last executing test programs: 3.041669519s ago: executing program 2 (id=591): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x5000000, 0x2, 0x69cc6d86, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 2.921788536s ago: executing program 2 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000000140)="0100cd7995f1a8d5583a3d5e03002112229c4bd8160b9dddc9125038131abd95b8788c4d") sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3, @ANYBLOB="0ff0d94a957f94b53bff62beb7d7cf87b36b3eced969b5c8340e5e40a15e43efea97eb06c7088907f8119483d44aa5a69e2da384f803ee9446afba3049a1dd25e9e02e4c02a4c2af34640bb9c8e3e29aee1ec0a02fa7ffffff7f2600353e9cd35339e119e34c6cdb48b3747e326228e936f91a2bb45922d5677575e9ad80ee8d6ef216b7e0ca1845d0bc8f96e58ed0db6caa5e84ca0e213c042334621deba4aa4e35180752119ece66d20000000000000000000000ebd601ae18349e500db99905"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x505400, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) syz_emit_ethernet(0x2d, &(0x7f0000000180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@arp={0x806, @generic={0x304, 0x8809, 0x6, 0x9, 0x8, @remote, "ba716ad0c8029409bc", @multicast, "45d6"}}}}, 0x0) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.817528734s ago: executing program 2 (id=596): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000f00)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1bc, r3, 0xc28dfac98446b3a, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc4, 0x3, "fe25e9bb8b7f02160fc3bc5ede9b15a4be7612055c210dbe3f997243fc00c79c39621c1e9d2a7a6751c7e31cb3a59286446dbabf3961cd5524714d44a66337d8e3b67f016fe4bebbfde2446c4df2860bed5dd0e058f57e1ffc24bfe09968c84e88061d08afc8075a89eb42f6eee5b8948544a2c96aa3424069ea0734261d524cd08496f7c6adb8c4f74dc9afbd9d78d8c56223b814138c33f06d39791b5390c4119975dced04f1884125e8ee313643c4863f2e4873650514eed39fcdac52540d"}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "39c7b8f42bc0a7127a730de0d146c30436d9324c6e071ee31d8d78c2ffb789424f4651cdfbf8e299c6c1239b3bec17e5a2970327430eee587057dc1a4fe6695a203506848ce0435a126335988ce6bfb9e6b731ce79aca8ae67f6d4f8c9bcd5880b41ec7d1d243d85d7a58947ffa21f50d561303727a8874fec92b9fd278ae64dd1aca701c9b991d97c8da34daf156cd7d55562b8ba3ad38d05e01645fea056cdc97eb5d9f73c4748b6c976cf16c20f7413bc300e399386ec0ad6f1585440cc6645"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7a1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.817399194s ago: executing program 2 (id=597): socket$unix(0x1, 0x5, 0x0) (async) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 2.749536502s ago: executing program 2 (id=599): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107000000009b00000003"], 0x18}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000100)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00') 2.30391733s ago: executing program 3 (id=607): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0) socket$inet6(0xa, 0xa, 0x1000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 2.23390646s ago: executing program 3 (id=609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x40c402, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r4, 0xc0401289, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x68, 0x0, 0x0, 0x1078, 0xf88, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x800001, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0xfffff164, 0x700, 0x700, 0x2c}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000100), 0xfffffd79) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r7, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.183955174s ago: executing program 3 (id=610): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000300)={0x40e, 0x3, 0x3, 0x8, 0xc}, 0x30, 0x0) landlock_restrict_self(r0, 0x9) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) 2.122946755s ago: executing program 3 (id=611): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r0, 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x100000, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xfff9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)='c:::\x00', 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x3, &(0x7f0000000180)=[{0xcc7d, 0x8, 0x5, 0x3}, {0x8000, 0x1, 0x5, 0x4}, {0x2, 0x5, 0xa, 0xffff8858}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f00000080c0)={&(0x7f0000007f00)=[&(0x7f0000000b80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x3, 0xffc00}, {0x5, 0x9}, {0x95, 0xa}, {0xfff, 0x3ff}, {0x9, 0x7}, {0x2, 0x10001}, {0xc, 0x7009}, {0xb, 0x200}, {0x7fffffffffffffff, 0x5}, {0xfffffffffffffffe, 0xfffffffffffffbff}, {0x7, 0xfffffffffffffffa}, {0x8000000000000001, 0xf}, {0x9, 0x7}, {0xc0000000000, 0x659b}, {0x10, 0x6}, {0x80, 0x3090cb66}, {0x6, 0x1ff}, {0x9, 0xa2}, {0x4, 0x7}, {0x8000000000000001, 0x59}, {0x5, 0x6}, {0x9}, {}, {0x4, 0x9}, {0x0, 0x9}, {0x4, 0x7}, {0xffffffffffffffff, 0xa}, {0xc, 0x2}, {0xff, 0x1}, {0xc, 0x3}, {0xc, 0x4}, {0x8, 0x466d}, {0x1, 0x9}, {0x8, 0x400}, {0x3, 0x2}, {0xb5f}, {0x1, 0xffffffffffffffff}, {0x7ff, 0xb}, {0xe3, 0xcb1}, {0x8, 0x49}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x81}, {0x7, 0x1}, {0x4, 0x100}, {0x0, 0x8b}, {0x0, 0x4411}, {0x8, 0x6}, {0xede, 0x2463f855}, {0x401, 0x2}, {0x4, 0x5}, {0x9, 0x7fff}, {0x400, 0x9}, {0x2, 0x2}, {0x9, 0x7}, {0x1, 0x7ff}, {0x5, 0x3}, {0x4, 0x2}, {0x8001, 0x80000000}, {0x4, 0x8}, {0x1, 0x9}, {0xffff, 0x5}, {0x800, 0x1}, {0x800, 0x60e}, {0x9, 0xffffffffffff1664}, {0x6, 0x5}, {0x8, 0x7}, {0x3, 0x3}, {0x4, 0x9fff}, {0x325, 0x80}, {0xe8, 0x9}, {0x2, 0x6}, {0x4, 0x1}, {0x100000001, 0x650e}, {0x5, 0x2}, {0x8, 0x4}, {0x8001, 0x1ff}, {0x80, 0x5}, {0x8000000000000001, 0x64b0}, {0x7, 0x5}, {0x2, 0xb}, {0xf1}, {0x74a2, 0x4}, {0x7, 0x2}, {0xa, 0xc}, {0x10001}, {0x5, 0x1fc}, {0x0, 0x5}, {0x7, 0x2}, {0x4, 0x5}, {0x9, 0x227}, {0xd, 0x3ff}, {0x802000, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x3ff, 0x1}, {0xffffffffffffffff, 0x4}, {0x2, 0x40}, {0x1884, 0x100000000}, {0x3, 0x7}, {0x4, 0x1}, {0x8, 0x5}, {0x4, 0x8}, {0xce, 0x7}, {0xd473, 0xdce7}, {0x8001, 0x1}, {0x4, 0x4}, {0xfffffffffffffffa, 0x4}, {0x2, 0x7fffffffffffffff}, {0xe, 0x4}, {0x5}, {0x4, 0x1}, {0xc9b, 0x8000000000000001}, {0x9, 0x6}, {0x0, 0x3}, {0x0, 0x90000000000000}, {0x4, 0x3}, {0x7, 0x1}, {0x800, 0x9}, {0xfffffffffffffffe, 0xa6b0}, {0xde33, 0xab}, {0x100000001, 0x7f}, {0x40fb, 0x1}, {0x2, 0x180000}, {0x6, 0x9c32}, {0x0, 0x40}, {0x7fffffffffffffff, 0x1}, {0x7, 0x5}, {0x4, 0x3fae}, {0xa}, {0x5, 0x3}, {0x721, 0x7}, {0x9, 0x4dd8}, {0x9, 0xa05}, {0x1, 0x9}, {0x3, 0x77}, {0x5, 0x100000000}, {0x7, 0xb0}, {0x7fffffffffffffff, 0x7f}, {0x9, 0xc7}, {0x8001, 0xd3f}, {0x5, 0x7}, {0x9, 0xb}, {0x6, 0x2}, {0x4, 0x9}, {0x3, 0xffffffffffffffff}, {0x5, 0x5}, {0x7, 0x3}, {0x10, 0x8020000000000000}, {0x4b5, 0x7}, {0x2, 0x8001}, {0x2, 0x1}, {0x4, 0x5}, {0x3, 0x2e}, {0xffff, 0x7}, {0x5, 0x3f60}, {0xd712, 0x4}, {0x8000, 0x4a4}, {0x89, 0x4}, {0x9, 0x5}, {0x1, 0x8}, {0xffffffffffffff4a, 0x9}, {0x7fff, 0x341}, {0x4, 0x6}, {0x0, 0x4d7}, {0x8, 0x1}, {0x62, 0x6}, {0x3, 0x7}, {0x10001, 0x69c52a65}, {0x7fffffff, 0xff}, {0x200, 0x1}, {0xb5a9, 0xb}, {0x9, 0x1}, {0x3, 0x800}, {0x917, 0x6}, {0x4, 0x3}, {0x100000001, 0x2}, {0x8}, {0x7fffffff, 0x7}, {0x3, 0xb7}, {0x1, 0x101}, {0x3, 0x3}, {0x8000}, {0x1ff, 0x101}, {0x6, 0x9cbc}, {0xf5}, {0x7, 0xe13a}, {0x9, 0xe6d}, {0x1, 0x8000000000000001}, {0x4, 0x5b}, {0x6, 0x83}, {0x0, 0x4b7ea57a}, {0x3, 0x100}, {0x0, 0x8000000000000000}, {0x3, 0x3}, {0xdc8, 0x80000001}, {0xc, 0xa5}, {0x7fffffffffffffff, 0x7}, {0x3, 0xf8}, {0x7, 0x4}, {0x7ff, 0x100000001}, {0xffffffffffffffbb, 0x6}, {0xce5e, 0x6}, {0x2, 0xe190}, {0x8, 0x4}, {0x2, 0x400}, {0x6, 0xd70}, {0x4, 0xf}, {0x8000}, {0x6, 0xe7}, {0x0, 0x2}, {0x0, 0xffffffffffffffff}, {0x6, 0x4}, {0xd4, 0x5c}, {0x8, 0x2}, {0x1, 0x2}, {0x100, 0x4}, {0x8001, 0x4}, {0x4, 0x6}, {0x6, 0x1}, {0x8000000000000001, 0x7fff}, {0x5, 0xf5}, {0x10, 0x9}, {0xffff, 0x9}, {0x6, 0x2}, {0x8, 0x7}, {0xf, 0x8000}, {0x7fff, 0x2}, {0x2, 0x1}, {0xbe2, 0x621aed89}, {}, {0x0, 0x5}, {0x2, 0x1}, {0xf, 0xb}, {0x1210, 0x2}, {0x2, 0x4c}, {0x8000, 0x4b1}, {0x1, 0x973}, {0x8, 0x8}, {0x10000, 0x80000001}, {0x80000000, 0xff}, {0x4, 0x3}, {0x9, 0x1}, {0x100, 0x5}, {0xfffffffffffffffc, 0x80000000}, {0x6, 0x1c7}, {0x5, 0x1}, {0x7ac, 0x2}, {0x2003, 0x200}, {0x7, 0x7ff}, {0x4, 0x4}, {0x1, 0x7fff}, {0x5, 0x5}, {0xf, 0x4}, {0x6b6, 0x4}]}, &(0x7f0000001bc0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000001c00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000001c40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000001c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x6, 0x9}, {0x8f, 0x494b}, {0x1, 0xe7b}, {0x0, 0x5}, {0xfffffffffffffffb, 0x3deb}, {0x6, 0x6}, {0x17d3c91f, 0x9}, {0x5, 0xcc0c}, {0xfffffffffffffff9, 0x6}, {0x1, 0xd4}, {0x4, 0x49}, {0x0, 0xef8}, {0x200, 0x400}, {0x0, 0x6}, {0x5, 0xfffffffffffffff8}, {0x2, 0x69}, {0x0, 0x1}, {0x6}, {0x1, 0x5}, {0x5, 0xffffffffffffffff}, {0x0, 0x5}, {0x10, 0xffff}, {0x1, 0x8}, {0x2, 0xc}, {0x4, 0x2}, {0x3, 0xffffffffffffff9e}, {0x8000, 0xb}, {}, {0x9, 0x9}, {0x1ff, 0x2}, {0x16b6, 0x4}, {0x3, 0x80000000}, {0x5, 0xa}, {0x6e0, 0xffff}, {0x3, 0x5}, {0x1050, 0x3c}, {0xf5, 0xfffffffffffffff9}, {0x48e, 0x9}, {0x101, 0x3}, {0xfffffffffffffff9, 0x4}, {0x1000, 0x4}, {0x6}, {0xffffffff, 0x7}, {0x82e8, 0x6}, {0x69c, 0xc2b7}, {0x37de, 0x8000000000000000}, {0xff, 0x4}, {0x0, 0xffffffff}, {0x9, 0x4}, {0xb485, 0xfffffffffffffffa}, {0x9f, 0x8001}, {0x0, 0x8001}, {0x3, 0xea4}, {0x100, 0x9b6}, {0x3000000000000, 0x100000001}, {0x2, 0x72}, {0x80000000, 0x5}, {0x2, 0x6}, {0x4, 0x2}, {0x3, 0x9}, {0xff, 0x6}, {0x9, 0x4}, {0x10, 0x7f}, {0xcf25, 0x4}, {0x8000, 0x44d}, {0xb19, 0x3}, {0x7, 0xff}, {0x4, 0x7fffffffffffffff}, {0x47, 0x2}, {0x401, 0x7}, {0x1, 0x5}, {0x81, 0x800}, {0x401, 0x8ed}, {0x8, 0x5909db5c}, {0x3, 0x1}, {0x9, 0x20000000}, {0x5, 0x1000}, {0x6, 0x5}, {0x0, 0x190}, {0x2, 0xe}, {0x5, 0x600}, {0x3, 0xa6}, {0xd, 0x10001}, {0x6, 0x3}, {0x3, 0x81}, {0x101, 0x10001}, {0xfffffffffffffffe, 0xfffffffeffffffff}, {0x3}, {0x9c85, 0xf3dd}, {0x3, 0x55}, {0xfffffffffffffffc, 0x1000}, {0x6, 0xf2}, {0xd1a, 0x6}, {0x8, 0xc}, {0x2, 0x5}, {0x7f, 0x4}, {0x6}, {0xfffffffffffffff4, 0x3}, {0x8, 0xff}, {0x2, 0x8}, {0xb, 0x532}, {0x4, 0x2}, {0xffffffffffffff7f, 0x895}, {0x6, 0x7c32}, {0x6, 0xb53}, {0x1, 0x9}, {0x66, 0xffffffffffffff09}, {0x7, 0x8}, {0x6, 0x770}, {0x2, 0x3}, {0x3, 0xfffffffffffffff8}, {0x0, 0xfffffffffffffffc}, {0x1, 0x3}, {0x8}, {0x6}, {0xefb, 0x5}, {0x4, 0x6}, {0x8, 0xc067}, {0x4, 0x4}, {0xfffffffffffffff9, 0x1000}, {0x1, 0x81}, {0xffff}, {0x2bb1, 0xbc}, {0x3, 0x80}, {0x3, 0x2}, {0x3, 0x5}, {0x169, 0xfffffffffffffffd}, {0x20000, 0xffffffffffffffff}, {0x5, 0x3}, {0x5, 0xffffffffffffffff}, {0x100000001, 0x7}, {0x3ff, 0x31f984a2}, {0x5, 0x9c}, {0xfffffffffffffffd, 0x7}, {0x4, 0x7fff}, {0x3, 0x4}, {0x10001, 0x429b}, {0x9, 0x9}, {0xfffffffffffffffd, 0x5}, {0x56a, 0x4}, {0x0, 0x3}, {0x7, 0x100000000}, {0x8, 0x8}, {0x2}, {0x7, 0x1b}, {0x9, 0xe}, {0x10000, 0x8}, {0x8, 0x3}, {0x8, 0x3a20}, {0x100, 0x3}, {0x3ff, 0x81}, {0x2, 0xba}, {0x9d, 0xa710}, {0xd14, 0x80}, {0x1, 0x7fffffff}, {0x7ff, 0x1}, {0xc2c, 0x1bd3bad7}, {0x8000, 0x1}, {0xe, 0x80}, {0xa2, 0xfa}, {0x8000000000000001, 0x6}, {0xd, 0x8}, {0x659, 0x3}, {0x8001, 0x8}, {0xfffffffe000000, 0x3}, {0x5, 0x2}, {0x5, 0x3}, {0x93d8, 0x10000}, {0x7, 0x1}, {0xfffffffffffffffc, 0x8}, {0x7f, 0x4172}, {0xb, 0x1758}, {0x7ff, 0x565228c}, {0x0, 0x4}, {0xfffffffffffffffe, 0x73bc}, {0x6, 0xfff}, {0x91, 0xffff}, {0x100000000, 0x13ad}, {0x200, 0x3}, {0x2, 0xffff}, {0xfffffffffffffff8, 0x1}, {0x2, 0x1}, {0x8000000000000000, 0x9}, {0x6, 0x432}, {0x9, 0xffffffffffffffff}, {0xfffffffffffffffa, 0x2}, {0x0, 0xb}, {0x0, 0x9}, {0x3, 0x5b6}, {0x5, 0x2}, {0xf, 0x10001}, {0x100, 0xa3}, {0x3, 0x8}, {0xc, 0xccc}, {0xaa0a, 0x3}, {0x1}, {0x3, 0x8}, {0x6, 0x8000}, {0x200, 0x6}, {0xfffffffffffffffd, 0x7}, {0xff, 0x3}, {0x400, 0x8001}, {0x8, 0xd}, {0x968, 0x3fd}, {0x1000, 0x1}, {0xd0, 0xffffffffffffffff}, {0x6, 0x7}, {0x6, 0x4}, {0x3, 0x3}, {0xf77e, 0x8}, {0x8000, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x8, 0x8}, {0x2000000}, {0x8000}, {0x43, 0x600000000000}, {0x80000000, 0x7f}, {0x3, 0x7}, {0x80, 0x3}, {0x700000000, 0x7}, {0x3, 0x5}, {0x3, 0x7}, {0x3ff, 0x53}, {0xc8, 0x1}, {0x63a, 0x5}, {0x2, 0x1}, {0x134, 0x1}, {0x8001, 0x6}, {0x3, 0x100}, {0x5, 0x1}, {0xfff, 0x7}, {0x4, 0x7}, {0x7f, 0x1ff}, {0x3, 0x80}, {0xfffffffffffffffd, 0xc19}, {0x8}, {0x5, 0x7fff}, {0x4, 0x5}, {0x5, 0x6}, {0x2, 0xfffffffffffffffc}, {0x5, 0x4000000000000}, {0x1, 0x8000000000000001}, {0x5, 0x4}, {0x5, 0x1ff}, {0xfffffffffffffffa, 0x112a}, {0x7ff, 0x80000000}, {0x7, 0x6}, {0x25eb, 0x8000000000000000}, {0x81, 0x8}, {0x8000000000000001, 0x3}, {0x800, 0x5}, {0x286, 0x58}, {0x5dd9, 0x8}, {0x4, 0xff}]}, &(0x7f0000002cc0)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002d00)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002d40)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002d80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0xfffffffe}, &(0x7f0000002ec0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002f00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000002f40)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000002f80)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002fc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000001}, [{0x7fffffff, 0xcaf}, {0xe2}, {0x8, 0x81}, {0x100000001, 0x9e3b}, {0x200000000000, 0x4}, {0x1c, 0x1ff}, {0x58f, 0x1}, {0x5, 0x5}, {0xa, 0x1}, {0xc3de, 0x6}, {0x4, 0x1df7}, {0xb, 0x6}, {0xa, 0xe}, {0x101, 0x41}, {0x9acd, 0x2000}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x7fff, 0x100000001}, {0x5, 0x81d0}, {0x8, 0x4}, {0x3, 0x7}, {0x200}, {0x3, 0xa}, {0x9, 0x5}, {0x3ec, 0x10000}, {0xffff, 0x3}, {0x7fff, 0xe0d}, {0x84a, 0x7}, {0x7fffffffffffffff, 0x800}, {0x9, 0x5}, {0x6, 0x61935b0a}, {0x2, 0x73}, {0x4, 0x7}, {0xfffffffffffffff7, 0x5}, {0x8, 0x6}, {}, {0x58fab014, 0x2}, {0x9, 0x4}, {0x7, 0x4}, {0x3, 0x2b0}, {0xffffffffffffffff}, {0x11f01ae1, 0x4}, {0xffffffffffffff79, 0x2}, {0x1, 0x100000000}, {0x8, 0x4}, {0x9, 0x4}, {0x7, 0xfffffffffffffffc}, {0x5a, 0x5}, {0xd8, 0x6}, {0xfff, 0x5}, {0xc0d3, 0xdecd}, {0xf3, 0x2}, {0x9, 0x7}, {0xef2, 0x101}, {0x68b1, 0x7}, {0xfffffffffffffffc, 0x17d}, {0xc4ba, 0x4}, {0x71, 0x40}, {0x2, 0xb}, {0x3, 0x54}, {0x0, 0x8000}, {0x6, 0xfffffffffffffffc}, {0x5, 0x3}, {0x9, 0x7}, {0x3}, {0xb92b, 0x9}, {0x8, 0x7}, {0xc, 0x8}, {0x0, 0x859}, {0x5, 0x4}, {0xfff, 0xe}, {0x200, 0x5}, {0x9, 0x48f}, {0x7fffffffffffffff, 0x2}, {0x0, 0x8}, {0x6, 0xffffffffffffff09}, {0xc, 0x1}, {0xfffffffffffffff8, 0x6}, {0x8, 0x1cc}, {0x7a, 0x8}, {0x5, 0x3}, {0xa0e, 0x2}, {0xa9c6, 0x4}, {0x5, 0x200}, {0x4, 0xd796}, {0x17, 0x68}, {0x8000000000000000, 0x9}, {0x2, 0x4}, {0x6c, 0x4}, {0x6e70, 0x8000}, {0xfffffffffffffc00, 0x7f}, {0xffff, 0x9}, {0x5, 0x101}, {0x87c, 0x9}, {0x3e3, 0x5}, {0x1d, 0x4}, {0xffff, 0x5}, {0x9fb, 0x3}, {0xfffffffffffff512, 0x4}, {0x4, 0x40}, {0x9, 0x6410}, {0x6, 0x1ff}, {0x8, 0x10000}, {0x0, 0x40000000000000}, {0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x101, 0x3}, {0x5, 0x8}, {0x6, 0x10000}, {0xfffffffffffff800, 0x6}, {0x59, 0x1000}, {0x1000, 0x7fff}, {0x9, 0x6}, {0x4, 0x9}, {0x1, 0xb}, {0x83c, 0x4e}, {0x100, 0x51}, {0x5, 0x4}, {0x8, 0x7}, {0x6, 0xfffffffffffffffd}, {0x80000001, 0x3}, {0x8, 0x9}, {0xeb0b, 0x401}, {0xfffffffffffffff7, 0x6}, {0x2, 0xc700000}, {0x3}, {0x8, 0x664}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x800}, {0x100000000, 0x2}, {0x4, 0x9}, {0x100000001, 0x8}, {0xa, 0x100000001}, {0x0, 0x487}, {0x100000001, 0xfffffffffffff9c3}, {0x9, 0x7ff}, {0x4, 0x4}, {0x6, 0x7fffffffffffffff}, {0x7, 0x80000001}, {0x2, 0x3}, {0xfff, 0x7fff}, {0xa978, 0xff000000000000}, {0x5, 0xb8}, {0x100, 0x101}, {0x9bb, 0x1}, {0x4, 0x4}, {0x7630d184, 0x10000}, {0x1, 0x1}, {0x6, 0x7fc26514}, {0x1000, 0x7}, {0x4, 0x2}, {0x160, 0x6}, {0x5, 0xfffffffffffffe00}, {0x5}, {0x9, 0x5}, {0x4, 0x1}, {0xfffffffffffffff9, 0x9}, {0x5, 0xd}, {0x80000001, 0x1}, {0xaa9e, 0x7fffffff}, {0x7fff, 0x5}, {0x72, 0x3ff}, {0x7, 0xaa}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x10001}, {0x11d, 0x6}, {0xc000, 0xfffffffffffffffa}, {0x6, 0xffffffffffffffff}, {0x200, 0xee}, {0x105ba0da, 0x3}, {0x8, 0x8}, {0x5, 0x8}, {0xc}, {0x0, 0x7}, {0x51c, 0x9}, {0x8, 0xa714}, {0x9, 0x9f1}, {0xfff, 0x5}, {0x3f8, 0x7}, {0x1, 0x298}, {0x2, 0xf}, {0x5, 0x3}, {0xfffffffffffffff7, 0xd622}, {0x3d7, 0x9}, {0x2, 0x10}, {0x401, 0x7}, {0x7ff, 0x4}, {0xd5, 0x4}, {0xb, 0x1}, {0x1ff, 0x10000}, {0x9, 0x1ffe00}, {0x7fffffff, 0x8001}, {0x3, 0x40}, {0x6, 0x8f90}, {0x2, 0x7fffffffffffffff}, {0x4, 0xffffffffffffffff}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0xfff, 0x4867}, {0x7, 0x1}, {0xfffffffffffffff9, 0x5666}, {0x7f, 0x8}, {0x9, 0x9}, {0x4, 0x9bd}, {0x9}, {0x2000000000, 0x10}, {0xfffffffff89b66b2, 0x9}, {0xb, 0x4}, {0xa7e, 0x3}, {0xffffffff, 0xd6ba}, {0x1bac, 0x200}, {0x9, 0xf0b}, {0x1, 0x6}, {0x0, 0x2e14}, {0x7fffffff}, {0xf, 0x6}, {0x5a42, 0x100}, {0x9, 0x9d}, {0x6, 0x4}, {0x10, 0x5c0780000000}, {0x7fffffff}, {0x8, 0x4}, {0x2, 0x7}, {0x200, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x32, 0x5}, {0x2cf, 0xc000000000000000}, {0x4, 0x7}, {0xfffffffffffffffd, 0xdeb}, {0xe, 0xd71}, {0x40, 0x6d1a0d0000000000}, {0xfffffffffffffff8, 0x3}, {0x5, 0x7ff}, {0x8, 0x7}, {0x7, 0xfe}, {0x7, 0x800}, {0x2, 0x8000}, {0x100000000, 0xe9}, {0x9, 0x3ff}, {0xce}, {0x10000, 0xfff}, {0xc99, 0x9}, {0x40, 0xfffffffffffffffa}, {0x2, 0x100000000}, {0x100000000, 0xffffffffffffffff}, {0xc2, 0xa61b}, {0x9, 0x1}]}, &(0x7f0000004000)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000004040)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000001}, [{0xfcf, 0x55bd}, {0x4}, {0xfffffffffffffffb, 0x9}, {0x0, 0x664bbc0b}, {0x5, 0x9d3}, {0xb, 0x38000000}, {0x9, 0x4}, {0x1, 0x7f}, {0x4, 0x100000001}, {0xe89, 0x5}, {0xff, 0x8001}, {0x537, 0x8}, {0x7, 0x3}, {0x8, 0x537}, {0x5, 0x8}, {0x40, 0x9}, {0x10, 0x2}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x7}, {0x7fff, 0xfffffffffffffffe}, {0x401, 0xe2a}, {0x7, 0x1}, {0xbe5, 0x2}, {0x7, 0x3}, {0x101, 0x5}, {0x7fffffff, 0x6}, {0x1800000000000000, 0x80}, {0x8000000000000001}, {0x3, 0x8}, {0x8, 0x3}, {0x1, 0x10000000000000}, {0x9, 0x9}, {0xfffffffffffffff8, 0x9}, {0x0, 0x4}, {0x796b, 0x9}, {0x1, 0x8000000000000001}, {0x6, 0xee92}, {0x7, 0x5564}, {0x9b1c, 0x5}, {}, {0x6, 0x401}, {0x0, 0x1}, {0x9, 0x8}, {0x0, 0x800}, {0x9, 0x8}, {0x1ff, 0x7}, {0x5, 0xd}, {0x7, 0xa628}, {0xfffffffffffffffa, 0x8}, {0x0, 0xffffffffffff6796}, {0x6, 0x200}, {0xfffffffffffffffa, 0x18560000000}, {0x5, 0x4d}, {0x9, 0x6}, {0x5, 0x1}, {0x7, 0x5cea}, {0x94, 0x7511}, {0x3}, {0x3d, 0x8001}, {0x4}, {0x21, 0x3}, {0x8, 0xfffffffffffffffc}, {0x1, 0x9b}, {0xd, 0x8}, {0x1, 0x1000}, {0x0, 0x6}, {0xfd1, 0xd}, {0x3}, {0x3, 0x100000001}, {0xbb, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x6, 0x5}, {0x3, 0x8}, {0x91, 0x7}, {0x81, 0xfffffffffffffff7}, {0x4, 0x95a}, {0x17b2, 0xe2}, {0x2, 0x8}, {0x5, 0xfffffffffffffe00}, {0x5, 0x5}, {0x6, 0x200}, {0x0, 0x7}, {0x9, 0x4}, {0x2, 0x2}, {0x1, 0x2}, {0x1ff, 0xd8d0}, {0xe7, 0xe}, {0x80000000000, 0x8}, {0xfffffffffffff85e, 0x43f}, {0x6}, {0x6, 0xb420}, {0x6}, {0x3, 0x4}, {0x5, 0x7f}, {0x2, 0xff}, {0x4, 0x4}, {0x4b85, 0x4}, {0x5662a2d7, 0x7}, {0x2191, 0x10001}, {0x4883a1ca, 0xd55d}, {0x8, 0x1}, {0x1000, 0x81}, {0x1, 0x10}, {0x4, 0x1e8a389a}, {0x2, 0x2}, {0x7fffffff}, {0x10000, 0x4}, {0x5, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x1, 0x35c1}, {0x2, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x10000}, {0x10, 0x10001}, {0x1, 0x2}, {0x10000, 0x8}, {0x5bdb4b03, 0x10}, {0xf, 0x9}, {0x5, 0xffffffff7fffffff}, {0xd, 0x4}, {0x9, 0x3}, {0xcd}, {0x5, 0x3}, {0x90e, 0x4}, {0x1000, 0x7}, {0x2, 0xffffffffffff8001}, {0x4, 0x9}, {0x0, 0x7}, {0x60000000, 0x4486}, {0x6, 0xfffffffffffffffa}, {0x3, 0x3ff}, {0x0, 0x8}, {0x72, 0x9}, {0x2, 0x3}, {0x8}, {0x400, 0x200}, {0x401, 0x3}, {0xfffffffffffffc01, 0x7fffffff}, {0x80000000}, {0x7, 0xed}, {0x7, 0xfffffffffffffbff}, {0x80, 0x2e}, {0x0, 0xb3}, {0xc0000000, 0x3}, {0x3, 0x2}, {0x3, 0x7}, {0x2, 0x4}, {0xce8c, 0xfffffffffffffff8}, {0x80000000, 0x4}, {0x7c2, 0x3}, {0x4, 0x3}, {0x101, 0x2}, {0x3, 0x9}, {0xfffffffffffff90f, 0x7}, {0xf, 0x1}, {0xaa}, {0x7fffffffffffffff, 0x4}, {0x7, 0x7}, {0x9, 0x7fffffffffffffff}, {0x2, 0x40}, {0x8, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0xc1a4}, {0x31d97a0d, 0x677}, {0x8001, 0x268}, {0x5, 0x5588}, {0x7, 0x7fffffff}, {0x1, 0x3}, {0x6, 0xfffffffffffffff8}, {0x1, 0xbb4}, {0x10001, 0x8}, {0x10, 0x7}, {0xa9, 0x80000001}, {0x7fffffffffffffff, 0x8000000000000001}, {0xed1, 0xffff}, {0x3, 0x7}, {0x2, 0x3}, {0x2, 0x3ff}, {0x586, 0xfc9}, {0xc, 0x5}, {0x4, 0x4}, {0xfffffffffffffff7, 0x5}, {0x5, 0x8}, {0x66c0, 0x2}, {0x83, 0xb0}, {0x2}, {0x8, 0x1}, {0x3ff, 0x9}, {0x2, 0x3}, {0x81, 0xd}, {0x9, 0x7}, {0xfffffffffffffeff, 0x8}, {0x6, 0x3}, {0x10000}, {0x4d, 0x2}, {0x2, 0x66}, {0xa, 0x3}, {0x6, 0xfa5a}, {0x1, 0x3}, {0x2, 0x3}, {0xd39, 0xba}, {0x6476, 0x800}, {0xff}, {0x4, 0x5}, {0x1, 0x7}, {0xffffffffffffffff, 0xf}, {0x43f, 0x480000000000}, {0x6, 0x3}, {0xf0d, 0x8001}, {0xfffffffffffffff9}, {0x4, 0x1}, {0xfffffffffffffff8, 0x8f}, {0x8, 0x7}, {0x1ff, 0x2}, {0x4, 0x582c}, {0xc27, 0x100000001}, {0x2, 0x200}, {0x2, 0x5}, {0xa, 0xfffffffffffffffb}, {0xb7, 0x2}, {0x2}, {0x3e7, 0x7}, {0x9, 0x9}, {0x7d3, 0x40}, {0x81, 0x4}, {0xd, 0x8}, {0x7f, 0xa6a}, {0x4, 0x1}, {0x1, 0xe}, {0x7ff, 0x271d}, {0x7, 0x1}, {0x8e, 0x9b}, {0x3, 0x1}, {0x81, 0x7}, {0x2, 0x580000000000000}, {0x9, 0x7}, {0x5, 0x1000000}, {0x9, 0x3}, {0x10001, 0x8}, {0x7, 0x7f}, {0x82, 0x5}, {0x9, 0x5e2e32de}, {0xffffffffffff641c, 0x3}, {0xa, 0x2}, {0x4, 0x5}, {0x401, 0x7}, {0x3, 0x6e8f}, {0x2, 0x9}, {0x99c, 0x54}, {0x2, 0x9}]}, &(0x7f0000005080)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005100)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000005140)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x4}, &(0x7f0000005280)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f00000052c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000005300)=@features={{0x4f32494e, 0x6, 0x10, 0x80000001}}, &(0x7f0000005340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000005380)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f00000053c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000005400)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000005440)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x9}, &(0x7f0000005580)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f00000055c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005640)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000005680)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000005700)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x9}, &(0x7f0000005840)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x4, 0xa3}, {0x10, 0xfffffffeffffffff}, {0xfffffffffffff801, 0xc38}, {0x3, 0x5}, {0xd, 0xfffffffffffffff1}, {0x600000000000, 0x1}, {0x6, 0x1c}, {0x3, 0x1}, {0x5, 0x6}, {0xfffffffffffffff7, 0xc}, {0xe, 0x5}, {0x19d, 0x8000}, {0xb96, 0x2}, {0xa0b6, 0xfffffffffffffffd}, {0x3, 0xc}, {0x1f40b78b, 0x1}, {0xfffffffffffffff7, 0x5}, {0xfd4, 0x1}, {0x5, 0xcc9}, {0x8, 0x47c}, {0xffffffffffffff00}, {0x0, 0xee}, {0x9, 0xc7b}, {0x80000001, 0x1}, {0x0, 0x2}, {0x0, 0xe7}, {0x4f4, 0x100000001}, {0xe, 0x5}, {0x78, 0x9}, {0x2, 0xffffffff}, {0x2238c710, 0x8}, {0x7, 0x88}, {0x7}, {0x8d, 0x1}, {0xdc, 0x3b4}, {0x4, 0x7}, {0x2b2b, 0x101}, {0x9, 0x2}, {0x5, 0x8}, {0x1ff, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x7fffffff, 0x100}, {0x2, 0x6}, {0x400, 0xfffffffffffffffb}, {0x1351, 0x8}, {0x9, 0xd}, {0x8598, 0xffff}, {0xf, 0x2}, {0x9, 0x5}, {0x62, 0x1}, {0x9, 0x2}, {0x7, 0x9}, {0x4d9}, {0xf, 0x2}, {0x8000, 0x80000000000}, {0xfffffffffffffff5, 0x2}, {0x4, 0x1}, {0x4, 0x3300}, {0x5669, 0x8000000000000001}, {0x413913e1, 0xfffffffffffff8dd}, {0x5, 0x4}, {0x7, 0x8}, {0x100000001, 0x40}, {0x8000, 0x346}, {0x10000, 0x6}, {0xfffffffffffffffc, 0x4}, {0xfffffffffffffd88, 0x1}, {0xc9, 0xd411}, {0x5, 0x7}, {0x100000000, 0x2}, {0x80000001}, {0x6}, {0xd, 0x9}, {0x71, 0xfffffffffffffffc}, {0x8000000000000001, 0xdb}, {0x0, 0x86}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x7, 0x5}, {0x0, 0xc}, {0x5, 0xc0}, {0xfffffffffffffffd, 0x9}, {0x3, 0x8fe}, {0x10, 0x8000}, {0x0, 0x4}, {0x3}, {0x2, 0x100000000}, {0x4, 0x9}, {0x8, 0x8000}, {0x2, 0x2}, {0x0, 0x4479}, {0x80}, {0x800}, {0x4, 0x8}, {0x7b5, 0x7}, {0x58ac9dca, 0x1}, {0x75, 0x230}, {0x2, 0x800}, {0x9, 0x5}, {0x7fffffffffffffff, 0x6}, {0x8000, 0x67}, {0x5, 0x9}, {0xa, 0x1}, {0x776, 0x100000000}, {0x1000, 0xb}, {0xe2}, {0x7fffffff, 0x572f}, {0x242, 0xb}, {0xffffffffffff8000, 0x9}, {0x4, 0xffffffff}, {0x4, 0x1}, {0x19a, 0x1}, {0xfffffffffffffffb, 0x8}, {0x0, 0x56ac}, {0x38c0, 0x2}, {0x5e, 0x80}, {0x7, 0x5}, {0x8, 0x81}, {0xb, 0x483}, {0x3}, {0x7, 0x40}, {0x77, 0xffffffffffffffff}, {0x1a, 0x7ff}, {0x4, 0x12}, {0x9, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0xfffffffffffffffd, 0x1}, {0x9, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x8, 0x9}, {0x400, 0x5}, {0x4, 0x3}, {0x1, 0x1e}, {0x0, 0x7e5f062f}, {0x101, 0x5}, {0x1a, 0x3}, {0x9, 0x7fffffffffffffff}, {0x8, 0x80000001}, {0x8000, 0x8}, {0xfffffffffffffffc}, {0xd82f, 0x2}, {0x7fffffffffffffff, 0x7}, {0x401, 0x9}, {0x9, 0x3}, {0x0, 0x7}, {0x17ba, 0x3}, {0x7ea, 0x8001}, {0x1, 0x2}, {0x1, 0xf}, {0xca8, 0x4}, {0x7fffffff, 0x101}, {0x101, 0x1}, {0x1, 0x7}, {0x100000001, 0x7}, {0x8000000000000000, 0xffffffff}, {0xaa, 0x477}, {0x6, 0x6}, {0xffff, 0xd503}, {0x94, 0x3ff}, {0x3, 0x1}, {0x10, 0x7}, {0x8, 0x4}, {0xf, 0xfcd3}, {0x85fa, 0xb85f}, {0xffffffffffffff81, 0x7}, {0x5, 0x3}, {0x0, 0x9f15}, {0x100000001, 0x43}, {0x9, 0x3}, {0x5104940b, 0x5}, {0x10, 0xfffffffffffffffd}, {0x8, 0x2}, {0x4, 0x1}, {0x8cb2, 0x1}, {0xe, 0x4}, {0xf, 0xfffffffffffff3a8}, {0xffffffff9643d4f2, 0x8}, {0x5, 0x7}, {0x9, 0x6b}, {0x8001, 0x3}, {0xf191, 0x7}, {0xab, 0x5}, {0x7fff, 0x4}, {0x2, 0xcc5d}, {0xfff, 0x5}, {0xfffffffffffffffb, 0x8000}, {0x5, 0x4}, {0x4, 0x8}, {0x9, 0x2}, {0xe9, 0x8}, {0x5, 0x5}, {0xfffffffffffffff9, 0x7}, {0x3, 0x5}, {0x3, 0x5}, {0x1, 0xf804}, {0x1, 0x2}, {0x3}, {0x3d80, 0x101}, {0x3, 0xfffffffffffffffe}, {0x3, 0x4}, {0x1, 0xf0}, {0x9, 0x1f}, {0xc875, 0x9}, {0xbde4, 0x8000}, {0x4, 0x7}, {0x3, 0x1}, {0xd, 0x5}, {0xe9d, 0x6}, {0x9, 0x9}, {0x23eb, 0x2}, {0x8b, 0x5}, {0xa390, 0x5}, {0x7, 0xfffffffffffff001}, {0x4}, {0xd, 0x5}, {0x1000, 0x91}, {0x8, 0xc}, {0x9}, {0xffffffff, 0x1000}, {0x282e, 0x3}, {0xe7ae, 0x6}, {0x6, 0x7fffffff}, {0x4, 0x6}, {0x9e5f}, {0xe, 0xa0}, {0x10, 0x5}, {0xfffffffffffffff8, 0x6}, {0x101, 0x40}, {0x8, 0x6}, {0xc, 0x40}, {0x3, 0x6}, {0xb5, 0xc9}, {0x6, 0x10001}, {0x7fff, 0x1}, {0x200, 0x7}, {0x3, 0x5}, {0x10, 0x1}, {0xfffffffffffffff9, 0x4}, {0x5, 0x10000}, {0x7f, 0x10001}, {0xf, 0x401}, {0x9, 0x401}, {0xffffffffffffff1c, 0x3}, {0x8, 0x5}, {0x6, 0x5}, {0x7, 0x39}, {0x3, 0x3}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x9}, {0x7, 0x3000}]}, &(0x7f0000006880)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000068c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f0000006900)=@journal={{0x4f32494e, 0x7, 0x10, 0x101dafdbd684834}}, &(0x7f0000006940)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000006980)=@label={{0x4f32494e, 0x4, 0x10, 0x80000002}}, &(0x7f0000006a00)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000006a40)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000006a80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x39}, &(0x7f0000006bc0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x81, 0x1}, {0x5, 0x8}, {0x2, 0x7fff}, {0x5, 0xfb}, {0xdd, 0x8}, {0x0, 0x7fffffff}, {0xffffffffffffffff, 0x80}, {0x5, 0x9}, {0x1, 0xffffffffffffb2e2}, {0x9, 0x8}, {0xba36, 0x9}, {0x7, 0x2}, {0x3, 0x2}, {0x100000000, 0x8000}, {0x4, 0x7}, {}, {0x1, 0x9}, {0x3}, {0x1, 0x5a2}, {0x8000}, {0xffffffff, 0xffffffffffffffff}, {0x1, 0x2}, {0x7d6af0af, 0xc76}, {0x18000000000, 0x8}, {0x401, 0x1}, {0x7fff, 0x400}, {0x80000001, 0x9}, {0xfffffffffffffffe, 0x277}, {0x7, 0x6}, {0x9, 0xfffffffffffffffd}, {0x5, 0x9}, {0x1, 0x6}, {0x7, 0x5}, {0x8, 0x6387893f}, {0x8000000000000000, 0x8001}, {0x5, 0x3800000000000}, {0xa8f}, {0xffffffff, 0x72}, {0x7, 0x5}, {0x95d, 0x101}, {0x2, 0xca6c}, {0x9, 0x7}, {0x6, 0xfffffffffffffff7}, {0x5, 0x3}, {0x100000000, 0x4}, {0x80, 0x7fffffffffffffff}, {0x200, 0x9}, {0x7, 0x7ff}, {0x6, 0x7fffffff}, {0x9, 0x100000000}, {0x4, 0x1ff}, {0x1, 0x6}, {0x7}, {0x1ff, 0x3}, {0x6, 0x10}, {0x4, 0x100000000}, {0x4, 0x1}, {0x401, 0x101}, {0x5, 0x9}, {0x8, 0x7}, {0x10001, 0x2}, {0x8, 0x9}, {0x1, 0xc706}, {0x660, 0x4}, {0x400000000, 0xbf}, {0x3, 0x7ff}, {0xa, 0x1}, {0x7fff, 0x40}, {0xf000000, 0x1}, {0xb4f, 0x5}, {0x8, 0xb}, {0x7, 0xfffffffffffffffa}, {0x4, 0xf}, {0x200, 0x4}, {0x2a, 0x13}, {0x5}, {0x271, 0x101}, {0x2, 0x6}, {0xf, 0x7}, {0x6, 0x3}, {0xa0d8, 0x7}, {0x3, 0x3}, {0x7, 0x7}, {0x9, 0x36}, {0x401, 0x9}, {0x3, 0x5}, {0xb6d4, 0x7fffffffffffffff}, {0xb, 0x8}, {0x9, 0x8001}, {0x4, 0x9}, {0x9, 0x9}, {0x0, 0x8c7}, {0x45, 0xb}, {0x100000000, 0x1}, {0xcb29, 0x3}, {0x280000, 0x2}, {0xc3, 0xb}, {0x8000000000000001, 0xe0b7}, {0x3, 0x5}, {0x6a74a525}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x6}, {0x9, 0x2}, {0x10, 0x401}, {0x2, 0x1000200000000000}, {0x9, 0x6}, {0x9, 0xfffffffffffffff2}, {0x0, 0x79}, {0x6, 0x9}, {0x411a, 0x8}, {0x401, 0x100000000}, {0x8000000000000001, 0x8}, {0x81, 0xf}, {0x7, 0x8}, {0x1, 0x9}, {0xffffffffffffff00, 0x8000}, {0x6, 0x4}, {0x800, 0x5}, {0x7fffffffffffffff, 0x5}, {0x7, 0x9}, {0x25, 0xad4}, {0x9, 0xd}, {0x100020000, 0x7ff}, {0x7ff, 0x52}, {0x7, 0x7}, {0x8, 0xff}, {0x0, 0xe51}, {0x8, 0x9}, {0x7}, {0x4, 0xe62}, {0x3, 0x4}, {0xdf, 0xf}, {0x0, 0x4}, {0x0, 0xae}, {0x7, 0xffffffffffff385e}, {0x1, 0x1}, {0x2bd, 0x4}, {0x8, 0x41}, {0x7, 0x81}, {0x80000000, 0x5}, {0xb, 0x7}, {0x0, 0x3}, {0x6, 0x8}, {0x5, 0x7fffffffffffffff}, {0x87e, 0x7fffffff}, {0x7fffffff, 0x645b}, {0x8000000000000001, 0x85a4}, {0x8, 0x725c}, {0xffffffff00000000}, {0xf1, 0x5}, {0x1, 0xffff}, {0x8, 0xb}, {0x1, 0x7}, {0x0, 0x7fffffffffffffff}, {0x3, 0xfffffffffffffff8}, {0x8, 0x6}, {0x9, 0x5}, {0x8, 0x4}, {0xffffffffffffffff, 0xffff}, {0xffffffff, 0x38000000000}, {0x63c2b164, 0x3}, {0x8, 0x5}, {0x5, 0x100}, {0x9, 0x7}, {0x4, 0x3}, {0x0, 0x100000000}, {0x9, 0xd35}, {0x1}, {0x8, 0x7f}, {0x400, 0x4add}, {0x1, 0x3}, {0x10000, 0xfffffffffffff08c}, {0x9, 0x1ff}, {0x5, 0x7}, {0x3, 0xc}, {0xb, 0x4}, {0x8, 0x5}, {0x63, 0xff}, {0xa3b2, 0x2}, {0x12748000000000, 0x6}, {0x8, 0x1000}, {0x3, 0xdf59}, {0x7, 0xd0}, {0x5, 0x5}, {0xb59}, {0x8, 0x3ff}, {0x1ff, 0x400}, {}, {0x5, 0x3}, {0x0, 0xf9c}, {}, {0x6, 0x2}, {0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0xc5f7, 0x641}, {0x0, 0x8000}, {0x5, 0x1}, {0x80, 0x66c}, {0x5}, {0x1, 0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x5, 0x7}, {0x1ff, 0x426c0f16}, {0x4, 0x2}, {0x5, 0x8}, {0x1, 0x995f}, {0x1, 0x10}, {0xeef1, 0xffffffffffffffff}, {0x4, 0xfffffffffffffffd}, {0x5, 0xfffffffffffffff7}, {0x7, 0x2}, {0xfffffffffffffff7, 0x2}, {0x0, 0x6}, {0xcda, 0x8}, {0x9, 0x400}, {0x6, 0x5}, {0x1ff, 0x4}, {0xff, 0x5}, {0x80000001}, {0x4, 0xce05}, {0x4, 0xfffffffffffffffa}, {0x6, 0x3}, {0x8000000000000000, 0x4}, {0x4, 0x7}, {0x1, 0xd168}, {0x1, 0x5}, {0xc80, 0x9}, {0x3, 0x9}, {0x1000, 0x9}, {0x67bd, 0x48}, {0x1, 0x93}, {0x1, 0x2}, {0x86, 0x8}, {0x80, 0x7f}, {0x7, 0x10001}, {0x8, 0xe22}, {0x7, 0x8}, {0x80000000000000, 0x180000}, {0x8, 0xf}, {0x4, 0x1000}, {0x1, 0xff}, {0xffffffffffffffff, 0x80000001}, {0x5, 0x1}, {0x969, 0x7062}, {0x6, 0x8000000000000001}, {0x3, 0x9}, {0x6, 0x2}, {0x80000001, 0x10000}, {0x3, 0xfa}]}, &(0x7f0000007c00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000007c40)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000003}}, &(0x7f0000007c80)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000007cc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000001}}, &(0x7f0000007d00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000007d40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000007d80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x6}, &(0x7f0000007ec0)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32}) landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) 1.980053714s ago: executing program 0 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r6) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) r8 = semget$private(0x0, 0x4, 0x6bb) semop(r8, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) semtimedop(r8, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) semtimedop(r8, &(0x7f0000000480)=[{0x2, 0x5, 0x800}, {0x4, 0x9, 0x800}, {0x0, 0xf, 0x1000}, {0x1, 0x9, 0x2800}, {0x0, 0xffff, 0x1000}, {0x6, 0x5}, {0x2, 0x86e, 0x800}, {0x0, 0xfff9}], 0x8, &(0x7f00000004c0)={0x77359400}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) 1.882293859s ago: executing program 2 (id=616): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='}+*\x93\x00', 0x40000, &(0x7f0000000040)={@align=0x3, {0x7, 0x9, 0x4, 0x4}}, 0x2c24, &(0x7f0000000080), &(0x7f00000000c0)=0x2}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x22) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000280)={0x0, &(0x7f0000000180)="6801bfcd4b46bc7ebdeb82a80e292ba2dd913a69cc8ef440c30d7c7dea26a286aca5f694a80ae0ef66e7c44a0975a76b87102c7696bd000993c59c54ddd76e3ceae538bd21ff9cd3c184d6f05820797266a5901159653de2ec2ba99358a8a471903bcefde8e7f48eaa05d62b31b4fda40bfca0c485d3a18455eb3dadca8fdd039d77437c3374a25e45e85043d8e290e13e9a28a7c082ad2dc5f954f195773032222b7481956d816b537324556801849498f556704e97b700a5d9ce729a78c92a1b1b11276b055224ade83e54a3fe08087afd2c3f3a7d4e64", 0xd8}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f00000002c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000440)={&(0x7f0000000400)=[{&(0x7f0000000300)="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", 0xfc}], 0x1, 0x4, 0x0, 0x5, 0x0, 0xa0, 0x8, 0xf}) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x3, 0x20102) close_range(r1, r0, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000500)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0xa, 0xb, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xc7}, @call={0x85, 0x0, 0x0, 0x55}, @generic={0x2, 0x6, 0xd, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000580)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f00000005c0)={0x8}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x9, 0xffffffff, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, r0], &(0x7f0000000680)=[{0x2, 0x5, 0x10, 0x4}, {0x1, 0x2, 0xa, 0xb}, {0x1, 0x1, 0x4, 0x8}, {0x2, 0x3, 0x3, 0x3}], 0x10, 0x7fff}, 0x94) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) ppoll(&(0x7f0000000780)=[{r2, 0x8a}], 0x1, &(0x7f0000000800)={r3, r4+10000000}, &(0x7f0000000840)={[0x9da]}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000880)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000008c0), &(0x7f0000000900)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000940)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e22, @multicast2}], 0x50) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000009c0)) syz_open_dev$sndpcmp(&(0x7f0000000a00), 0x1, 0x101000) ioctl$XFS_IOC_GETBMAPA(r5, 0xc020582c, &(0x7f0000000a40)={0x6, 0x5, 0x7, 0xa, 0xffffa691}) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f0000000a80)={0xc1, 0x0, 0x2}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000b40)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000b00)=0x8}) r7 = syz_usb_connect$midi(0x5, 0x92, &(0x7f0000000b80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x1, 0x1, 0x16, 0x4cfab5d98961ed54, 0x7a, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x26, 0xe5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xe, 0x81}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x10, 0x7}], [{{0x9, 0x5, 0xa, 0x4, 0xd0140cc9c11dc671, 0x7, 0x4, 0x3, {0x12, 0x25, 0x1, 0xe, "f054af72d73d58b95ae9afd423c3"}}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x8, 0x5, 0x6, {0xc, 0x25, 0x1, 0x8, "71f71a79fd2b7731"}}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0xe5, 0x19, 0xcf, {0x6, 0x25, 0x1, 0x2, "cf47"}}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x42, 0x2, 0x9, {0xc, 0x25, 0x1, 0x8, "7dff38232285e194"}}}]}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x110, 0x5c, 0x3, 0x10, 0x40, 0xb}, 0x10, &(0x7f0000000c80)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x2, 0x7, 0x9, 0x5}]}, 0x2, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x820}}, {0x3a, &(0x7f0000000d00)=@string={0x3a, 0x3, "aa9ecf0d69579b38dac979f930be6de2cbfe90585ee91e096a06ccf379e071502de6bfa7f101687cb94e64a08acb6765f5be82485201099d"}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000f00)={0x14, &(0x7f0000000d80)={0x20, 0xf, 0x11, {0x11, 0xb, "4edf9263c8d732ecec1f90b4899535"}}, &(0x7f0000000dc0)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f40)={0x40, 0xe, 0x62, "d5766905c45279151d34b29847e336d05566ee35fda68e0f063523d3938df889de97a398b97b5f86e74bfd192928636c2ffb631c27bcb23936afb8095a4ad1a2588489661a83bbe43ffbcdb9d9c8ec4650169dd837afaf150782127da1fc4b92f3bb"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000001040)={0x20, 0x81, 0x3, "c56f56"}, &(0x7f0000001080)={0x20, 0x82, 0x1, ';'}, &(0x7f00000010c0)={0x20, 0x83, 0x2, "ef9f"}, &(0x7f0000001100)={0x20, 0x84, 0x3, "aeb1c7"}, &(0x7f0000001140)={0x20, 0x85, 0x3, "2fc4b7"}}) timer_create(0x2, &(0x7f0000001340)={0x0, 0x1c, 0x2, @thr={&(0x7f0000001200), &(0x7f0000001240)="6921b86c4da20de014dcc47af315e81fb6ee479acbfc6e8ef10dcf0bf3224257a69fd2958b9db4bcd8d18f584ed2e2920dc757c6b75785d44cac6ca7f1d0be0291cc05e4077828873f061d80553ea352408052cb47c697ec83fa6b1685b16ce6ab84c19cbdcce4f380efe0100fd236cae6e0d8609d0a8e5832b0961e484668e870cc5b8df3b6b2fcb9207a10699ca428ebfe5b388d2495c7759f3da39f059be62a541f3f23038a4433ebd506501c587ad7f7f3e1dc025440e98720338d057996bd7d3c5da272e11308d3bb487b573efac58efa14a72ec3e0c2ac36458553"}}, &(0x7f0000001380)=0x0) timer_delete(r8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000013c0)={0x0, 0x7, 0xd, 0x2, 0x80, 0x8}, &(0x7f0000001400)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001440)={r9, 0xd5, "9be59cddab4c85920df5822bdaf8ccb048d6e320ccd50c6c9a86ac6d58303bd3f764c7446b8d61283ab645688b2892e18f0e19096b440dee619da52809c0f889050ef572cc8873ad20e78da75add13d6b694950a042a3c3bd3872d5b83062f02815e3abd9667f1ea7d6560ba5057af49b4103101d6d3d1a293e8e8418abc7256374c7f1dfbaa852e580031d343f10a2924afe67361d68a8474bbcfa0706e6c31a62fa2f92aad37c1be999dc5410a6b0084b288cb68e77e9e0d48479ca7ec31133f2dd384da5ef9d8721229b76a0574b55a4d44e46f"}, &(0x7f0000001540)=0xdd) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001580)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001780)={{r10, 0x9, 0x80000001, 0x8000, 0xa9, 0x7, 0x6, 0x3, 0x81, 0x4, 0x7, 0x8, 0x7, 0x8000000000000001, 0xb}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000002840)={'sit0\x00', &(0x7f0000002780)={@private=0xa010102, 0x1, 0x0, 0xa0, 0x0, [{@remote}, {@multicast2}, {@multicast1}, {@multicast1}, {@initdev}, {@multicast1}, {@local}, {@remote}, {@dev}, {@local}]}}) 1.100122981s ago: executing program 0 (id=624): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d1}, 0x24000854) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x0) 1.099363428s ago: executing program 0 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)='\x00'/20, 0x14) syz_emit_ethernet(0x95, &(0x7f0000000140)={@random="44e093543829", @random="dae5ada26fe7", @void, {@mpls_uc={0x8847, {[{}, {0x5}, {0xa}, {0x3}, {0x7, 0x0, 0x1}], @ipv4=@icmp={{0xd, 0x4, 0x0, 0x3, 0x73, 0x64, 0x0, 0x0, 0x1, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x64, 0x0, 0x3, [0xffff, 0x7]}, @lsrr={0x83, 0xf, 0x76, [@empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x4, 0xce, 0x0, 0x2}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xf7, 0x8, 0x0, {0xc, 0x4, 0x2, 0x20, 0xfff, 0x68, 0x5d6, 0x2, 0x2e, 0x400, @dev={0xac, 0x14, 0x14, 0x20}, @remote, {[@end, @timestamp={0x44, 0x14, 0x81, 0x0, 0x1, [0x1, 0x5, 0x5, 0x2]}, @ssrr={0x89, 0x7, 0x43, [@empty]}]}}, "5c51bdd9716f62"}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) (async) write(r0, &(0x7f0000000700)='\x00'/20, 0x14) (async) syz_emit_ethernet(0x95, &(0x7f0000000140)={@random="44e093543829", @random="dae5ada26fe7", @void, {@mpls_uc={0x8847, {[{}, {0x5}, {0xa}, {0x3}, {0x7, 0x0, 0x1}], @ipv4=@icmp={{0xd, 0x4, 0x0, 0x3, 0x73, 0x64, 0x0, 0x0, 0x1, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x64, 0x0, 0x3, [0xffff, 0x7]}, @lsrr={0x83, 0xf, 0x76, [@empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x4, 0xce, 0x0, 0x2}]}}, @parameter_prob={0xc, 0x0, 0x0, 0xf7, 0x8, 0x0, {0xc, 0x4, 0x2, 0x20, 0xfff, 0x68, 0x5d6, 0x2, 0x2e, 0x400, @dev={0xac, 0x14, 0x14, 0x20}, @remote, {[@end, @timestamp={0x44, 0x14, 0x81, 0x0, 0x1, [0x1, 0x5, 0x5, 0x2]}, @ssrr={0x89, 0x7, 0x43, [@empty]}]}}, "5c51bdd9716f62"}}}}}}, 0x0) (async) 986.788812ms ago: executing program 3 (id=626): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x400000b0, 0x0, 0x1}]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000000100)=""/218}, 0x20) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 986.298654ms ago: executing program 0 (id=627): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52101, 0x110) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x7, 0x5, 0x7, {{0x2a, 0x4, 0x1, 0x26, 0xa8, 0x66, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x9, "28c5cf88b46d5f"}, @end, @end, @end, @cipso={0x86, 0x47, 0x0, [{0x6, 0x4, "4783"}, {0x0, 0xd, "afafa012157a9010a37717"}, {0x2, 0xf, "bd00c8ebd40ca460895f8f4037"}, {0x7, 0x6, "85176885"}, {0x7, 0x4, "80c0"}, {0x7, 0x5, "cb98ee"}, {0x1, 0x12, "1006e8fbe8c86b0c794d5c97e4d58543"}]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x4}, {@broadcast, 0x3fe0}, {@rand_addr=0x64010101, 0x3ff}]}, @rr={0x7, 0x1b, 0x33, [@multicast2, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x46, [@private=0xa010100]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {0x3}, {0xfff2, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002880), 0x1) socket$inet(0x2, 0x3, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52101, 0x110) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x1, 0x7, 0x5, 0x7, {{0x2a, 0x4, 0x1, 0x26, 0xa8, 0x66, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0x9, "28c5cf88b46d5f"}, @end, @end, @end, @cipso={0x86, 0x47, 0x0, [{0x6, 0x4, "4783"}, {0x0, 0xd, "afafa012157a9010a37717"}, {0x2, 0xf, "bd00c8ebd40ca460895f8f4037"}, {0x7, 0x6, "85176885"}, {0x7, 0x4, "80c0"}, {0x7, 0x5, "cb98ee"}, {0x1, 0x12, "1006e8fbe8c86b0c794d5c97e4d58543"}]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x15}, 0x4}, {@broadcast, 0x3fe0}, {@rand_addr=0x64010101, 0x3ff}]}, @rr={0x7, 0x1b, 0x33, [@multicast2, @loopback, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0x46, [@private=0xa010100]}]}}}}}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {0x3}, {0xfff2, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000002880), 0x1) (async) 863.800682ms ago: executing program 0 (id=628): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) listen(r0, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB="64926e2c00"]) (async) read$FUSE(r4, &(0x7f0000003240)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ENCODED_READ(r4, 0x80809440, &(0x7f0000000140)={&(0x7f0000000100)=[{&(0x7f0000000040)="945532de56352384a94c101e6f20f617408c6e12236cb73cfc7c1c47052aa1f3c82cdd15ac1f51417a85e7f0c842194aae28c1e65b74375eb080bf826b4082c4d1edbf1917de7150cfbf67d459a4acd1d837e2a8d69b3853717827e204b6ff2fe0d720f09426cd", 0x67}], 0x1, 0xfffffffffffffff9, 0x0, 0x8, 0x101, 0x3, 0x4, 0x4}) 810.025953ms ago: executing program 0 (id=629): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r0, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) r3 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) (async) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xffffffff}]}, 0x24}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xffffffff}]}, 0x24}}, 0x0) (async) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r8, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r5, 0x1, 0x0) fchdir(r9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x2f, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbdd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6fe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x6, 0xa, 0x6, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe7e9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38a5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xf9, &(0x7f0000000300)=""/249, 0x40f00, 0x9, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0xa52e, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r9], &(0x7f0000000500)=[{0x5, 0x4, 0x5, 0xa}, {0x1, 0x1, 0xe, 0x2}, {0x4, 0x4, 0x2, 0xb}], 0x10, 0x200}, 0x94) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) 472.958926ms ago: executing program 1 (id=630): syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) io_cancel(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0x8402, r0, 0x0, 0x0, 0x6}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x1, @vbi={0x6, 0x1ff, 0x2, 0x32314742, [0x8, 0xaca0], [0x3, 0x9], 0x1}}) 323.787596ms ago: executing program 1 (id=631): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x1, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xf, 0x8, [@multicast2, @multicast2, @loopback]}, @timestamp={0x44, 0x4, 0xef, 0x0, 0x4}]}}, {{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 252.620991ms ago: executing program 1 (id=632): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x2, @meta={0x4331434d, 0xf60d80b, 0x4764, 0xf61d, 0x2a30d418}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x24040044) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000280)) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0xc, 0x0, 0x9}, 0x10) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000380)={0x20, 0x0, &(0x7f0000000340)=[{0x1, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x1}], 0xdeadbeef, 0x8, 0x6}) r5 = fcntl$getown(r4, 0x9) fcntl$lock(r0, 0x5, &(0x7f00000003c0)={0x2, 0x4, 0x7, 0x8000000000000000, r5}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x80c2, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f00000014c0)={0x28, 0x0, r8, 0x1000, &(0x7f00000004c0)=""/4096}) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000001500), &(0x7f0000001580)=0x80) (async) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000015c0)) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000001600)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000001680)={0xc, 0x0}) (rerun: 32) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000001700)={0x28, 0x0, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000016c0)}) (async, rerun: 32) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000001740)={0x8, r9}) (async, rerun: 32) ppoll(&(0x7f0000001780)=[{r0, 0x448}, {r4, 0x60}, {r6, 0x854e}, {r6, 0x80}, {r3, 0x80}], 0x5, &(0x7f00000017c0)={0x0, 0x3938700}, &(0x7f0000001800)={[0x1fcd]}, 0x8) (async, rerun: 64) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001840), 0x48000, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000001880)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r12, 0xc010640b, &(0x7f00000018c0)={r13}) (async) timer_create(0x1, &(0x7f0000001a40)={0x0, 0x18, 0x2, @thr={&(0x7f0000001900)="2bbf29ba81a6e2", &(0x7f0000001940)="c20dcff09e0636c38aa774485540ca846bfa26ee3b00598346e2d5348bfaaa5a0df7236e255830da3c748a18c65271349e793ca672ba3576e895e8ef328458902105b61403dc63c37944d447855892ffbb9ee0a7fea7133a293a25aa37dfadbd1aa26bbb03d489f28cf82f20ae1d8f2edc2c878b7f816201203f55c9bc742c36121007b98eb771ffa9765a7db72ae0f2e8071a1f9baeb9638828dbe6bb218c3354f7fc19aa720d003c5def47afde002e31c021c229d2ff6f14e87e21ed1e1a9d2255dc9de450eec27e3b472b79"}}, &(0x7f0000001a80)=0x0) (async) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) timer_settime(r14, 0x0, &(0x7f0000001b00)={{}, {r15, r16+60000000}}, 0x0) (async, rerun: 32) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000002b40)={0x30, r7, 0x3efced9ebbea1d93, 0x0, 0x0, 0x3, 0x75, &(0x7f0000001b40)=""/4096}) (async, rerun: 32) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000002bc0)={0x7, 0x4, 0x8}) 203.579672ms ago: executing program 1 (id=633): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x101000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000f9ff00"], 0x24}}, 0x80) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f00000000c0)) (async) ioctl$XFS_IOC_DIOINFO(r2, 0x800c581e, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) 63.866785ms ago: executing program 1 (id=634): socket$inet_udp(0x2, 0x2, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x4, 0x9}, 0x65) 63.082135ms ago: executing program 1 (id=635): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x4}, 0x18) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f000076e000/0x11000)=nil, 0x11000, 0x15) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil}) 0s ago: executing program 3 (id=636): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="379379bf1ba0", 0x6) write(r0, &(0x7f0000000f00)='file0', 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39052' (ED25519) to the list of known hosts. [ 47.736608][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 47.736630][ T42] audit: type=1400 audit(1786324027.125:141): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.749979][ T42] audit: type=1400 audit(1786324027.135:142): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.751994][ T5712] cgroup: Unknown subsys name 'net' [ 47.765719][ T42] audit: type=1400 audit(1786324027.155:143): avc: denied { unmount } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.899062][ T5712] cgroup: Unknown subsys name 'cpuset' [ 47.905909][ T5712] cgroup: Unknown subsys name 'rlimit' [ 48.072077][ T42] audit: type=1400 audit(1786324027.455:144): avc: denied { setattr } for pid=5712 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.081739][ T42] audit: type=1400 audit(1786324027.465:145): avc: denied { create } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.090480][ T42] audit: type=1400 audit(1786324027.465:146): avc: denied { write } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.098663][ T42] audit: type=1400 audit(1786324027.465:147): avc: denied { read } for pid=5712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.105437][ T42] audit: type=1400 audit(1786324027.475:148): avc: denied { mounton } for pid=5712 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.112770][ T42] audit: type=1400 audit(1786324027.475:149): avc: denied { mount } for pid=5712 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.120299][ T42] audit: type=1400 audit(1786324027.495:150): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.127984][ T5714] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.982153][ T5712] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.438497][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.438509][ T42] audit: type=1400 audit(1786324032.825:158): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.673862][ T42] audit: type=1400 audit(1786324033.055:159): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.682407][ T42] audit: type=1400 audit(1786324033.055:160): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.689925][ T42] audit: type=1400 audit(1786324033.055:161): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.697741][ T42] audit: type=1400 audit(1786324033.065:162): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[7280]" dev="sockfs" ino=7280 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.716939][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.723808][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.726758][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.728716][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.730239][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.730566][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.731141][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.735283][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.735876][ T5739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.736478][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.737198][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.739281][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.742565][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.745907][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.746517][ T5739] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.747455][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.748076][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.748455][ T42] audit: type=1400 audit(1786324033.135:163): avc: denied { read } for pid=5724 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.748483][ T42] audit: type=1400 audit(1786324033.135:164): avc: denied { open } for pid=5724 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.748640][ T42] audit: type=1400 audit(1786324033.135:165): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.758692][ T42] audit: type=1400 audit(1786324033.145:166): avc: denied { module_request } for pid=5724 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.761414][ T5739] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.763087][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.778579][ T42] audit: type=1400 audit(1786324033.155:167): avc: denied { sys_module } for pid=5728 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.785612][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.337344][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.341355][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.344372][ T5728] bridge_slave_0: entered allmulticast mode [ 54.348508][ T5728] bridge_slave_0: entered promiscuous mode [ 54.375270][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.378110][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.380678][ T5728] bridge_slave_1: entered allmulticast mode [ 54.383925][ T5728] bridge_slave_1: entered promiscuous mode [ 54.386926][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.389373][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.391691][ T5724] bridge_slave_0: entered allmulticast mode [ 54.394704][ T5724] bridge_slave_0: entered promiscuous mode [ 54.422544][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.428986][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.432129][ T5724] bridge_slave_1: entered allmulticast mode [ 54.436200][ T5724] bridge_slave_1: entered promiscuous mode [ 54.507129][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.513819][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.530524][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.536876][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.558244][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.560760][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.563182][ T5726] bridge_slave_0: entered allmulticast mode [ 54.565890][ T5726] bridge_slave_0: entered promiscuous mode [ 54.584149][ T5724] team0: Port device team_slave_0 added [ 54.593475][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.595974][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.598612][ T5726] bridge_slave_1: entered allmulticast mode [ 54.601576][ T5726] bridge_slave_1: entered promiscuous mode [ 54.630254][ T5724] team0: Port device team_slave_1 added [ 54.638339][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.641066][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.643440][ T5729] bridge_slave_0: entered allmulticast mode [ 54.646822][ T5729] bridge_slave_0: entered promiscuous mode [ 54.650193][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.653177][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.655650][ T5729] bridge_slave_1: entered allmulticast mode [ 54.658402][ T5729] bridge_slave_1: entered promiscuous mode [ 54.662317][ T5728] team0: Port device team_slave_0 added [ 54.666282][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.672968][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.695048][ T5728] team0: Port device team_slave_1 added [ 54.705050][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.707217][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.715362][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.755962][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.758825][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.769687][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.775904][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.778922][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.789624][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.796365][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.801870][ T5726] team0: Port device team_slave_0 added [ 54.804886][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.807215][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.816521][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.834606][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.839736][ T5726] team0: Port device team_slave_1 added [ 54.874137][ T5729] team0: Port device team_slave_0 added [ 54.902054][ T5729] team0: Port device team_slave_1 added [ 54.913430][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.916444][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.927082][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.956335][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.959285][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.969795][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.982145][ T5724] hsr_slave_0: entered promiscuous mode [ 54.987040][ T5724] hsr_slave_1: entered promiscuous mode [ 54.995996][ T5728] hsr_slave_0: entered promiscuous mode [ 55.000140][ T5728] hsr_slave_1: entered promiscuous mode [ 55.003107][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 55.005771][ T5728] Cannot create hsr debugfs directory [ 55.008609][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.010872][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.019204][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.027305][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.029526][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.037798][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.102483][ T5726] hsr_slave_0: entered promiscuous mode [ 55.104867][ T5726] hsr_slave_1: entered promiscuous mode [ 55.107218][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 55.109315][ T5726] Cannot create hsr debugfs directory [ 55.114161][ T5729] hsr_slave_0: entered promiscuous mode [ 55.116496][ T5729] hsr_slave_1: entered promiscuous mode [ 55.118629][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 55.120431][ T5729] Cannot create hsr debugfs directory [ 55.431180][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.439635][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.442787][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.447738][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.451640][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.457613][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.461277][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.467107][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.534208][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.542258][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.547743][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.553314][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.557176][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.563324][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.568254][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.574087][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.627167][ T5726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.632257][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.635620][ T5726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.639845][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.645052][ T5726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.649045][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.653029][ T5726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.659064][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.728485][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.743676][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.749049][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.751894][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.755810][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.763236][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.768581][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.771627][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.776339][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.785700][ T5737] Bluetooth: hci2: command tx timeout [ 55.785705][ T64] Bluetooth: hci0: command tx timeout [ 55.785988][ T5739] Bluetooth: hci1: command tx timeout [ 55.796562][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.820391][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.822991][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.827408][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.829706][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.843348][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.864959][ T5739] Bluetooth: hci3: command tx timeout [ 55.879002][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.909441][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.914136][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.916693][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.928722][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.931173][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.952647][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.982588][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.985115][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.995329][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.997748][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.009515][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.052425][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.066814][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.069311][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.091370][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.094269][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.242080][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.305365][ T5724] veth0_vlan: entered promiscuous mode [ 56.311611][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.326539][ T5724] veth1_vlan: entered promiscuous mode [ 56.357229][ T5724] veth0_macvtap: entered promiscuous mode [ 56.369415][ T5724] veth1_macvtap: entered promiscuous mode [ 56.381185][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.384297][ T5728] veth0_vlan: entered promiscuous mode [ 56.402338][ T5728] veth1_vlan: entered promiscuous mode [ 56.418889][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.426236][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.442417][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.464257][ T5728] veth0_macvtap: entered promiscuous mode [ 56.468467][ T5726] veth0_vlan: entered promiscuous mode [ 56.475331][ T5726] veth1_vlan: entered promiscuous mode [ 56.480445][ T5728] veth1_macvtap: entered promiscuous mode [ 56.537665][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.559323][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.562451][ T5729] veth0_vlan: entered promiscuous mode [ 56.581955][ T5726] veth0_macvtap: entered promiscuous mode [ 56.592586][ T5729] veth1_vlan: entered promiscuous mode [ 56.597020][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.599343][ T5726] veth1_macvtap: entered promiscuous mode [ 56.600234][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.604783][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.634635][ T5537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.645940][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.649818][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.665169][ T5537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.676156][ T5537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.682589][ T5729] veth0_macvtap: entered promiscuous mode [ 56.690668][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.697974][ T5729] veth1_macvtap: entered promiscuous mode [ 56.711650][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.729896][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.732893][ T5724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.738119][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.740282][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.754788][ T5537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.763735][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.795553][ T5537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.821085][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.829578][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.859667][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.862978][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.893054][ T5881] geneve2: entered promiscuous mode [ 56.895719][ T5881] geneve2: entered allmulticast mode [ 56.941836][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.944499][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.944712][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.971155][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.975170][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.027133][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.030313][ T5883] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 57.031691][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.041068][ T5883] xt_TCPMSS: Only works on TCP SYN packets [ 57.046330][ T5537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.051607][ T5537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.091129][ T5888] Bluetooth: MGMT ver 1.23 [ 57.125415][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.129351][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.144592][ T5537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.148335][ T5537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.175295][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180146][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.180435][ T5897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5897 comm=syz.2.8 [ 57.189339][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.189356][ T5901] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.198643][ T5893] overlayfs: failed to verify upper root origin [ 57.199519][ T5901] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 57.205320][ T5901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.217067][ T5889] Zero length message leads to an empty skb [ 57.256876][ T5906] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 57.267580][ T5908] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.10'. [ 57.326901][ T5922] netlink: zone id is out of range [ 57.467148][ T5941] binder: 5940:5941 ioctl c0306201 200000000080 returned -14 [ 57.470844][ T5941] binder: 5940:5941 ioctl c0306201 200000000040 returned -22 [ 57.474099][ T5941] binder: 5940:5941 ioctl c0306201 200000000640 returned -22 [ 57.523928][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.680252][ T5960] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 57.688450][ T5960] batman_adv: batadv0: Adding interface: geneve2 [ 57.690548][ T5960] batman_adv: batadv0: The MTU of interface geneve2 is too small (1410) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.700436][ T5960] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 57.803700][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 57.864690][ T5737] Bluetooth: hci0: command tx timeout [ 57.865504][ T64] Bluetooth: hci1: command tx timeout [ 57.874745][ T64] Bluetooth: hci2: command tx timeout [ 57.928722][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 57.944866][ T64] Bluetooth: hci3: command tx timeout [ 58.198165][ T5970] process 'syz.0.26' launched './file0' with NULL argv: empty string added [ 58.327918][ T5993] ISOFS: Unable to identify CD-ROM format. [ 58.446805][ T42] kauditd_printk_skb: 110 callbacks suppressed [ 58.446825][ T42] audit: type=1400 audit(1786324037.835:278): avc: denied { map_read map_write } for pid=6004 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.456997][ T42] audit: type=1400 audit(1786324037.835:279): avc: denied { read } for pid=6004 comm="syz.2.34" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.466242][ T42] audit: type=1400 audit(1786324037.835:280): avc: denied { open } for pid=6004 comm="syz.2.34" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.475724][ T42] audit: type=1400 audit(1786324037.835:281): avc: denied { ioctl } for pid=6004 comm="syz.2.34" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.525163][ T42] audit: type=1400 audit(1786324037.915:282): avc: denied { setopt } for pid=6006 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.531699][ T42] audit: type=1400 audit(1786324037.915:283): avc: denied { append } for pid=6006 comm="syz.2.35" name="pmem0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.583219][ T6008] macsec0: entered promiscuous mode [ 58.585214][ T6008] macsec0: entered allmulticast mode [ 58.587865][ T6008] veth1_macvtap: entered allmulticast mode [ 58.697712][ T42] audit: type=1400 audit(1786324038.085:284): avc: denied { create } for pid=6009 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.706621][ T42] audit: type=1400 audit(1786324038.085:285): avc: denied { bind } for pid=6009 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.720784][ T42] audit: type=1400 audit(1786324038.085:286): avc: denied { setopt } for pid=6009 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.729284][ T42] audit: type=1400 audit(1786324038.085:287): avc: denied { accept } for pid=6009 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.803905][ T6022] sctp: [Deprecated]: syz.0.39 (pid 6022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.803905][ T6022] Use struct sctp_sack_info instead [ 58.809936][ T6022] netlink: 'syz.0.39': attribute type 21 has an invalid length. [ 58.812404][ T6022] netlink: 156 bytes leftover after parsing attributes in process `syz.0.39'. [ 58.912391][ T6029] SELinux: Context system_u:object_r:setrans_exec_t:s0 is not valid (left unmapped). [ 59.005607][ T6042] netlink: 'syz.3.46': attribute type 7 has an invalid length. [ 59.173726][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 59.177549][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.179973][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.183001][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.186008][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.234538][ T5841] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 59.399278][ T5841] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.405353][ T5841] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.408199][ T5841] usb 7-1: config 0 has no interface number 0 [ 59.410294][ T5841] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.413736][ T5841] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 59.417522][ T5841] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.421535][ T5841] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 59.425847][ T5841] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 59.429425][ T5841] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.433648][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.440692][ T5841] usb 7-1: config 0 descriptor?? [ 59.444081][ T6040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.448591][ T6040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.458789][ T5841] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 59.465606][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 59.466019][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.657790][ T6077] nfs: Unknown parameter 'add{JoBr' [ 59.744053][ T6079] loop2: detected capacity change from 0 to 7 [ 59.749370][ T6079] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 59.753170][ T6079] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 59.756046][ T6079] Dev loop2: unable to read RDB block 7 [ 59.758046][ T6079] loop2: unable to read partition table [ 59.759999][ T6079] loop2: partition table beyond EOD, truncated [ 59.762059][ T6079] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 59.928684][ T6088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6088 comm=syz.0.61 [ 59.944999][ T5739] Bluetooth: hci0: command tx timeout [ 59.945262][ T64] Bluetooth: hci2: command tx timeout [ 59.946956][ T5737] Bluetooth: hci1: command tx timeout [ 60.024540][ T64] Bluetooth: hci3: command tx timeout [ 60.578974][ T6108] pim6reg: entered allmulticast mode [ 60.650741][ T6113] loop2: detected capacity change from 0 to 7 [ 60.656567][ T6113] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 60.659887][ T6113] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 60.662014][ T6113] Dev loop2: unable to read RDB block 7 [ 60.664392][ T6113] loop2: unable to read partition table [ 60.667064][ T6113] loop2: partition table beyond EOD, truncated [ 60.671493][ T6113] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 60.804521][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.814380][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 60.956196][ T61] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 60.960431][ T61] usb 5-1: config 1 has an invalid descriptor of length 62, skipping remainder of the config [ 60.961564][ T6130] mmap: syz.3.72 (6130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.963676][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.052192][ T6139] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 61.072460][ T6139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.118434][ T6139] bond1: (slave veth3): Enslaving as an active interface with a down link [ 61.133300][ T6139] bond1: (slave dummy0): making interface the new active one [ 61.137978][ T6139] dummy0: entered promiscuous mode [ 61.142040][ T6139] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 61.147580][ T6139] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 61.150722][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.74'. [ 61.158395][ T6139] bond1: (slave dummy0): Releasing active interface [ 61.180752][ T61] usb 5-1: string descriptor 0 read error: -71 [ 61.191498][ T61] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 61.195589][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 61.197992][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 61.206772][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 61.210704][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 61.217375][ T61] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 61.226198][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 61.228696][ T61] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 61.233825][ T61] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 61.240655][ T61] usb 5-1: USB disconnect, device number 2 [ 61.247863][ T6142] syzkaller0: entered promiscuous mode [ 61.249706][ T6142] syzkaller0: entered allmulticast mode [ 61.254600][ T5537] syzkaller0: tun_net_xmit 48 [ 61.257837][ T61] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 61.272485][ T61] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 61.276324][ T61] keyspan 5-1:1.0: device disconnected [ 61.833067][ T64] Bluetooth: hci0: SCO packet for unknown connection handle 400 [ 61.937926][ T61] usb 7-1: USB disconnect, device number 2 [ 61.969043][ T61] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 62.027026][ T64] Bluetooth: hci2: command tx timeout [ 62.027067][ T5739] Bluetooth: hci1: command tx timeout [ 62.027144][ T5737] Bluetooth: hci0: command tx timeout [ 62.114894][ T5739] Bluetooth: hci3: command tx timeout [ 62.236615][ T6160] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.389209][ T6170] kvm: pic: single mode not supported [ 62.390724][ T6175] __nla_validate_parse: 1 callbacks suppressed [ 62.390737][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 62.407610][ T5537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.411459][ T5537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.414385][ T5537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.421286][ T5537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.445144][ T6182] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.446495][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 62.466308][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 62.470265][ T59] bridge0: entered promiscuous mode [ 62.475216][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 62.478062][ T6184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 62.482188][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 62.519441][ T6186] macsec1: entered promiscuous mode [ 62.521498][ T6186] macsec1: entered allmulticast mode [ 62.565424][ T6195] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 62.574192][ T6195] xt_bpf: check failed: parse error [ 62.605763][ T6200] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 62.658904][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 62.662714][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.680140][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.744365][ T6211] kvm: kvm [6210]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.746584][ T6214] bond2: option xmit_hash_policy: invalid value (6) [ 62.748202][ T6211] kvm: kvm [6210]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 62.757906][ T6214] bond2 (unregistering): Released all slaves [ 62.790211][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 62.793135][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 62.927637][ T6228] warning: `syz.1.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.937414][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.98'. [ 62.974668][ T6237] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 62.982720][ T6237] ======================================================= [ 62.982720][ T6237] WARNING: The mand mount option has been deprecated and [ 62.982720][ T6237] and is ignored by this kernel. Remove the mand [ 62.982720][ T6237] option from the mount to silence this warning. [ 62.982720][ T6237] ======================================================= [ 63.003511][ T6237] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 63.003547][ T6237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.003637][ T6237] overlayfs: failed to set uuid (34/file1, err=-13); falling back to uuid=null. [ 63.227974][ T6258] team0: Port device team_slave_0 removed [ 63.289346][ T6255] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.578022][ T6268] CIFS: VFS: bad security option: krb5i [ 63.609955][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 63.609968][ T42] audit: type=1400 audit(1786324042.995:389): avc: denied { create } for pid=6271 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.623500][ T42] audit: type=1400 audit(1786324042.995:390): avc: denied { connect } for pid=6271 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.659802][ T42] audit: type=1400 audit(1786324043.045:391): avc: denied { watch } for pid=6271 comm="syz.3.113" path="/38/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.686975][ T42] audit: type=1400 audit(1786324043.075:392): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.696482][ T42] audit: type=1400 audit(1786324043.085:393): avc: denied { read write } for pid=5729 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.705410][ T42] audit: type=1400 audit(1786324043.085:394): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.713108][ T42] audit: type=1400 audit(1786324043.085:395): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.854614][ T5803] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 64.015276][ T5803] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 64.020238][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.030992][ T5803] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 64.039989][ T5803] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 64.154775][ T846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.314796][ T846] usb 8-1: Using ep0 maxpacket: 8 [ 64.317093][ T846] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 64.323284][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.326527][ T846] usb 8-1: Product: syz [ 64.328230][ T846] usb 8-1: Manufacturer: syz [ 64.330068][ T846] usb 8-1: SerialNumber: syz [ 64.334252][ T846] usb 8-1: config 0 descriptor?? [ 64.414821][ T6282] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 64.434603][ T5803] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.539913][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.543069][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.547230][ T846] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 64.586016][ T5803] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 64.590898][ T5803] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 64.594212][ T5803] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 64.597667][ T5803] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 64.600941][ T5803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 64.604596][ T5803] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 64.609987][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 64.612929][ T5803] usb 5-1: Product: syz [ 64.614330][ T5803] usb 5-1: Manufacturer: syz [ 64.622453][ T5803] cdc_wdm 5-1:1.0: skipping garbage [ 64.624488][ T5803] cdc_wdm 5-1:1.0: skipping garbage [ 64.628252][ T5803] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 64.630573][ T5803] cdc_wdm 5-1:1.0: Unknown control protocol [ 64.695750][ T6269] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 64.699832][ T1038] usb 6-1: USB disconnect, device number 2 [ 64.710271][ T1038] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 64.715005][ T1038] spcp8x5 6-1:1.0: device disconnected [ 64.759771][ T846] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 64.764135][ T846] usb 8-1: USB disconnect, device number 2 [ 64.822258][ T42] audit: type=1400 audit(1786324044.205:396): avc: denied { read write } for pid=6278 comm="syz.0.115" name="cdc-wdm0" dev="devtmpfs" ino=2883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 64.829546][ T42] audit: type=1400 audit(1786324044.205:397): avc: denied { open } for pid=6278 comm="syz.0.115" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 64.830425][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 64.831447][ T5803] usb 5-1: USB disconnect, device number 3 [ 64.840651][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 64.842566][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 64.933218][ T42] audit: type=1400 audit(1786324044.315:398): avc: denied { map } for pid=6291 comm="syz.0.117" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.145511][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.223057][ T6300] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 65.502955][ T6328] input: syz0 as /devices/virtual/input/input5 [ 65.574545][ T5537] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.577372][ T5537] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.580687][ T5537] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 65.583777][ T5537] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 20000 - 0 [ 65.597930][ T6339] ip_tables: iptables: counters copy to user failed while replacing table [ 65.652541][ T6342] nbd: must specify at least one socket [ 65.667064][ T6345] ip_tables: iptables: counters copy to user failed while replacing table [ 65.699222][ T6349] tipc: Started in network mode [ 65.701753][ T6349] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 65.708856][ T6349] tipc: Enabled bearer , priority 10 [ 66.183404][ T6388] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.484997][ T6391] loop2: detected capacity change from 0 to 7 [ 66.489183][ T6391] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 66.493728][ T6391] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 66.496509][ T6391] Dev loop2: unable to read RDB block 7 [ 66.498413][ T6391] loop2: unable to read partition table [ 66.501071][ T6391] loop2: partition table beyond EOD, truncated [ 66.503017][ T6391] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 66.540619][ T6393] 9p: Bad value for 'rfdno' [ 66.716404][ T5803] tipc: Node number set to 1 [ 67.431357][ T6407] __nla_validate_parse: 9 callbacks suppressed [ 67.431370][ T6407] netlink: 44 bytes leftover after parsing attributes in process `syz.0.150'. [ 67.440850][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.444273][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.461435][ T6407] XFS (nbd0): no-recovery mounts must be read-only. [ 67.466951][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.150'. [ 67.527449][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'. [ 67.609933][ T6416] binder: 6414:6416 ioctl c0306201 200000000040 returned -11 [ 67.613646][ T6416] netlink: 'syz.0.153': attribute type 10 has an invalid length. [ 68.755455][ T6364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.824005][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 68.838765][ T6422] loop2: detected capacity change from 0 to 7 [ 68.851042][ T6422] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 68.855502][ T6422] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 68.858337][ T6422] Dev loop2: unable to read RDB block 7 [ 68.859485][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 68.859500][ T42] audit: type=1400 audit(1786324048.245:436): avc: denied { prog_run } for pid=6419 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 68.860611][ T6422] loop2: unable to read partition table [ 68.873292][ T6422] loop2: partition table beyond EOD, truncated [ 68.876150][ T6422] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 68.907379][ T6427] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.915458][ T6427] Invalid source name [ 68.919430][ T6427] UBIFS error (pid: 6427): cannot open "./file0", error -22 [ 68.919776][ T6427] futex_wake_op: syz.0.159 tries to shift op by -1; fix this program [ 68.920372][ T42] audit: type=1400 audit(1786324048.295:437): avc: denied { mounton } for pid=6425 comm="syz.0.159" path="/47/file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.986600][ T42] audit: type=1400 audit(1786324048.375:438): avc: denied { open } for pid=6435 comm="syz.0.161" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.999025][ T42] audit: type=1400 audit(1786324048.385:439): avc: denied { ioctl } for pid=6435 comm="syz.0.161" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 69.015423][ T42] audit: type=1400 audit(1786324048.385:440): avc: denied { setopt } for pid=6435 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.041259][ T42] audit: type=1400 audit(1786324048.425:441): avc: denied { read } for pid=6439 comm="syz.0.162" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.051236][ T42] audit: type=1400 audit(1786324048.425:442): avc: denied { open } for pid=6439 comm="syz.0.162" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.069591][ T42] audit: type=1400 audit(1786324048.455:443): avc: denied { search } for pid=6443 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.078319][ T42] audit: type=1400 audit(1786324048.455:444): avc: denied { search } for pid=6443 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.086105][ T42] audit: type=1400 audit(1786324048.455:445): avc: denied { search } for pid=6443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.107711][ T6449] (syz.0.163,6449,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 69.111486][ T6449] (syz.0.163,6449,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 69.114752][ T6449] (syz.0.163,6449,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 69.118876][ T6449] (syz.0.163,6449,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 69.157136][ T6438] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 69.162075][ T6438] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 69.167774][ T6438] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 69.172718][ T6438] netlink: 1 bytes leftover after parsing attributes in process `syz.3.157'. [ 69.314124][ T6481] loop2: detected capacity change from 0 to 7 [ 69.319208][ T6481] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 69.322440][ T6481] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 69.327539][ T6481] Dev loop2: unable to read RDB block 7 [ 69.332317][ T6481] loop2: unable to read partition table [ 69.335307][ T6481] loop2: partition table beyond EOD, truncated [ 69.340277][ T6481] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 69.394976][ T6490] evm: overlay not supported [ 69.400722][ T6494] Invalid logical block size (-1) [ 69.483416][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 69.488673][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 69.520002][ T6505] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 69.658066][ T6522] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 69.748210][ T6536] x_tables: duplicate underflow at hook 3 [ 69.813259][ T6543] tipc: Started in network mode [ 69.815699][ T6543] tipc: Node identity 1000001, cluster identity 4369 [ 69.829942][ T6543] tipc: Node number set to 16777217 [ 69.833084][ T6543] tipc: Cannot configure node identity twice [ 69.836723][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 69.842534][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 69.847050][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 69.857659][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 69.862937][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 70.094506][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.113060][ T1003] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.113218][ T136] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.245194][ T5876] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.249878][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.249897][ T5876] usb 7-1: Product: syz [ 70.249904][ T5876] usb 7-1: Manufacturer: syz [ 70.249912][ T5876] usb 7-1: SerialNumber: syz [ 70.283399][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 70.698318][ T1038] usb 7-1: USB disconnect, device number 3 [ 71.230479][ T6588] fuse: fd is not a fuse device [ 71.310983][ T6595] loop2: detected capacity change from 0 to 7 [ 71.315643][ T6595] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 71.318863][ T6595] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.320976][ T6595] Dev loop2: unable to read RDB block 7 [ 71.322722][ T6595] loop2: unable to read partition table [ 71.325348][ T6595] loop2: partition table beyond EOD, truncated [ 71.327653][ T6595] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 71.468618][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.472138][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.544571][ T10] usb 7-1: Service connection timeout for: 256 [ 71.547295][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 71.553674][ T10] ath9k_htc: Failed to initialize the device [ 71.558549][ T1038] usb 7-1: ath9k_htc: USB layer deinitialized [ 71.627254][ T6627] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 71.671160][ T6631] sctp: [Deprecated]: syz.1.213 (pid 6631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.671160][ T6631] Use struct sctp_sack_info instead [ 71.679277][ T6633] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 71.688239][ T6634] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 71.718957][ T6636] kAFS: No cell specified [ 71.760954][ T6640] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 71.781082][ T6640] vlan2: entered promiscuous mode [ 71.783267][ T6640] hsr0: entered promiscuous mode [ 71.786640][ T6640] vlan2: entered allmulticast mode [ 71.788868][ T6640] hsr0: entered allmulticast mode [ 71.790937][ T6640] hsr_slave_0: entered allmulticast mode [ 71.793105][ T6640] hsr_slave_1: entered allmulticast mode [ 71.799072][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 71.804079][ T6640] hsr_slave_0: left promiscuous mode [ 71.807018][ T6640] hsr_slave_1: left promiscuous mode [ 71.843140][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.848496][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.953577][ T6654] loop2: detected capacity change from 0 to 7 [ 71.958000][ T6654] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 71.961967][ T6654] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 71.966864][ T6654] Dev loop2: unable to read RDB block 7 [ 71.969256][ T6654] loop2: unable to read partition table [ 71.971640][ T6654] loop2: partition table beyond EOD, truncated [ 71.977152][ T6654] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 72.104854][ T6659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.223'. [ 72.112229][ T6659] fuse: Unknown parameter 'max_rea0-1_07fffGa%' [ 72.184721][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.187952][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 72.335038][ T6675] netlink: 5 bytes leftover after parsing attributes in process `syz.0.225'. [ 72.342270][ T6675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.437584][ T6689] loop2: detected capacity change from 0 to 7 [ 72.440931][ T6689] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 72.445539][ T6689] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 72.448346][ T6689] Dev loop2: unable to read RDB block 7 [ 72.450607][ T6689] loop2: unable to read partition table [ 72.453070][ T6689] loop2: partition table beyond EOD, truncated [ 72.456540][ T6689] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 72.559946][ T6694] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 72.563819][ T6694] bond1: entered allmulticast mode [ 72.578651][ T6694] ip6erspan0: entered promiscuous mode [ 72.583771][ T6694] ip6erspan0: entered allmulticast mode [ 72.588628][ T6694] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 72.718682][ T1159] Bluetooth: hci4: Frame reassembly failed (-84) [ 72.896538][ T6717] macvtap1: entered promiscuous mode [ 72.898381][ T6717] vlan0: entered promiscuous mode [ 72.899994][ T6717] team0: Device macvtap1 failed to register rx_handler [ 72.900903][ T6717] vlan0: left promiscuous mode [ 73.152990][ T6742] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 73.260264][ T6755] capability: warning: `syz.3.253' uses 32-bit capabilities (legacy support in use) [ 73.346662][ T6762] netlink: 'syz.3.256': attribute type 2 has an invalid length. [ 73.349422][ T6762] Cannot find del_set index 4 as target [ 73.869489][ T42] kauditd_printk_skb: 6595 callbacks suppressed [ 73.869524][ T42] audit: type=1400 audit(1786324053.255:6852): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869601][ T42] audit: type=1400 audit(1786324053.255:6853): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869630][ T42] audit: type=1400 audit(1786324053.255:6854): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869657][ T42] audit: type=1400 audit(1786324053.255:6855): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869686][ T42] audit: type=1400 audit(1786324053.255:6856): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869716][ T42] audit: type=1400 audit(1786324053.255:6857): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869744][ T42] audit: type=1400 audit(1786324053.255:6858): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869773][ T42] audit: type=1400 audit(1786324053.255:6859): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869803][ T42] audit: type=1400 audit(1786324053.255:6860): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.869831][ T42] audit: type=1400 audit(1786324053.255:6861): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 74.115393][ T6813] virt_wifi0: entered promiscuous mode [ 74.115430][ T6813] virt_wifi0: entered allmulticast mode [ 74.135227][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.136438][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 74.138043][ T12] bond1: (slave veth3): making interface the new active one [ 74.140962][ T12] bond1: active interface up! [ 74.154804][ T5537] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.155930][ T5537] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.155955][ T5537] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.414591][ T6836] __nla_validate_parse: 1 callbacks suppressed [ 74.414604][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 74.415583][ T6836] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.280'. [ 74.442833][ T6838] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 74.453290][ T6838] bond2: entered promiscuous mode [ 74.453536][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.465174][ T6838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.465377][ T6838] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 74.465390][ T6838] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 74.473507][ T6838] bond2: (slave xfrm1): making interface the new active one [ 74.473528][ T6838] xfrm1: entered promiscuous mode [ 74.477489][ T6838] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 74.741936][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 74.746838][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.295316][ T6885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.295415][ T6885] batadv_slave_0: entered promiscuous mode [ 75.295425][ T6885] batadv_slave_0: entered allmulticast mode [ 75.710994][ T6931] futex_wake_op: syz.2.316 tries to shift op by -1; fix this program [ 75.897375][ T6943] hugetlbfs: syz.3.321 (6943): Using mlock ulimits for SHM_HUGETLB is obsolete [ 76.913147][ T7012] netlink: 'syz.0.345': attribute type 21 has an invalid length. [ 77.943616][ T7070] netlink: 68 bytes leftover after parsing attributes in process `syz.0.364'. [ 78.105733][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 78.106013][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 78.214567][ T5537] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.217526][ T5537] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.220510][ T5537] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.223496][ T5537] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.395237][ T64] Bluetooth: hci4: sending frame failed (-49) [ 78.398374][ T5739] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 78.483101][ T7121] netlink: 'syz.0.384': attribute type 13 has an invalid length. [ 78.486252][ T7121] netlink: 'syz.0.384': attribute type 27 has an invalid length. [ 78.667639][ T7152] lo: entered allmulticast mode [ 78.670297][ T7152] bond0: entered allmulticast mode [ 78.672366][ T7152] dummy0: entered allmulticast mode [ 78.675456][ T7152] eql: entered allmulticast mode [ 78.677454][ T7152] ifb0: entered allmulticast mode [ 78.679341][ T7152] ifb1: entered allmulticast mode [ 78.683765][ T7152] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 78.689727][ T7152] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 78.693972][ T7152] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 78.696781][ T7152] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 78.699653][ T7152] hwsim0: entered allmulticast mode [ 78.701516][ T7152] ieee802154 phy0 wpan0: entered allmulticast mode [ 78.703899][ T7152] ieee802154 phy1 wpan1: entered allmulticast mode [ 78.706284][ T7152] teql0: entered allmulticast mode [ 78.708197][ T7152] tunl0: entered allmulticast mode [ 78.709952][ T7152] gre0: entered allmulticast mode [ 78.711620][ T7152] gretap0: entered allmulticast mode [ 78.713481][ T7152] erspan0: entered allmulticast mode [ 78.716458][ T7152] ip_vti0: entered allmulticast mode [ 78.718733][ T7152] ip6_vti0: entered allmulticast mode [ 78.720673][ T7152] sit0: entered allmulticast mode [ 78.723751][ T7152] ip6tnl0: entered allmulticast mode [ 78.726252][ T7152] ip6gre0: entered allmulticast mode [ 78.728110][ T7152] lapb0: entered allmulticast mode [ 78.730103][ T7152] lapb1: entered allmulticast mode [ 78.732013][ T7152] lapb2: entered allmulticast mode [ 78.733918][ T7152] lapb3: entered allmulticast mode [ 78.737860][ T7152] lapb4: entered allmulticast mode [ 78.739680][ T7152] lapb5: entered allmulticast mode [ 78.741648][ T7152] lapb6: entered allmulticast mode [ 78.743727][ T7152] lowpan0: entered allmulticast mode [ 78.806343][ T7162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 78.876580][ T42] kauditd_printk_skb: 37233 callbacks suppressed [ 78.876594][ T42] audit: type=1400 audit(1786324058.255:44095): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.885853][ T42] audit: type=1400 audit(1786324058.265:44096): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.891172][ T5438] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.891975][ T7167] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.892737][ T7167] audit: audit_lost=64 audit_rate_limit=0 audit_backlog_limit=64 [ 78.892753][ T7167] audit: backlog limit exceeded [ 78.894206][ T42] audit: type=1400 audit(1786324058.265:44097): avc: denied { read } for pid=5438 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.895862][ T5438] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 78.896873][ T7167] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.896889][ T7167] audit: audit_lost=66 audit_rate_limit=0 audit_backlog_limit=64 [ 78.932629][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 79.776821][ T7197] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 79.787094][ T7197] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 79.866853][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 79.884503][ T7215] xt_cgroup: xt_cgroup: no path or classid specified [ 80.296676][ T7246] futex_wake_op: syz.3.429 tries to shift op by 144; fix this program [ 81.053339][ T7303] can0: slcan on ttynull. [ 81.151921][ T7334] pim6reg1: entered promiscuous mode [ 81.154280][ T7334] pim6reg1: entered allmulticast mode [ 81.180940][ T7299] can0 (unregistered): slcan off ttynull. [ 81.295799][ T7353] erspan0: entered promiscuous mode [ 81.347335][ T7363] bond3: Removing last ns target with arp_interval on [ 81.720920][ T34] cfg80211: failed to load regulatory.db [ 81.848007][ T7438] Cannot find add_set index 0 as target [ 81.914714][ T7451] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 81.925593][ T7451] team0: Port device dummy0 added [ 81.931897][ T7448] netlink: 'syz.2.504': attribute type 63 has an invalid length. [ 81.934541][ T7448] netlink: 5 bytes leftover after parsing attributes in process `syz.2.504'. [ 81.954117][ T7448] gretap0: entered allmulticast mode [ 81.956261][ T7448] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.968346][ T7454] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 82.044201][ T7448] jffs2: notice: (7448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.055459][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.059549][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.062430][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.069053][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.072075][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.074714][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.077225][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.079599][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.081938][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.084371][ T5876] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.102800][ T5876] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [] on [ 82.140467][ T7464] fido_id[7464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 82.419925][ T7485] input: syz1 as /devices/virtual/input/input6 [ 82.426994][ T7485] input: failed to attach handler leds to device input6, error: -6 [ 82.457310][ T7491] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 82.501499][ T7491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 82.508800][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 82.549544][ T7499] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 82.552608][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 82.692261][ T7509] netlink: 'syz.2.520': attribute type 1 has an invalid length. [ 82.695509][ T7509] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.520'. [ 82.747542][ T7511] fuse: fd is not a fuse device [ 82.840668][ T7516] /dev/sg0: Can't lookup blockdev [ 82.851108][ T7518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7518 comm=syz.1.524 [ 83.011936][ T7539] fuse: Unknown parameter '!' [ 83.264515][ T5818] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.424494][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 83.430708][ T5818] usb 8-1: unable to get BOS descriptor or descriptor too short [ 83.433659][ T5818] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 83.438657][ T5818] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.446465][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.453946][ T5818] usb 8-1: Product: syz [ 83.455564][ T5818] usb 8-1: Manufacturer: syz [ 83.457925][ T5818] usb 8-1: SerialNumber: syz [ 83.707441][ T7539] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 83.710747][ T7539] ALSA: mixer_oss: invalid index 137438 [ 83.713861][ T7539] ALSA: mixer_oss: invalid OSS volume '?PXje|olaYy' [ 83.735698][ T5818] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.738737][ T5818] usb 8-1: MIDIStreaming interface descriptor not found [ 83.799215][ T5818] usb 8-1: USB disconnect, device number 3 [ 83.917550][ T7577] ip6erspan0: entered allmulticast mode [ 83.921379][ T42] kauditd_printk_skb: 20666 callbacks suppressed [ 83.921395][ T42] audit: type=1400 audit(1786324063.305:64513): avc: denied { ioctl } for pid=7573 comm="syz.2.536" path="socket:[17968]" dev="sockfs" ino=17968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.942953][ T42] audit: type=1326 audit(1786324063.325:64514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.1.538" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4d899e0d9 code=0x0 [ 84.020680][ T42] audit: type=1400 audit(1786324063.405:64515): avc: denied { read } for pid=7586 comm="syz.0.539" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.030810][ T42] audit: type=1400 audit(1786324063.405:64516): avc: denied { open } for pid=7586 comm="syz.0.539" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.039792][ T42] audit: type=1400 audit(1786324063.405:64517): avc: denied { ioctl } for pid=7586 comm="syz.0.539" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.049378][ T42] audit: type=1400 audit(1786324063.425:64518): avc: denied { create } for pid=7586 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.057643][ T42] audit: type=1400 audit(1786324063.425:64519): avc: denied { setopt } for pid=7586 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.065849][ T42] audit: type=1400 audit(1786324063.425:64520): avc: denied { mount } for pid=7586 comm="syz.0.539" name="/" dev="mqueue" ino=17974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.155321][ T42] audit: type=1400 audit(1786324063.545:64521): avc: denied { ioctl } for pid=7589 comm="syz.0.540" path="socket:[18784]" dev="sockfs" ino=18784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.230737][ T42] audit: type=1400 audit(1786324063.615:64522): avc: denied { ioctl } for pid=7591 comm="syz.0.541" path="socket:[18791]" dev="sockfs" ino=18791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.231975][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 84.244593][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'. [ 84.254726][ T7537] Process accounting resumed [ 84.280534][ T7594] loop2: detected capacity change from 0 to 7 [ 84.283099][ T7594] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 84.286406][ T7594] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 84.288650][ T7594] Dev loop2: unable to read RDB block 7 [ 84.290425][ T7594] loop2: unable to read partition table [ 84.292331][ T7594] loop2: partition table beyond EOD, truncated [ 84.294368][ T7594] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 84.406280][ T7603] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.419456][ T7603] netlink: 36 bytes leftover after parsing attributes in process `syz.0.545'. [ 84.431209][ T5739] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 84.436169][ T5739] Bluetooth: hci1: Injecting HCI hardware error event [ 84.440199][ T5739] Bluetooth: hci1: hardware error 0x00 [ 84.498465][ T7609] misc userio: Invalid payload size [ 84.508919][ T7609] tmpfs: Bad value for 'mpol' [ 84.814056][ T7620] trusted_key: syz.1.550 sent an empty control message without MSG_MORE. [ 84.849727][ T7620] kAFS: No cell specified [ 84.857436][ T7620] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 85.073139][ T7642] xt_policy: neither incoming nor outgoing policy selected [ 85.115260][ T7646] netlink: 'syz.1.557': attribute type 2 has an invalid length. [ 85.505837][ T7666] loop2: detected capacity change from 0 to 7 [ 85.516411][ T7666] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 85.524451][ T7666] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 85.529784][ T7666] Dev loop2: unable to read RDB block 7 [ 85.532010][ T7666] loop2: unable to read partition table [ 85.544611][ T7666] loop2: partition table beyond EOD, truncated [ 85.550983][ T7666] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 85.634380][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 85.649110][ T7670] IPVS: length: 24 != 1617152088 [ 85.729778][ T7673] netlink: 'syz.1.564': attribute type 11 has an invalid length. [ 85.757048][ T7676] netlink: 76 bytes leftover after parsing attributes in process `syz.0.563'. [ 85.764936][ T7673] sch_tbf: burst 1520 is lower than device lo mtu (65373) ! [ 85.778423][ T7681] 9pnet_fd: Insufficient options for proto=fd [ 85.781916][ T7673] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.564'. [ 85.787739][ T7673] openvswitch: netlink: Flow key attr not present in new flow. [ 85.896845][ T64] Bluetooth: hci1: Malformed Event: 0x02 [ 86.029357][ T7693] loop2: detected capacity change from 0 to 7 [ 86.039863][ T7693] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 86.044008][ T7693] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 86.047693][ T7693] Dev loop2: unable to read RDB block 7 [ 86.050151][ T7693] loop2: unable to read partition table [ 86.053183][ T7693] loop2: partition table beyond EOD, truncated [ 86.056283][ T7693] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 86.092749][ T7697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 86.219493][ T64] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 86.219640][ T7704] netlink: 592 bytes leftover after parsing attributes in process `syz.0.574'. [ 86.231590][ T7704] TCP: TCP_TX_DELAY enabled [ 86.401026][ T7722] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 86.516432][ T5739] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 86.549666][ T7736] Invalid source name [ 86.551330][ T7736] UBIFS error (pid: 7736): cannot open "ubifs", error -22 [ 86.948650][ T7760] loop2: detected capacity change from 0 to 7 [ 86.957224][ T7760] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 86.960434][ T7760] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 86.962882][ T7760] Dev loop2: unable to read RDB block 7 [ 86.964737][ T7760] loop2: unable to read partition table [ 86.966437][ T7760] loop2: partition table beyond EOD, truncated [ 86.972984][ T7760] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 86.986224][ T5135] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 86.993545][ T5135] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 86.998296][ T5135] Dev loop2: unable to read RDB block 7 [ 87.002950][ T5135] loop2: unable to read partition table [ 87.007115][ T5135] loop2: partition table beyond EOD, truncated [ 87.040307][ T7768] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 87.073058][ T7768] bond1: entered promiscuous mode [ 87.074936][ T7768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.088869][ T7768] bond1: (slave bridge1): making interface the new active one [ 87.092841][ T7768] bridge1: entered promiscuous mode [ 87.101039][ T7768] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 87.136244][ T7774] tcpci 0-0050: Can't find connector node. [ 87.142157][ T7774] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 87.150064][ T7774] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 87.156517][ T7774] tcpci 1-0005: probe with driver tcpci failed with error -5 [ 87.160875][ T7774] i2c i2c-1: new_device: Instantiated device tcpci at 0x05 [ 87.204483][ T7784] netlink: 'syz.3.592': attribute type 12 has an invalid length. [ 87.205708][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 87.278127][ T7784] xt_hashlimit: size too large, truncated to 1048576 [ 87.327667][ T7788] netlink: zone id is out of range [ 87.329999][ T7788] netlink: get zone limit has 4 unknown bytes [ 87.374939][ T7792] loop2: detected capacity change from 0 to 7 [ 87.378522][ T7792] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 87.381742][ T7792] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 87.384506][ T7792] Dev loop2: unable to read RDB block 7 [ 87.386263][ T7792] loop2: unable to read partition table [ 87.388175][ T7792] loop2: partition table beyond EOD, truncated [ 87.391133][ T7792] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 87.597757][ T7810] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 87.603543][ T7810] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 87.788318][ T7828] netlink: 80 bytes leftover after parsing attributes in process `syz.0.608'. [ 87.929158][ T7833] netlink: zone id is out of range [ 87.930866][ T7833] netlink: zone id is out of range [ 87.989780][ T846] libceph: connect (1)[c::]:6789 error -101 [ 87.991955][ T7840] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 87.999880][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 88.019694][ T846] libceph: connect (1)[c::]:6789 error -101 [ 88.026041][ T846] libceph: mon0 (1)[c::]:6789 connect error [ 88.034816][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 88.286193][ T59] libceph: connect (1)[c::]:6789 error -101 [ 88.288328][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 88.345279][ T5739] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 88.354331][ T5739] Bluetooth: hci3: Injecting HCI hardware error event [ 88.358709][ T5739] Bluetooth: hci3: hardware error 0x00 [ 88.389077][ T846] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.555716][ T846] usb 7-1: Using ep0 maxpacket: 8 [ 88.562524][ T846] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 88.570028][ T846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 50801, setting to 64 [ 88.574889][ T846] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 88.582270][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.586830][ T846] usb 7-1: Product: syz [ 88.588223][ T846] usb 7-1: Manufacturer: 麪ා坩㢛짚凉븰ﻋ墐ञ٪偱ꞿDZ籨亹ꁤ쮊敧뻵䢂Œ鴉 [ 88.592068][ T846] usb 7-1: SerialNumber: syz [ 88.794993][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 88.798277][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 88.838833][ T7836] ceph: No mds server is up or the cluster is laggy [ 88.900038][ T7919] jffs2: notice: (7919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 88.925599][ T42] kauditd_printk_skb: 155 callbacks suppressed [ 88.925632][ T42] audit: type=1400 audit(1786324068.315:64678): avc: denied { mounton } for pid=7918 comm="syz.0.625" path="/196/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 88.939668][ T42] audit: type=1400 audit(1786324068.325:64679): avc: denied { mounton } for pid=7918 comm="syz.0.625" path="/196/mnt" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.044022][ T42] audit: type=1400 audit(1786324068.425:64680): avc: denied { setopt } for pid=7926 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.094310][ T42] audit: type=1400 audit(1786324068.475:64681): avc: denied { bind } for pid=7938 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.100991][ T7940] afs: Unknown parameter 'dn' [ 89.101319][ T42] audit: type=1400 audit(1786324068.475:64682): avc: denied { name_bind } for pid=7938 comm="syz.0.628" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.113332][ T42] audit: type=1400 audit(1786324068.475:64683): avc: denied { listen } for pid=7938 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.124976][ T42] audit: type=1400 audit(1786324068.475:64684): avc: denied { node_bind } for pid=7938 comm="syz.0.628" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 89.152328][ T42] audit: type=1400 audit(1786324068.535:64685): avc: denied { read } for pid=7942 comm="syz.0.629" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.161422][ T42] audit: type=1400 audit(1786324068.535:64686): avc: denied { open } for pid=7942 comm="syz.0.629" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.643423][ T7955] fuse: fd is not a fuse device [ 89.648336][ T7955] overlayfs: failed to clone lowerpath [ 89.709322][ T42] audit: type=1400 audit(1786324069.095:64687): avc: denied { bind } for pid=7956 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.762183][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 89.922431][ T7969] netlink: 'syz.1.635': attribute type 15 has an invalid length. [ 89.926543][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 89.962549][ T7969] netlink: 'syz.1.635': attribute type 15 has an invalid length. [ 89.974899][ T5834] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 89.979946][ T5834] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 89.984766][ T5834] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 89.989514][ T5834] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 89.994127][ T7973] Mass Storage Function, version: 2009/09/11 [ 89.998177][ T7973] LUN: removable file: (no medium) [ 90.007451][ T7973] [ 90.008713][ T7973] ====================================================== [ 90.011622][ T7973] WARNING: possible circular locking dependency detected [ 90.014293][ T7973] syzkaller #0 Tainted: G L [ 90.016696][ T7973] ------------------------------------------------------ [ 90.019296][ T7973] syz.3.636/7973 is trying to acquire lock: [ 90.021474][ T7973] ffff88801cb2a450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 90.024227][ T7973] [ 90.024227][ T7973] but task is already holding lock: [ 90.026811][ T7973] ffff888057f63920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 90.029749][ T7973] [ 90.029749][ T7973] which lock already depends on the new lock. [ 90.029749][ T7973] [ 90.033035][ T7973] [ 90.033035][ T7973] the existing dependency chain (in reverse order) is: [ 90.036069][ T7973] [ 90.036069][ T7973] -> #4 (&common->filesem){+.+.}-{4:4}: [ 90.038566][ T7973] lock_acquire+0x1b9/0x370 [ 90.040175][ T7973] down_write+0x8b/0x1f0 [ 90.041745][ T7973] fsg_store_file+0x193/0x450 [ 90.043371][ T7973] configfs_write_iter+0x302/0x4e0 [ 90.045140][ T7973] vfs_write+0x6ac/0x1050 [ 90.046672][ T7973] ksys_write+0x12a/0x250 [ 90.048172][ T7973] do_syscall_64+0x115/0x870 [ 90.049753][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.051760][ T7973] [ 90.051760][ T7973] -> #3 (&p->frag_sem){++++}-{4:4}: [ 90.054121][ T7973] lock_acquire+0x1b9/0x370 [ 90.055778][ T7973] down_read+0x99/0x4c0 [ 90.057663][ T7973] configfs_read_iter+0x346/0x6f0 [ 90.059791][ T7973] __kernel_read+0x397/0xad0 [ 90.062041][ T7973] integrity_kernel_read+0x7e/0xb0 [ 90.064282][ T7973] ima_calc_file_hash_tfm+0x25e/0x350 [ 90.066723][ T7973] ima_calc_file_hash+0x1e3/0x380 [ 90.069013][ T7973] ima_collect_measurement+0x94f/0xb30 [ 90.071460][ T7973] process_measurement+0xdfe/0x2350 [ 90.073789][ T7973] ima_file_check+0xc3/0x110 [ 90.075861][ T7973] security_file_post_open+0xc4/0x210 [ 90.078055][ T7973] path_openat+0x985/0x4280 [ 90.079944][ T7973] do_file_open+0x20e/0x430 [ 90.081902][ T7973] do_sys_openat2+0x10f/0x1e0 [ 90.084032][ T7973] __x64_sys_openat+0x12d/0x210 [ 90.086279][ T7973] do_syscall_64+0x115/0x870 [ 90.088400][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.091021][ T7973] [ 90.091021][ T7973] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 90.094107][ T7973] lock_acquire+0x1b9/0x370 [ 90.096179][ T7973] __mutex_lock+0x1a4/0x1bd0 [ 90.098294][ T7973] configfs_read_iter+0x79/0x6f0 [ 90.100499][ T7973] __kernel_read+0x397/0xad0 [ 90.102671][ T7973] integrity_kernel_read+0x7e/0xb0 [ 90.104987][ T7973] ima_calc_file_hash_tfm+0x25e/0x350 [ 90.107376][ T7973] ima_calc_file_hash+0x1e3/0x380 [ 90.109664][ T7973] ima_collect_measurement+0x94f/0xb30 [ 90.112121][ T7973] process_measurement+0xdfe/0x2350 [ 90.114489][ T7973] ima_file_check+0xc3/0x110 [ 90.116603][ T7973] security_file_post_open+0xc4/0x210 [ 90.119070][ T7973] path_openat+0x985/0x4280 [ 90.121151][ T7973] do_file_open+0x20e/0x430 [ 90.123217][ T7973] do_sys_openat2+0x10f/0x1e0 [ 90.125341][ T7973] __x64_sys_openat+0x12d/0x210 [ 90.127552][ T7973] do_syscall_64+0x115/0x870 [ 90.129656][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.132244][ T7973] [ 90.132244][ T7973] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 90.135618][ T7973] lock_acquire+0x1b9/0x370 [ 90.137639][ T7973] __mutex_lock+0x1a4/0x1bd0 [ 90.139719][ T7973] ima_file_truncate+0xe6/0x190 [ 90.141911][ T7973] security_file_truncate+0xf9/0x1e0 [ 90.144259][ T7973] path_openat+0x3584/0x4280 [ 90.146367][ T7973] do_file_open+0x20e/0x430 [ 90.148458][ T7973] do_sys_openat2+0x10f/0x1e0 [ 90.150484][ T7973] __x64_sys_openat+0x12d/0x210 [ 90.152695][ T7973] do_syscall_64+0x115/0x870 [ 90.154739][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.156817][ T7973] [ 90.156817][ T7973] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 90.159159][ T7973] check_prev_add+0xeb/0xe60 [ 90.160802][ T7973] __lock_acquire+0x136c/0x1a40 [ 90.162553][ T7973] lock_acquire+0x1b9/0x370 [ 90.164148][ T7973] mnt_want_write+0x6f/0x410 [ 90.165825][ T7973] path_openat+0xad9/0x4280 [ 90.167445][ T7973] do_file_open+0x20e/0x430 [ 90.169161][ T7973] file_open_name+0x1c3/0x3e0 [ 90.170902][ T7973] filp_open+0x2e/0x50 [ 90.172837][ T7973] fsg_lun_open+0x6b/0x7b0 [ 90.174894][ T7973] fsg_store_file+0x1e7/0x450 [ 90.177075][ T7973] configfs_write_iter+0x302/0x4e0 [ 90.179341][ T7973] vfs_write+0x6ac/0x1050 [ 90.181334][ T7973] ksys_write+0x12a/0x250 [ 90.183362][ T7973] do_syscall_64+0x115/0x870 [ 90.185496][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.188005][ T7973] [ 90.188005][ T7973] other info that might help us debug this: [ 90.188005][ T7973] [ 90.191948][ T7973] Chain exists of: [ 90.191948][ T7973] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 90.191948][ T7973] [ 90.196818][ T7973] Possible unsafe locking scenario: [ 90.196818][ T7973] [ 90.199439][ T7973] CPU0 CPU1 [ 90.201300][ T7973] ---- ---- [ 90.202997][ T7973] lock(&common->filesem); [ 90.204358][ T7973] lock(&p->frag_sem); [ 90.206341][ T7973] lock(&common->filesem); [ 90.208441][ T7973] rlock(sb_writers#6); [ 90.209802][ T7973] [ 90.209802][ T7973] *** DEADLOCK *** [ 90.209802][ T7973] [ 90.212810][ T7973] 5 locks held by syz.3.636/7973: [ 90.214817][ T7973] #0: ffff8880372049b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 90.218390][ T7973] #1: ffff888023d58450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 90.221938][ T7973] #2: ffff888038250680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 90.225869][ T7973] #3: ffff8880277cce70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 90.229465][ T7973] #4: ffff888057f63920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 90.233356][ T7973] [ 90.233356][ T7973] stack backtrace: [ 90.235613][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.3.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.235632][ T7973] Tainted: [L]=SOFTLOCKUP [ 90.235636][ T7973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.235651][ T7973] Call Trace: [ 90.235688][ T7973] [ 90.235694][ T7973] dump_stack_lvl+0x100/0x190 [ 90.235712][ T7973] print_circular_bug.cold+0x178/0x1c7 [ 90.235738][ T7973] check_noncircular+0x146/0x160 [ 90.235757][ T7973] ? __lock_acquire+0xd5b/0x1a40 [ 90.235779][ T7973] check_prev_add+0xeb/0xe60 [ 90.235800][ T7973] __lock_acquire+0x136c/0x1a40 [ 90.235820][ T7973] ? try_to_unlazy+0x296/0x910 [ 90.235845][ T7973] lock_acquire+0x1b9/0x370 [ 90.235863][ T7973] ? path_openat+0xad9/0x4280 [ 90.235883][ T7973] ? __pfx___might_resched+0x10/0x10 [ 90.235903][ T7973] mnt_want_write+0x6f/0x410 [ 90.235917][ T7973] ? path_openat+0xad9/0x4280 [ 90.235928][ T7973] path_openat+0xad9/0x4280 [ 90.235941][ T7973] ? __pfx_path_openat+0x10/0x10 [ 90.235952][ T7973] ? kasan_save_stack+0x30/0x50 [ 90.235965][ T7973] ? kasan_save_track+0x14/0x30 [ 90.235977][ T7973] ? __kasan_slab_alloc+0x89/0x90 [ 90.235990][ T7973] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 90.236003][ T7973] ? do_getname_kernel+0x5d/0x250 [ 90.236015][ T7973] ? filp_open+0x1d/0x50 [ 90.236028][ T7973] ? fsg_lun_open+0x6b/0x7b0 [ 90.236041][ T7973] ? fsg_store_file+0x1e7/0x450 [ 90.236054][ T7973] do_file_open+0x20e/0x430 [ 90.236065][ T7973] ? __pfx_do_file_open+0x10/0x10 [ 90.236082][ T7973] ? rcu_is_watching+0x12/0xc0 [ 90.236098][ T7973] file_open_name+0x1c3/0x3e0 [ 90.236112][ T7973] ? __pfx_file_open_name+0x10/0x10 [ 90.236125][ T7973] ? do_getname_kernel+0x5d/0x250 [ 90.236138][ T7973] ? __asan_memcpy+0x3c/0x60 [ 90.236150][ T7973] ? do_getname_kernel+0x1be/0x250 [ 90.236165][ T7973] filp_open+0x2e/0x50 [ 90.236179][ T7973] fsg_lun_open+0x6b/0x7b0 [ 90.236191][ T7973] ? __pfx_down_read+0x10/0x10 [ 90.236208][ T7973] fsg_store_file+0x1e7/0x450 [ 90.236221][ T7973] configfs_write_iter+0x302/0x4e0 [ 90.236235][ T7973] vfs_write+0x6ac/0x1050 [ 90.236245][ T7973] ? __pfx_configfs_write_iter+0x10/0x10 [ 90.236258][ T7973] ? __pfx_vfs_write+0x10/0x10 [ 90.236271][ T7973] ksys_write+0x12a/0x250 [ 90.236281][ T7973] ? __pfx_ksys_write+0x10/0x10 [ 90.236292][ T7973] do_syscall_64+0x115/0x870 [ 90.236308][ T7973] ? clear_bhb_loop+0x70/0xc0 [ 90.236320][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.236339][ T7973] RIP: 0033:0x7f9791b9e0d9 [ 90.236350][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.236362][ T7973] RSP: 002b:00007f979299c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.236384][ T7973] RAX: ffffffffffffffda RBX: 00007f9791e25fa0 RCX: 00007f9791b9e0d9 [ 90.236391][ T7973] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 90.236398][ T7973] RBP: 00007f9791c35024 R08: 0000000000000000 R09: 0000000000000000 [ 90.236405][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.236412][ T7973] R13: 00007f9791e26038 R14: 00007f9791e25fa0 R15: 00007ffffae919a8 [ 90.236423][ T7973] [ 90.337301][ T7973] mass_storage.usb0/lun.0: unable to open backing file: 7y [ 90.340422][ T7975] mass_storage.usb0/lun.0: invalid file type: file0 [ 90.504501][ T5739] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 91.100231][ T846] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.102581][ T846] usb 7-1: MIDIStreaming interface descriptor not found [ 91.115180][ T846] usb 7-1: USB disconnect, device number 4