5fe1372d4fab5107d6ebf39bca8380160c08b6501b06b610b548bc0fbee61520d96443416a7afc2eb1dd0365470f6bf190df96cf21064b3b578370cf964bb4322a83f806df6ed7bd2016b64fda7165a3c81623100f5444811dcfbe581095973702009a80f19851769293ecf977a8f25e6dac5e9504a4c6877b8f8dc96c49b268fa66c5427579b5aa8a17ad2544435776d887b16e2fece3fe4bddada074481e6b5aafc335981d7d720541ecbb01dd8c36702a57cb2a6c6a57f4ee63723e464778d6ab29a5937fa9e000ee4a903af5f5dce1d23cda45f36c12ecd86c402aff43dd23814159f9368c6410fe604f3e6e8684866066049ab9dc75ab47a4b41bb3a1950ab7f5eac17e8e338cd84d97693ab9c4e014ba47f50f727fef01b7590a5a06ffb52514e5c2527b5063530a15b626375bcf9ffff2ab552cf83bb1eb8e8790b278f000d9c3aa77563614985e85a4154dc0fe2e400118a60fb1aefbb9e4576dff5d62cb47017b9e2372482402acfb0a447d5699087a4921e7486153e30af5fd88c2cb4692787e09db956958a8016578788a0fa33da8a329d17d0fe713afdec6e9e19337100e40dccf5b574162c86da9ee2042971e7db34efe14524aafcc466b19b8b939ae9ea96425723d6d114f64c56042cd28b6407a11d848807b67994fa2d7cedc6f70c15a19332bb14a3ec159338314360e4ba36a9922d3116ca50b17eee66c3818f25086c78a63a4971d164f2c4c7cd936419809ba1f9d9a18ba2beae2eb7dbce46d45be9bde26f318b64ff7521cd6eecb0762dd497d9be9a862e1a14fd812cd87fee2ca99eeaa94b39bae9a4d8616f99d178c2c7676fca77592bee16ea4aca2365c90ac69ade69ca2978368d7840c65181b620832aed9bb0533c193112a1ee199db72f54550982665b82a1961ef19a26116b37fca453319da283f4d19aaa20d08a91d177be6f194c636ee21446ab2f8b6471f62845eec2b1699735e05e1b51edc180f1605c490a83f43277439ca876418cfb34270eca101ca367d98172e5aa9936b2bba30bb62602da0abdda618af558ddda0ae3e187e085eebb309779edec3fa44e3c0e70c2715fd28a6e8a424579790e41dbcf11f7e5208095c5d96a5222802dbd517b39a1f8ce4a8f421e0becd50f8bfb3382aaecbff5f59e04f3a3040582f2501986aad8e9949f8a15027d45f72338c999ba70f99f23968b6616df87916ee88d80abaa903d4f40dfcf99b3385c15c7d51a01fe99de754fba2de6fd73a317afedeb58482122cc51beae8cb6cfabde08c86c8223d8c4a12f33fbbccda6e197c25c02bd50059cb775fcd559bdaa8d04e09c1c3262d94ed4daa8d5c20a1cd7d3fb8c3bd86f6a7112dc3957da282374e26566131fd4d26e38c4a3925fdfc95cdf7914dbc1e0656f9aacc9bf510a13dfde63c0f558badcb4974dd7e72c688ace7659c1e7d7d9a6fc06b27585cf898e175e278f731befc5f71c4ca6f11025cde90452e8e82e2635cec63576e21bdd9734bde4356e7f0fb1b9bf47df797f8ae9b3cc1ba19cc6c565f153d20b214d24f664fa4d38f9bba3dbefa3f540f9036940d7865841361260ab331104fb7e2aeead1b0588792932a58441b8f1ff8dee519f06a2ea23bec7e45dcb59da4f2f4fa46c50539dcdb27321f6cba8fa7bc3ac0dd3982bcc35620b7cdd23fe5c1c0a22a2bd40c30085137a1d1a8cf5e36413cfa487dde2ddeb62b710cc93685d11365e02d07e599a2c1f56c5fb1ac44ef56a6a8c063d12a994ca68296748b9bb7649b14169ff7e3ab101702511f3022e91ab5a0b3af45a703538a3b7c42918062fec2dc7980632e85ffa2db6ac5865ade855d3eadb7bd8ef18efdf64fa59fb5ec3fa9dc89c1f760f871ff6f83652722e1f0854f188207b70afd87a3525c483ba05a9eafa803281a626958e4eb5ebe00f02a29b3b0126193879477a7e252bc23e53db3b48e2b9d5d83400581a55dbc3b6cad4d87d113d48c2d9f452d49e528c48440d89db26ae929e2da669b49443c0f7ef32d243a9ff52b3a7545d5c0b9b6b330f7e40e1f506d0e555ffd2f50bf0ba89b232e9ba442c39509130ce0a5a69cdd5a2fdc6f7f09da5c7e7ed5150ef31d3127af833c1a5e81e4785845787f8c77c72fd72112a27d445db1626ee40ee1867fdb72307583301b1da3d6e6185c1d978fef3fb5904884fd4f68c77ab7d06a903c0ebe1f64a9f7c01bf1438598837bf349ef5b27e075fcde14ef238c4b1c3231e9ef113ca57156b888adb58f05c57d0ff3bed701278c156943c66088346e9cd025ba1221265b8f69c538dfe7f254accae5594d23c29426f4da8bb952740753178692f74010931e70cceb062368dd91c014a98d6b27fb1df217e2148f4148e5d9a6bc1b398638ef2ca443ae47bcfb5e815dc192c67c8b8943c8bbd52f8394bbf80bc2c02e791b97b5f122b68508e382d05b5f7ed1186d559a4a279c3d6525c135bcd53814f660ea387c986bfc1af1c491c1241caac90120985ec0a08b65e5391b1e846998ff4c243907b4d2193bb64ec647407e9d5b499061246fdb78b8c02c7bced12c39fd0e27b1dc059439878106ef6150739f4c6b8f9063dce7b0e54a2fc0e29f9604e7434726776095a523bfa8cee94d8a265345693a6398c5b7e125f5a0f90e7477b5d6dabc6c97509b0577001c33247def9ba7bebeefc4dabb51b7da06a86ab78bd07951b4e66888afa219a60903c53bd3c9d18a7f693dea75a6ce05b4a1042fdd83a902d4fc1569b7e29d912179015acae28a610a8e0d9c93321bba5f7287eb46778eed1dca5c327d12d650dede497675bca4b9f4393227382a659fbd3c08ad06a32b42e1c7e96dca874b4d85b9fdadd6c76049141a57fe06465f2dd310b55141e468f64bd2d306754b1f9bed4c166977b84fba338f66b2016afbc1f6626a6e1a429d0c266a377cbc1d5e5d09d5fdad9cb807e9832f5adaa9487b9f381711d3afb9abed7409bb225f2f71c2f7efbac1a9a66588a4d8dace7ab3044628aa5c7d00a9846087de3a7ede13febd859038c305bf39d322253412086b70073d2bf243e1999268daaf324a733ecdab24f604929701cd5765a409f5d4ccd44b90f81502e145208a132c1eccf03a24def9727906566a9812459a5c9e9e267e6db7db8c23812671f426426df48ee8dee59fb8c0aaadda9d83c7a884afa68565edd770d5898709db1585e03f558f16bc26b466ca73d401c01e5ac3dc79ae126c24f441d437340eb78ded57c99ebb02a4e08a95a37bcdcd6eabbe06a80389090718a6b00d44e2934f05ac5546ebbae5eccb1d56e13c87879738574d0675e2e1de931ade0e12a4fca340651b9a57f59b0d0d615c34bb9cb1d9434c34a9468844698de17c5852c1f5ca9f8f59aaf3093002cb8e6828f9d94a39e485f6b9b2379e3f798b56bc71c113e7eab027ba6d9a897260698d9e918f4d2923cbb797e330be6d8e8dc38c087adb49f4cfc539ae189375a334dd833b5526af5beeabf2d6ae1630c4d807e7f0bb2d3c557fddebf8a316279ba1db587cbe29e52fe3eb1d294646c3e58d0a704c7b262c526930303451c02b6ff19daca95359945a7ec3cbb4fc5e1b70c8b896a7f67e03951b6f2d935b4ba48d9ef69c9f19bf70c11bfbf45dd0d6bc04531280e9f25cbb8b761b392515605ae6f6f0278201874d443ede7c7e162085a9082504e7dfb2ca78ff41bbd1fc2d2f644d188ce4da0545b75bbd1aa19d54c9e11d16ad75a005a72516203a1f92a7e056d9f7e6d00a10b0fd1df60bac5d04f2f92ef9d6423c77575f50bc7275d095fc494f8904582ac9fc6a1a0a0164b61529aa777a614e4a3a3b9e2c87daf712a281657d488535aee063edcca994b3621cda9e4d905b83e4d9873639282ad0eaacd3b55410cbecb0f5015f7bb4f0f464141d64c6931e3a165091bfdf1635916713f1e7db929c074e487e92f672250501260bbb68069f8dee74e3a7879d90bcef203c14e341bfed118f914930780dccb9dab95b692a191ec58bb3970389ef8245afbc5bbd13bc2ec390df8234facae0aa7b4d3257cc79ae8cdc9cd3257d340c94d2463910d299d9e9a0d1243cdcba69e4695123a6224fc1f39192330f255bd6a342355476c0917b430fb0662cbe24c42899bf8707e63cc8645a155c5275e1c59149cf0f4f0f355dcad3afaead57325456ae2916275d9ba854ce096286b562f7ffc3228a06ac36fdff247e87d2d6ce623c7c2f62e2d69b462b797ff346769c9de464e86806768a35cd1ebf0c2cf2da616f2a255e0c10828c0097dfb18636218a7ed67487f26524ae8840735d7776f96550d5a27fab689a16e3973c4d5730213e9876ca4099eb41f5b39dcfd15379733ed21fe5151cca327a1a4ee511271b70b1e2e1755a37c2a7d747abba978221b236c9099449662d603854f0e249b3652e1ca0d6eb3fcf0376cd0720371b96f032306aaf430ef2a77a9057ed35ec936a6f15b488f6f01942c169806452ae2e03822cac60478866f7a984d8fe9b278165e439248380b6772e693d4fb19f533bcff4f8e517f3d83553f71510944cafef68282e828513762fb44275ae9a85651fa157004bc8a43fa0b422d603a64994a70df5600a1cd30859c8a7a657dc77afe95122f9a1d65d1661ddb8c6ac247e0fc99f68abf76b7374e71068ad55fc02fabb889ad79fa780ec0153b36ee9c3dea0e5516e0c07d13b1fc7309e49f6478408f6ece4845b731517d1f56e26cf3ad308fa7d4a5deaa5d53926e7b6e26f1bae61c51710d4c500453ced56fdbd28d96a9aadb7b31a4abbf070dc0235ae80d282d9bcd96a3042ac9253456f906441ebc7beb826ad2151a7c4264fb1948c20e9366664a03629ef6de4601b336187f434fb56381e86c8db68bc049c23256d14b881cf214c468fb572b5d783f1dcf51aec85c5d170db88cb2c5004aace2de0b6e1b8888baad10c97d4a9b9987f75360640cd958a7b77fa42801d1aff323065e5b30d7553cbd11efac9a3daee96910c016c39ca24cb17b44371e6ad25973b839a5bd32b66fbf4bf5920829bd283b9bc7b5f5f89af1e7f9a9ac23187983851b293674ab176b3b4aa8837341df66377cac3763acb7f9389c8e843db1c8d5b2a3c458e4700fbd5dfb9871004e24aa874b77a4fcc3497e6a18eab398738a1110485fd9c37e211a61d03efec3a9bd977191945bc20da0add1703a60cec2b3e8764440210bd1a382b647f4136bce1f0812caedb05fa5e81d451180a65c81b22c20ba832afcb7d77eb544fd170b22232fc5b7a5df70134345068e766a1b185daf9bee41651071bb604a145380e3a42ab255f84cdebcd4bf2fabf86948ec4c3fb5ae8f69a59effc980da8245b89098312a9b6086380da8fdb3705f5a17a801b0858d3e1bda0c0749919c4fdcb37491b011cac4c17e60ac2948f2a76456d97b24f14f9685701c47f2b061eca633f01d13bba0e5459dcfcf2be6b13bec65b3f8ee69e09cea73b25241da28d2b9f46593df94622d660c39e10a06380d625fa85ecf3b256c9b47d4988bc32be41362b25888c5480ed48dc3c1c347fb224d52a0c02cc77c11060cac517c6ee617276bc24bd20adae337fd619b79882894f24176fe2c8a7649cc98966bf7592a9161950a1b5711f7f33829d4a79342b059e0bc2e08f2567aadb4ddfd1bd0e9e800893f8f4f7f46b5d00cfde10bf426326f2edfd358af43fb27f6e045132ec2924aff479efdff65de1dd2a95af271a1fd6848d178ea5a73716cac0e450fcdb21c7bb675751030de54deecd436592e574a18f291b3bf4ea2efd632ed06f956d669bc24aee263031c54a00a924974ffba201614a805a01046c1ff40866524fbd8f8a0e886a362e2477aa0a3be0054aef3556d19d86f47fd435c9bc3133ef050c9522daf7a896576fac6fd2291306f8a63ccc590367b3bdc1dd071354938db3cfe82a3b5b09470265444284869b9544aa4fb74ab651d8b2194ae9f3c2c6d7148d783b106029f9b98b3d5edfeb95bdfea617205450a08943c776a47dcfb97f5b1f522ef48a465eb9063e81f0986db9db9b25a127b87f24327f59af60118df948eba7e26728a9de250b20ee8d856862d3063e422f15bc9511a10106138cf61226126f6fa7f44039c0a202b173c2c119844d44082d5c18dc2cfcccc9643fd45e1b9686bada9e645ee61a49b3ca4ffc1c62902cec30510fb1228a19bbe55998202f5da3c75ceb54036cabba748375e3f52e87c3852b8808863e86f85868abfc559f63b3322108e7a1f59c8181e1a33cf68394360c67478f5ae56c6915c6d3ee9331ffc5062f980539ef7895dc60f051864b1fe3a6f0979b982da06f13e9bfacbfb3e6387b5791108fd2f83b2149b660d777780d4f610be515ec6ce106125c351d7a3065595680752915974863ed590cd6b3dbd276041e96482b31c74fe1ba5d847fcafc9818e4dc3d45df2d8d2f372a4591ca74f6077f988ca7cd70bcb717eb28d866b0555b7fb7720730213588b0d66f4752170d7a6ad4cf5e284ddefe53937f2723cef09c265010d1985acc99424f94a07fbc78a8d7d3ee5226ccc921cfa02e088bb5dce1a940eea87f6bf6e67a08c03a4f3327557379f9aba3c1853568c5e0d14f4e7eec83da0b9323d4e625ab108e3a1405435c3d43dc8c2499e4b0b113d163ea2ff857566dbf8baab769beeb6a3d8ed4002651aff2073d5b98c43ac643a043dba9f12e5bcdcabca54a794fc9c5f7afe83d0918dd858f6307c2f8527da565e30d9be74609a23dc499dcb43026632ec4b7fcbe5dbe3433eaf39f5bb881e7c0a59c050ed20e6699ae6f734cd57d50a22ecf82474f69bc8e5690c9204ff50e3fd20a06855630785217e42b4fa84dd5eaceef8705a5fb08fa3a7dd59f044230328f99810c98c0c88dd69da93d776c0c6e1a4dc5f6a81b4a838f2a47badd263b977f476124a151b6f9fa7314594e8a31743447cee4f29e3f5190a9857f83dc8c2fd3aabedb1b95ad3a9cae553547f7824a2d15587cda055f070860ed3825fa092c24c0cfdfe1c09c2af6d6d76433acce756290d7604966088f49a5669cc2560b9a9a329b5d11a5b35eb3f8d01b3a1ebc71270760d57a36e20c51b4fdb2244b1f645a631b5e11007f7a2ce589a39c8e7429fa1919032fd56487a9edaea3881eb9942d89bd2c5762f723acba25ff4c090732df8942f6a56ea6943a1e835d0c823c0389674bd9d85ff88e8792b113d7b0cd86b7e05967913c4565bff9eb3eabdd6b4f1b3349de851b251e9282e0c3f81118e40d6110852b2f09f4be9eec8bf7d4f08c3916e6ddda85599063bcb777f1086ccd62f43e69a33ade5ec66a30cc713ab209dbe59c2964a9104682b2df0e2f5a4bd481ebb83845ef650b62e98c5489da76a96efc06f4a22b15319f622c867b758faaace13977b6b5afef51c29ff933d4dad601176db80a8955b00eb59c4c16cb1746eace59f1d18b9f5e02757d0584fffe8dc176854d5855427630259a235e35d959795fa6789c55dc0c9fc5ca3955b060d8132a1270599c95f03261576c8ef35b48692eaf0fdb4a6a357e447e60c58faa4b0e897a7151733863398597d227d179ebecc67063b75dee5c96498b04907d16b09352c7a0713379cafe9bad1b640e0c2f0617f2a69cb9", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x78, 0x0, 0x7, {0xc2d, 0x0, 0x0, {0x3, 0xffffffffffffffff, 0xffffffff, 0x7fff, 0x3, 0xd8, 0x0, 0x8, 0xfeff, 0x1000, 0x1, 0xffffffffffffffff, r2, 0xfffffbff, 0x69}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m41.242790062s ago: executing program 4 (id=1442): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "0fa2f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20003) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 2m41.035866689s ago: executing program 4 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2\n\x00', 0x3) write(r0, &(0x7f0000000180)='-3\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) 2m30.705001135s ago: executing program 9 (id=1478): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m29.227546223s ago: executing program 9 (id=1479): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) getpid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x309, 0xe6, 0xe8, 0xdc, 0x40, 0x5e1, 0x408, 0xa4d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xc, 0xb, 0x40, 0x9, "", [{{0x9, 0x4, 0x63, 0xe, 0x1, 0xb9, 0x12, 0xd0, 0x1, [], [{{0x9, 0x5, 0xd, 0x0, 0x228, 0x7, 0xff, 0xaa}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20004004) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000", 0x26}], 0x1) waitid(0x1, 0x0, 0x0, 0x2, 0x0) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 2m27.215197792s ago: executing program 9 (id=1482): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x90}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x5, &(0x7f0000000440)={0x0, 0x200023, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x7ebe15194cbacdd9, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100001002dbd7021ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88dd030000720100140003006272696467655f736c6176655f300000040016800a000100aaaaaaaaaa1c"], 0x44}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f00000005c0)=""/193, 0xc1}, {&(0x7f0000002d40)=""/4096, 0x1000}, {0x0}], 0x4, &(0x7f0000003ec0)=""/137, 0x89}, 0x8001}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000004000)=""/169, 0xa9}, {0x0}], 0x2, &(0x7f0000000280)=""/37, 0x25}, 0x100}, {{&(0x7f0000004200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}, 0x80, &(0x7f0000004700), 0x0, &(0x7f0000004780)=""/71, 0x47}, 0x8}], 0x3, 0x10022, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000140)={0x2, "28a076bdd8b9f61d2e590bba02313cfbace9b6cf5328ff6a65b5a9155541e792", 0x2, 0x40, 0x989db715178fc3d, 0x42a93e9ac30c4920, 0x10102, 0x2}) 2m26.755888192s ago: executing program 9 (id=1483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2000012a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 2m26.350737114s ago: executing program 9 (id=1487): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r2}) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x1ff, 0x86}, 0x90) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) ptrace$peek(0x3, 0x0, &(0x7f0000000240)) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401"], 0x0) 2m25.525875343s ago: executing program 37 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2\n\x00', 0x3) write(r0, &(0x7f0000000180)='-3\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) 2m23.094778307s ago: executing program 9 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3 +4 -4.1 -4.2\n', 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 2m7.786272104s ago: executing program 38 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-3 +4 -4.1 -4.2\n', 0x10) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n', 0x2) close(r2) 1m41.783426104s ago: executing program 8 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x8, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/loop0/loop/sizelimit\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/virtual/block/loop0/loop/sizelimit\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/class/block/loop0/loop/sizelimit\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/64, 0x40) 1m41.530756505s ago: executing program 8 (id=1646): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000000240)=""/28, 0xffd2) 1m41.297181123s ago: executing program 8 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x10001}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000350, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 1m40.066059322s ago: executing program 8 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4c0d1}, 0x40830) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 1m38.914032995s ago: executing program 8 (id=1651): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m37.00780093s ago: executing program 8 (id=1656): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x600) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@local, @local}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000380), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1m21.905769724s ago: executing program 39 (id=1656): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x600) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@local, @local}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000380), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000800) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 30.247129732s ago: executing program 6 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080)={0x8}, 0x1) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) 28.869835705s ago: executing program 6 (id=1825): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 27.230394005s ago: executing program 6 (id=1831): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 25.678729487s ago: executing program 6 (id=1833): bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x4, 0xe, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='raw', 0x3) 24.227435059s ago: executing program 6 (id=1836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 22.574430506s ago: executing program 6 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='-# -3 -', 0x7) 12.782607925s ago: executing program 3 (id=1856): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(0x0, r2, 0x0) mkdir(0x0, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x10, 0x4, 0x0) write(r0, &(0x7f00000002c0)='9', 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 12.138132864s ago: executing program 3 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0xb4, 0x7, 0x3f, 0x64, @mcast1, @local, 0x40, 0x7800, 0x9, 0x5}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xdea2, 0x3400, 0x1, 0x15b}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) landlock_restrict_self(0xffffffffffffffff, 0x0) 11.207327205s ago: executing program 1 (id=1860): sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4004004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setns(0xc9, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x839ce000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 11.015593463s ago: executing program 3 (id=1862): socket(0x11, 0xa, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.0772968s ago: executing program 1 (id=1868): socket(0x10, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000540)="04", 0x1, 0x2404c081, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='nv', 0x2) shutdown(r2, 0x1) 7.76417813s ago: executing program 1 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6be}) listen(r1, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x40000023, 0x0, 0x9}]}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7.316059115s ago: executing program 40 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='-# -3 -', 0x7) 7.303917504s ago: executing program 1 (id=1871): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000000000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x80}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0xb2, 0x0, r0}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4, 0x2, 0x2ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f3e, 0x1, 0x9, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) 7.111367674s ago: executing program 0 (id=1872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000080)="0b0003000100", 0x6) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.055167207s ago: executing program 3 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 6.106806254s ago: executing program 3 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 5.700971583s ago: executing program 0 (id=1875): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 5.68814142s ago: executing program 1 (id=1876): syz_open_dev$dvb_demux(0x0, 0x0, 0x40440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sysfs$1(0x1, &(0x7f0000000180)='\'-\x00') 5.550264826s ago: executing program 2 (id=1877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0), 0x10) 5.159906602s ago: executing program 2 (id=1878): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0xfffffffc00000000, 0x0, 0x0, 0x1e, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x6]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d", 0x7, 0xfffffffffffffffe) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.855093479s ago: executing program 2 (id=1879): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x7}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) syz_ublk_setup_io_uring(0x2556, &(0x7f0000000500)={0x0, 0x396a, 0x8000, 0x2, 0x2d0}, &(0x7f0000000580), &(0x7f0000000600), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.396930645s ago: executing program 1 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x3, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.330561806s ago: executing program 3 (id=1881): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x7ff, 0x12) 2.289975676s ago: executing program 2 (id=1882): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.2680882s ago: executing program 0 (id=1883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1.538950502s ago: executing program 2 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats_percpu\x00') lseek(r3, 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb88a845000014aaaa000001170000010203040506070800000c00020006002000080000000c0003000800170004"]}, 0x58}}, 0x4000000) 1.140331532s ago: executing program 0 (id=1885): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/237, 0xffffffffffffffb5, 0x0, 0x0}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) io_uring_setup(0x42af, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x48) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) 456.610295ms ago: executing program 2 (id=1886): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x75e7, &(0x7f0000000480)={0x0, 0x7210, 0x2, 0x1, 0x1cb}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) syz_io_uring_submit$UBLK(0x0, r2, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f0000000180)={0x0, 0x9878, 0x0, 0x1, 0x38c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 396.340076ms ago: executing program 0 (id=1887): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) 0s ago: executing program 0 (id=1888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x48850) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 609][T11575] bridge_slave_0: entered allmulticast mode [ 522.383365][T11575] bridge_slave_0: entered promiscuous mode [ 522.385076][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.385175][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.385254][T11575] bridge_slave_1: entered allmulticast mode [ 522.386347][T11575] bridge_slave_1: entered promiscuous mode [ 522.406724][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.408914][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.457188][T11575] team0: Port device team_slave_0 added [ 522.458532][T11575] team0: Port device team_slave_1 added [ 522.475296][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.475310][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.475325][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.476281][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.476292][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.476307][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.507719][T11575] hsr_slave_0: entered promiscuous mode [ 522.508337][T11575] hsr_slave_1: entered promiscuous mode [ 522.509941][T11575] debugfs: 'hsr0' already exists in 'hsr' [ 522.509958][T11575] Cannot create hsr debugfs directory [ 522.879742][ T5601] Bluetooth: hci5: command tx timeout [ 523.094650][ T31] kauditd_printk_skb: 106 callbacks suppressed [ 523.094668][ T31] audit: type=1400 audit(1789523775.507:9614): avc: denied { write } for pid=11612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.094879][ T31] audit: type=1400 audit(1789523775.507:9615): avc: denied { add_name } for pid=11612 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.095066][ T31] audit: type=1400 audit(1789523775.507:9616): avc: denied { create } for pid=11612 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.095499][ T31] audit: type=1400 audit(1789523775.507:9617): avc: denied { write } for pid=11612 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=9014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.096245][ T31] audit: type=1400 audit(1789523775.507:9618): avc: denied { append } for pid=11612 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=9014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.398757][ T31] audit: type=1400 audit(1789523775.807:9619): avc: denied { name_bind } for pid=11618 comm="syz.8.1495" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 523.400644][ T31] audit: type=1400 audit(1789523775.817:9620): avc: denied { node_bind } for pid=11618 comm="syz.8.1495" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 523.542614][ T31] audit: type=1400 audit(1789523775.957:9621): avc: denied { write } for pid=11630 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.542818][ T31] audit: type=1400 audit(1789523775.957:9622): avc: denied { remove_name } for pid=11630 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=9014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.542993][ T31] audit: type=1400 audit(1789523775.957:9623): avc: denied { unlink } for pid=11630 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=9014 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 524.189189][T11575] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.200170][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.201073][T11575] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 524.243380][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.245362][T11575] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 524.272182][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 524.272855][T11575] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 524.380296][T11575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 524.466515][T11662] netlink: 'syz.6.1501': attribute type 10 has an invalid length. [ 524.503198][T11662] team0: Port device dummy0 added [ 524.632186][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.664994][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.692844][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.692891][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.727113][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.727159][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.792865][T11575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.792880][T11575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.961111][ T5601] Bluetooth: hci5: command tx timeout [ 525.511110][T11691] ceph: No mds server is up or the cluster is laggy [ 525.515757][ T25] libceph: connect (1)[c::]:6789 error -101 [ 525.531498][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 526.830580][T11699] fuse: fd is not a fuse device [ 526.908240][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.006330][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 527.006502][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 527.042360][T11707] ceph: No mds server is up or the cluster is laggy [ 527.056053][ T5601] Bluetooth: hci5: command tx timeout [ 527.089649][T11575] veth0_vlan: entered promiscuous mode [ 527.134169][T11575] veth1_vlan: entered promiscuous mode [ 527.225080][T11575] veth0_macvtap: entered promiscuous mode [ 527.252539][T11575] veth1_macvtap: entered promiscuous mode [ 527.289806][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.293714][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.368860][ T5937] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.370203][ T5937] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.370234][ T5937] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.370262][ T5937] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.614079][ T8406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.614098][ T8406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.721571][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.721593][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.198534][ T31] kauditd_printk_skb: 83 callbacks suppressed [ 528.198552][ T31] audit: type=1400 audit(1789523780.607:9707): avc: denied { name_bind } for pid=11743 comm="syz.2.1511" src=9091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 528.229972][ T31] audit: type=1400 audit(1789523780.607:9708): avc: denied { node_bind } for pid=11743 comm="syz.2.1511" saddr=127.0.0.1 src=9091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 528.267069][ T31] audit: type=1400 audit(1789523780.677:9709): avc: denied { map_create } for pid=11743 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.267246][ T31] audit: type=1400 audit(1789523780.677:9710): avc: denied { map_read map_write } for pid=11743 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.287946][ T31] audit: type=1400 audit(1789523780.687:9711): avc: denied { prog_load } for pid=11743 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.287974][ T31] audit: type=1400 audit(1789523780.687:9712): avc: denied { bpf } for pid=11743 comm="syz.2.1511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.287993][ T31] audit: type=1400 audit(1789523780.687:9713): avc: denied { perfmon } for pid=11743 comm="syz.2.1511" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.308495][ T31] audit: type=1400 audit(1789523780.707:9714): avc: denied { prog_run } for pid=11743 comm="syz.2.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 528.351487][ T984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 528.452366][ T31] audit: type=1400 audit(1789523780.867:9715): avc: denied { unmount } for pid=6454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 528.495062][ T31] audit: type=1800 audit(1789523780.907:9716): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 528.538996][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 528.539825][ T984] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.540768][ T984] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 528.540791][ T984] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 528.540828][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.128837][ T5601] Bluetooth: hci5: command tx timeout [ 529.151245][ T25] libceph: connect (1)[c::]:6789 error -101 [ 529.151415][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 529.183778][T11776] ceph: No mds server is up or the cluster is laggy [ 529.308330][ T71] IPVS: starting estimator thread 0... [ 529.398764][T11786] IPVS: using max 47 ests per chain, 112800 per kthread [ 530.384934][T11808] fuse: fd is not a fuse device [ 530.802489][T11813] overlayfs: failed to clone upperpath [ 531.361109][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 531.361280][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 531.403296][T11833] ceph: No mds server is up or the cluster is laggy [ 531.940612][ T10] usb 1-1: USB disconnect, device number 8 [ 532.461412][ T10] libceph: connect (1)[c::]:6789 error -101 [ 532.473321][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 532.731918][ T6779] libceph: connect (1)[c::]:6789 error -101 [ 532.733730][ T6779] libceph: mon0 (1)[c::]:6789 connect error [ 532.820615][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 532.969839][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 532.973292][ T10] usb 1-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 532.973319][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.973466][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.973593][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.207600][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 533.207621][ T31] audit: type=1800 audit(1789523785.617:9779): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=201034 res=0 errno=0 [ 533.267407][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 533.292370][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 533.330632][ T31] audit: type=1800 audit(1789523785.747:9780): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=201012 res=0 errno=0 [ 533.420908][ T31] audit: type=1800 audit(1789523785.837:9781): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=201013 res=0 errno=0 [ 533.503476][ T31] audit: type=1800 audit(1789523785.917:9782): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=201014 res=0 errno=0 [ 533.807583][ T31] audit: type=1400 audit(1789523786.217:9783): avc: denied { create } for pid=11866 comm="syz.6.1530" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.892895][ T31] audit: type=1800 audit(1789523786.297:9784): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201054 res=0 errno=0 [ 533.941063][ T31] audit: type=1400 audit(1789523786.357:9785): avc: denied { prog_load } for pid=11866 comm="syz.6.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 534.104549][ T31] audit: type=1400 audit(1789523786.517:9786): avc: denied { map_create } for pid=11866 comm="syz.6.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 534.147283][ T31] audit: type=1400 audit(1789523786.557:9787): avc: denied { bpf } for pid=11866 comm="syz.6.1530" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 534.152073][ T5601] Bluetooth: hci4: Malformed Event: 0x2f [ 534.170012][ T31] audit: type=1400 audit(1789523786.567:9788): avc: denied { write } for pid=11866 comm="syz.6.1530" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 534.482637][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 534.482839][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 534.546921][T11889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ getty: ttyS0: reHü[ 534.896768][ T5601] Bluetooth: hci6: setting up ROME/QCA6390 ü[ 535.145212][T11859] ceph: No mds server is up or the cluster is laggy ü[ 535.353609][ T25] usb 1-1: USB disconnect, device number 9 [ 535.592882][ T25] libceph: connect (1)[c::]:6789 error -101 [ 535.593052][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 535.613684][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 535.613858][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 535.625264][T11918] ceph: No mds server is up or the cluster is laggy [ 535.652465][T11920] ceph: No mds server is up or the cluster is laggy [ 536.460700][T11960] fuse: fd is not a fuse device [ 537.286050][ T4918] Bluetooth: hci6: command 0xfc00 tx timeout Hü[ 537.299102][ T5601] Bluetooth: hci6: Reading QCA version information failed (-110) [ 537.299296][ T5601] Bluetooth: hci6: Retry BT power ON:0 ü[ 537.656323][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 537.656488][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 537.696662][T11978] ceph: No mds server is up or the cluster is laggy [ 537.917140][T11577] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 537.934169][T11577] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 537.937909][T11577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 537.963444][T11577] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 537.963930][T11577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 538.061638][T11997] team0 (unregistering): Port device team_slave_0 removed [ 538.070255][T11997] team0 (unregistering): Port device team_slave_1 removed [ 538.231045][ T31] kauditd_printk_skb: 97 callbacks suppressed [ 538.231063][ T31] audit: type=1400 audit(1789523790.647:9886): avc: denied { create } for pid=12008 comm="syz.0.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 538.233436][ T31] audit: type=1400 audit(1789523790.647:9887): avc: denied { ioctl } for pid=12008 comm="syz.0.1554" path="socket:[42775]" dev="sockfs" ino=42775 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 538.236177][ T31] audit: type=1400 audit(1789523790.647:9888): avc: denied { map } for pid=12008 comm="syz.0.1554" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 538.236409][ T31] audit: type=1400 audit(1789523790.647:9889): avc: denied { read write } for pid=12008 comm="syz.0.1554" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 538.264340][ T31] audit: type=1400 audit(1789523790.657:9890): avc: denied { map } for pid=12008 comm="syz.0.1554" path="socket:[42779]" dev="sockfs" ino=42779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 538.264548][ T31] audit: type=1400 audit(1789523790.657:9891): avc: denied { cmd } for pid=12008 comm="iou-wrk-12010" path="socket:[42779]" dev="sockfs" ino=42779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 538.553884][ T31] audit: type=1400 audit(1789523790.967:9892): avc: denied { write } for pid=11996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.615619][T11992] wg2 speed is unknown, defaulting to 1000 [ 538.723416][ T31] audit: type=1800 audit(1789523791.137:9893): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 538.812165][ T31] audit: type=1400 audit(1789523791.227:9894): avc: denied { mounton } for pid=12035 comm="syz.6.1559" path="/255/file0" dev="tmpfs" ino=1438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 538.817785][ T31] audit: type=1800 audit(1789523791.227:9895): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202278 res=0 errno=0 [ 538.869479][T12031] ceph: No mds server is up or the cluster is laggy [ 538.869675][T12033] ceph: No mds server is up or the cluster is laggy [ 538.870101][ T9416] libceph: connect (1)[c::]:6789 error -101 [ 538.870197][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 538.870264][ T9416] libceph: mon0 (1)[c::]:6789 connect error [ 538.870335][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 539.268462][T12050] syzkaller0: entered promiscuous mode [ 539.268483][T12050] syzkaller0: entered allmulticast mode [ 539.327934][T11992] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.328008][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.328080][T11992] bridge_slave_0: entered allmulticast mode [ 539.349320][T11992] bridge_slave_0: entered promiscuous mode [ 539.354944][T11992] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.355047][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.355144][T11992] bridge_slave_1: entered allmulticast mode [ 539.356375][T11992] bridge_slave_1: entered promiscuous mode [ 539.422636][T11992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.423799][T12055] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 539.425211][T11992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.426856][T12055] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 539.503589][T11992] team0: Port device team_slave_0 added [ 539.505186][T11992] team0: Port device team_slave_1 added [ 539.533996][T11992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.534011][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.534026][T11992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.534870][T11992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.534882][T11992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.534897][T11992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.561664][T11992] hsr_slave_0: entered promiscuous mode [ 539.562279][T11992] hsr_slave_1: entered promiscuous mode [ 539.562704][T11992] debugfs: 'hsr0' already exists in 'hsr' [ 539.562718][T11992] Cannot create hsr debugfs directory Hü[ 539.679652][T11577] Bluetooth: hci6: command 0xfc00 tx timeout [ 539.679693][ T5601] Bluetooth: hci6: Reading QCA version information failed (-110) [ 539.679708][ T5601] Bluetooth: hci6: Retry BT power ON:1 [ 539.722188][ T5334] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 539.847430][ T984] libceph: connect (1)[c::]:6789 error -101 [ 539.847604][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 539.863433][T12067] netlink: 'syz.6.1564': attribute type 32 has an invalid length. [ 539.882685][ T5334] usb 1-1: not running at top speed; connect to a high speed hub [ 539.882713][ T5334] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 539.888208][ T5334] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.889951][ T5334] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 539.889971][ T5334] usb 1-1: Product: syz [ 539.889984][ T5334] usb 1-1: Manufacturer: syz [ 539.897551][T12063] ceph: No mds server is up or the cluster is laggy [ 539.938638][ T5334] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) ü[ 540.080100][T11577] Bluetooth: hci7: command tx timeout [ 540.135117][ T5334] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 540.136865][ T5334] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 540.136911][ T5334] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 540.137416][ T5334] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 540.166590][ T5334] usb 1-1: USB disconnect, device number 10 [ 540.252436][ T984] libceph: connect (1)[c::]:6789 error -101 [ 540.252602][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 540.302592][T12081] ceph: No mds server is up or the cluster is laggy [ 540.706358][T11992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 540.727890][T11992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.736694][T11992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 540.750284][T11992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.753383][T11992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 540.775554][T11992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.776382][T11992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.800785][T11992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.922229][T11992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.956657][T11992] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.970974][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.971050][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.998169][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.998253][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.206300][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 541.206475][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 541.230939][T12121] ceph: No mds server is up or the cluster is laggy [ 541.314774][T12129] xt_CONNSECMARK: invalid mode: 66 [ 542.563624][T11577] Bluetooth: hci6: command 0xfc00 tx timeout [ 542.564867][ T5601] Bluetooth: hci6: Reading QCA version information failed (-110) Hü[ 542.564886][ T5601] Bluetooth: hci6: Retry BT power ON:2 [ 542.565057][ T4918] Bluetooth: hci7: command tx timeout ü[ 543.961900][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 543.961919][ T31] audit: type=1400 audit(1789523796.377:9941): avc: denied { setopt } for pid=12153 comm="syz.2.1578" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 543.982518][ T31] audit: type=1800 audit(1789523796.387:9942): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 544.138602][T11992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.244250][T11992] veth0_vlan: entered promiscuous mode [ 544.245755][ T31] audit: type=1400 audit(1789523796.657:9943): avc: denied { write } for pid=12126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.641716][T11577] Bluetooth: hci7: command tx timeout [ 544.676613][ T31] audit: type=1400 audit(1789523797.087:9944): avc: denied { write } for pid=12166 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.785286][T11992] veth1_vlan: entered promiscuous mode [ 544.856499][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 544.856665][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 544.861100][ T31] audit: type=1800 audit(1789523797.277:9945): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207523 res=0 errno=0 [ 544.963541][T11577] Bluetooth: hci6: command 0xfc00 tx timeout [ 544.963602][ T5601] Bluetooth: hci6: Reading QCA version information failed (-110) [ 544.969968][T11992] veth0_macvtap: entered promiscuous mode [ 544.994972][T12170] ceph: No mds server is up or the cluster is laggy [ 545.024850][T11992] veth1_macvtap: entered promiscuous mode [ 545.025719][ T31] audit: type=1800 audit(1789523797.427:9946): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 545.085968][T11992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.094694][ T31] audit: type=1400 audit(1789523797.517:9947): avc: denied { getopt } for pid=12179 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 545.138799][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 545.138959][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 545.139972][ T31] audit: type=1800 audit(1789523797.557:9948): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207542 res=0 errno=0 [ 545.143094][T11992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.170365][ T31] audit: type=1400 audit(1789523797.587:9949): avc: denied { net_admin } for pid=5355 comm="getty" capability=12 scontext=system_u:system_r:getty_t tcontext=system_u:system_r:getty_t tclass=capability permissive=1 [ 545.190177][T12178] ceph: No mds server is up or the cluster is laggy [ 545.283515][ T31] audit: type=1804 audit(1789523797.697:9950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t op=invalid_pcr cause=ToMToU comm="init" name="/run/utmp" dev="tmpfs" ino=2 res=1 errno=0 [ 545.355536][ T1159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.356337][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.356373][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.356398][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.499448][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.499467][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.614782][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.614803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.260574][T12218] ceph: No mds server is up or the cluster is laggy [ 546.272809][ T5706] libceph: connect (1)[c::]:6789 error -101 [ 546.272948][ T5706] libceph: mon0 (1)[c::]:6789 connect error [ 546.413846][T12223] fuse: Bad value for 'fd' [ 546.658464][ T984] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 546.718910][ T5601] Bluetooth: hci7: command tx timeout [ 546.906274][ T984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 546.958726][ T984] usb 1-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 546.958753][ T984] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 546.958789][ T984] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.958823][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.261757][ T984] usb 1-1: USB disconnect, device number 11 [ 548.487932][ T984] libceph: connect (1)[c::]:6789 error -101 [ 548.488104][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 548.520975][T12238] ceph: No mds server is up or the cluster is laggy [ 549.212790][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 549.213745][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 549.239710][T12262] ceph: No mds server is up or the cluster is laggy [ 549.397667][ T31] kauditd_printk_skb: 84 callbacks suppressed [ 549.397690][ T31] audit: type=1800 audit(1789523801.767:10035): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207952 res=0 errno=0 [ 549.423604][ T31] audit: type=1400 audit(1789523801.837:10036): avc: denied { ioctl } for pid=12259 comm="syz.0.1593" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 549.481676][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 549.482613][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 549.632647][ T984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 549.820679][ T984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 549.867383][ T984] usb 1-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 549.867462][ T984] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.867608][ T984] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 549.867730][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.984817][ T31] audit: type=1400 audit(1789523802.397:10037): avc: denied { mounton } for pid=12265 comm="syz.2.1594" path="/345/file0" dev="tmpfs" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 550.067405][ T31] audit: type=1800 audit(1789523802.477:10038): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=207979 res=0 errno=0 [ 550.233223][ T31] audit: type=1800 audit(1789523802.647:10039): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=208008 res=0 errno=0 [ 550.287367][ T31] audit: type=1800 audit(1789523802.697:10040): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=207986 res=0 errno=0 [ 550.385586][ T31] audit: type=1800 audit(1789523802.787:10041): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=207987 res=0 errno=0 [ 550.465509][ T31] audit: type=1800 audit(1789523802.877:10042): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=207988 res=0 errno=0 [ 550.777294][ T31] audit: type=1400 audit(1789523803.187:10043): avc: denied { search } for pid=12274 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.778232][ T31] audit: type=1400 audit(1789523803.187:10044): avc: denied { search } for pid=12274 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.878564][T12268] jffs2: notice: (12268) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 550.904035][T12267] IPv6: A: Disabled Multicast RS [ 550.980149][ T5334] usb 1-1: USB disconnect, device number 12 [ 551.703688][T12303] fuse: fd is not a fuse device [ 552.288469][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 552.288568][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 552.329168][T12317] ceph: No mds server is up or the cluster is laggy [ 554.201843][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 554.202017][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 554.246255][T12357] ceph: No mds server is up or the cluster is laggy [ 554.320695][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 554.419751][ T31] kauditd_printk_skb: 85 callbacks suppressed [ 554.419769][ T31] audit: type=1400 audit(1789523806.827:10130): avc: denied { setattr } for pid=12339 comm="syz.1.1607" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 554.439068][ T31] audit: type=1800 audit(1789523806.847:10131): pid=12354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1609" name="/" dev="fuse" ino=1 res=0 errno=0 [ 554.470312][ T31] audit: type=1400 audit(1789523806.887:10132): avc: denied { write } for pid=12339 comm="syz.1.1607" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 554.470366][ T31] audit: type=1400 audit(1789523806.887:10133): avc: denied { open } for pid=12339 comm="syz.1.1607" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 554.545265][ T31] audit: type=1400 audit(1789523806.957:10134): avc: denied { create } for pid=12339 comm="syz.1.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 554.548313][ T31] audit: type=1400 audit(1789523806.957:10135): avc: denied { map_create } for pid=12368 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.548453][ T31] audit: type=1400 audit(1789523806.957:10136): avc: denied { perfmon } for pid=12368 comm="syz.2.1612" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 554.548634][ T31] audit: type=1400 audit(1789523806.957:10137): avc: denied { map_read map_write } for pid=12368 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 554.564263][ T31] audit: type=1400 audit(1789523806.977:10138): avc: denied { ioctl } for pid=12366 comm="syz.0.1611" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44827 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 554.570560][ T31] audit: type=1400 audit(1789523806.987:10139): avc: denied { unmount } for pid=6454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 554.645410][T12367] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.776407][T12373] overlayfs: workdir and upperdir must be separate subtrees [ 556.272809][T12390] fuse: fd is not a fuse device [ 557.326779][T12418] overlayfs: workdir and upperdir must be separate subtrees [ 557.362427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.363987][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.328698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 558.527746][T12439] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 558.527770][T12439] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1628'. [ 559.110183][T12459] ceph: No mds server is up or the cluster is laggy [ 559.128225][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 559.162345][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 559.311994][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 559.562328][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 559.586295][ T10] usb 1-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 559.586332][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 559.586427][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.586525][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.736386][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 559.736408][ T31] audit: type=1400 audit(1789523812.147:10201): avc: denied { sys_module } for pid=12447 comm="syz.1.1630" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 560.097362][ T31] audit: type=1800 audit(1789523812.507:10202): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208299 res=0 errno=0 [ 560.335957][ T31] audit: type=1800 audit(1789523812.747:10203): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=208328 res=0 errno=0 [ 560.456145][ T31] audit: type=1800 audit(1789523812.867:10204): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=208306 res=0 errno=0 [ 560.558015][ T31] audit: type=1800 audit(1789523812.937:10205): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=208307 res=0 errno=0 [ 560.670665][ T31] audit: type=1800 audit(1789523813.087:10206): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=208308 res=0 errno=0 [ 560.861344][ T31] audit: type=1400 audit(1789523813.257:10207): avc: denied { read write } for pid=11992 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.861376][ T31] audit: type=1400 audit(1789523813.267:10208): avc: denied { open } for pid=11992 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.861396][ T31] audit: type=1400 audit(1789523813.267:10209): avc: denied { ioctl } for pid=11992 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.871542][ T31] audit: type=1800 audit(1789523813.287:10210): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 561.326664][ T5602] usb 1-1: USB disconnect, device number 13 [ 563.092369][T12497] overlayfs: failed to clone upperpath [ 565.271100][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 565.271120][ T31] audit: type=1400 audit(1789523817.687:10252): avc: denied { execmem } for pid=12533 comm="syz.8.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 565.422140][ T31] audit: type=1400 audit(1789523817.837:10253): avc: denied { prog_load } for pid=12535 comm="syz.2.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 565.422480][ T31] audit: type=1400 audit(1789523817.837:10254): avc: denied { bpf } for pid=12535 comm="syz.2.1648" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 565.422668][ T31] audit: type=1400 audit(1789523817.837:10255): avc: denied { perfmon } for pid=12535 comm="syz.2.1648" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 565.423710][ T31] audit: type=1800 audit(1789523817.837:10256): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 565.448715][ T31] audit: type=1400 audit(1789523817.857:10257): avc: denied { write } for pid=12499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.873701][ T31] audit: type=1400 audit(1789523818.287:10258): avc: denied { read write } for pid=12538 comm="syz.0.1650" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 565.876717][ T31] audit: type=1400 audit(1789523818.287:10259): avc: denied { open } for pid=12538 comm="syz.0.1650" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 565.964025][ T31] audit: type=1400 audit(1789523818.377:10260): avc: denied { read } for pid=12538 comm="syz.0.1650" name="frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 566.000080][ T31] audit: type=1400 audit(1789523818.407:10261): avc: denied { open } for pid=12538 comm="syz.0.1650" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 568.498593][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 568.520100][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 568.521813][T12569] ceph: No mds server is up or the cluster is laggy [ 568.563891][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 568.564387][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 568.820880][ T5602] libceph: connect (1)[c::]:6789 error -101 [ 568.821913][ T5602] libceph: mon0 (1)[c::]:6789 connect error [ 569.330626][ T984] libceph: connect (1)[c::]:6789 error -101 [ 569.331521][ T984] libceph: mon0 (1)[c::]:6789 connect error [ 569.427868][T12566] overlayfs: workdir and upperdir must be separate subtrees [ 570.447827][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 570.447839][ T31] audit: type=1800 audit(1789523822.857:10305): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 570.448645][ T31] audit: type=1400 audit(1789523822.857:10306): avc: denied { read } for pid=12577 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 570.517355][ T31] audit: type=1400 audit(1789523822.927:10307): avc: denied { open } for pid=12577 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 570.517563][ T31] audit: type=1400 audit(1789523822.927:10308): avc: denied { getattr } for pid=12577 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 570.621977][ T31] audit: type=1400 audit(1789523823.037:10309): avc: denied { execmem } for pid=12578 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 570.737759][ T31] audit: type=1400 audit(1789523823.147:10310): avc: denied { getattr } for pid=12563 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.738220][ T31] audit: type=1400 audit(1789523823.147:10311): avc: denied { write } for pid=12563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.738423][ T31] audit: type=1400 audit(1789523823.147:10312): avc: denied { add_name } for pid=12563 comm="dhcpcd-run-hook" name="resolv.conf.eth5.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.738627][ T31] audit: type=1400 audit(1789523823.147:10313): avc: denied { create } for pid=12563 comm="dhcpcd-run-hook" name="resolv.conf.eth5.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 570.843327][ T31] audit: type=1400 audit(1789523823.187:10314): avc: denied { prog_load } for pid=12579 comm="syz.1.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 571.061155][T12589] geneve2: entered promiscuous mode [ 571.061203][T12589] geneve2: entered allmulticast mode [ 571.609258][T12596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1659'. [ 571.609281][T12596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1659'. [ 571.609297][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 573.888732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 574.027386][T12603] syzkaller0: entered promiscuous mode [ 574.027401][T12603] syzkaller0: entered allmulticast mode [ 574.339304][T12615] binder_alloc: 12614: binder_alloc_buf, no vma [ 574.490085][T12573] infiniband syz1: set active [ 574.490105][T12573] infiniband syz1: added syz_tun [ 574.676037][T12573] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 574.676073][T12573] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 574.676109][T12573] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 574.961359][T12573] RDS/IB: syz1: added [ 574.961885][T12573] smc: adding ib device syz1 with port count 1 [ 574.961987][T12573] smc: ib device syz1 port 1 has no pnetid [ 575.007117][T12624] syzkaller0: entered promiscuous mode [ 575.007139][T12624] syzkaller0: entered allmulticast mode [ 575.128087][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 575.128279][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 575.176535][T12633] ceph: No mds server is up or the cluster is laggy [ 575.298306][T12642] tipc: Started in network mode [ 575.298324][T12642] tipc: Node identity d24ef2a4112c, cluster identity 4711 [ 575.298434][T12642] tipc: Enabled bearer , priority 0 [ 575.302776][T12634] syzkaller0: entered promiscuous mode [ 575.302794][T12634] syzkaller0: entered allmulticast mode [ 575.432983][T12647] input: syz0 as /devices/virtual/input/input33 [ 575.449766][ T31] kauditd_printk_skb: 72 callbacks suppressed [ 575.449782][ T31] audit: type=1800 audit(1789523827.867:10387): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=212940 res=0 errno=0 [ 575.455571][ T31] audit: type=1800 audit(1789523827.867:10389): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=212943 res=0 errno=0 [ 575.455610][ T31] audit: type=1400 audit(1789523827.867:10388): avc: denied { mount } for pid=12646 comm="syz.6.1670" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 575.455644][ T31] audit: type=1800 audit(1789523827.867:10390): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=212942 res=0 errno=0 [ 575.458187][ T31] audit: type=1400 audit(1789523827.867:10391): avc: denied { read } for pid=4953 comm="acpid" name="event4" dev="devtmpfs" ino=3630 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.458227][ T31] audit: type=1400 audit(1789523827.867:10392): avc: denied { open } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3630 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.458264][ T31] audit: type=1400 audit(1789523827.867:10393): avc: denied { ioctl } for pid=4953 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3630 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.463412][ T31] audit: type=1800 audit(1789523827.877:10394): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=212941 res=0 errno=0 [ 575.463446][ T31] audit: type=1800 audit(1789523827.877:10395): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=212932 res=0 errno=0 [ 575.469845][ T31] audit: type=1800 audit(1789523827.877:10396): pid=8480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=212935 res=0 errno=0 [ 575.693793][T12642] tipc: Resetting bearer [ 575.712273][T12631] tipc: Resetting bearer [ 575.863967][T12631] tipc: Disabling bearer [ 575.998731][ T5601] Bluetooth: hci7: command 0x0406 tx timeout [ 576.392978][T12656] syz_tun: entered allmulticast mode [ 576.407199][T12656] dvmrp6: entered allmulticast mode [ 576.418201][T12655] syz_tun: left allmulticast mode [ 576.446955][T12653] ipvlan2: entered allmulticast mode [ 576.446970][T12653] batadv_slave_1: entered allmulticast mode [ 576.461610][T12653] batman_adv: batadv0: Adding interface: ipvlan2 [ 576.461620][T12653] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.461636][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.461645][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.461652][T12653] batman_adv: batadv0: Interface activated: ipvlan2 [ 576.668208][T12660] FAULT_INJECTION: forcing a failure. [ 576.668208][T12660] name fail_futex, interval 1, probability 0, space 0, times 0 [ 576.668243][T12660] CPU: 1 UID: 0 PID: 12660 Comm: syz.6.1675 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.668269][T12660] Tainted: [L]=SOFTLOCKUP [ 576.668276][T12660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 576.668288][T12660] Call Trace: [ 576.668295][T12660] [ 576.668302][T12660] dump_stack_lvl+0x100/0x190 [ 576.668334][T12660] should_fail_ex.cold+0x5/0xa [ 576.668362][T12660] get_futex_key+0x1d0/0x14f0 [ 576.668391][T12660] ? __pfx_get_futex_key+0x10/0x10 [ 576.668415][T12660] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.668449][T12660] futex_wake+0xf4/0x5e0 [ 576.668481][T12660] ? __pfx_futex_wake+0x10/0x10 [ 576.668512][T12660] ? __pfx_tun_chr_read_iter+0x10/0x10 [ 576.668536][T12660] ? vfs_read+0x243/0xb40 [ 576.668559][T12660] do_futex+0x2b2/0x440 [ 576.668585][T12660] ? __pfx_do_futex+0x10/0x10 [ 576.668620][T12660] __x64_sys_futex+0x34f/0x4d0 [ 576.668652][T12660] ? fput+0x7c/0x100 [ 576.668673][T12660] ? __pfx___x64_sys_futex+0x10/0x10 [ 576.668696][T12660] ? ksys_read+0x1ac/0x250 [ 576.668716][T12660] ? __pfx_ksys_read+0x10/0x10 [ 576.668743][T12660] do_syscall_64+0x123/0x790 [ 576.668772][T12660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.668792][T12660] RIP: 0033:0x7fd47259e159 [ 576.668814][T12660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.668834][T12660] RSP: 002b:00007fd4733db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 576.668855][T12660] RAX: ffffffffffffffda RBX: 00007fd472825fa8 RCX: 00007fd47259e159 [ 576.668868][T12660] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd472825fac [ 576.668880][T12660] RBP: 00007fd472825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 576.668892][T12660] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 576.668904][T12660] R13: 00007fd472826038 R14: 00007ffd34f63d20 R15: 00007ffd34f63e08 [ 576.668930][T12660] [ 576.791830][T12662] binder: 12661:12662 ioctl c0306201 2000000003c0 returned -14 [ 577.018413][T12671] fuse: fd is not a fuse device [ 577.820252][ T5334] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 577.841428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 578.645268][ T5334] usb 2-1: Using ep0 maxpacket: 32 [ 578.706315][ T5334] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 578.725230][ T5334] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 578.725266][ T5334] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 578.725298][ T5334] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 578.725321][ T5334] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 578.725341][ T5334] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 578.725365][ T5334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 578.746755][ T5334] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 578.746778][ T5334] usb 2-1: Product: syz [ 578.746791][ T5334] usb 2-1: Manufacturer: syz [ 578.746804][ T5334] usb 2-1: SerialNumber: syz [ 578.779708][ T5334] usb 2-1: config 0 descriptor?? [ 578.782691][ T5334] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 578.787751][ T5334] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 578.863757][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 579.002412][T12687] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 579.013192][ T5334] usb 2-1: USB disconnect, device number 7 [ 579.015366][ T5334] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 579.759344][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 580.371113][T12715] syzkaller0: entered promiscuous mode [ 580.371132][T12715] syzkaller0: entered allmulticast mode [ 580.527739][T12717] syzkaller0: entered promiscuous mode [ 580.527763][T12717] syzkaller0: entered allmulticast mode [ 580.595650][ T31] kauditd_printk_skb: 80 callbacks suppressed [ 580.595667][ T31] audit: type=1804 audit(1789523833.007:10477): pid=12721 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1695" name="kvm" dev="tmpfs" ino=2045 res=1 errno=0 [ 580.623993][ T31] audit: type=1800 audit(1789523833.037:10478): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 580.688221][T12725] FAULT_INJECTION: forcing a failure. [ 580.688221][T12725] name failslab, interval 1, probability 0, space 0, times 0 [ 580.688258][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.1.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.688285][T12725] Tainted: [L]=SOFTLOCKUP [ 580.688292][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 580.688304][T12725] Call Trace: [ 580.688311][T12725] [ 580.688319][T12725] dump_stack_lvl+0x100/0x190 [ 580.688354][T12725] should_fail_ex.cold+0x5/0xa [ 580.688382][T12725] should_failslab+0xc2/0x120 [ 580.688408][T12725] __kmalloc_noprof+0xfc/0x840 [ 580.688431][T12725] ? handler_new_ref+0x1ab/0xc60 [ 580.688466][T12725] handler_new_ref+0x1ab/0xc60 [ 580.688500][T12725] v4l2_ctrl_new+0xe67/0x23a0 [ 580.688539][T12725] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 580.688571][T12725] ? handler_new_ref+0x7cb/0xc60 [ 580.688606][T12725] v4l2_ctrl_new_std+0x1bb/0x290 [ 580.688644][T12725] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 580.688672][T12725] ? __mutex_unlock_slowpath+0x35d/0x930 [ 580.688701][T12725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 580.688729][T12725] ? __asan_memcpy+0x3c/0x60 [ 580.688755][T12725] ? find_ref+0x209/0x420 [ 580.688786][T12725] handler_new_ref+0x82f/0xc60 [ 580.688820][T12725] v4l2_ctrl_new+0xe67/0x23a0 [ 580.688859][T12725] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 580.688901][T12725] v4l2_ctrl_new_std+0x1bb/0x290 [ 580.688936][T12725] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 580.688967][T12725] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 580.688994][T12725] ? media_request_object_init+0x105/0x180 [ 580.689023][T12725] vicodec_open+0x2a6/0xf70 [ 580.689041][T12725] ? kobject_get_unless_zero+0xe0/0x200 [ 580.689064][T12725] v4l2_open+0x1d2/0x490 [ 580.689089][T12725] ? __pfx_v4l2_open+0x10/0x10 [ 580.689115][T12725] chrdev_open+0x234/0x6a0 [ 580.689137][T12725] ? __pfx_chrdev_open+0x10/0x10 [ 580.689160][T12725] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 580.689191][T12725] do_dentry_open+0x6ab/0x14d0 [ 580.689210][T12725] ? __pfx_chrdev_open+0x10/0x10 [ 580.689238][T12725] vfs_open+0x82/0x3f0 [ 580.689261][T12725] path_openat+0x19fa/0x2440 [ 580.689285][T12725] ? __pfx_path_openat+0x10/0x10 [ 580.689316][T12725] do_file_open+0x20e/0x430 [ 580.689341][T12725] ? __pfx_do_file_open+0x10/0x10 [ 580.689380][T12725] ? _raw_spin_unlock+0x28/0x50 [ 580.689402][T12725] ? alloc_fd+0x471/0x7a0 [ 580.689434][T12725] do_sys_openat2+0x10f/0x1e0 [ 580.689460][T12725] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.689496][T12725] __x64_sys_openat+0x12d/0x210 [ 580.689523][T12725] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.689560][T12725] do_syscall_64+0x123/0x790 [ 580.689587][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.689607][T12725] RIP: 0033:0x7fad9df9e159 [ 580.689624][T12725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.689642][T12725] RSP: 002b:00007fad9ee45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.689661][T12725] RAX: ffffffffffffffda RBX: 00007fad9e225fa0 RCX: 00007fad9df9e159 [ 580.689674][T12725] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 580.689688][T12725] RBP: 00007fad9e03503b R08: 0000000000000000 R09: 0000000000000000 [ 580.689700][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.689712][T12725] R13: 00007fad9e226038 R14: 00007fad9e225fa0 R15: 00007ffd04ac1ef8 [ 580.689738][T12725] [ 580.711951][ T31] audit: type=1800 audit(1789523833.127:10479): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 581.568788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 581.872698][ T31] audit: type=1800 audit(1789523834.287:10480): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 581.957216][ T31] audit: type=1800 audit(1789523834.367:10481): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 582.065837][ T31] audit: type=1400 audit(1789523834.477:10482): avc: denied { name_bind } for pid=12730 comm="syz.1.1700" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 582.068407][ T31] audit: type=1400 audit(1789523834.477:10483): avc: denied { write } for pid=12732 comm="syz.0.1701" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 582.310024][ T31] audit: type=1400 audit(1789523834.727:10484): avc: denied { connect } for pid=12728 comm="syz.2.1698" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 582.313271][ T31] audit: type=1400 audit(1789523834.727:10485): avc: denied { write } for pid=12728 comm="syz.2.1698" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.245513][ T31] audit: type=1800 audit(1789523835.657:10486): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 583.763454][T12750] Set syz1 is full, maxelem 256 reached [ 584.009341][ T5601] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 584.021213][ T5601] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 584.031911][ T5601] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 584.047167][ T5601] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 584.056197][ T5601] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 584.089995][T12758] mmap: syz.6.1699 (12758) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 585.596360][ T9610] smc: removing ib device syz1 [ 585.672828][ T5602] infiniband syz1: ib_query_port failed (-19) [ 586.047166][ T9610] smbdirect: ib_dev[syz1] removed [ 586.122765][T12753] wg2 speed is unknown, defaulting to 1000 [ 586.168504][T11577] Bluetooth: hci6: command tx timeout [ 586.203743][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 586.203761][ T31] audit: type=1800 audit(1789523838.617:10508): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 586.367340][ T31] audit: type=1400 audit(1789523838.777:10509): avc: denied { create } for pid=12800 comm="syz.0.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 587.011642][ T31] audit: type=1400 audit(1789523839.427:10510): avc: denied { append } for pid=12811 comm="syz.6.1714" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 587.346541][T12815] genirq: Flags mismatch irq 32. 00200000 (pcmmio) vs. 00200000 (virtio1-output.0) [ 587.623186][ T31] audit: type=1800 audit(1789523840.027:10511): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 588.329981][ T31] audit: type=1400 audit(1789523840.447:10512): avc: denied { create } for pid=12816 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.363370][T11577] Bluetooth: hci6: command tx timeout [ 588.652507][ T31] audit: type=1800 audit(1789523841.067:10513): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 588.664526][ T31] audit: type=1800 audit(1789523841.077:10514): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 588.797288][ T31] audit: type=1800 audit(1789523841.207:10515): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 588.980138][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1718'. [ 589.037995][T12821] syzkaller0: entered promiscuous mode [ 589.038019][T12821] syzkaller0: entered allmulticast mode [ 589.045004][T12829] lo: entered promiscuous mode [ 589.088848][ T5334] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 589.207366][T12831] hsr_slave_1 (unregistering): left promiscuous mode [ 589.238741][ T5334] usb 2-1: Using ep0 maxpacket: 8 [ 589.239266][ T5334] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.240433][ T5334] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 589.240462][ T5334] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 589.240483][ T5334] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.240503][ T5334] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.240536][ T5334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.247330][T12822] tipc: Started in network mode [ 589.247356][T12822] tipc: Node identity e24e0be5c0af, cluster identity 4711 [ 589.248220][T12822] tipc: Enabled bearer , priority 0 [ 589.359962][ T31] audit: type=1800 audit(1789523841.777:10516): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=239154 res=0 errno=0 [ 589.374144][ T31] audit: type=1800 audit(1789523841.787:10517): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=239183 res=0 errno=0 [ 589.416439][T12820] tipc: Resetting bearer [ 589.499878][T12820] tipc: Disabling bearer [ 589.517686][T12826] lo: left promiscuous mode [ 589.641910][ T5334] usb 2-1: GET_CAPABILITIES returned 0 [ 589.641950][ T5334] usbtmc 2-1:16.0: can't read capabilities [ 589.930890][ T5602] usb 2-1: USB disconnect, device number 8 [ 590.018723][ T5334] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 590.169365][ T5334] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 590.175525][ T5334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.175567][ T5334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.215191][ T5334] usb 1-1: config 0 descriptor?? [ 590.325565][T12842] syzkaller0: entered promiscuous mode [ 590.325590][T12842] syzkaller0: entered allmulticast mode [ 590.329992][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.330070][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.330189][T12753] bridge_slave_0: entered allmulticast mode [ 590.333501][T12753] bridge_slave_0: entered promiscuous mode [ 590.340661][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.342740][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.342852][T12753] bridge_slave_1: entered allmulticast mode [ 590.347026][T12753] bridge_slave_1: entered promiscuous mode [ 590.398783][T11577] Bluetooth: hci6: command tx timeout [ 590.431478][ T5334] usbhid 1-1:0.0: can't add hid device: -71 [ 590.431564][ T5334] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 590.435739][ T5334] usb 1-1: USB disconnect, device number 14 [ 590.658000][T12854] netlink: 'syz.1.1723': attribute type 8 has an invalid length. [ 590.658018][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1723'. [ 590.889000][ T5334] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 591.028854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 591.595118][ T5334] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.40 [ 591.597349][ T5334] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 591.597385][ T5334] usb 1-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 591.597409][ T5334] usb 1-1: config 1 interface 0 has no altsetting 0 [ 591.599890][ T5334] usb 1-1: string descriptor 0 read error: -22 [ 591.599979][ T5334] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.656299][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 591.656316][ T31] audit: type=1800 audit(1789523844.067:10538): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240966 res=0 errno=0 [ 591.662717][ T31] audit: type=1800 audit(1789523844.067:10539): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=240995 res=0 errno=0 [ 591.668732][ T31] audit: type=1800 audit(1789523844.077:10540): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=240973 res=0 errno=0 [ 591.669984][ T31] audit: type=1800 audit(1789523844.087:10541): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=240974 res=0 errno=0 [ 591.671364][ T31] audit: type=1800 audit(1789523844.087:10542): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=240975 res=0 errno=0 [ 591.715855][ T31] audit: type=1800 audit(1789523844.127:10543): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241015 res=0 errno=0 [ 592.195119][ T31] audit: type=1800 audit(1789523844.607:10544): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241033 res=0 errno=0 [ 592.208252][ T5334] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0010/input/input34 [ 592.210193][ T31] audit: type=1800 audit(1789523844.627:10545): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241055 res=0 errno=0 [ 592.226525][ T31] audit: type=1800 audit(1789523844.637:10546): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=241071 res=0 errno=0 [ 592.228461][ T31] audit: type=1800 audit(1789523844.637:10547): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=241074 res=0 errno=0 [ 592.291215][ T5334] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0458:5013.0010/input/input35 [ 592.336808][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.337160][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.361155][ T5334] kye 0003:0458:5013.0010: input,hiddev0,hidraw0: USB HID v0.04 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 592.479040][T11577] Bluetooth: hci6: command tx timeout [ 592.914694][ T5602] usb 1-1: USB disconnect, device number 15 [ 595.248140][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.253133][T12854] bond0: entered promiscuous mode [ 595.253153][T12854] bond_slave_0: entered promiscuous mode [ 595.253290][T12854] bond_slave_1: entered promiscuous mode [ 595.260100][T12854] gretap0: entered promiscuous mode [ 595.260913][T12854] team0: entered promiscuous mode [ 595.260926][T12854] team_slave_0: entered promiscuous mode [ 595.261050][T12854] team_slave_1: entered promiscuous mode [ 595.268498][T12854] hsr1: entered promiscuous mode [ 595.334293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 595.452819][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.595634][T12753] team0: Port device team_slave_0 added [ 595.611016][T12753] team0: Port device team_slave_1 added [ 595.723373][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.723390][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.723430][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.726581][T12879] FAULT_INJECTION: forcing a failure. [ 595.726581][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 595.726615][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.6.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.726641][T12879] Tainted: [L]=SOFTLOCKUP [ 595.726648][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 595.726660][T12879] Call Trace: [ 595.726667][T12879] [ 595.726676][T12879] dump_stack_lvl+0x100/0x190 [ 595.726708][T12879] should_fail_ex.cold+0x5/0xa [ 595.726737][T12879] should_failslab+0xc2/0x120 [ 595.726763][T12879] kmem_cache_alloc_noprof+0x92/0x6a0 [ 595.726784][T12879] ? d_instantiate+0x8a/0xb0 [ 595.726811][T12879] ? alloc_empty_file+0x5b/0x1c0 [ 595.726842][T12879] alloc_empty_file+0x5b/0x1c0 [ 595.726867][T12879] alloc_file_pseudo+0x183/0x290 [ 595.726891][T12879] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 595.726924][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.726922][T12879] dma_buf_export+0x326/0xc60 [ 595.726938][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.726943][T12879] ? sg_alloc_table+0x4c/0x1c0 [ 595.726960][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.726973][T12879] system_heap_allocate+0xbb1/0x11f0 [ 595.727002][T12879] ? __pfx_system_heap_allocate+0x10/0x10 [ 595.727025][T12879] ? __might_fault+0xc5/0x140 [ 595.727064][T12879] dma_heap_ioctl+0x3a0/0x6d0 [ 595.727094][T12879] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 595.727124][T12879] ? selinux_file_ioctl+0x13b/0x290 [ 595.727146][T12879] ? selinux_file_ioctl+0xb6/0x290 [ 595.727171][T12879] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 595.727194][T12879] __x64_sys_ioctl+0x18e/0x210 [ 595.727218][T12879] do_syscall_64+0x123/0x790 [ 595.727248][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.727267][T12879] RIP: 0033:0x7fd47259e159 [ 595.727283][T12879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.727299][T12879] RSP: 002b:00007fd4733db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.727318][T12879] RAX: ffffffffffffffda RBX: 00007fd472825fa0 RCX: 00007fd47259e159 [ 595.727329][T12879] RDX: 0000200000000100 RSI: 00000000c0184800 RDI: 0000000000000003 [ 595.727341][T12879] RBP: 00007fd47263503b R08: 0000000000000000 R09: 0000000000000000 [ 595.727354][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.727365][T12879] R13: 00007fd472826038 R14: 00007fd472825fa0 R15: 00007ffd34f63e08 [ 595.727390][T12879] [ 595.853575][T12753] hsr_slave_0: entered promiscuous mode [ 595.854309][T12753] hsr_slave_1: entered promiscuous mode [ 595.858782][T12753] debugfs: 'hsr0' already exists in 'hsr' [ 595.858801][T12753] Cannot create hsr debugfs directory [ 595.859763][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 596.743255][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 596.743273][ T31] audit: type=1800 audit(1789523849.157:10584): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 596.874188][ T31] audit: type=1800 audit(1789523849.287:10585): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24523 res=0 errno=0 [ 596.912033][ T31] audit: type=1804 audit(1789523849.327:10586): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1735" name="/newroot/42/file0" dev="tmpfs" ino=249 res=1 errno=0 [ 596.989328][ T31] audit: type=1400 audit(1789523849.407:10587): avc: denied { bind } for pid=12887 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 596.989498][ T31] audit: type=1400 audit(1789523849.407:10588): avc: denied { write } for pid=12887 comm="syz.0.1735" path="socket:[47473]" dev="sockfs" ino=47473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 597.285705][ T31] audit: type=1800 audit(1789523849.687:10589): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 597.321389][ T31] audit: type=1400 audit(1789523849.737:10590): avc: denied { create } for pid=12895 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 597.348787][ T31] audit: type=1800 audit(1789523849.757:10591): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 597.384851][ T31] audit: type=1400 audit(1789523849.797:10592): avc: denied { create } for pid=12895 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 597.582984][ T31] audit: type=1400 audit(1789523849.997:10593): avc: denied { map } for pid=12899 comm="syz.2.1728" path="socket:[47487]" dev="sockfs" ino=47487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.397539][T12898] tipc: Enabled bearer , priority 0 [ 598.600876][T12897] tipc: Disabling bearer [ 600.406200][ T5334] libceph: connect (1)[c::]:6789 error -101 [ 600.413702][ T5334] libceph: mon0 (1)[c::]:6789 connect error [ 600.431779][T12938] ceph: No mds server is up or the cluster is laggy [ 600.710011][ T5334] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 600.864657][ T5334] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 600.884511][ T5334] usb 1-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 600.884559][ T5334] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 600.884678][ T5334] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.884798][ T5334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.439037][ T5726] usb 1-1: USB disconnect, device number 16 [ 602.586113][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 602.586130][ T31] audit: type=1800 audit(1789523854.997:10616): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 602.603813][ T31] audit: type=1400 audit(1789523855.007:10617): avc: denied { append } for pid=12951 comm="syz.1.1745" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.702776][ T31] audit: type=1800 audit(1789523855.117:10618): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24522 res=0 errno=0 [ 602.734776][ T31] audit: type=1800 audit(1789523855.157:10619): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244244 res=0 errno=0 [ 602.734819][ T31] audit: type=1400 audit(1789523855.157:10620): avc: denied { listen } for pid=12951 comm="syz.1.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 602.745908][ T31] audit: type=1400 audit(1789523855.157:10621): avc: denied { setopt } for pid=12951 comm="syz.1.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 602.812935][ T31] audit: type=1400 audit(1789523855.227:10622): avc: denied { read write } for pid=12951 comm="syz.1.1745" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 602.812969][ T31] audit: type=1400 audit(1789523855.227:10623): avc: denied { open } for pid=12951 comm="syz.1.1745" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 602.958201][T12959] bond3: ARP target 9.0.0.0 is already present [ 602.958227][T12959] bond3: option arp_ip_target: invalid value (9) [ 602.989890][ T31] audit: type=1400 audit(1789523855.407:10624): avc: denied { write } for pid=12936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.994435][T12959] bond3 (unregistering): Released all slaves [ 603.080471][T12964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.109633][ T31] audit: type=1800 audit(1789523855.527:10625): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 604.252555][T12753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.277786][T12753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.285663][T12753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.368128][T12753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.394533][T12753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.523773][T12986] ceph: No mds server is up or the cluster is laggy [ 604.529721][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 604.562407][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 604.928965][ T5726] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 604.950893][T12753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.060668][T12753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 605.076820][ T10] libceph: connect (1)[c::]:6789 error -101 [ 605.083842][ T5726] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 605.086320][ T5726] usb 1-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 605.086345][ T5726] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.086462][ T5726] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.086553][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.136335][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 606.021317][T12753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.205643][ T5726] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 606.361044][ T5726] usb 2-1: Using ep0 maxpacket: 32 [ 606.363895][ T5726] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 606.385684][ T5726] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 606.387600][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.387624][ T5726] usb 2-1: Product: syz [ 606.387638][ T5726] usb 2-1: Manufacturer: syz [ 606.387654][ T5726] usb 2-1: SerialNumber: syz [ 606.433957][ T5726] usb 2-1: config 0 descriptor?? [ 606.444235][T12995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 606.447261][ T5726] hub 2-1:0.0: bad descriptor, ignoring hub [ 606.447284][ T5726] hub 2-1:0.0: probe with driver hub failed with error -5 [ 606.502817][ T5726] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 606.514716][T12753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.916204][T12753] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.945462][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.945548][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.969178][ T5334] usb 1-1: USB disconnect, device number 17 [ 606.994809][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.994894][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.342469][ T5706] usb 2-1: USB disconnect, device number 9 [ 607.342563][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 607.630937][ T31] kauditd_printk_skb: 69 callbacks suppressed [ 607.630952][ T31] audit: type=1400 audit(1789523860.047:10695): avc: denied { read } for pid=13021 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.631982][ T31] audit: type=1400 audit(1789523860.047:10696): avc: denied { read open } for pid=13021 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.634820][ T31] audit: type=1400 audit(1789523860.047:10697): avc: denied { unmount } for pid=11575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 607.693693][ T31] audit: type=1400 audit(1789523860.087:10698): avc: denied { read write } for pid=11575 comm="syz-executor" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 607.695682][ T31] audit: type=1400 audit(1789523860.087:10699): avc: denied { open } for pid=11575 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 607.704192][ T31] audit: type=1400 audit(1789523860.087:10700): avc: denied { ioctl } for pid=11575 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=645 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 607.755132][ T31] audit: type=1800 audit(1789523860.167:10701): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 607.904347][ T31] audit: type=1400 audit(1789523860.317:10702): avc: denied { create } for pid=13025 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.004216][T13026] syzkaller0: entered promiscuous mode [ 608.004240][T13026] syzkaller0: entered allmulticast mode [ 608.036267][ T31] audit: type=1800 audit(1789523860.447:10703): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 608.052672][ T31] audit: type=1400 audit(1789523860.457:10704): avc: denied { write } for pid=13025 comm="syz.0.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.538565][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.099733][T12753] veth0_vlan: entered promiscuous mode [ 609.131952][T12753] veth1_vlan: entered promiscuous mode [ 609.228295][T12753] veth0_macvtap: entered promiscuous mode [ 609.243651][T12753] veth1_macvtap: entered promiscuous mode [ 609.398739][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 609.427408][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.523179][T13056] overlayfs: workdir and upperdir must be separate subtrees [ 610.170081][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.470225][ T71] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.470267][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.470298][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.549527][ T6778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.804932][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.804951][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.976087][ T9610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.976108][ T9610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.648133][T13090] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 611.751561][T13092] overlayfs: workdir and upperdir must be separate subtrees [ 612.646700][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 612.646717][ T31] audit: type=1800 audit(1789523865.057:10757): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 612.730622][ T31] audit: type=1400 audit(1789523865.147:10758): avc: denied { create } for pid=13097 comm="syz.1.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 612.734275][ T31] audit: type=1400 audit(1789523865.147:10759): avc: denied { ioctl } for pid=13097 comm="syz.1.1765" path="socket:[48524]" dev="sockfs" ino=48524 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 612.799126][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 612.976973][ T31] audit: type=1800 audit(1789523865.387:10760): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 613.017500][ T31] audit: type=1400 audit(1789523865.427:10761): avc: denied { write } for pid=13089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.056426][ T31] audit: type=1800 audit(1789523865.467:10762): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 613.143856][ T31] audit: type=1400 audit(1789523865.557:10763): avc: denied { write } for pid=13111 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.174307][ T31] audit: type=1800 audit(1789523865.567:10764): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 613.283215][ T31] audit: type=1400 audit(1789523865.697:10765): avc: denied { write } for pid=13107 comm="syz.1.1767" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 613.286777][T13118] hub 8-0:1.0: USB hub found [ 613.294106][T13118] hub 8-0:1.0: 1 port detected [ 613.619122][ T31] audit: type=1400 audit(1789523865.997:10766): avc: denied { create } for pid=13122 comm="syz.6.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 613.680373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 615.901647][T13148] overlayfs: workdir and upperdir must be separate subtrees [ 617.750403][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 617.750421][ T31] audit: type=1800 audit(1789523870.157:10780): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 617.919274][ T31] audit: type=1400 audit(1789523870.337:10781): avc: denied { map_read map_write } for pid=13157 comm="syz.6.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.802444][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.134330][ T31] audit: type=1800 audit(1789523872.547:10782): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 620.375634][ T31] audit: type=1800 audit(1789523872.787:10783): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 621.359576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 621.645010][ T31] audit: type=1800 audit(1789523874.047:10784): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 621.748327][ T31] audit: type=1800 audit(1789523874.157:10785): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 621.902514][ T31] audit: type=1400 audit(1789523874.317:10786): avc: denied { write } for pid=13156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.987789][ T31] audit: type=1800 audit(1789523874.397:10787): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 622.155065][ T31] audit: type=1400 audit(1789523874.477:10788): avc: denied { create } for pid=13179 comm="syz.6.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 622.156237][ T31] audit: type=1400 audit(1789523874.487:10789): avc: denied { connect } for pid=13179 comm="syz.6.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 622.467819][T13190] syzkaller0: entered promiscuous mode [ 622.467844][T13190] syzkaller0: entered allmulticast mode [ 622.786276][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 622.786293][ T31] audit: type=1800 audit(1789523875.197:10794): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15623 res=0 errno=0 [ 622.909220][ T31] audit: type=1400 audit(1789523875.317:10795): avc: denied { create } for pid=13196 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 622.947886][ T31] audit: type=1800 audit(1789523875.337:10796): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 623.021494][ T31] audit: type=1400 audit(1789523875.437:10797): avc: denied { mmap_zero } for pid=13196 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 623.095262][ T31] audit: type=1400 audit(1789523875.507:10798): avc: denied { allowed } for pid=13196 comm="syz.1.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 623.127794][ T31] audit: type=1400 audit(1789523875.537:10799): avc: denied { map } for pid=13196 comm="syz.1.1784" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 623.153376][ T31] audit: type=1400 audit(1789523875.547:10800): avc: denied { read write } for pid=13196 comm="syz.1.1784" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 623.158795][ T31] audit: type=1400 audit(1789523875.577:10801): avc: denied { map } for pid=13196 comm="syz.1.1784" path="socket:[48034]" dev="sockfs" ino=48034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 623.225416][T13203] syzkaller0: entered promiscuous mode [ 623.225430][T13203] syzkaller0: entered allmulticast mode [ 623.254868][ T31] audit: type=1400 audit(1789523875.667:10802): avc: denied { setopt } for pid=13201 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 623.264899][ T31] audit: type=1400 audit(1789523875.677:10803): avc: denied { ioctl } for pid=13201 comm="syz.0.1786" path="socket:[48038]" dev="sockfs" ino=48038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 625.179592][T13243] overlayfs: missing 'lowerdir' [ 625.940219][ T5726] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 626.242443][ T5726] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 626.243327][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.243364][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.244901][ T5726] usb 1-1: config 0 descriptor?? [ 626.248982][ T5726] pwc: Askey VC010 type 2 USB webcam detected. [ 626.664475][ T5726] pwc: recv_control_msg error -32 req 02 val 2b00 [ 626.665040][ T5726] pwc: recv_control_msg error -32 req 02 val 2700 [ 626.665795][ T5726] pwc: recv_control_msg error -32 req 02 val 2c00 [ 626.666400][ T5726] pwc: recv_control_msg error -32 req 04 val 1000 [ 626.666944][ T5726] pwc: recv_control_msg error -32 req 04 val 1300 [ 626.667842][ T5726] pwc: recv_control_msg error -32 req 04 val 1400 [ 626.668304][ T5726] pwc: recv_control_msg error -32 req 02 val 2000 [ 626.670220][ T5726] pwc: recv_control_msg error -32 req 02 val 2100 [ 626.673300][ T5726] pwc: recv_control_msg error -32 req 04 val 1500 [ 626.674033][ T5726] pwc: recv_control_msg error -32 req 02 val 2500 [ 626.674529][ T5726] pwc: recv_control_msg error -32 req 02 val 2400 [ 626.745613][ T5602] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 626.879118][ T5726] pwc: recv_control_msg error -71 req 02 val 2900 [ 626.880054][ T5726] pwc: recv_control_msg error -71 req 02 val 2800 [ 626.881090][ T5726] pwc: recv_control_msg error -71 req 04 val 1100 [ 626.882687][ T5726] pwc: recv_control_msg error -71 req 04 val 1200 [ 626.902030][ T5726] pwc: Registered as video103. [ 626.908112][ T5726] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 626.930193][ T5726] usb 1-1: USB disconnect, device number 18 [ 626.943082][ T5602] usb 2-1: Using ep0 maxpacket: 16 [ 626.946889][ T5602] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 626.976166][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.976192][ T5602] usb 2-1: Product: syz [ 626.976206][ T5602] usb 2-1: Manufacturer: syz [ 626.976220][ T5602] usb 2-1: SerialNumber: syz [ 627.169075][ T5602] usb 2-1: config 0 descriptor?? [ 627.790088][ T5602] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 627.897646][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 627.897662][ T31] audit: type=1800 audit(1789523880.247:10860): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 627.927465][ T5602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.930088][ T5602] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 627.930130][ T5602] usb 2-1: media controller created [ 627.974080][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.991649][ T31] audit: type=1400 audit(1789523880.407:10861): avc: denied { append } for pid=13259 comm="syz.1.1794" name="i2c-1" dev="devtmpfs" ino=3680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.992154][T13260] dtv5100: wlen = 0, aborting. [ 627.997638][T13259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.045445][T13262] syz.3.1795 (13262): drop_caches: 2 [ 628.071033][ T5602] zl10353_read_register: readreg error (reg=127, ret==0) [ 628.071082][ T5602] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 628.071095][ T5602] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 628.073004][ T5602] usb 2-1: USB disconnect, device number 10 [ 628.137091][ T31] audit: type=1400 audit(1789523880.547:10862): avc: denied { mounton } for pid=13282 comm="syz.0.1797" path="/57/file0" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 628.137214][T13288] fuse: Bad value for 'fd' [ 628.182926][ T5602] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 628.213819][ T31] audit: type=1800 audit(1789523880.597:10863): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=246008 res=0 errno=0 [ 628.219987][ T31] audit: type=1800 audit(1789523880.627:10864): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 628.220024][ T31] audit: type=1800 audit(1789523880.637:10865): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=246009 res=0 errno=0 [ 628.227368][ T31] audit: type=1800 audit(1789523880.637:10866): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245988 res=0 errno=0 [ 628.227405][ T31] audit: type=1800 audit(1789523880.637:10867): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=246010 res=0 errno=0 [ 628.659074][ T31] audit: type=1400 audit(1789523881.077:10868): avc: denied { write } for pid=13268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 628.666932][ T31] audit: type=1400 audit(1789523881.077:10869): avc: denied { create } for pid=13291 comm="syz.3.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 629.043893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 632.922458][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 632.922476][ T31] audit: type=1400 audit(1789523885.337:10898): avc: denied { map } for pid=13348 comm="syz.0.1814" path="socket:[49109]" dev="sockfs" ino=49109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 632.922801][ T31] audit: type=1400 audit(1789523885.337:10899): avc: denied { read } for pid=13348 comm="syz.0.1814" path="socket:[49109]" dev="sockfs" ino=49109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 633.035313][ T31] audit: type=1400 audit(1789523885.447:10900): avc: denied { write } for pid=13355 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.183562][ T31] audit: type=1800 audit(1789523885.597:10901): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 633.212554][T13353] wg2 speed is unknown, defaulting to 1000 [ 633.237887][T13358] tipc: Started in network mode [ 633.237903][T13358] tipc: Node identity 080211000001, cluster identity 4711 [ 633.238197][T13358] tipc: Enabled bearer , priority 0 [ 633.530007][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1817'. [ 633.940336][ T31] audit: type=1800 audit(1789523886.357:10902): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 633.944963][ T31] audit: type=1400 audit(1789523886.357:10903): avc: denied { firmware_load } for pid=13363 comm="syz.1.1817" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 634.298967][ T31] audit: type=1800 audit(1789523886.637:10904): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 634.299017][ T31] audit: type=1400 audit(1789523886.677:10905): avc: denied { write } for pid=13361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.485821][ T31] audit: type=1400 audit(1789523886.867:10906): avc: denied { mount } for pid=13373 comm="syz.0.1819" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 634.485992][ T31] audit: type=1400 audit(1789523886.877:10907): avc: denied { search } for pid=13373 comm="syz.0.1819" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 634.985482][ T5726] tipc: Node number set to 134418688 [ 635.087067][T13381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.943487][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 637.943505][ T31] audit: type=1800 audit(1789523890.357:10929): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 638.000685][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.040782][ T31] audit: type=1800 audit(1789523890.457:10930): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 638.795797][ T31] audit: type=1400 audit(1789523891.117:10931): avc: denied { create } for pid=13421 comm="syz.6.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 638.823747][ T31] audit: type=1400 audit(1789523891.117:10932): avc: denied { write } for pid=13421 comm="syz.6.1831" path="socket:[49320]" dev="sockfs" ino=49320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 638.989664][T13428] overlayfs: workdir and upperdir must be separate subtrees [ 639.753035][ T31] audit: type=1800 audit(1789523892.167:10933): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 639.773579][ T31] audit: type=1800 audit(1789523892.177:10934): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 640.778233][ T31] audit: type=1400 audit(1789523893.187:10935): avc: denied { write } for pid=13431 comm="syz.0.1834" name="radio3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 642.084804][ T31] audit: type=1800 audit(1789523894.497:10936): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 643.018762][ T31] audit: type=1400 audit(1789523895.377:10937): avc: denied { mount } for pid=13449 comm="syz.6.1838" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 643.580615][ T31] audit: type=1800 audit(1789523895.947:10938): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 643.859233][ T31] audit: type=1400 audit(1789523896.247:10939): avc: denied { mount } for pid=13454 comm="syz.2.1840" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 644.203169][ T31] audit: type=1800 audit(1789523896.617:10940): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 644.585322][ T31] audit: type=1800 audit(1789523896.997:10941): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 644.676765][ T31] audit: type=1400 audit(1789523897.087:10942): avc: denied { create } for pid=13470 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 644.912215][ T31] audit: type=1400 audit(1789523897.317:10943): avc: denied { write } for pid=13470 comm="syz.3.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 645.308730][ T31] audit: type=1800 audit(1789523897.717:10944): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 645.553036][ T31] audit: type=1400 audit(1789523897.967:10945): avc: denied { write } for pid=13478 comm="syz.0.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 646.244292][ T31] audit: type=1800 audit(1789523898.657:10946): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 646.478912][ T5601] Bluetooth: hci5: command 0x0406 tx timeout [ 647.606596][T13490] netlink: 'syz.2.1844': attribute type 4 has an invalid length. [ 648.473889][T13500] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 648.495236][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 648.495247][ T31] audit: type=1800 audit(1789523900.917:10956): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 649.946948][ T31] audit: type=1800 audit(1789523902.357:10957): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 650.050701][ T31] audit: type=1800 audit(1789523902.467:10958): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 650.252844][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 651.410799][ T31] audit: type=1800 audit(1789523903.827:10959): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 651.467053][ T31] audit: type=1800 audit(1789523903.877:10960): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 651.502894][ T31] audit: type=1800 audit(1789523903.917:10961): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 651.556976][T13514] capability: warning: `syz.2.1851' uses 32-bit capabilities (legacy support in use) [ 651.584847][ T31] audit: type=1400 audit(1789523903.997:10962): avc: denied { mount } for pid=13517 comm="syz.1.1854" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 652.446687][ T31] audit: type=1800 audit(1789523904.857:10963): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 652.513447][ T31] audit: type=1400 audit(1789523904.927:10964): avc: denied { load_policy } for pid=13520 comm="syz.0.1855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 652.911102][ T31] audit: type=1800 audit(1789523905.327:10965): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1856" name="remove" dev="sysfs" ino=2948 res=0 errno=0 [ 653.920922][T13530] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 654.019569][T13526] SELinux: failed to load policy [ 654.036523][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 654.036538][ T31] audit: type=1800 audit(1789523906.447:10971): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 654.071246][ T31] audit: type=1400 audit(1789523906.487:10972): avc: denied { create } for pid=13535 comm="syz.2.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 654.157270][ T31] audit: type=1800 audit(1789523906.567:10973): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 654.205302][T13539] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1860'. [ 655.202801][ T31] audit: type=1800 audit(1789523907.617:10974): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 657.050442][ T31] audit: type=1800 audit(1789523909.457:10975): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 657.195557][ T31] audit: type=1800 audit(1789523909.607:10976): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 657.237161][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 657.310812][ T31] audit: type=1400 audit(1789523909.727:10977): avc: denied { bind } for pid=13561 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 657.311854][ T31] audit: type=1400 audit(1789523909.727:10978): avc: denied { ioctl } for pid=13561 comm="syz.1.1868" path="socket:[49562]" dev="sockfs" ino=49562 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 657.316402][ T31] audit: type=1400 audit(1789523909.727:10979): avc: denied { name_bind } for pid=13561 comm="syz.1.1868" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 657.493075][ T31] audit: type=1800 audit(1789523909.907:10980): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 657.500213][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 658.275263][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.295984][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.296870][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 658.297899][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 658.305725][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.563493][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 659.563512][ T31] audit: type=1800 audit(1789523911.977:10992): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 659.587581][ T31] audit: type=1800 audit(1789523911.987:10993): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 659.664687][ T31] audit: type=1400 audit(1789523912.077:10994): avc: denied { bind } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.664735][ T31] audit: type=1400 audit(1789523912.077:10995): avc: denied { setopt } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.666338][ T31] audit: type=1400 audit(1789523912.077:10996): avc: denied { listen } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.666378][ T31] audit: type=1400 audit(1789523912.077:10997): avc: denied { connect } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.666412][ T31] audit: type=1400 audit(1789523912.077:10998): avc: denied { accept } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.666513][ T31] audit: type=1400 audit(1789523912.077:10999): avc: denied { write } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.771554][ T31] audit: type=1400 audit(1789523912.187:11000): avc: denied { read } for pid=13602 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 659.906738][T13610] overlayfs: failed to clone upperpath [ 659.961219][ T31] audit: type=1800 audit(1789523912.317:11001): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1877" name="file1" dev="tmpfs" ino=2285 res=0 errno=0 [ 660.478903][T11577] Bluetooth: hci0: command tx timeout [ 660.484401][T13584] wg2 speed is unknown, defaulting to 1000 [ 661.841581][T11577] Bluetooth: hci7: command 0x0406 tx timeout [ 662.845733][ T5601] Bluetooth: hci0: command tx timeout [ 663.710711][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.710790][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.710886][T13584] bridge_slave_0: entered allmulticast mode [ 663.717614][T13584] bridge_slave_0: entered promiscuous mode [ 663.746099][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.747702][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.747808][T13584] bridge_slave_1: entered allmulticast mode [ 663.769557][T13584] bridge_slave_1: entered promiscuous mode [ 663.806932][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.819604][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.852411][T13584] team0: Port device team_slave_0 added [ 663.854935][T13584] team0: Port device team_slave_1 added [ 663.889265][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.889284][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.889307][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.891123][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.891136][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.891157][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.149291][T13643] openvswitch: netlink: Duplicate or invalid key (type 0). [ 664.658514][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 664.658532][ T31] audit: type=1400 audit(1789523917.067:11005): avc: denied { write } for pid=13644 comm="syz.0.1885" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 664.688513][ T31] audit: type=1400 audit(1789523917.107:11006): avc: denied { open } for pid=13644 comm="syz.0.1885" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 664.770234][T13584] hsr_slave_0: entered promiscuous mode [ 664.771002][T13584] hsr_slave_1: entered promiscuous mode [ 664.771506][T13584] debugfs: 'hsr0' already exists in 'hsr' [ 664.771523][T13584] Cannot create hsr debugfs directory [ 664.846999][ T31] audit: type=1800 audit(1789523917.257:11007): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 664.887433][T11577] Bluetooth: hci0: command tx timeout [ 664.927758][ T31] audit: type=1400 audit(1789523917.337:11008): avc: denied { sqpoll } for pid=13647 comm="syz.2.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 665.006411][ T31] audit: type=1400 audit(1789523917.417:11009): avc: denied { create } for pid=13649 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 665.034845][ T31] audit: type=1400 audit(1789523917.447:11010): avc: denied { write } for pid=13649 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 665.143212][ T31] audit: type=1800 audit(1789523917.557:11011): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15008 res=0 errno=0 [ 665.181621][T13650] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 665.240135][ T31] audit: type=1800 audit(1789523917.657:11012): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15254 res=0 errno=0 [ 665.294461][ T31] audit: type=1800 audit(1789523917.707:11013): pid=4968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14885 res=0 errno=0 [ 666.176438][ T32] INFO: task syz.4.1444:11425 blocked for more than 143 seconds. [ 666.176493][ T32] Tainted: G L syzkaller #0 [ 666.176525][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.176557][ T32] task:syz.4.1444 state:D stack:26568 pid:11425 tgid:11423 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 666.176800][ T32] Call Trace: [ 666.176831][ T32] [ 666.176867][ T32] __schedule+0x1259/0x6920 [ 666.176918][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.176974][ T32] ? do_raw_spin_lock+0x128/0x260 [ 666.177036][ T32] ? __pfx___schedule+0x10/0x10 [ 666.177062][ T32] ? find_held_lock+0x2b/0x80 [ 666.177118][ T32] ? schedule+0x225/0x2c0 [ 666.177176][ T32] schedule+0xdd/0x2c0 [ 666.177205][ T32] schedule_preempt_disabled+0x13/0x30 [ 666.177234][ T32] __mutex_lock+0xccb/0x1bd0 [ 666.177263][ T32] ? write_threads+0x288/0x600 [ 666.177331][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 666.177385][ T32] ? simple_strntoull+0xdf/0x170 [ 666.177411][ T32] ? net_generic+0x25/0x2a0 [ 666.177440][ T32] ? net_generic+0xea/0x2a0 [ 666.177467][ T32] ? net_generic+0xea/0x2a0 [ 666.177551][ T32] ? write_threads+0x288/0x600 [ 666.177594][ T32] write_threads+0x288/0x600 [ 666.177625][ T32] ? __pfx_write_threads+0x10/0x10 [ 666.177676][ T32] ? __might_fault+0xc5/0x140 [ 666.177736][ T32] ? __might_fault+0xc5/0x140 [ 666.177823][ T32] ? _copy_from_user+0x59/0xd0 [ 666.177850][ T32] ? __pfx_write_threads+0x10/0x10 [ 666.177905][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 666.184881][ T32] vfs_write+0x2aa/0x1050 [ 666.184941][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 666.184971][ T32] ? lock_acquire+0x1d1/0x380 [ 666.185028][ T32] ? __fget_files+0x34/0x3d0 [ 666.185075][ T32] ? __pfx_vfs_write+0x10/0x10 [ 666.185100][ T32] ? find_held_lock+0x2b/0x80 [ 666.185158][ T32] ? __fget_files+0x215/0x3d0 [ 666.185216][ T32] ? __fget_files+0x21f/0x3d0 [ 666.185251][ T32] ksys_write+0x12a/0x250 [ 666.185278][ T32] ? __pfx_ksys_write+0x10/0x10 [ 666.185336][ T32] do_syscall_64+0x123/0x790 [ 666.185428][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.185453][ T32] RIP: 0033:0x7fc6c7b9e159 [ 666.185489][ T32] RSP: 002b:00007fc6c8988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.185552][ T32] RAX: ffffffffffffffda RBX: 00007fc6c7e26090 RCX: 00007fc6c7b9e159 [ 666.185585][ T32] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 666.185618][ T32] RBP: 00007fc6c7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 666.185650][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.185683][ T32] R13: 00007fc6c7e26128 R14: 00007fc6c7e26090 R15: 00007ffe0ef9eaf8 [ 666.185785][ T32] [ 666.185845][ T32] INFO: task syz.9.1492:11597 blocked for more than 143 seconds. [ 666.185882][ T32] Tainted: G L syzkaller #0 [ 666.185913][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.185945][ T32] task:syz.9.1492 state:D stack:27096 pid:11597 tgid:11596 ppid:10544 task_flags:0x400140 flags:0x00080002 [ 666.186228][ T32] Call Trace: [ 666.186298][ T32] [ 666.186334][ T32] __schedule+0x1259/0x6920 [ 666.186387][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.186445][ T32] ? do_raw_spin_lock+0x128/0x260 [ 666.186506][ T32] ? __pfx___schedule+0x10/0x10 [ 666.186547][ T32] ? find_held_lock+0x2b/0x80 [ 666.186604][ T32] ? schedule+0x225/0x2c0 [ 666.186661][ T32] schedule+0xdd/0x2c0 [ 666.186691][ T32] schedule_preempt_disabled+0x13/0x30 [ 666.186718][ T32] __mutex_lock+0xccb/0x1bd0 [ 666.186774][ T32] ? write_versions+0x9d/0xba0 [ 666.186860][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 666.186921][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.187011][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.272889][ T32] ? write_versions+0x9d/0xba0 [ 666.272940][ T32] write_versions+0x9d/0xba0 [ 666.272971][ T32] ? find_held_lock+0x2b/0x80 [ 666.273005][ T32] ? __pfx_write_versions+0x10/0x10 [ 666.273062][ T32] ? __pfx_write_versions+0x10/0x10 [ 666.273119][ T32] ? _copy_from_user+0x59/0xd0 [ 666.273148][ T32] ? __pfx_write_versions+0x10/0x10 [ 666.273176][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 666.273240][ T32] vfs_write+0x2aa/0x1050 [ 666.273282][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 666.273309][ T32] ? lock_acquire+0x1d1/0x380 [ 666.273332][ T32] ? __fget_files+0x34/0x3d0 [ 666.273360][ T32] ? __pfx_vfs_write+0x10/0x10 [ 666.273400][ T32] ? find_held_lock+0x2b/0x80 [ 666.273457][ T32] ? __fget_files+0x215/0x3d0 [ 666.273491][ T32] ? __fget_files+0x21f/0x3d0 [ 666.273553][ T32] ksys_write+0x12a/0x250 [ 666.273594][ T32] ? __pfx_ksys_write+0x10/0x10 [ 666.273641][ T32] do_syscall_64+0x123/0x790 [ 666.273683][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.273728][ T32] RIP: 0033:0x7f6d6db9e159 [ 666.273774][ T32] RSP: 002b:00007f6d6bdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.273843][ T32] RAX: ffffffffffffffda RBX: 00007f6d6de25fa0 RCX: 00007f6d6db9e159 [ 666.273877][ T32] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 666.273909][ T32] RBP: 00007f6d6dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 666.273941][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.273975][ T32] R13: 00007f6d6de26038 R14: 00007f6d6de25fa0 R15: 00007ffefa30b668 [ 666.274075][ T32] [ 666.274107][ T32] INFO: task syz.9.1492:11602 blocked for more than 143 seconds. [ 666.274144][ T32] Tainted: G L syzkaller #0 [ 666.274176][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.274208][ T32] task:syz.9.1492 state:D stack:27944 pid:11602 tgid:11596 ppid:10544 task_flags:0x400040 flags:0x00080002 [ 666.274395][ T32] Call Trace: [ 666.274428][ T32] [ 666.274500][ T32] __schedule+0x1259/0x6920 [ 666.274528][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.274584][ T32] ? do_raw_spin_lock+0x128/0x260 [ 666.274645][ T32] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 666.274670][ T32] ? find_held_lock+0x2b/0x80 [ 666.274700][ T32] ? schedule+0x225/0x2c0 [ 666.274766][ T32] schedule+0xdd/0x2c0 [ 666.434091][ T32] schedule_preempt_disabled+0x13/0x30 [ 666.434147][ T32] __mutex_lock+0xccb/0x1bd0 [ 666.434205][ T32] ? write_ports+0xa5/0xcc0 [ 666.434238][ T32] ? nfsctl_transaction_write+0xcd/0x1a0 [ 666.434265][ T32] ? ksys_write+0x12a/0x250 [ 666.434290][ T32] ? do_syscall_64+0x123/0x790 [ 666.434321][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 666.434438][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.434496][ T32] ? write_ports+0xa5/0xcc0 [ 666.434539][ T32] write_ports+0xa5/0xcc0 [ 666.434569][ T32] ? __pfx_write_ports+0x10/0x10 [ 666.434624][ T32] ? lock_acquire+0x1d1/0x380 [ 666.434651][ T32] ? __might_fault+0xc5/0x140 [ 666.434709][ T32] ? find_held_lock+0x2b/0x80 [ 666.434766][ T32] ? __might_fault+0xc5/0x140 [ 666.434796][ T32] ? __might_fault+0xc5/0x140 [ 666.434878][ T32] ? __pfx_write_ports+0x10/0x10 [ 666.434909][ T32] ? _copy_from_user+0x59/0xd0 [ 666.434937][ T32] ? __pfx_write_ports+0x10/0x10 [ 666.434965][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 666.435021][ T32] vfs_write+0x2aa/0x1050 [ 666.435049][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 666.435075][ T32] ? lock_acquire+0x1d1/0x380 [ 666.435101][ T32] ? __fget_files+0x34/0x3d0 [ 666.435128][ T32] ? __pfx_vfs_write+0x10/0x10 [ 666.435153][ T32] ? find_held_lock+0x2b/0x80 [ 666.435183][ T32] ? __fget_files+0x215/0x3d0 [ 666.435244][ T32] ? __fget_files+0x21f/0x3d0 [ 666.435305][ T32] ksys_write+0x12a/0x250 [ 666.435331][ T32] ? __pfx_ksys_write+0x10/0x10 [ 666.435430][ T32] do_syscall_64+0x123/0x790 [ 666.435488][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.435514][ T32] RIP: 0033:0x7f6d6db9e159 [ 666.435551][ T32] RSP: 002b:00007f6d6bdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.435616][ T32] RAX: ffffffffffffffda RBX: 00007f6d6de26090 RCX: 00007f6d6db9e159 [ 666.435651][ T32] RDX: 0000000000000009 RSI: 0000200000000500 RDI: 0000000000000003 [ 666.435686][ T32] RBP: 00007f6d6dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 666.435729][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.435763][ T32] R13: 00007f6d6de26128 R14: 00007f6d6de26090 R15: 00007ffefa30b668 [ 666.435868][ T32] [ 666.594763][ T32] INFO: task syz.9.1492:11605 blocked for more than 143 seconds. [ 666.594816][ T32] Tainted: G L syzkaller #0 [ 666.594850][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.594882][ T32] task:syz.9.1492 state:D stack:27944 pid:11605 tgid:11596 ppid:10544 task_flags:0x400040 flags:0x00080002 [ 666.595078][ T32] Call Trace: [ 666.595110][ T32] [ 666.595148][ T32] __schedule+0x1259/0x6920 [ 666.595217][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 666.595283][ T32] ? do_raw_spin_lock+0x128/0x260 [ 666.595353][ T32] ? __pfx___schedule+0x10/0x10 [ 666.595379][ T32] ? find_held_lock+0x2b/0x80 [ 666.595437][ T32] ? schedule+0x225/0x2c0 [ 666.595495][ T32] schedule+0xdd/0x2c0 [ 666.595525][ T32] schedule_preempt_disabled+0x13/0x30 [ 666.595551][ T32] __mutex_lock+0xccb/0x1bd0 [ 666.595581][ T32] ? write_threads+0x288/0x600 [ 666.595642][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 666.595696][ T32] ? simple_strntoull+0xdf/0x170 [ 666.595722][ T32] ? net_generic+0x25/0x2a0 [ 666.595749][ T32] ? net_generic+0xea/0x2a0 [ 666.595778][ T32] ? net_generic+0xea/0x2a0 [ 666.595839][ T32] ? write_threads+0x288/0x600 [ 666.595866][ T32] write_threads+0x288/0x600 [ 666.595896][ T32] ? __pfx_write_threads+0x10/0x10 [ 666.595924][ T32] ? __might_fault+0xc5/0x140 [ 666.595979][ T32] ? __might_fault+0xc5/0x140 [ 666.596067][ T32] ? _copy_from_user+0x59/0xd0 [ 666.596124][ T32] ? __pfx_write_threads+0x10/0x10 [ 666.596176][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 666.596206][ T32] vfs_write+0x2aa/0x1050 [ 666.596231][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 666.596285][ T32] ? lock_acquire+0x1d1/0x380 [ 666.596311][ T32] ? __fget_files+0x34/0x3d0 [ 666.596338][ T32] ? __pfx_vfs_write+0x10/0x10 [ 666.596363][ T32] ? find_held_lock+0x2b/0x80 [ 666.596393][ T32] ? __fget_files+0x215/0x3d0 [ 666.596451][ T32] ? __fget ** replaying previous printk message ** [ 666.596451][ T32] ? __fget_files+0x21f/0x3d0 [ 666.596512][ T32] ksys_write+0x12a/0x250 [ 666.596569][ T32] ? __pfx_ksys_write+0x10/0x10 [ 666.596632][ T32] do_syscall_64+0x123/0x790 [ 666.760771][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.760826][ T32] RIP: 0033:0x7f6d6db9e159 [ 666.760851][ T32] RSP: 002b:00007f6d6bdb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 666.760917][ T32] RAX: ffffffffffffffda RBX: 00007f6d6de26180 RCX: 00007f6d6db9e159 [ 666.760952][ T32] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000003 [ 666.760989][ T32] RBP: 00007f6d6dc3503b R08: 0000000000000000 R09: 0000000000000000 [ 666.761023][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.761057][ T32] R13: 00007f6d6de26218 R14: 00007f6d6de26180 R15: 00007ffefa30b668 [ 666.761159][ T32] [ 666.761510][ T32] [ 666.761510][ T32] Showing all locks held in the system: [ 666.761544][ T32] locks held by kworker/u8:0/12: 1, last CPU#1: [ 666.761566][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: process_one_work+0x880/0x1b10 [ 666.761731][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 666.761768][ T32] #0: [ 666.959080][T11577] Bluetooth: hci0: command tx timeout [ 666.986315][ T31] audit: type=1400 audit(1789523919.247:11014): avc: denied { write } for pid=5584 comm="syz-executor" path="pipe:[4494]" dev="pipefs" ino=4494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 667.187924][ T32] ffffffff8edd87b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 667.188068][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 667.188102][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 667.188320][ T32] locks held by kworker/u8:9/1159: 4, last CPU#1: [ 667.188343][ T32] #0: ffff888033c55140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.188479][ T32] #1: ffffc90005307d08 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.188867][ T32] #2: ffff88807e6cf9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_send_outstanding_bat_ogm_packet+0x50f/0x7d0 [ 667.188922][ T32] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule_buff+0x583/0x15d0 [ 667.189106][ T32] locks held by kworker/0:1H/2009: 2, last CPU#0: [ 667.189141][ T32] #0: ffff88801c05ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.189292][ T32] #1: ffffc90006cf7d08 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.189504][ T32] locks held by udevd/4968: 2, last CPU#0: [ 667.360359][ T32] #0: ffffffff8f909538 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x169/0x3c0 [ 667.360504][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 667.360662][ T32] locks held by syz-executor/5584: 1, last CPU#1: [ 667.360696][ T32] #0: ffff8880306b29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 667.360886][ T32] locks held by kworker/u8:12/6778: 3, last CPU#1: [ 667.360920][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.361054][ T32] #1: ffffc900036c7d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.361209][ T32] #2: ffff88807d1e0258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 667.361404][ T32] locks held by kworker/u8:13/7050: 5, last CPU#1: [ 667.361444][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.361642][ T32] #1: ffffc90003527d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.361785][ T32] #2: ffff88805b1307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 667.361969][ T32] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: ieee80211_update_sta_info.isra.0+0x2a8/0x1230 [ 667.362180][ T32] #4: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: sta_info_get+0x55/0x3e0 [ 667.362499][ T32] locks held by kworker/u8:16/8405: 4, last CPU#1: [ 667.362521][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.363007][ T32] #1: ffffc900033f7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.363183][ T32] #2: ffff888039e307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 667.537193][ T32] #3: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 667.537226][ T32] locks held by kworker/u8:18/9610: 3, last CPU#1: [ 667.537235][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.537274][ T32] #1: ffffc90003477d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.537307][ T32] #2: ffff8880755c1258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 667.537341][ T32] locks held by syz.4.1444/11424: 3, on CPU#0: [ 667.537349][ T32] #0: ffff8880309222b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.537379][ T32] #1: ffff88807a3f4460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.537408][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 667.537437][ T32] locks held by syz.4.1444/11425: 3, on CPU#0: [ 667.537445][ T32] #0: ffff88802cb015f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.537473][ T32] #1: ffff88807a3f4460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.537501][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 667.537530][ T32] locks held by syz-executor/11575: 2, last CPU#1: [ 667.537538][ T32] #0: ffff8880331a62e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 667.537567][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x25/0x1a0 [ 667.537598][ T32] locks held by syz.9.1492/11597: 3, on CPU#1: [ 667.537606][ T32] #0: ffff88803316bb30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.537634][ T32] #1: ffff888079aa4460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.537661][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 667.537689][ T32] locks held by syz.9.1492/11602: 3, on CPU#0: [ 667.537697][ T32] #0: ffff888076621cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.537725][ T32] #1: ffff888079aa4460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.537755][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 667.537783][ T32] locks held by syz.9.1492/11605: 3, on CPU#1: [ 667.537790][ T32] #0: ffff88807d62f7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.537818][ T32] #1: ffff888079aa4460 (sb_writers#26){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.537846][ T32] #2: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x288/0x600 [ 667.537878][ T32] locks held by kworker/u8:19/12770: 3, last CPU#1: [ 667.537885][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.537917][ T32] #1: ffffc90008517d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.537948][ T32] #2: ffff888039b807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 667.537980][ T32] locks held by kworker/u8:21/12772: 3, last CPU#1: [ 667.537988][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.538019][ T32] #1: ffffc90003fefd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.538051][ T32] #2: ffff888058c18258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 667.538085][ T32] locks held by kworker/u8:28/12779: 3, last CPU#1: [ 667.538093][ T32] #0: ffff888029e6d940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.538127][ T32] #1: ffffc90003f4fd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.538158][ T32] #2: ffff88802678c080 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0xaa/0x1c0 [ 667.538188][ T32] locks held by kworker/u8:29/12780: 3, on CPU#0: [ 667.538196][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 667.538236][ T32] #1: ffffc90007c5fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 667.538270][ T32] #2: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 667.538305][ T32] locks held by syz.6.1838/13452: 2, on CPU#0: [ 667.538313][ T32] #0: ffff88803546c0e8 (&type->s_umount_key#90){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 667.538341][ T32] #1: ffffffff8f289500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 667.538368][ T32] locks held by syz-executor/13584: 2, on CPU#1: [ 667.538376][ T32] #0: ffffffff90050ca8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 667.538406][ T32] #1: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 667.538436][ T32] locks held by syz.2.1886/13648: 2, last CPU#1: [ 667.538443][ T32] #0: ffff888023fc40a0 (&ctx->uring_lock){+.+.}-{4:4}, at: __do_sys_io_uring_enter+0xa7e/0x1b10 [ 667.538472][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 667.538502][ T32] locks held by syz.1.1880/13654: 1, on CPU#1: [ 667.538510][ T32] #0: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 667.538536][ T32] locks held by syz.1.1880/13656: 1, on CPU#1: [ 667.538543][ T32] #0: ffffffff90cd2700 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 667.562329][ T32] locks held by syz.3.1881/13660: 2, on CPU#1: [ 667.562343][ T32] #0: ffffffff90bbab20 (register_mutex#4){+.+.}-{4:4}, at: odev_release+0x44/0x70 [ 667.562389][ T32] #1: ffffffff8edf83a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 667.562427][ T32] locks held by syz.3.1881/13662: 2, on CPU#0: [ 667.562438][ T32] #0: ffff888033467160 (&rmidi->open_mutex){+.+.}-{4:4}, at: snd_rawmidi_release+0x66/0x110 [ 667.562475][ T32] #1: ffffffff8edf83a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 667.562511][ T32] locks held by syz.3.1881/13666: 4, last CPU#1: [ 667.562523][ T32] #0: ffff888079c54470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 667.562565][ T32] #1: ffff888055988460 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 667.562606][ T32] #2: ffffffff9b9c0390 (resize mutex){+.+.}-{4:4}, at: __nr_hugepages_store_common+0x10a/0x1950 [ 667.562649][ T32] #3: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x63/0x530 [ 667.562712][ T32] [ 667.562716][ T32] ============================================= [ 667.562716][ T32] [ 667.562724][ T32] NMI backtrace for cpu 0 [ 667.562737][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 667.562763][ T32] Tainted: [L]=SOFTLOCKUP [ 667.562769][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 667.562778][ T32] Call Trace: [ 667.562784][ T32] [ 667.562791][ T32] dump_stack_lvl+0x100/0x190 [ 667.562815][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 667.562840][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 667.562859][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 667.562881][ T32] sys_info+0x141/0x190 [ 667.562896][ T32] watchdog+0xcb1/0x1030 [ 667.562919][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 667.562940][ T32] ? __pfx_watchdog+0x10/0x10 [ 667.562959][ T32] ? __kthread_parkme+0x18f/0x230 [ 667.562980][ T32] ? kthread+0x13a/0x450 [ 667.563001][ T32] ? __pfx_watchdog+0x10/0x10 [ 667.563017][ T32] kthread+0x373/0x450 [ 667.563038][ T32] ? __pfx_kthread+0x10/0x10 [ 667.563060][ T32] ret_from_fork+0x730/0xd60 [ 667.563079][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 667.563098][ T32] ? __switch_to+0x800/0x10f0 [ 667.563120][ T32] ? __pfx_kthread+0x10/0x10 [ 667.563142][ T32] ret_from_fork_asm+0x1a/0x30 [ 667.563169][ T32] [ 667.563176][ T32] Sending NMI from CPU 0 to CPUs 1: [ 667.563198][ C1] NMI backtrace for cpu 1 [ 667.563210][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.563229][ C1] Tainted: [L]=SOFTLOCKUP [ 667.563234][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 667.563242][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 667.563263][ C1] Code: 48 5b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 48 8b ce fc eb a2 e8 d1 8b [ 667.563276][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 667.563288][ C1] RAX: dffffc0000000020 RBX: 00000000000003fd RCX: 0000000000000000 [ 667.563297][ C1] RDX: 00000000000003fd RSI: ffffffff85b0d6d0 RDI: ffffffff9bc6bca0 [ 667.563307][ C1] RBP: ffffffff9bc6bc60 R08: 0000000000000001 R09: 000000000000001f [ 667.563316][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 667.563325][ C1] R13: 0000000000000020 R14: fffffbfff378d7e9 R15: dffffc0000000000 [ 667.563334][ C1] FS: 0000000000000000(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 667.563349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 667.563358][ C1] CR2: 00007f626d7f0078 CR3: 0000000034cdb000 CR4: 00000000003526f0 [ 667.563368][ C1] Call Trace: [ 667.563372][ C1] [ 667.563378][ C1] wait_for_lsr+0x13a/0x210 [ 667.563396][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 667.563415][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 667.563432][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 667.563448][ C1] serial8250_console_write+0xf46/0x1330 [ 667.563468][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 667.563487][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 667.563509][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 667.563533][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 667.563548][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 667.563561][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 667.563582][ C1] ? do_raw_spin_lock+0x70/0x260 [ 667.563601][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 667.563620][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 667.563637][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 667.563650][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 667.563665][ C1] nbcon_kthread_func+0x613/0x7d0 [ 667.563680][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 667.563696][ C1] ? __kthread_parkme+0x18f/0x230 [ 667.563714][ C1] ? kthread+0x13a/0x450 [ 667.563731][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 667.563744][ C1] kthread+0x373/0x450 [ 667.563763][ C1] ? __pfx_kthread+0x10/0x10 [ 667.563783][ C1] ret_from_fork+0x730/0xd60 [ 667.563798][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 667.563814][ C1] ? __switch_to+0x800/0x10f0 [ 667.563832][ C1] ? __pfx_kthread+0x10/0x10 [ 667.563850][ C1] ret_from_fork_asm+0x1a/0x30 [ 667.563869][ C1] [ 667.572178][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 669.038318][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 669.048987][ T32] Tainted: [L]=SOFTLOCKUP [ 669.053328][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 669.063362][ T32] Call Trace: [ 669.066620][ T32] [ 669.069527][ T32] dump_stack_lvl+0x100/0x190 [ 669.074183][ T32] vpanic+0x553/0x970 [ 669.078139][ T32] ? __pfx_vpanic+0x10/0x10 [ 669.082615][ T32] panic+0xd1/0xe0 [ 669.086311][ T32] ? __pfx_panic+0x10/0x10 [ 669.090710][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 669.096850][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 669.102974][ T32] ? watchdog.cold+0x1ec/0x234 [ 669.107713][ T32] watchdog.cold+0x1fd/0x234 [ 669.112282][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 669.118072][ T32] ? __pfx_watchdog+0x10/0x10 [ 669.122729][ T32] ? __kthread_parkme+0x18f/0x230 [ 669.127733][ T32] ? kthread+0x13a/0x450 [ 669.131950][ T32] ? __pfx_watchdog+0x10/0x10 [ 669.136601][ T32] kthread+0x373/0x450 [ 669.140647][ T32] ? __pfx_kthread+0x10/0x10 [ 669.145219][ T32] ret_from_fork+0x730/0xd60 [ 669.149788][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 669.154890][ T32] ? __switch_to+0x800/0x10f0 [ 669.159544][ T32] ? __pfx_kthread+0x10/0x10 [ 669.164122][ T32] ret_from_fork_asm+0x1a/0x30 [ 669.168866][ T32] [ 669.172051][ T32] Kernel Offset: disabled [ 669.176349][ T32] Rebooting in 86400 seconds..