last executing test programs: 15m44.612124869s ago: executing program 1 (id=4332): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0xcb8, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000080), 0x0, 0x4001}) io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0) 15m44.199487335s ago: executing program 1 (id=4336): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 15m44.00903248s ago: executing program 1 (id=4341): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 15m43.850147427s ago: executing program 1 (id=4342): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 15m43.700392856s ago: executing program 1 (id=4347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x3a9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @loopback, 0x2}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000100)) 15m43.131324039s ago: executing program 1 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "58c1400000008474"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="74cbc6c46429dc62c32e37a82737eb9b026773a4a34eec6786ac2bccfcd09461"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e830ce9f3aa2bac2cbed3fd5d16d9e1205a13fa42564081d"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15m42.832657429s ago: executing program 32 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "58c1400000008474"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="74cbc6c46429dc62c32e37a82737eb9b026773a4a34eec6786ac2bccfcd09461"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e830ce9f3aa2bac2cbed3fd5d16d9e1205a13fa42564081d"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12m42.187813766s ago: executing program 4 (id=6995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x36eb342585dff672, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x149) 12m41.829452859s ago: executing program 4 (id=7002): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) poll(&(0x7f00000000c0), 0x0, 0xfffffff7) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x800000000a, 0x4, 0x2, 0x6, 0x9}, 0x0, &(0x7f00000002c0)={0x3c, 0x1, 0x6, 0x2844bb54, 0x9, 0x0, 0x0, 0x6}, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)="70de", 0x2}], 0x1) 12m40.932788665s ago: executing program 4 (id=7008): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0], 0x48}}, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m40.75529334s ago: executing program 4 (id=7012): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 12m40.600375102s ago: executing program 4 (id=7014): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2145c89, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 12m40.457983874s ago: executing program 4 (id=7015): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, 0x0, 0x8804) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x1002, r1, 0x0}]) 12m26.087400453s ago: executing program 33 (id=7015): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r2, 0x0, 0x8804) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x1002, r1, 0x0}]) 10m48.852944359s ago: executing program 0 (id=8198): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = io_uring_setup(0x3454, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2e9}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 10m47.808584373s ago: executing program 0 (id=8206): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 10m47.576329663s ago: executing program 0 (id=8211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) gettid() 10m46.420131794s ago: executing program 0 (id=8218): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x24020400) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 10m46.23931248s ago: executing program 0 (id=8220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x80, 0x4, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xf, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbf}, {0x4, 0xffff1000, 0xc, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x2, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0xa0}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x43, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x8000000, [0x79327378, 0x0, 0x1, 0x400000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m44.810330907s ago: executing program 0 (id=8231): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000001c00)=""/4095, 0x80000000, 0x104c}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listen(r1, 0x99c) accept4(r1, 0x0, 0x0, 0x800) 10m44.664163824s ago: executing program 34 (id=8231): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000001c00)=""/4095, 0x80000000, 0x104c}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xca) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listen(r1, 0x99c) accept4(r1, 0x0, 0x0, 0x800) 9m52.79448642s ago: executing program 2 (id=8654): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x1, 0x3a1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9m51.777148075s ago: executing program 2 (id=8659): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3110, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x30e0, 0x2, [@TCA_FLOW_POLICE={0x470, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x3, 0x1, 0x576, 0x6, {0x1, 0x1, 0x6fa, 0x3, 0xffff, 0xfff}, {0x96, 0x0, 0xb, 0xc9, 0x7, 0x7f}, 0xfffffffd, 0x1000, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x4, 0x59, 0x9, 0xc0, 0x7, 0x10001, 0x400, 0x0, 0x7, 0xcaef, 0x2, 0x6, 0x1, 0x8, 0x1ff, 0x0, 0xbad, 0x24, 0x51, 0x1, 0x7, 0x4, 0x25, 0x7f, 0x6, 0x1, 0xffffff7f, 0x6, 0x4, 0xe, 0x3, 0xe5, 0x3, 0x0, 0x4, 0x200, 0x2, 0x4, 0x0, 0x9, 0xfffffff7, 0x9, 0x6744, 0x6b468494, 0xc, 0xb0c, 0x0, 0x9, 0x3, 0x77, 0x6, 0x4, 0x6, 0x2, 0x891, 0x6, 0xfffff632, 0xc5, 0xfffffffc, 0x80, 0x4, 0xfffff953, 0xac01, 0x3, 0xf47, 0x6, 0x4, 0x0, 0x2, 0x9, 0x38000, 0x80, 0x7, 0x0, 0x1, 0xf, 0x0, 0x74c0, 0x10000, 0x7fffffff, 0x8, 0xf, 0x9, 0x8, 0x5, 0x7, 0x509b, 0x1697d16e, 0x7, 0x400, 0x7ff, 0x9, 0x6, 0x7f, 0x5, 0x0, 0x8, 0xffffffa1, 0x7, 0xffff1cbb, 0x7, 0x1, 0x8, 0x4, 0x64, 0x8, 0x10000, 0x6ac, 0x7, 0x9, 0x1ff, 0xb47, 0x4, 0xdf3, 0x5, 0x0, 0x7617, 0x8f, 0x1ff, 0x0, 0xffffffc0, 0xe2a, 0x7ff, 0x596, 0x3, 0x6, 0x4, 0x9, 0x294, 0xfffffffb, 0x2741, 0x6, 0x1, 0x2, 0x0, 0x10001, 0x3, 0x5, 0x1, 0x3, 0xbd, 0x5, 0x8, 0x2, 0x0, 0x6684, 0x50b1, 0x0, 0x7fffffff, 0x7fff, 0x4077, 0xb, 0x9, 0xd, 0x1, 0x4, 0x0, 0x81, 0x0, 0xce, 0x1, 0x4, 0x200, 0x9, 0x9, 0x6, 0x38d0, 0x401, 0x36, 0x40, 0x2, 0x0, 0x1, 0x42, 0x7, 0x20efbb8a, 0x6, 0x8356, 0x80, 0x0, 0x1, 0x1, 0xffff, 0x7fff, 0x0, 0x2, 0x7, 0x9, 0x2ceda0d7, 0x1ff, 0x571, 0x5, 0xe679, 0x3, 0xc, 0x3, 0x18e, 0x2, 0x8, 0x0, 0x252bb106, 0xc, 0x8, 0x5, 0x1400000, 0x10, 0x0, 0x6, 0x4ef, 0x0, 0x428d, 0x4, 0xd, 0x1, 0x2766, 0x400, 0x3e79, 0x9, 0x7, 0xa, 0x2, 0x0, 0x6, 0xd, 0xffff0001, 0x9, 0x1000, 0xf, 0x700000, 0x0, 0x7, 0x9, 0xfffffff7, 0x1ff, 0xa3b, 0x0, 0x8, 0xfffffff7, 0x9, 0x638e0999, 0x5d, 0x200, 0x3, 0x2, 0x32c, 0x2ddb, 0x2, 0x6, 0x0, 0x0, 0x7, 0x1000, 0x8, 0x7]}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_ACT={0x2c64, 0x9, 0x0, 0x1, [@m_pedit={0x2c60, 0x1, 0x0, 0x0, {{0xa}, {0x2c34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x3, 0xedc4bd21, 0x6, 0xffffff60, 0xfffffffa}, 0xb, 0x0, [{0x4, 0xffffffff, 0x9, 0x2a3a, 0x2, 0x4}, {0xfffff48e, 0x7, 0x6, 0x3, 0x7, 0x8}, {0xffff711b, 0x9, 0x8, 0x5, 0x5, 0x9}, {0x7, 0x0, 0xf3c, 0x7, 0x8}, {0xfffff801, 0x954f, 0xfffffff9, 0x9, 0x1, 0x8}, {0x6, 0xbf3, 0x2, 0x1, 0x5, 0x10000}, {0x8a18, 0x4, 0x7, 0x3, 0x9d9, 0x5}, {0x4, 0x7f, 0xeda, 0x6, 0x0, 0x7}]}, [{0x9, 0x7c39, 0x9, 0xfffffffb, 0x2, 0x1}, {0x9, 0xb85, 0x6, 0x0, 0x401, 0x2}, {0x3, 0x5, 0x168, 0x3, 0x6, 0x6}, {0x1, 0x2, 0x7fff, 0x3, 0xd, 0x7}, {0x4, 0x0, 0xd, 0x6, 0xc00, 0x200}, {0x3, 0xc6b, 0x4, 0x7, 0x2, 0xc93}, {0x7fff, 0x9ae6, 0x3, 0x0, 0x2, 0x9}, {0x3, 0x84c, 0xe06f, 0xd, 0x3, 0x9}, {0xe098, 0x40, 0x0, 0x3, 0x23, 0x1}, {0x2, 0x7fffffff, 0x6, 0x6, 0x3, 0x9}, {0xa95, 0x63c449fd, 0x7, 0x6, 0x0, 0xe}, {0x8, 0x4, 0x8, 0x679b, 0xfffffff7, 0x2}, {0x60000000, 0x9677, 0xc6, 0x7, 0x6, 0x81}, {0x3, 0xfffff000, 0x0, 0x6, 0x5, 0x40}, {0x6, 0x2, 0x1, 0x2, 0x5c, 0x10000}, {0xfffff11a, 0x6, 0x6, 0x6, 0x5}, {0x3, 0x0, 0x3, 0x0, 0x800, 0x101}, {0x3, 0x80000000, 0x7, 0x1f, 0x0, 0x5}, {0xffff0000, 0x1b8ab41f, 0x3, 0x0, 0x400, 0x1}, {0x1, 0x0, 0x4, 0x8, 0xe168, 0x80000001}, {0xfffffff8, 0x4, 0x6, 0x5, 0x7}, {0x5, 0x1, 0x8001, 0x6, 0x0, 0x7f}, {0xfffffffb, 0xd, 0xff, 0x8d1, 0x8, 0x4}, {0x4, 0x6, 0xffff, 0x10, 0x2, 0x8000}, {0x58b1, 0xfff, 0x80000001, 0x8, 0x8a, 0x6}, {0x8, 0x4, 0x1, 0x0, 0x8902}, {0x52e5, 0x1, 0x2, 0xbae, 0x9, 0x3}, {0x7, 0x5, 0x6, 0x254, 0x6, 0x1}, {0x3, 0x4, 0x7, 0x3, 0x4, 0x32d0}, {0x9, 0x8, 0x10001, 0x2000000, 0x8, 0x6}, {0x8, 0x1, 0xf, 0x1, 0x5, 0x1}, {0x5, 0xe8d1, 0xc, 0xa10, 0x7, 0x2}, {0x5, 0x7f, 0xfffffffd, 0x4, 0xeb, 0x8}, {0x9, 0xe42, 0x5, 0x796, 0x7fffffff, 0x5}, {0x9, 0x6, 0x2, 0xd1e, 0x4, 0x3}, {0x7fff, 0xfbc2, 0x300, 0x7, 0xffffffff, 0x1}, {0xffffffff, 0x8, 0xad0, 0x3, 0x7, 0xffffffff}, {0x5, 0x1, 0x8, 0x4, 0xfff, 0x7ff}, {0xd, 0x4, 0x9, 0x9, 0x10001, 0x4}, {0x8, 0x40, 0x9a2463e, 0x5, 0x0, 0x6}, {0x5, 0x5c, 0x0, 0x912, 0x10001, 0x80000001}, {0x1, 0x0, 0x4, 0x0, 0x10000, 0x9}, {0x7, 0x1, 0x5, 0x5, 0x1, 0x5}, {0x1, 0x8000, 0xf32, 0x4, 0xe, 0x800}, {0xd, 0x1, 0x103c, 0x2, 0x2, 0x10001}, {0x8d4, 0x7bae08eb, 0xae64, 0x9, 0x5, 0x3}, {0x5, 0x2, 0x1, 0x9, 0x10000, 0x1}, {0x10001, 0x1, 0x7, 0x0, 0x8, 0x80000001}, {0xfffffffc, 0x2, 0x6, 0x400, 0x8, 0x1f}, {0xc, 0xc, 0xfffffff6, 0xffffffff, 0x1, 0x1}, {0x4, 0x8, 0xb, 0x6, 0x9, 0x80000001}, {0x8, 0x2, 0x8d8, 0x0, 0x40000000, 0x3}, {0x8, 0x0, 0x948, 0x20dc, 0x304c, 0xacc}, {0xc0d, 0x4, 0xb, 0x5, 0x0, 0xffffffff}, {0x1ff, 0x8000, 0x4, 0x1, 0xf, 0x5}, {0x3, 0x4c69, 0x10, 0xb, 0x4, 0x7e}, {0x0, 0x0, 0x1, 0x81, 0x3, 0x10000000}, {0x7, 0x7, 0x9, 0x4, 0xffffffff, 0x4}, {0x238ff3c7, 0x8, 0x10, 0x80, 0x9, 0x5}, {0x7fffffff, 0x10000, 0x10001, 0x400, 0x9e, 0xcd}, {0x7, 0x401, 0x4, 0x10000, 0x5, 0x8}, {0x3, 0x401, 0x1, 0x80000001, 0x8, 0x7f}, {0x9, 0x8, 0x2, 0x4, 0x10001, 0x7094}, {0x200, 0x1, 0x401, 0x1, 0x81, 0x4}, {0x8, 0x5, 0x4, 0x7, 0xffffffff, 0x3}, {0x5, 0x3, 0x5, 0x14000, 0x83b9, 0x6}, {0x1, 0x1a35, 0x8, 0x80000000, 0x8000, 0xd}, {0x97, 0x80000001, 0x0, 0x3, 0x5}, {0x0, 0x0, 0x7, 0x1000, 0x7, 0x2}, {0xa8, 0x101, 0xffffffff, 0x5, 0x6, 0x4}, {0xdf, 0x181, 0x3c, 0xff, 0x6, 0x34565328}, {0x2, 0x9, 0xa, 0xfffffffc, 0xfabb, 0x8}, {0x8, 0x6, 0x800, 0x4, 0x8f08, 0x4}, {0x9, 0x200, 0x7, 0x484, 0xff, 0x2}, {0x4, 0x1, 0x3, 0xc, 0x5, 0x8}, {0x4, 0x0, 0x4, 0xfffffffd, 0x3, 0x100}, {0x0, 0x80000000, 0x4, 0x6, 0x7, 0x1}, {0x80000001, 0xfffffff9, 0xa, 0xa, 0x1, 0x7}, {0x5, 0x2, 0xfffffffb, 0x10001, 0xa}, {0x9, 0xffff, 0x1, 0x7, 0xbb}, {0x9, 0x4, 0x0, 0x1d5, 0x0, 0x9}, {0x1, 0x5, 0x21, 0x6, 0xffff8000, 0x1200}, {0x3, 0xfffffffe, 0x80000000, 0x8, 0xf, 0x4}, {0x6, 0xfffffffd, 0x80000000, 0x5, 0x8001, 0x6}, {0x9, 0xaf96, 0x55be, 0x10000, 0x5, 0x5}, {0x8, 0x2, 0x0, 0x0, 0xffffffff, 0x6}, {0x8, 0x3ff, 0x9, 0x144f, 0x5, 0xfffffffc}, {0x4, 0x6, 0x9, 0x1, 0x400, 0x1}, {0x9, 0x7c, 0x3, 0x6, 0x7fffffff, 0xf}, {0xfbc, 0x2, 0x10000, 0x4, 0x0, 0x10000}, {0x8, 0xff, 0x8000, 0x180000, 0x2, 0x6}, {0x8, 0x0, 0xa6d, 0x3, 0x6, 0x1c1}, {0x5, 0xf868, 0xf, 0x8, 0x5ea8, 0x2}, {0x58, 0xa12, 0x2, 0x3, 0x5, 0x200}, {0x8, 0xffffffff, 0xfffffffe, 0xdd, 0x504, 0x4}, {0x6, 0xeb44, 0x8, 0x101, 0x3e, 0x5}, {0x2, 0xffffffff, 0xfffffff9, 0x524, 0x1000, 0x1}, {0x2, 0x1, 0x5, 0x1, 0x8, 0x3}, {0x800, 0x400, 0x13, 0x7ff, 0x1, 0xc}, {0x401, 0x2, 0x9, 0x9d95, 0xa4e5, 0xc}, {0x7, 0x10, 0x4, 0x7, 0x3, 0xfcf}, {0x4, 0xc36d, 0x8, 0x8, 0xc8, 0x2}, {0x0, 0x6, 0x2, 0xffff, 0xec0, 0xfff}, {0x1fe, 0x335, 0x9, 0x8c, 0xcda, 0xe}, {0x44db408e, 0x4, 0x2, 0x4, 0x6, 0x5}, {0x8, 0x4, 0x3e1, 0xf, 0x5, 0x9}, {0x6, 0x4, 0xfbe3, 0x45, 0x1000, 0x2}, {0x9, 0x3, 0x1, 0xb, 0x28b294fa, 0x6}, {0x7f, 0x0, 0x9, 0xf8, 0x800, 0x401}, {0x49, 0xbe76, 0x4, 0x8000, 0x7, 0x8}, {0x1, 0x400, 0x2, 0xa3, 0x0, 0x1806213e}, {0x1, 0xffffffff, 0x7fffffff, 0x8, 0x6, 0x8}, {0x200, 0x100, 0xf8cc, 0x69b39052, 0x3ff, 0x4}, {0x4, 0xfffffff7, 0x3ff, 0x3c28, 0x5, 0x2}, {0xf7a, 0x9, 0x9, 0x7cec, 0x4f, 0x1}, {0x3, 0x8, 0x1, 0xffffffff, 0x4, 0x8}, {0xfffffc00, 0x5, 0x6, 0x2, 0xee5, 0x7fffffff}, {0x80000000, 0x4, 0x8a, 0x26, 0x8, 0x5}, {0x2, 0x0, 0xcb, 0xffffffff, 0xb05a, 0x1}, {0x4, 0x53b, 0x0, 0x8, 0x4, 0x5}, {0x7, 0x0, 0xff, 0x2, 0xdbd, 0x2}, {0x10, 0x0, 0x2, 0x3, 0x7, 0x4f4f5e8f}, {0x1e4, 0x6, 0x6, 0xf, 0x5, 0x10001}, {0x0, 0x401, 0x400, 0x0, 0x7, 0x3ff}, {0x5, 0x8, 0x7fff, 0x3, 0x4, 0x2099}, {0x4, 0x81, 0x1, 0x5, 0x5, 0x2}, {0x6, 0x6, 0x1, 0xe28, 0x7, 0x2}, {0x5e, 0x1c000, 0x3, 0xff, 0xffffffff, 0xee}], [{0x3, 0x1}, {0x3}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0xa, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x6, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0x5}, {0x2}, {0x5}, {0x5, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x3}, {0x2}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x883ef5a3ac37263f}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x70c510d298a0c8c5}, {0x3, 0x1}, {0x1}, {}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x5, 0x8, 0x2, 0xfffffff8, 0x9}, 0x40, 0xf, [{0x1, 0x2, 0x6, 0x4, 0x6, 0x3}, {0xfffffffe, 0x9, 0x3, 0x4, 0x7, 0xa}, {0x80, 0x5, 0x1, 0xfffffffa, 0x9, 0x6}, {0xb8a9, 0x6, 0xcf69, 0x6, 0x8, 0x3}, {0x4, 0x1, 0x0, 0x8, 0x3, 0x7}, {0x1, 0x2, 0x6cf9, 0xfffffffc, 0x0, 0x1}]}, [{0xc, 0xffffbb4e, 0x6, 0x6, 0x7, 0x101}, {0x3, 0x9d, 0xffff, 0x3, 0x8000, 0xfff}, {0x4284fc28, 0x100, 0x99, 0x0, 0x401, 0x7f}, {0xffffff90, 0xc6, 0x8, 0x6, 0x4000, 0xfffffbff}, {0x7fffffff, 0xe6, 0x5, 0x0, 0x4, 0x2}, {0x22ca, 0x2, 0x7, 0x3, 0x65d4, 0x3a}, {0x9, 0x80000001, 0xbe, 0x0, 0xf5292c7}, {0x4, 0xcc, 0x7, 0x8, 0x31a, 0x2d93}, {0x9c1a, 0x1, 0x8, 0x2, 0x5, 0x7}, {0xff, 0xfff, 0x8, 0x7, 0xffff8000, 0xfff}, {0x10001, 0x6, 0x7, 0xeb, 0x4, 0x58e0}, {0x8, 0x9, 0xfa83, 0x7fff, 0xfffffffd, 0x4}, {0x7, 0x39ad, 0xd, 0x5, 0x8, 0x2}, {0xf, 0x996, 0x78, 0x0, 0x8, 0x5}, {0x18, 0x3, 0x7, 0x4, 0x0, 0x3}, {0x8, 0x6, 0x0, 0xfffffffd, 0x9, 0x4}, {0x7, 0xfffffce2, 0xfffe0000, 0x80, 0x8, 0x8}, {0x2, 0x230, 0x7, 0x4, 0x4800, 0x8}, {0x1b1, 0x4, 0xf7d8, 0x0, 0x7fffffff, 0x7}, {0x7, 0x1, 0x800, 0xfffffe01, 0x9, 0x242}, {0x0, 0x80000001, 0x7, 0x88a4, 0x0, 0x3}, {0x3, 0xd, 0xaad, 0x400, 0x3ff}, {0xc, 0x6, 0x1ff, 0x4, 0x5, 0x5}, {0x7, 0x800, 0xfff, 0x8, 0x7ff, 0x677b}, {0x0, 0x2ef589e3, 0x6, 0x8, 0xffffff7f, 0x22d6}, {0xc, 0x4, 0xe, 0xffff0000, 0x0, 0xf17}, {0x5, 0x2, 0xb9, 0x8, 0x49ef}, {0x8000, 0xfffffff8, 0x8218, 0x8, 0x4, 0x4}, {0x8, 0xd, 0x8, 0xf9, 0x9, 0x4}, {0x0, 0x3, 0xb08f, 0x8, 0x4, 0x5}, {0x9, 0xffffff7f, 0x9, 0x5, 0xdf8}, {0x8000, 0xe00, 0x80, 0x3, 0x101, 0x10001}, {0x800, 0x7272, 0x72, 0x9, 0x9, 0x6153584f}, {0x10, 0x3, 0x6, 0x4, 0x5, 0x3}, {0x5, 0x100, 0x6, 0x9, 0x1, 0x8}, {0x2, 0x8, 0x26, 0xf, 0x141, 0x5}, {0x9a7f, 0x100, 0xfffffffa, 0x6, 0x7fffffff, 0x2}, {0x7, 0x1, 0x1800, 0x8, 0x5, 0x7}, {0x5, 0x9, 0xc, 0xfffffff2, 0x2, 0x7}, {0x1, 0x5, 0x2, 0x0, 0x9, 0x4}, {0x8, 0x77e, 0x0, 0xe, 0x1, 0xa657}, {0xa9d, 0x7fff, 0x3ff, 0x80000000, 0x6, 0x38a}, {0x29, 0x6, 0x2, 0xc043, 0x9, 0x9}, {0xfffffffa, 0x10, 0x1, 0x8, 0x8, 0x8}, {0x20, 0x2, 0x5, 0xd2, 0x747, 0x4}, {0x8, 0xffff8000, 0xa24c, 0x7ff, 0xfffffffe, 0x80000001}, {0x9b23, 0x4, 0xd5, 0x8, 0x2, 0x632a}, {0x200, 0xb, 0x7, 0x2, 0x9}, {0x1, 0x0, 0x1, 0x1, 0xcece, 0x2}, {0xfffffffe, 0x5, 0x7, 0x6, 0x7f, 0x4}, {0x0, 0x8, 0x5, 0x7ff, 0x9, 0x5}, {0x1000, 0x100000, 0x9, 0x9, 0xf, 0x9}, {0xffffdc19, 0x9, 0x7f, 0x1, 0x62c5, 0x9}, {0x3, 0x9, 0x9, 0xc, 0xdadc, 0x7ff}, {0x7, 0x7, 0x8, 0x7, 0x31b, 0x1}, {0x2, 0x200, 0x30d, 0x3, 0x80, 0xc}, {0x80000000, 0xacd, 0x8, 0x0, 0xfffffffa, 0xd47}, {0x7, 0x7, 0x200, 0x1000, 0x3ff, 0x5}, {0x2, 0xffff00, 0x1000, 0x7, 0x7ff, 0x89cc}, {0x80, 0x4, 0x7ff, 0x40, 0xffffff00, 0x3}, {0x0, 0x3, 0x0, 0x4, 0x10000, 0x1}, {0x1, 0xf220, 0x8, 0x8, 0x1}, {0x5, 0x2, 0x3, 0x9, 0xa1fb, 0x6da59b54}, {0x7fffffff, 0xc, 0x2, 0x40, 0x3, 0x1}, {0x800, 0x8c, 0x8, 0x73, 0x1, 0xfffffa27}, {0x100, 0x3ff, 0x0, 0x4, 0x8, 0x6}, {0x1a, 0x0, 0xb68f, 0x9, 0x4, 0x5}, {0x4, 0x6, 0x7, 0x8000, 0x10000000, 0xfa1}, {0xffffffff, 0x7fff, 0x1000, 0x0, 0x5, 0x1}, {0x4, 0x3, 0x4, 0x7f, 0x3, 0xb8}, {0x7, 0x9, 0xfffffffe, 0x6, 0x4, 0x101}, {0x0, 0x4, 0x7, 0x4, 0x0, 0x7}, {0x400, 0x81, 0x3, 0x9, 0xfffffffa, 0x6}, {0x8, 0xc, 0x2, 0x8, 0x10, 0x1}, {0x9, 0x6, 0x1, 0x9, 0x9, 0x1ff}, {0x5, 0xe747, 0x420, 0x5, 0x50d2, 0x3}, {0x5, 0x9, 0x20000000, 0x8000, 0xc, 0x80000000}, {0x7, 0x3, 0x10001, 0x4, 0x4, 0x1}, {0xfffffffd, 0x6, 0x800, 0x80000000, 0xc, 0xfff}, {0x6, 0x9, 0x5, 0x1, 0xfffffffb, 0x9}, {0x3a, 0x1ff, 0x5, 0x200, 0x9, 0x9}, {0x9, 0x6, 0x7, 0x5, 0x4}, {0x5, 0x9, 0x1, 0x6, 0x9, 0xaba4}, {0x4d4, 0xfffffff8, 0x1, 0x9, 0xc, 0xdfb}, {0x7, 0x5, 0x2, 0x0, 0x80, 0x2}, {0x4, 0x100, 0x401, 0x8, 0x9, 0x2}, {0x40, 0x7, 0x3, 0x0, 0x4, 0x58b}, {0x5, 0x7ff, 0x4, 0x10000, 0x2, 0xff}, {0x82db, 0x4, 0x1, 0x4, 0x7, 0x3}, {0xffff, 0x8, 0x8000, 0xaa, 0xfffffff7, 0x4}, {0x1, 0x7, 0x6, 0x0, 0x5, 0x5}, {0x2, 0x6, 0x1, 0x3, 0xd57, 0x10001}, {0xd, 0xa0a1, 0x6, 0x6, 0xfffffe01, 0xe}, {0x4, 0x3ff, 0x400000, 0x3, 0x8, 0x1d5}, {0x1, 0x8, 0x9, 0xcf, 0x6, 0x7}, {0xdbb, 0x5, 0xfffffffe, 0x7, 0x1, 0x87}, {0x8, 0x1, 0x10, 0x0, 0xfffffff7, 0xd58}, {0x8, 0x2, 0xeff, 0x10, 0x9, 0xfffffff8}, {0x7, 0x0, 0x7, 0x1200000, 0x40}, {0x9, 0x1, 0x400, 0x1ff, 0x6, 0xfffffff3}, {0x4, 0x1ff, 0x4d, 0x3, 0xff, 0x1}, {0x1000, 0x9, 0x1, 0x55, 0x3}, {0xfffffffd, 0xbc, 0x2, 0x1, 0x8, 0xb}, {0x3729, 0xec, 0x7f, 0x3, 0x1, 0xa}, {0x3, 0x17ba, 0x800, 0x5, 0x800, 0x6}, {0x8, 0xc3fc, 0x9, 0xfffffffb, 0x5, 0xc708}, {0xf55, 0x4, 0x9a, 0x5, 0x4, 0x78}, {0x9, 0x7, 0x6e, 0x4, 0x40, 0x1e54}, {0x2, 0xcb, 0xf, 0xd, 0x80000001, 0x1}, {0x1, 0x80000000, 0xfffff2e5, 0x5, 0x0, 0x2}, {0x9, 0x100, 0xde, 0x200, 0x81000000, 0x869}, {0xf0, 0x9, 0xfe, 0xf, 0x9, 0x2}, {0x8, 0x3, 0x0, 0x1, 0x9, 0x8000}, {0x1, 0x401, 0x7, 0x0, 0x5a, 0x5}, {0x3ff, 0x0, 0xa0000, 0x5, 0x4, 0x6}, {0x7, 0x6, 0x2, 0x7fffffff, 0xb5, 0x8}, {0x3, 0x4, 0x8, 0xd94, 0x1, 0xfffffffc}, {0xc, 0x101, 0x2, 0x4, 0x9, 0xb}, {0x4, 0x80000000, 0x4, 0x0, 0x7fff, 0x9}, {0x164, 0x1, 0x9, 0x8000, 0x0, 0x4}, {0x8, 0x8, 0x9, 0x80000001, 0xffff, 0x80000000}, {0x7, 0x4, 0xfffffffc, 0xffff7fff, 0x4, 0xf86a}, {0x5, 0x8, 0x400, 0x1, 0x9, 0xd3}, {0x32d, 0x3, 0x4, 0xf, 0xfffffe00, 0x80}, {0x6, 0x1, 0x0, 0x7, 0x41, 0x3}, {0x6, 0x8, 0x4, 0x9, 0x7fffffff}, {0xab, 0x80, 0x4, 0x7, 0x5}, {0x4, 0xf5c, 0x7f, 0x6a9, 0x8, 0x6a}], [{0x1, 0x1}, {0x7, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4}, {0x2}, {0x2}, {0x2}, {0x5}, {}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x5}, {0x1}, {0x4, 0x1}, {0x4}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0x80, 0x6, 0x8, 0x81}, 0x0, 0x58, [{0xfff, 0x8, 0x8001, 0xad7, 0x2, 0x2}, {0x8, 0xa2, 0x401, 0x80000000, 0x4, 0xd}, {0x2, 0x9, 0x3, 0xf, 0x9, 0x5077}, {0xa, 0x0, 0x7b, 0x101, 0x1, 0x8}]}, [{0x6, 0x7fff, 0x5, 0x5, 0x80000000, 0x1000}, {0x8, 0x0, 0x101, 0x4, 0x20, 0x639f}, {0x70d5, 0xfffffe00, 0x3, 0x1, 0x6, 0x3}, {0xffffff14, 0xc0, 0x8, 0x3, 0x5, 0xc38d}, {0xffffffbe, 0x89ee, 0x7ff, 0xbf, 0x3, 0x400}, {0xff, 0x400, 0x101, 0x7, 0x3, 0x1}, {0x7, 0x40, 0x3, 0x8, 0x7f, 0x5c08db49}, {0x0, 0x7ff, 0x6f070391, 0x80, 0x7ff, 0x5}, {0xd614, 0x5, 0x0, 0x0, 0x81, 0x100}, {0x1000, 0x6, 0x8, 0x7, 0x2, 0x74e7}, {0x8, 0x800, 0x4, 0x8000, 0xe, 0xb56}, {0x1, 0x101, 0x2, 0x0, 0xd7, 0x7dc4}, {0x2852efac, 0x3, 0x7021, 0x710e, 0x5, 0x200}, {0x1, 0x9, 0x0, 0x9, 0x5, 0xa}, {0x2, 0x40, 0x3ff, 0xc66, 0xfffffff8, 0x80}, {0x6, 0x101, 0x685d, 0xffffffff, 0x1}, {0x3b, 0xd, 0xa, 0x0, 0x3eb0, 0x93c9}, {0xf6c7, 0x5, 0x0, 0x5f, 0x80000001, 0x3}, {0x4c87, 0x7, 0x9, 0x2, 0xfffffff1, 0xa}, {0x1, 0x1, 0x7, 0x80000001, 0x1ff, 0x268}, {0x0, 0xffffffb8, 0x3859, 0x800, 0x2}, {0x52845d25, 0x6, 0x0, 0x9, 0x0, 0x1}, {0xfffffffe, 0x1000, 0x7, 0x6, 0x8001, 0x6}, {0x6, 0x2, 0x2f2b6a54, 0x3, 0x4, 0xfffffc00}, {0x5, 0x0, 0x6, 0x3, 0xa, 0x8}, {0x40, 0x1, 0x0, 0x28b, 0x7, 0x5}, {0x80, 0x7, 0x9, 0xc, 0x10, 0x4}, {0xb, 0xe, 0xfffff001, 0x5, 0x9, 0x3}, {0x9, 0xffffffff, 0x4, 0x6, 0x6, 0x8fac}, {0xffffffff, 0x1ff, 0x8000, 0x101, 0x6f390116, 0x8}, {0x3, 0x2, 0x2, 0x7, 0x3, 0x6}, {0x2, 0x5, 0x201c000, 0xfffffffb, 0x80}, {0xc87, 0x0, 0xf, 0x444, 0x7f, 0x8}, {0xfffffffc, 0x9, 0x3, 0x735, 0x6, 0x8}, {0xc08, 0x12, 0x905, 0x4, 0x1, 0x8000}, {0x48b484b0, 0x3, 0x2, 0xff, 0x10001, 0x2}, {0x7fff, 0xffffffff, 0x10000000, 0x0, 0xe, 0x9}, {0x0, 0x1, 0x6, 0x6, 0x76, 0x200}, {0x6, 0x9, 0xfffffffb, 0x9, 0x6}, {0xe1b6, 0x8, 0x7fffffff, 0xfff, 0x5}, {0x8, 0x1ff, 0x7, 0x6, 0x1, 0x10001}, {0x6313, 0x0, 0x9, 0x20, 0xb2, 0x1}, {0xe2b, 0x2, 0x0, 0xdd5d, 0x80, 0x6}, {0x8, 0x7, 0x5, 0x0, 0x3e7, 0x8001}, {0xc805, 0xf9, 0xf49f, 0xffffffe5, 0x0, 0x7}, {0x5, 0x4, 0xa4e, 0x8d, 0x7, 0x9}, {0xa, 0x4, 0x980, 0x9, 0x8, 0xd11c}, {0x401, 0x7, 0x10000, 0xff0, 0x634c, 0x2}, {0x7, 0x0, 0x7, 0x5, 0x14, 0x6}, {0x174, 0x9, 0x7, 0x21, 0x6, 0x8000}, {0x1, 0x80000001, 0x18, 0x8, 0x5, 0xff}, {0x0, 0x2, 0x40, 0x6, 0x8, 0x7}, {0xd, 0x2, 0x2a6c0511, 0x7fffffff, 0x1, 0x40}, {0x7, 0x10, 0x100, 0xfffffffd, 0x7, 0x3c0}, {0x4, 0x4, 0x9, 0x9, 0x5, 0x18}, {0x5, 0x9, 0x10001, 0x7, 0x9, 0x8}, {0x7fff, 0x358b, 0x3, 0x2, 0x2, 0x4}, {0x1, 0x8, 0x5ec0, 0x6a1a, 0xfffffff9, 0x8001}, {0x0, 0x1e1, 0x4, 0x91, 0x1, 0x7}, {0x0, 0x0, 0x2, 0x400, 0x207, 0x5}, {0x100, 0x7, 0x0, 0x4, 0x336dbeef, 0x45}, {0x6, 0x3f71, 0xfffffff8, 0x1, 0x7, 0xff}, {0x8, 0x0, 0x7, 0xb, 0x4, 0x5}, {0x80000001, 0x9, 0x1000, 0x4cca, 0x1000, 0xe}, {0x0, 0xffffffff, 0xc31, 0x6, 0x3, 0x162}, {0xfffffff9, 0x8000, 0xfffffffa, 0x9, 0x3, 0x8}, {0xd, 0x135, 0x9, 0x9, 0x40, 0x40c5}, {0x67c, 0xffffff21, 0x3, 0x3, 0x400}, {0x4e, 0x0, 0x8, 0x6d, 0xa74, 0xf2}, {0xfa, 0x2, 0xdd, 0xe, 0x81, 0x8}, {0x5, 0x40, 0x6, 0xff, 0x95b, 0xa}, {0xc, 0x8, 0xffffff4a, 0x0, 0x443, 0x7}, {0x10, 0x100, 0xf, 0x6, 0xfffffffb, 0x13}, {0x8, 0x11, 0x0, 0x7, 0x7db, 0x6}, {0xd, 0x2, 0xffa, 0x14000, 0x7fffffff, 0x4}, {0x4, 0x1, 0x9, 0x0, 0x9, 0x5}, {0x1000, 0x200, 0x1000, 0x46, 0x2, 0x4}, {0x7f, 0x401, 0x877e, 0x1ff, 0x6, 0x100}, {0x800, 0x200, 0x0, 0x3, 0x7, 0x6562}, {0x200, 0x400, 0xfac1, 0x1000, 0x7fff, 0x2}, {0xfffffffe, 0x2, 0x2, 0x7, 0x3}, {0x35, 0x2, 0x4, 0x3ea, 0xfff, 0x5}, {0x9, 0x8000, 0x6, 0x6, 0x10001, 0x10000}, {0x0, 0x9, 0x2, 0x8, 0x10001, 0x528}, {0x4, 0xa, 0x10000, 0x6, 0xc81, 0x6}, {0x7, 0x15, 0x1, 0x7, 0x2, 0x7}, {0x6ded, 0x9, 0x7f, 0x0, 0xd05d, 0x1}, {0xfffffff1, 0x4, 0x80000000, 0x731, 0x7, 0x3}, {0x4, 0x1, 0x5, 0x84, 0x72000000, 0x4388}, {0x4, 0x1ff, 0x9, 0x4, 0x2, 0x8000}, {0x3, 0x9, 0x3, 0x7, 0x6, 0x3}, {0x49, 0x2, 0x7, 0x2, 0x8, 0xffffb3a0}, {0x6, 0x3, 0x6, 0x3b, 0x1, 0x1}, {0x0, 0xfffff000, 0x1, 0x6, 0x7, 0xf}, {0x17f, 0x9, 0x8, 0x0, 0xf, 0x2}, {0x5, 0xffffffff, 0x9, 0x8, 0x7, 0xee}, {0x3, 0x7, 0xc, 0x9d2, 0x8e6, 0x800}, {0xffffff00, 0x820, 0x0, 0x5, 0xfffffffe, 0x6}, {0xd00, 0xe70, 0x7, 0x4, 0x0, 0x5}, {0xcc4, 0x10001, 0x1, 0x35, 0x1}, {0x747, 0x8, 0x6, 0xfece, 0x313, 0xffffffff}, {0x8000, 0x6, 0x6, 0x1, 0x2, 0x7}, {0x6, 0x6, 0x0, 0x6, 0x6, 0x7}, {0x2, 0x5, 0x2c8154cc, 0x5, 0x8, 0xa}, {0x4b, 0xf23, 0x80000000, 0x101, 0xfffffeff}, {0x4, 0x9, 0x9, 0xa, 0x38, 0x7431}, {0x2, 0x2, 0x0, 0x9, 0x8, 0x1000}, {0x722c0182, 0x7, 0x6800, 0x6, 0xde, 0x1}, {0x9, 0x3aea082d, 0x80000000, 0x2, 0xffffff00, 0x40d7}, {0x5, 0x7ff, 0x0, 0x401, 0x6, 0x8}, {0x2, 0x1, 0x0, 0xe, 0x8, 0x4}, {0x6, 0x0, 0x2, 0xd67, 0x34ba, 0x101}, {0x7f, 0xdd, 0x4, 0x8027, 0x5, 0x7}, {0x2, 0x0, 0xa, 0xf71, 0x0, 0x1000}, {0x5, 0x1, 0x1, 0xe, 0x7, 0xd0ed5474}, {0x4, 0x6, 0x7, 0xb, 0x40, 0x7fffffff}, {0x9, 0x2, 0x80000000, 0x8, 0x3, 0x3}, {0x1e4c, 0x5, 0x6, 0xffff469a, 0x2, 0x4}, {0x9, 0x6, 0x1, 0x0, 0xb, 0x40000000}, {0xfffffeff, 0xe, 0x80, 0x0, 0x8, 0x10000}, {0xd, 0x4, 0x7, 0x1, 0x2, 0x7}, {0x1, 0x0, 0x200, 0x2, 0x8, 0x45f}, {0xd8, 0x3, 0x3, 0x9, 0x2, 0x1000}, {0x10000, 0x40, 0x0, 0x1, 0x7, 0x85}, {0x9, 0x3, 0x8, 0x5, 0x6, 0x9}, {0x80, 0x54cc7c1d, 0x6, 0xffffffff, 0x3, 0x932}, {0x1, 0x200, 0x7, 0x3, 0xffffffff}, {0x6, 0x9, 0x2, 0x4, 0x8, 0x1d}], [{0x2}, {0x5}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x6}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x522b5faa67775cb}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}]}}]}, 0x3110}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) tkill(0x0, 0x7) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 9m51.422234394s ago: executing program 2 (id=8662): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x1, 0x0, &(0x7f0000000380)="e4", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x43, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m51.158540706s ago: executing program 2 (id=8663): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x100000, 0x0, 0x0, 0x0) 9m49.824639731s ago: executing program 2 (id=8670): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r1}, './file0\x00'}) 9m49.53411081s ago: executing program 2 (id=8673): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 9m35.223619456s ago: executing program 35 (id=8673): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 2m36.890394363s ago: executing program 3 (id=10238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(0x0, 0xecf86c37d53049cc) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002", 0x8, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\x10\x88h\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\b\x00T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r3, 0x0, 0x0, 0x0, 0x1000) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) 2m26.458453789s ago: executing program 3 (id=10266): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m25.091466831s ago: executing program 3 (id=10271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='ub\xce\x00\x00\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) close_range(r3, 0xffffffffffffffff, 0x0) 2m23.630400186s ago: executing program 3 (id=10274): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='stack\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) 2m20.333497404s ago: executing program 3 (id=10283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 2m5.595142402s ago: executing program 36 (id=10283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 17.638095209s ago: executing program 5 (id=10566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) accept4(r0, 0x0, 0x0, 0x80800) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x402000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15.76597893s ago: executing program 8 (id=10569): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r5, r0) 14.803067764s ago: executing program 8 (id=10572): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000100)='-1\x00', 0x2) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) socket$netlink(0x10, 0x3, 0x13) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000080)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r4, 0x100000000) dup(r0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14.442184565s ago: executing program 5 (id=10575): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 12.910101105s ago: executing program 5 (id=10578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x58, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x1, @pix={0x0, 0x80000001, 0x43564548, 0x9, 0x7, 0x200, 0x8, 0x3, 0x1, 0x0, 0x1, 0x1}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0xa, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, &(0x7f0000000280)=""/216, 0xd8, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = dup2(r10, r9) mq_notify(r11, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 12.60345754s ago: executing program 8 (id=10579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x25, 0x4, @void}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 12.381531594s ago: executing program 5 (id=10580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 11.66767487s ago: executing program 8 (id=10584): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) getpid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000008000000000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000044000000060a010400000000000000000100000008000b40000000000900010073797a30000000001c000480188008000140000000ffffffff001100010000000000000000000000000a00"/184], 0xb8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010325bd7000fcffffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 10.308139979s ago: executing program 7 (id=10586): lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a00)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_dump={0x40, 0x13, 0x200}}) 9.011893588s ago: executing program 6 (id=10587): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8.009480227s ago: executing program 6 (id=10589): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x1, 0x113583) write$P9_RLOPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r2]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x2020) 7.478791289s ago: executing program 6 (id=10590): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(r3, 0x0, 0x112) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x840) 6.458530433s ago: executing program 6 (id=10592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_setup(0xc299, &(0x7f0000000280)={0x0, 0x4a24, 0x80, 0x0, 0x240, 0x0, r3}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r7, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 6.348660451s ago: executing program 5 (id=10593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6.346703425s ago: executing program 9 (id=10594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x440) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x9637b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) 5.32626261s ago: executing program 9 (id=10595): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a2426", 0x3c}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac", 0x1d}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da", 0x26}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.325896279s ago: executing program 5 (id=10596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x18c) r3 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(r3, 0x0, 0x14, &(0x7f0000000740)) socket$inet(0x2, 0x80001, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000200000000002000000000000000456deb880f"], 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 4.87595342s ago: executing program 7 (id=10597): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat(r1, &(0x7f0000000300)='./file1\x00', 0x200c00, 0x181) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 4.773521355s ago: executing program 8 (id=10598): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2038060, &(0x7f0000000340)={[{@nr_inodes}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getenv(0x4201, r0, 0x4, &(0x7f00000001c0)) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.680811463s ago: executing program 9 (id=10599): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.674085156s ago: executing program 7 (id=10600): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat(r1, &(0x7f0000000300)='./file1\x00', 0x200c00, 0x181) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="514e06f6679ce5e8d4c4482e3989", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28ba) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 3.874913185s ago: executing program 7 (id=10601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 3.874705346s ago: executing program 6 (id=10602): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 3.804127435s ago: executing program 8 (id=10603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.802609248s ago: executing program 9 (id=10604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xd, 0x9, 0x800, 0x1, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x10, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.12676277s ago: executing program 6 (id=10605): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 2.308705382s ago: executing program 7 (id=10606): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000003e40)={[{@redirect_dir_on}, {@volatile}]}) 1.655289616s ago: executing program 9 (id=10607): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, 0x0, &(0x7f0000000180)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x0) 1.412231828s ago: executing program 7 (id=10608): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000021401002bbd7000fbdb", @ANYRES32, @ANYBLOB="30b9ba53d70b853b91cc01cf8b4a4e5f0eaf91049634e915f15490f5ef1bffe54e4cb0c0b2622bedf43bfbe314e103c98eab027a4c53a299f11cef8b5f440bd3f88eef87d527ef91610edaa618dd24e8ca188220dc5fca86d2348338425f1d6e87bf35c991ccfc39e8777128cda74e0c9df592a939e1aaf1"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) fsopen(&(0x7f0000000400)='xfs\x00', 0x0) unshare(0x26020480) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f00000000c0)}) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r4, 0x0, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 0s ago: executing program 9 (id=10609): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r8, &(0x7f00000000c0), 0x12) syz_genetlink_get_family_id$batadv(0x0, r8) kernel console output (not intermixed with test programs): v="fuse" ino=4 res=0 errno=0 [ 677.823593][T27787] netlink: 'syz.7.8839': attribute type 1 has an invalid length. [ 677.958962][T27788] bond2: Unable to set up delay as MII monitoring is disabled [ 678.077917][T27788] bond2 (unregistering): Released all slaves [ 678.358520][T27787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.539418][T27792] bond2: (slave ip6gretap1): making interface the new active one [ 678.613755][T27792] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 680.028007][ T5961] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 680.182763][ T5961] usb 9-1: Using ep0 maxpacket: 16 [ 680.212262][ T5961] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 680.223022][ T5961] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 680.243218][ T5961] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.253756][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.261932][ T5961] usb 9-1: Product: syz [ 680.271679][ T5961] usb 9-1: Manufacturer: syz [ 680.276561][ T5961] usb 9-1: SerialNumber: syz [ 681.020097][T27827] smc: net device bond0 applied user defined pnetid SYZ2 [ 681.048042][T27827] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8851'. [ 681.098685][T27827] smc: removing net device bond0 with user defined pnetid SYZ2 [ 681.182406][T27840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.214542][T27827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.230966][T27840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.285789][T27827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.345311][T27827] bond0 (unregistering): Released all slaves [ 681.531762][ T5961] usb 9-1: 0:2 : does not exist [ 681.620542][ T5961] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 681.683339][ T5961] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 681.723371][ T5961] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 681.757312][ T5961] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 681.799224][ T5961] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5) [ 681.974159][ T5961] usb 9-1: USB disconnect, device number 2 [ 682.025269][T27418] udevd[27418]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.180945][ T30] audit: type=1326 audit(1771647902.696:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bd59c629 code=0x7fc00000 [ 684.463045][ T30] audit: type=1326 audit(1771647902.780:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84bd59c629 code=0x7fc00000 [ 685.028039][ T30] audit: type=1326 audit(1771647902.791:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27883 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84bd59c629 code=0x7fc00000 [ 686.587418][T27920] 9pnet: p9_errstr2errno: server reported unknown error .group_wait_ [ 686.650273][ T30] audit: type=1400 audit(1771647905.268:1225): avc: denied { read } for pid=27921 comm="syz.3.8883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 690.210973][T20303] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 690.630042][T20303] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 690.873358][T20303] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 690.936909][T20303] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 691.236734][T20303] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 691.276747][T20303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.334745][T20303] usb 9-1: Product: syz [ 691.353332][T20303] usb 9-1: Manufacturer: syz [ 691.382608][T20303] usb 9-1: SerialNumber: syz [ 691.395590][T20303] usb 9-1: config 0 descriptor?? [ 691.408253][T27951] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 691.417763][T27951] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 691.446802][T20303] usb 9-1: ucan: probing device on interface #0 [ 692.115351][T20303] ucan 9-1:0.0 can0: registered device [ 692.285880][T20303] ucan 9-1:0.0 can0: firmware string: unknown [ 692.466424][T20303] usb 9-1: USB disconnect, device number 3 [ 692.779524][T27988] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 692.825297][T27988] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 692.863894][T27988] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 692.981256][T27998] virtiofs: Unknown parameter 'always 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 20 batadv0 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 21 vxcan0 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 22 vxcan1 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 23 veth0 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 24 veth1 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 25 wg0 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 26 wg1 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 27 wg2 : 1 V3 [ 692.981256][T27998] 010000E0 1 0:00000000 0 [ 692.981256][T27998] 28 veth0_to_bridge: 1 ' [ 693.185868][ T30] audit: type=1400 audit(1771647912.144:1226): avc: denied { create } for pid=27993 comm="syz.6.8903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 694.156279][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 696.337859][T28038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8915'. [ 696.632452][T28047] netlink: 'syz.5.8919': attribute type 2 has an invalid length. [ 696.678178][T28047] netlink: 'syz.5.8919': attribute type 2 has an invalid length. [ 697.594211][ T30] audit: type=1326 audit(1771647916.764:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28066 comm="syz.6.8926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4bd9c629 code=0x0 [ 697.916341][ T30] audit: type=1400 audit(1771647917.099:1228): avc: denied { nlmsg_read } for pid=28069 comm="syz.7.8927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 699.211550][ T30] audit: type=1326 audit(1771647918.475:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28084 comm="syz.6.8933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4bd9c629 code=0x0 [ 703.996969][T28166] netlink: 'syz.5.8954': attribute type 4 has an invalid length. [ 704.004920][T28166] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8954'. [ 704.195764][T28164] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.397876][T28166] .`: renamed from bond0 (while UP) [ 704.791165][T28164] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.238149][T28164] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.458618][T28164] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.702773][T28151] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.775881][T28151] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.847521][T28151] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.885309][T28151] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.099039][T28198] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8962'. [ 706.128938][T28197] overlayfs: failed to clone lowerpath [ 706.201103][T28202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28202 comm=syz.8.8962 [ 707.885007][ T30] audit: type=1400 audit(1771647927.587:1230): avc: denied { watch watch_reads } for pid=28229 comm="syz.7.8972" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 711.325422][T22754] Bluetooth: hci0: command 0x0406 tx timeout [ 714.235433][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.960956][T28359] binder: BINDER_SET_CONTEXT_MGR already set [ 718.430029][T28359] binder: 28356:28359 ioctl 4018620d 200000004a80 returned -16 [ 720.581303][T28400] binder_alloc: 28398: pid 28398 spamming oneway? 1 buffers allocated for a total size of 4096 [ 720.700218][T28403] binder_alloc: 28398: pid 28398 spamming oneway? 2 buffers allocated for a total size of 5120 [ 720.797458][ T30] audit: type=1400 audit(1771647941.140:1231): avc: denied { watch watch_reads } for pid=28405 comm="syz.8.9019" path="/40/file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 722.241466][T28419] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 722.317797][T28429] futex_wake_op: syz.7.9025 tries to shift op by -1; fix this program [ 722.398738][T28431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9027'. [ 722.851047][T28446] kvm: emulating exchange as write [ 722.990104][T28451] overlayfs: failed to clone upperpath [ 723.172244][T28456] netlink: 'syz.8.9036': attribute type 1 has an invalid length. [ 723.311330][ T30] audit: type=1800 audit(1771647943.775:1232): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.9037" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 724.649667][T28479] sctp: [Deprecated]: syz.5.9044 (pid 28479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.649667][T28479] Use struct sctp_sack_info instead [ 724.849098][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9045'. [ 724.972046][T28492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28492 comm=syz.3.9045 [ 725.068052][T28499] tipc: Enabling of bearer rejected, failed to enable media [ 725.319317][T28504] overlayfs: failed to clone upperpath [ 726.660731][T28538] tipc: Enabling of bearer rejected, failed to enable media [ 728.369404][T28561] netlink: 'syz.6.9068': attribute type 1 has an invalid length. [ 728.499409][ T30] audit: type=1400 audit(1771647949.223:1233): avc: denied { create } for pid=28560 comm="syz.6.9068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 728.629188][ T30] audit: type=1400 audit(1771647949.255:1234): avc: denied { write } for pid=28560 comm="syz.6.9068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 728.758002][ T30] audit: type=1400 audit(1771647949.265:1235): avc: denied { read write } for pid=28563 comm="syz.3.9069" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 728.785559][ T30] audit: type=1400 audit(1771647949.265:1236): avc: denied { open } for pid=28563 comm="syz.3.9069" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 728.970823][T28561] bond2: entered promiscuous mode [ 728.976184][T28561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.325688][T28594] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 730.336705][ T30] audit: type=1400 audit(1771647951.144:1237): avc: denied { append } for pid=28590 comm="syz.8.9078" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 732.387335][T28623] IPVS: length: 218 != 24 [ 732.409804][T28623] syz_tun: entered allmulticast mode [ 732.461473][T28621] syz_tun: left allmulticast mode [ 732.647273][ T30] audit: type=1400 audit(1771647953.580:1238): avc: denied { write } for pid=28619 comm="syz.3.9085" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 736.438830][ T30] audit: type=1326 audit(1771647957.548:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm="syz.7.9098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x0 [ 737.920502][T28699] netlink: 'syz.8.9108': attribute type 8 has an invalid length. [ 739.131969][T28709] fuse: Bad value for 'fd' [ 739.306293][ T30] audit: type=1400 audit(1771647960.561:1240): avc: denied { accept } for pid=28717 comm="syz.6.9115" path="socket:[122362]" dev="sockfs" ino=122362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 741.141751][T22754] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 741.154704][T22754] Bluetooth: hci5: command 0x0405 tx timeout [ 741.331869][T28750] netlink: 'syz.5.9121': attribute type 1 has an invalid length. [ 741.381422][T28750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.592250][T28750] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9121'. [ 741.632802][T28750] bond0: entered promiscuous mode [ 741.637833][T28750] bond0: entered allmulticast mode [ 741.660732][T28750] bond0: (slave dummy0): making interface the new active one [ 741.712988][T28750] dummy0: entered promiscuous mode [ 741.722847][T28750] dummy0: entered allmulticast mode [ 741.728884][T28750] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 742.027950][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9122'. [ 744.401520][T28790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 744.419687][T28790] block device autoloading is deprecated and will be removed. [ 744.755354][ T30] audit: type=1400 audit(1771647966.293:1241): avc: denied { write } for pid=28796 comm="syz.8.9132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 744.899738][T28804] overlayfs: failed to resolve './file1': -2 [ 746.691520][T28836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9144'. [ 746.714587][T28834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.782718][T28837] bridge1: port 1(veth5) entered blocking state [ 746.789555][T28837] bridge1: port 1(veth5) entered disabled state [ 746.811007][T28837] veth5: entered allmulticast mode [ 746.821275][T28837] veth5: entered promiscuous mode [ 746.867798][T28836] bridge1: port 2(veth7) entered blocking state [ 746.901765][T28836] bridge1: port 2(veth7) entered disabled state [ 746.927839][T28836] veth7: entered allmulticast mode [ 747.056668][T28836] veth7: entered promiscuous mode [ 747.563008][T28834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.662246][T28834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.198907][T28834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.261708][T28857] netlink: 'syz.5.9150': attribute type 1 has an invalid length. [ 749.400171][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9150'. [ 749.516297][T28861] gre4: entered promiscuous mode [ 749.542904][T28861] bond5: (slave gre4): The slave device specified does not support setting the MAC address [ 749.592386][ T30] audit: type=1400 audit(1771647971.364:1242): avc: denied { accept } for pid=28867 comm="syz.6.9153" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 749.619679][T28861] bond5: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 749.652892][T28861] bond5: (slave gre4): making interface the new active one [ 749.671804][T28861] bond5: (slave gre4): Enslaving as an active interface with an up link [ 749.706856][T28864] bond5 (unregistering): (slave gre4): Releasing backup interface [ 749.730518][T28864] bond5 (unregistering): Released all slaves [ 749.899392][T28151] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.984500][T20311] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.014906][T20311] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.056576][T20311] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.242569][T28882] overlayfs: failed to clone upperpath [ 750.361059][ T30] audit: type=1804 audit(1771647972.172:1243): pid=28889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.9160" name="file0" dev="tmpfs" ino=5872 res=1 errno=0 [ 750.607446][ T30] audit: type=1804 audit(1771647972.434:1244): pid=28889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.9160" name="file0" dev="tmpfs" ino=5872 res=1 errno=0 [ 750.880950][ T30] audit: type=1326 audit(1771647972.728:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28895 comm="syz.3.9162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x0 [ 754.071666][T20304] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 754.233558][T20304] usb 9-1: Using ep0 maxpacket: 32 [ 754.248635][T20304] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 754.266144][T20304] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 754.488211][T20304] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 754.663407][T20304] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 754.847567][T20304] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 754.970031][T20304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.044626][T20304] usb 9-1: Product: syz [ 755.048805][T20304] usb 9-1: Manufacturer: syz [ 755.166044][T20304] usb 9-1: SerialNumber: syz [ 755.195996][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 755.260158][T20304] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input93 [ 755.499660][T20304] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 755.512823][T20304] (id 0x00) [ 756.061717][T20304] rc_core: IR keymap rc-imon-pad not found [ 756.077096][T20304] Registered IR keymap rc-empty [ 756.204201][T20304] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 756.240598][T20304] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 756.300675][T20304] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 756.443907][T20304] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input94 [ 756.681452][T20304] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:4> initialized [ 756.911106][T20297] usb 9-1: USB disconnect, device number 4 [ 757.903513][ T30] audit: type=1400 audit(1771647980.077:1246): avc: denied { getopt } for pid=28967 comm="syz.3.9184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 760.258848][T29030] blkio.reset_stats is deprecated [ 761.867941][T29056] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 761.876946][T29056] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 763.278332][T28151] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.291663][T28151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.310244][T28151] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 763.812762][T28151] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.822758][T28151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.837821][T28151] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 763.847211][T28151] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.863044][T28151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.871931][T28151] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 763.890523][T28151] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 763.899796][T28151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.910072][T28151] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 764.463168][ T5957] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 764.762103][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.892045][ T5957] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 764.944107][ T5957] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 765.024415][T29113] ptrace attach of "./syz-executor exec"[27553] was attempted by "   /sys/kernel/debug/binder/stats 8    \x09   [ 765.026535][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.282067][ T5957] usb 4-1: Product: syz [ 765.286526][ T5957] usb 4-1: Manufacturer: syz [ 765.292998][ T5957] usb 4-1: SerialNumber: syz [ 765.317915][ T5957] usb 4-1: config 0 descriptor?? [ 765.625799][ T30] audit: type=1326 audit(1771647988.192:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29095 comm="syz.3.9225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x0 [ 765.748313][T20297] usb 4-1: USB disconnect, device number 82 [ 771.410221][T29208] overlayfs: failed to clone upperpath [ 771.664591][T20297] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 771.826174][T20297] usb 4-1: Using ep0 maxpacket: 16 [ 771.842744][T20297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.890849][T20297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.394542][T20297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 772.404763][T20297] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 772.416962][T20297] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.431452][T20297] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 772.441407][T20297] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 772.449741][T20297] usb 4-1: Manufacturer: syz [ 772.457813][T20297] usb 4-1: config 0 descriptor?? [ 772.745442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.799468][T20297] rc_core: IR keymap rc-hauppauge not found [ 772.830124][T20297] Registered IR keymap rc-empty [ 772.835098][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 772.916788][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 772.967811][T20297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 773.032847][T20297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input95 [ 773.080863][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.131863][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.150197][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.225736][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.305097][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.341705][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.410045][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.479176][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.540704][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.590065][T20297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 773.685396][T20297] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 773.750299][T20297] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 773.835818][T20297] usb 4-1: USB disconnect, device number 83 [ 774.285847][T29263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9274'. [ 774.384590][T29263] bond6: (slave vcan1): refused to change device type [ 775.846815][T29280] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9278'. [ 775.963526][T29282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29282 comm=syz.6.9278 [ 778.606898][T29310] syzkaller1: entered promiscuous mode [ 778.612743][T29310] syzkaller1: entered allmulticast mode [ 778.621116][ T30] audit: type=1400 audit(1771648001.850:1248): avc: denied { ioctl } for pid=29309 comm="syz.3.9287" path="socket:[125251]" dev="sockfs" ino=125251 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 779.703017][T29326] bridge_slave_1: default FDB implementation only supports local addresses [ 779.842730][ T30] audit: type=1400 audit(1771648003.120:1249): avc: denied { override_creds } for pid=29319 comm="syz.8.9290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 779.929973][T29334] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 779.950600][T29334] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 779.996284][T29334] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 781.199000][T29237] Set syz1 is full, maxelem 65536 reached [ 781.214478][T29347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 782.028436][T20304] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 782.222094][T20304] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.725954][T20304] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 782.758322][T20304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 782.785917][T20304] usb 9-1: Product: syz [ 782.813142][T20304] usb 9-1: Manufacturer: syz [ 782.824681][T20304] usb 9-1: SerialNumber: syz [ 783.278895][T20304] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 783.611749][ C0] usblp0: nonzero write bulk status received: -71 [ 783.621036][T20304] usb 9-1: USB disconnect, device number 5 [ 783.632927][T29357] usblp0: removed [ 784.468227][T29408] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 784.581748][T22754] Bluetooth: hci3: command 0x0406 tx timeout [ 787.269294][T29445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9325'. [ 787.780746][ T30] audit: type=1400 audit(1771648011.455:1250): avc: denied { node_bind } for pid=29441 comm="syz.5.9326" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 787.885448][T29453] lo: entered promiscuous mode [ 787.904942][T29453] tunl0: entered promiscuous mode [ 787.911889][T29453] gre0: entered promiscuous mode [ 787.934244][T29453] gretap0: entered promiscuous mode [ 787.953163][T29453] erspan0: entered promiscuous mode [ 787.964147][T29453] ip_vti0: entered promiscuous mode [ 787.978344][T29453] ip6_vti0: entered promiscuous mode [ 787.992884][T29453] sit0: entered promiscuous mode [ 788.027228][T29453] ip6tnl0: entered promiscuous mode [ 788.055738][T29453] ip6gre0: entered promiscuous mode [ 788.081440][T29453] ip6gretap0: entered promiscuous mode [ 788.111930][T29453] .`: entered promiscuous mode [ 788.128474][T29453] team0: entered promiscuous mode [ 788.149112][T29453] nlmon0: entered promiscuous mode [ 788.164947][T29453] caif0: entered promiscuous mode [ 788.179327][T29453] veth0_to_bond: entered promiscuous mode [ 788.193635][T29453] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 788.210976][T29453] bond1: entered promiscuous mode [ 788.219378][T29453] geneve2: entered promiscuous mode [ 788.231703][T29453] gre2: entered promiscuous mode [ 788.242562][T29453] gre3: entered promiscuous mode [ 788.254361][T29453] bridge2: entered promiscuous mode [ 788.272116][T29453] sit1: entered promiscuous mode [ 788.287199][T29453] veth4: entered promiscuous mode [ 788.302665][T29453] veth5: entered promiscuous mode [ 788.318322][T29453] bridge3: entered promiscuous mode [ 788.329503][T29453] bond3: entered promiscuous mode [ 788.346484][T29453] veth6: entered promiscuous mode [ 788.360840][T29453] veth7: entered promiscuous mode [ 788.366426][T29453] veth0: entered promiscuous mode [ 788.371684][T29453] veth1: entered promiscuous mode [ 788.377509][T29453] gtp0: entered promiscuous mode [ 788.392233][T29453] gtp1: entered promiscuous mode [ 788.405086][T29453] bridge4: entered promiscuous mode [ 788.426423][T29453] bond4: entered promiscuous mode [ 788.442025][T29453] bridge5: entered promiscuous mode [ 788.466376][T29453] geneve3: entered promiscuous mode [ 788.475277][T29453] bridge0: entered promiscuous mode [ 788.490306][T29453] mac80211_hwsim hwsim31 wlan3: entered promiscuous mode [ 788.503435][T29453] syzkaller0: entered promiscuous mode [ 788.515531][T28151] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 788.528985][T28151] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 788.547152][T28151] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 788.575729][T28151] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 790.696438][T29484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29484 comm=syz.6.9336 [ 790.757279][T29484] netlink: 'syz.6.9336': attribute type 1 has an invalid length. [ 790.826926][T29486] bond3: (slave gretap1): making interface the new active one [ 790.913932][T29486] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 790.923648][T29489] batadv_slave_0: Caught tx_queue_len zero misconfig [ 790.942738][T29484] vlan0: entered allmulticast mode [ 790.957188][T29484] bond3: entered allmulticast mode [ 790.964627][T29484] gretap1: entered allmulticast mode [ 790.995286][T29484] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 791.245665][ T30] audit: type=1326 audit(1771648015.088:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 791.830540][ T30] audit: type=1326 audit(1771648015.098:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 791.856470][ T30] audit: type=1326 audit(1771648015.098:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 791.894860][ T30] audit: type=1326 audit(1771648015.098:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 791.963876][ T30] audit: type=1326 audit(1771648015.098:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.421899][ T30] audit: type=1326 audit(1771648015.098:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.445616][ T30] audit: type=1326 audit(1771648015.098:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.530802][ T30] audit: type=1326 audit(1771648015.098:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.768478][ T30] audit: type=1326 audit(1771648015.098:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.792711][ T30] audit: type=1326 audit(1771648015.098:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.817970][ T30] audit: type=1326 audit(1771648015.098:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.842987][ T30] audit: type=1326 audit(1771648015.098:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 792.961414][ T30] audit: type=1326 audit(1771648015.098:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 793.141700][ T30] audit: type=1326 audit(1771648015.098:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 793.219648][ T30] audit: type=1326 audit(1771648015.098:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 793.264524][ T30] audit: type=1326 audit(1771648015.098:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 793.294283][ T30] audit: type=1326 audit(1771648015.098:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 793.357678][ T30] audit: type=1326 audit(1771648015.098:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29499 comm="syz.7.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 798.521391][T29581] fuse: Bad value for 'fd' [ 798.546679][T29581] netlink: 'syz.6.9364': attribute type 5 has an invalid length. [ 798.733452][T29589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9366'. [ 798.842642][T29589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29589 comm=syz.6.9366 [ 801.034679][T29618] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9376'. [ 802.127777][T29640] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9382'. [ 802.359106][T29640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29640 comm=syz.8.9382 [ 805.561444][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9398'. [ 806.396159][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9398'. [ 806.871322][T20304] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 807.121281][T20304] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 807.131164][T20304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.165957][T20304] usb 4-1: config 0 descriptor?? [ 807.602557][T20304] cp210x 4-1:0.0: cp210x converter detected [ 807.644805][T20304] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 807.662652][T20304] cp210x 4-1:0.0: querying part number failed [ 807.706217][T20304] usb 4-1: cp210x converter now attached to ttyUSB0 [ 807.754301][T20304] usb 4-1: USB disconnect, device number 84 [ 807.907254][T20304] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 807.958139][T20304] cp210x 4-1:0.0: device disconnected [ 811.333895][T29758] overlayfs: failed to clone lowerpath [ 812.080521][T29769] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9420'. [ 812.113273][T29769] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 812.152272][T29769] CIFS mount error: No usable UNC path provided in device string! [ 812.152272][T29769] [ 812.176729][T29769] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 812.259041][T29779] netlink: 'syz.3.9423': attribute type 39 has an invalid length. [ 812.500246][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9424'. [ 812.512798][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9424'. [ 813.497754][T29801] tipc: Enabled bearer , priority 10 [ 814.555797][T29811] netlink: 'syz.3.9433': attribute type 1 has an invalid length. [ 814.673282][T29811] 8021q: adding VLAN 0 to HW filter on device bond7 [ 814.736491][T20297] tipc: Node number set to 2299494026 [ 814.756065][T29813] macvlan3: entered promiscuous mode [ 815.210583][T29813] macvlan3: entered allmulticast mode [ 815.270877][T29813] bond7: entered promiscuous mode [ 815.374096][T29813] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 815.602757][T29813] bond7: left promiscuous mode [ 816.269663][T29811] bond7: (slave ip6gretap1): making interface the new active one [ 816.373830][T29811] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 817.650822][T29857] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9444'. [ 817.674854][T29857] netlink: 59 bytes leftover after parsing attributes in process `syz.6.9444'. [ 817.704674][T29857] netlink: 59 bytes leftover after parsing attributes in process `syz.6.9444'. [ 817.836540][T29857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29857 comm=syz.6.9444 [ 818.019183][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 818.019202][ T30] audit: type=1804 audit(1771648043.201:1323): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.9446" name="bus" dev="ramfs" ino=128014 res=1 errno=0 [ 818.124782][ T30] audit: type=1804 audit(1771648043.306:1324): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.9446" name="bus" dev="ramfs" ino=128014 res=1 errno=0 [ 818.587499][T20308] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 819.080382][T20308] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.132114][T20308] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 819.160975][T20308] usb 9-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 819.197287][T20308] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 819.227833][T20308] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.258262][T20308] hub 9-1:1.0: bad descriptor, ignoring hub [ 819.732858][T20308] hub 9-1:1.0: probe with driver hub failed with error -5 [ 819.917161][T20308] cdc_wdm 9-1:1.0: skipping garbage [ 820.407100][T20308] cdc_wdm 9-1:1.0: skipping garbage [ 820.412341][T20308] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 821.516022][T20297] usb 9-1: USB disconnect, device number 6 [ 824.572991][T29945] syzkaller0: entered promiscuous mode [ 824.578487][T29945] syzkaller0: entered allmulticast mode [ 824.740811][T29952] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 830.392177][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9479'. [ 830.784138][T30020] tipc: Started in network mode [ 830.804493][T30020] tipc: Node identity 2, cluster identity 4711 [ 830.923606][T30020] tipc: Node number set to 2 [ 831.273367][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.858068][T30056] netlink: 'syz.7.9498': attribute type 1 has an invalid length. [ 832.946476][T30056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 834.012578][T30060] bond3: (slave gretap1): making interface the new active one [ 834.073837][T30060] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 836.709322][T30104] netlink: 'syz.7.9512': attribute type 1 has an invalid length. [ 836.755838][T30108] overlayfs: failed to clone upperpath [ 836.802825][T30109] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 836.887866][T30104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9512'. [ 836.929864][T30104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 836.945929][ T145] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.561973][ T1026] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.846028][T30119] binder: 30115:30119 ioctl c018620c 2000000000c0 returned -22 [ 839.319859][T30132] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9520'. [ 839.418056][ T30] audit: type=1400 audit(1771648065.657:1325): avc: denied { getopt } for pid=30133 comm="syz.5.9521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 839.473597][T30132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30132 comm=syz.8.9520 [ 843.014394][T22891] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 843.408978][T30191] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9536'. [ 843.450645][ T30] audit: type=1400 audit(1771648069.898:1326): avc: denied { associate } for pid=30188 comm="syz.3.9535" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 843.767548][ T30] audit: type=1400 audit(1771648070.234:1327): avc: denied { setopt } for pid=30192 comm="syz.8.9537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 845.320085][T30198] syzkaller0: entered promiscuous mode [ 845.325592][T30198] syzkaller0: entered allmulticast mode [ 845.407158][T30197] 8021q: VLANs not supported on ip6tnl0 [ 849.083492][T30256] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 849.093598][T30256] F2FS-fs (loop15): Can't find valid F2FS filesystem in 1th superblock [ 849.103460][T30256] F2FS-fs (loop15): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 849.111901][T30256] F2FS-fs (loop15): Can't find valid F2FS filesystem in 2th superblock [ 849.502478][T30259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9553'. [ 852.869295][T30245] netlink: 'syz.6.9548': attribute type 12 has an invalid length. [ 855.366727][T30337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9572'. [ 855.498757][T30337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30337 comm=syz.3.9572 [ 858.638725][T30380] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9585'. [ 858.685084][T30384] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 859.850005][T30391] bond0: (slave dummy0): Releasing active interface [ 859.902878][T30391] dummy0: left allmulticast mode [ 859.976606][T30391] bond3: (slave veth0_to_bond): Releasing active interface [ 859.998058][T30394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9590'. [ 860.024388][T30391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.057228][T30393] team0: No ports can be present during mode change [ 860.491139][T30394] team0 (unregistering): Port device bridge1 removed [ 860.690634][ T3592] wlan1: Trigger new scan to find an IBSS to join [ 862.534528][ T30] audit: type=1326 audit(1771648089.939:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 862.559172][ T30] audit: type=1326 audit(1771648089.970:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 863.406164][ T30] audit: type=1326 audit(1771648089.970:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 863.436680][ T30] audit: type=1326 audit(1771648089.970:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 863.480311][ T30] audit: type=1326 audit(1771648089.970:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 863.527711][ T30] audit: type=1326 audit(1771648089.970:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 863.552240][ T30] audit: type=1326 audit(1771648089.970:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 864.089827][T20297] IPVS: starting estimator thread 0... [ 864.103477][ T30] audit: type=1326 audit(1771648089.970:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 864.187295][T30441] IPVS: using max 39 ests per chain, 93600 per kthread [ 864.492509][ T30] audit: type=1326 audit(1771648090.169:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1296d96417 code=0x7ffc0000 [ 864.494142][ T145] wlan1: Trigger new scan to find an IBSS to join [ 864.531938][T30443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.591562][T30443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.606390][ T30] audit: type=1326 audit(1771648090.169:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.3.9598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1296d3da19 code=0x7ffc0000 [ 864.924191][T30457] netlink: 'syz.5.9607': attribute type 10 has an invalid length. [ 865.887854][T30457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.805584][T30467] netlink: 277 bytes leftover after parsing attributes in process `syz.5.9610'. [ 867.288534][ T145] wlan1: Creating new IBSS network, BSSID d6:c5:b6:13:aa:60 [ 869.931753][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 869.931802][ T30] audit: type=1400 audit(1771648097.697:1365): avc: denied { read append } for pid=30489 comm="syz.8.9613" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.759823][ T30] audit: type=1400 audit(1771648097.707:1366): avc: denied { open } for pid=30489 comm="syz.8.9613" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.783759][ T30] audit: type=1400 audit(1771648097.718:1367): avc: denied { map } for pid=30489 comm="syz.8.9613" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 870.807659][ T30] audit: type=1400 audit(1771648097.718:1368): avc: denied { write execute } for pid=30489 comm="syz.8.9613" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 871.898977][T30513] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 871.971061][T30516] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 871.979236][T30516] tipc: Enabled bearer , priority 7 [ 871.985186][ T5961] IPVS: starting estimator thread 0... [ 872.083654][T30519] IPVS: using max 37 ests per chain, 88800 per kthread [ 872.102898][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 872.360239][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 872.865022][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 873.295511][T30534] syzkaller0: entered promiscuous mode [ 873.324484][T30534] syzkaller0: entered allmulticast mode [ 873.864489][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 873.903871][T30541] netlink: 'syz.8.9630': attribute type 1 has an invalid length. [ 874.289095][ T30] audit: type=1400 audit(1771648102.274:1369): avc: denied { accept } for pid=30540 comm="syz.8.9630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 874.475101][T30541] smc: adding net device bond0 with user defined pnetid SYZ2 [ 874.498364][T30541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.855539][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 875.845809][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 876.283851][T30585] netlink: 'syz.6.9640': attribute type 1 has an invalid length. [ 876.827121][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.838782][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 876.849976][ T1026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 877.569316][T30585] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 877.682125][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.763371][ T1026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 877.814966][T30609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9645'. [ 877.828697][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 877.932566][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.965599][ T1026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 878.194124][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 878.224723][ T1026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 878.818274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 879.234406][ T30] audit: type=1326 audit(1771648107.470:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30631 comm="syz.5.9652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84bd59c629 code=0x0 [ 879.397580][T30637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9652'. [ 879.808934][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 880.116320][ T1026] batman_adv: batadv0: Removing interface: gretap1 [ 880.318478][ T1026] bond1 (unregistering): (slave geneve2): Releasing active interface [ 880.753676][ T1026] bond0 (unregistering): (slave bridge2): Releasing active interface [ 880.799144][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 880.849882][ T1026] bond0 (unregistering): Released all slaves [ 880.861632][ T1026] bond1 (unregistering): Released all slaves [ 880.877240][ T1026] bond2 (unregistering): Released all slaves [ 880.892673][T30643] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 880.936844][T30643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 881.003688][T30643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 881.007302][ T30] audit: type=1400 audit(1771648109.328:1371): avc: denied { firmware_load } for pid=30642 comm="syz.8.9654" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 881.039947][ T1026] tipc: Left network mode [ 881.061315][T30689] overlayfs: failed to clone upperpath [ 881.790249][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 882.062569][ T1026] hsr_slave_0: left promiscuous mode [ 882.219300][ T1026] hsr_slave_1: left promiscuous mode [ 882.780904][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 882.816657][T30744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9672'. [ 883.771559][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 884.761794][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 885.717581][T30789] Device name cannot be null; rc = [-22] [ 885.752653][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 886.500173][ T1026] IPVS: stop unused estimator thread 0... [ 886.743446][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 887.733894][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 888.724536][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 888.792936][T30834] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9690'. [ 888.831213][T30834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9690'. [ 889.715129][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 889.848025][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 890.144931][T22891] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 890.163337][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9693'. [ 890.166656][T22891] Bluetooth: hci3: unexpected event for opcode 0x080f [ 890.216847][T30852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9693'. [ 890.383012][T30867] xt_hashlimit: max too large, truncated to 1048576 [ 890.422308][T22891] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 890.432184][T30867] xt_hashlimit: overflow, rate too high: 0 [ 890.706245][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 890.925818][T30868] overlayfs: failed to resolve './file2': -2 [ 891.664650][T30887] netlink: 'syz.3.9701': attribute type 12 has an invalid length. [ 891.696455][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 892.687563][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 892.756054][T30894] syzkaller0: Caught tx_queue_len zero misconfig [ 893.678202][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 894.669283][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 895.659150][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 895.953912][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 896.117406][T22891] Bluetooth: hci5: command 0x0405 tx timeout [ 896.650208][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 897.384864][T30969] Cannot find add_set index 128 as target [ 897.640855][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 898.012994][ T30] audit: type=1326 audit(1771648126.734:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30966 comm="syz.6.9719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4bd9c629 code=0x0 [ 898.631431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 898.748737][ T30] audit: type=1400 audit(1771648127.952:1373): avc: denied { module_load } for pid=30991 comm="syz.3.9725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 899.621907][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 899.670412][ T30] audit: type=1400 audit(1771648128.918:1374): avc: denied { getopt } for pid=31012 comm="syz.8.9728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 899.801232][ T30] audit: type=1400 audit(1771648129.012:1375): avc: denied { ioctl } for pid=31012 comm="syz.8.9728" path="socket:[132307]" dev="sockfs" ino=132307 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 900.361198][T31029] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 900.612839][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 901.048093][T31033] netlink: 'syz.5.9732': attribute type 1 has an invalid length. [ 901.603551][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 902.313106][T31033] 8021q: adding VLAN 0 to HW filter on device bond5 [ 902.344882][T31037] bond5: entered promiscuous mode [ 902.594074][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 903.013724][ T30] audit: type=1400 audit(1771648132.371:1376): avc: denied { remount } for pid=31048 comm="syz.7.9738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 903.584568][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 904.575329][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 905.451715][T31117] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 905.460366][T31117] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 905.469660][T31117] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 905.478102][T31117] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 905.565756][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 906.556844][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 907.547557][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 908.537767][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 908.782459][ T30] audit: type=1326 audit(1771648138.481:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31150 comm="syz.3.9757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x0 [ 909.528404][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 909.966704][T22754] Bluetooth: hci1: command 0x0406 tx timeout [ 910.335373][ T30] audit: type=1326 audit(1771648140.119:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.8.9761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc13cb9c629 code=0x0 [ 910.512552][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9761'. [ 910.519437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 910.698228][T31186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31186 comm=syz.3.9764 [ 910.973406][T31190] overlayfs: failed to clone upperpath [ 911.510197][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 912.500670][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 912.795417][T31211] netlink: 'syz.6.9774': attribute type 39 has an invalid length. [ 912.852613][ T30] audit: type=1326 audit(1771648142.754:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 912.983024][ T30] audit: type=1326 audit(1771648142.785:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.089132][ T30] audit: type=1326 audit(1771648142.785:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.194429][ T30] audit: type=1326 audit(1771648142.785:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.220206][ T30] audit: type=1326 audit(1771648142.785:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.258261][ T30] audit: type=1326 audit(1771648142.785:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.326121][ T30] audit: type=1326 audit(1771648142.785:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.367108][ T30] audit: type=1326 audit(1771648142.785:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.367203][T31220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=31220 comm=syz.8.9773 [ 913.601897][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 913.601915][ T30] audit: type=1326 audit(1771648143.541:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac4cf96417 code=0x7ffc0000 [ 913.705332][ T30] audit: type=1326 audit(1771648143.541:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac4cf3da19 code=0x7ffc0000 [ 913.911261][ T30] audit: type=1326 audit(1771648143.541:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 913.959118][ T30] audit: type=1326 audit(1771648143.583:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac4cf96417 code=0x7ffc0000 [ 914.854207][ T30] audit: type=1326 audit(1771648143.583:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac4cf3da19 code=0x7ffc0000 [ 914.916191][ T30] audit: type=1326 audit(1771648143.583:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 915.025451][ T30] audit: type=1326 audit(1771648143.583:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac4cf96417 code=0x7ffc0000 [ 915.614467][ T30] audit: type=1326 audit(1771648143.583:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fac4cf3da19 code=0x7ffc0000 [ 916.404782][ T30] audit: type=1326 audit(1771648143.594:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 916.528052][ T30] audit: type=1326 audit(1771648143.615:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31209 comm="syz.7.9771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fac4cf96417 code=0x7ffc0000 [ 918.646671][T31303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=31303 comm=syz.6.9790 [ 920.471565][T31326] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9797'. [ 922.535966][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 922.535983][ T30] audit: type=1400 audit(1771648152.927:1506): avc: denied { execheap } for pid=31359 comm="syz.3.9805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 922.979250][T31368] overlayfs: failed to clone upperpath [ 925.742456][T31402] CIFS mount error: No usable UNC path provided in device string! [ 925.742456][T31402] [ 925.752862][T31402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 926.142756][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.954806][T31410] nftables ruleset with unbound set [ 927.718211][T31416] netlink: 'syz.8.9822': attribute type 1 has an invalid length. [ 928.773660][T31433] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9823'. [ 932.718250][T31483] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.9837'. [ 933.425240][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9837'. [ 934.312159][T31500] xt_hashlimit: size too large, truncated to 1048576 [ 935.160008][ T30] audit: type=1400 audit(1771648166.175:1507): avc: denied { accept } for pid=31507 comm="syz.7.9846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 935.323963][T31510] syzkaller0: entered promiscuous mode [ 935.343688][T31510] syzkaller0: entered allmulticast mode [ 935.425316][T31512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9849'. [ 935.475241][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9849'. [ 935.514124][T31512] netlink: 'syz.7.9849': attribute type 11 has an invalid length. [ 935.566749][T31512] netlink: 'syz.7.9849': attribute type 13 has an invalid length. [ 936.830334][T31522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 942.031798][T31577] : entered promiscuous mode [ 945.242065][T31606] tipc: Enabling of bearer rejected, failed to enable media [ 947.152008][T31630] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 948.345960][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 954.212782][T22754] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 955.260367][T31723] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9901'. [ 955.747995][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 955.862198][T20297] page_pool_release_retry() stalled pool shutdown: id 132, 1 inflight 60 sec [ 955.886833][ T30] audit: type=1400 audit(1771648187.937:1508): avc: denied { lock } for pid=31730 comm="syz.6.9895" path="socket:[134224]" dev="sockfs" ino=134224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 957.368918][T31750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.917411][ T30] audit: type=1400 audit(1771648193.207:1509): avc: denied { setopt } for pid=31774 comm="syz.7.9915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 962.388902][T31766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9911'. [ 962.452972][T31766] macvtap1: entered promiscuous mode [ 962.459327][T31766] macvtap1: entered allmulticast mode [ 962.464899][T31766] dummy0: entered allmulticast mode [ 964.914259][T31817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9923'. [ 965.041122][T31823] netlink: 'syz.5.9925': attribute type 10 has an invalid length. [ 965.060647][T31824] random: crng reseeded on system resumption [ 965.071651][ T30] audit: type=1400 audit(1771648197.564:1510): avc: denied { ioctl } for pid=31811 comm="syz.8.9924" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 965.185358][T31829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.263369][T31822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.297144][T31822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.075045][T31874] netlink: 188 bytes leftover after parsing attributes in process `syz.6.9936'. [ 969.054115][T20304] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 969.248106][T20304] usb 9-1: not running at top speed; connect to a high speed hub [ 969.298026][T20304] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 969.344438][T20304] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 969.412056][T20304] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 969.455018][T20304] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.503481][T20304] usb 9-1: Product: syz [ 969.513969][T20304] usb 9-1: Manufacturer: syz [ 969.565937][T20304] usb 9-1: SerialNumber: syz [ 971.093584][T31914] tipc: Enabled bearer , priority 0 [ 973.128834][T31926] ptrace attach of "./syz-executor exec"[22859] was attempted by " [ 974.717508][T20304] usb 9-1: 0:2 : does not exist [ 976.750863][T20304] usb 9-1: USB disconnect, device number 7 [ 977.058657][ T30] audit: type=1800 audit(1771648210.162:1511): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.9955" name="bus" dev="ramfs" ino=135497 res=0 errno=0 [ 977.263230][T31856] udevd[31856]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.546598][ T30] audit: type=1326 audit(1771648212.776:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.8.9966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13cb9c629 code=0x7fc00000 [ 979.884966][ T30] audit: type=1326 audit(1771648213.122:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.8.9966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc13cb96417 code=0x7fc00000 [ 980.138172][ T30] audit: type=1326 audit(1771648213.122:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.8.9966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc13cb3da19 code=0x7fc00000 [ 980.280643][ T30] audit: type=1326 audit(1771648213.122:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.8.9966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc13cb3dadd code=0x7fc00000 [ 980.397148][ T30] audit: type=1326 audit(1771648213.122:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31970 comm="syz.8.9966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc13cb9c629 code=0x7fc00000 [ 984.501580][ T30] audit: type=1804 audit(1771648217.941:1517): pid=32027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.9975" name="bus" dev="ramfs" ino=135574 res=1 errno=0 [ 984.624598][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9976'. [ 986.394324][T32067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 990.041309][T32101] tipc: Enabling of bearer rejected, already enabled [ 991.992430][T32131] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 993.789594][T32148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10005'. [ 997.020601][T32186] netlink: 'syz.3.10013': attribute type 1 has an invalid length. [ 997.797621][T32188] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 998.316334][T32188] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 998.572845][T32186] bond8: (slave bridge6): Enslaving as an active interface with a down link [ 998.664956][T32205] macvlan3: entered promiscuous mode [ 998.686097][T32205] macvlan3: entered allmulticast mode [ 998.729394][T32205] bond8: entered promiscuous mode [ 998.761337][T32205] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 998.863290][T32205] bond8: left promiscuous mode [ 1004.392185][T32261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=32261 comm=syz.3.10028 [ 1004.413142][T32261] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1004.422404][T32261] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1004.430851][T32261] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1006.852786][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1008.560971][T32309] syzkaller0: entered promiscuous mode [ 1008.576172][T32309] syzkaller0: entered allmulticast mode [ 1008.837630][T32317] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1009.642343][T32319] syz_tun: entered allmulticast mode [ 1014.460801][T32376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10058'. [ 1015.966778][ T30] audit: type=1400 audit(1771648513.015:1518): avc: denied { connect } for pid=32392 comm="syz.6.10063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1016.605786][T22754] Bluetooth: hci0: command 0x0406 tx timeout [ 1017.457968][T32414] overlayfs: failed to clone upperpath [ 1017.572637][T32415] overlayfs: failed to clone upperpath [ 1018.838740][T32399] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1018.960053][T32399] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1019.688281][T32435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10073'. [ 1019.726465][T32399] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1019.751083][T32435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10073'. [ 1019.771231][T32438] bridge0: entered allmulticast mode [ 1019.799804][T32399] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1019.820610][T32435] netlink: 'syz.7.10073': attribute type 11 has an invalid length. [ 1019.859300][T32435] netlink: 'syz.7.10073': attribute type 13 has an invalid length. [ 1019.912712][T32438] bond4: (slave bridge0): Removing an active aggregator [ 1019.974660][T32438] bond4: (slave bridge0): Releasing backup interface [ 1020.066664][T32399] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1020.090126][T32399] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1020.141102][T32399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1020.170272][T32399] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1020.337952][T32399] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1020.545929][T32399] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1020.618578][T32455] xt_l2tp: invalid flags combination: 8 [ 1021.812725][T32467] ip6gre2: entered promiscuous mode [ 1021.832502][T32467] ip6gre2: entered allmulticast mode [ 1021.857320][T32472] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1021.900543][T32471] netlink: 'syz.8.10079': attribute type 1 has an invalid length. [ 1021.913759][T18453] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1022.023530][ T5961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1022.177340][T18453] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1022.671943][ T5961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1022.857280][T32473] bond1: entered promiscuous mode [ 1022.906826][T32473] bond1: entered allmulticast mode [ 1022.933403][T32473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1022.995426][ T5961] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1023.018587][T32495] overlayfs: failed to clone upperpath [ 1026.810481][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1027.801063][T32581] kAFS: unable to lookup cell '(' [ 1027.807597][T32581] tipc: Enabling of bearer rejected, failed to enable media [ 1027.832337][T32577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10099'. [ 1030.777941][ T30] audit: type=1400 audit(1771648528.570:1519): avc: denied { accept } for pid=32617 comm="syz.7.10110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1033.419589][T32654] netlink: 25 bytes leftover after parsing attributes in process `syz.6.10116'. [ 1035.493606][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1036.127678][T32681] overlayfs: failed to clone upperpath [ 1037.702034][T32707] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1038.218266][T32711] tipc: Enabling of bearer rejected, already enabled [ 1038.266753][T32707] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10126'. [ 1038.591419][T32729] overlayfs: failed to clone lowerpath [ 1044.870738][ T307] dummy0: left allmulticast mode [ 1050.619045][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1050.640476][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1050.699542][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1050.746447][ T30] audit: type=1326 audit(1771648549.481:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1051.277430][ T363] infiniband syz2: set down [ 1051.282521][ T363] infiniband syz2: added vxcan1 [ 1051.292659][ T363] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1051.298258][ T363] infiniband syz2: Couldn't open port 1 [ 1051.321955][T20308] vxcan1 speed is unknown, defaulting to 1000 [ 1051.340923][ T363] RDS/IB: syz2: added [ 1051.345491][ T363] smc: adding ib device syz2 with port count 1 [ 1051.351983][ T363] smc: ib device syz2 port 1 has no pnetid [ 1051.397701][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1051.418592][T20308] vxcan1 speed is unknown, defaulting to 1000 [ 1051.613282][ T30] audit: type=1326 audit(1771648549.481:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1051.649335][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1051.806589][ T30] audit: type=1326 audit(1771648549.481:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1051.830286][ T30] audit: type=1326 audit(1771648549.481:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1051.874742][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1051.936985][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1052.038633][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1052.202499][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1052.753370][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1052.813552][ T30] audit: type=1326 audit(1771648549.481:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1052.837462][ T30] audit: type=1326 audit(1771648549.481:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1052.914013][ T363] vxcan1 speed is unknown, defaulting to 1000 [ 1053.116436][ T30] audit: type=1326 audit(1771648549.481:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1053.156285][ T30] audit: type=1326 audit(1771648549.481:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=353 comm="syz.3.10151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1296d9c629 code=0x7ffc0000 [ 1053.376627][ T386] fuse: Bad value for 'fd' [ 1056.362938][ T400] netlink: 'syz.6.10165': attribute type 2 has an invalid length. [ 1056.375070][ T400] hma224): entered promiscuous mode [ 1056.411469][T20303] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1056.419323][ T417] overlayfs: failed to resolve '/~+5JhJӃD!>#]awJh|$w8jghºsɠU4OZ+ 瞣II': -2 [ 1056.490047][ T420] overlayfs: failed to resolve '/~+5JhJӃD!>#]awJh|$w8jghºsɠU4OZ+ 瞣II': -2 [ 1056.593162][T20303] usb 9-1: device descriptor read/64, error -71 [ 1057.297692][T20303] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1060.749165][ T478] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1060.759396][ T478] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1060.768501][ T478] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1063.142974][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10187'. [ 1063.170842][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10187'. [ 1063.181336][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10187'. [ 1063.193570][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10187'. [ 1064.788037][ T30] audit: type=1400 audit(1771648563.996:1528): avc: denied { ioctl } for pid=513 comm="syz.6.10191" path="socket:[137137]" dev="sockfs" ino=137137 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1065.346706][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.772326][ T526] 9p: Bad value for 'rfdno' [ 1066.330984][ T533] syzkaller0: entered promiscuous mode [ 1066.340202][ T533] syzkaller0: entered allmulticast mode [ 1067.000691][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10198'. [ 1067.565863][T20308] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1067.751680][T20308] usb 9-1: Using ep0 maxpacket: 32 [ 1067.772310][T20308] usb 9-1: config 0 has an invalid interface number: 183 but max is 0 [ 1067.818642][T20308] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.868793][T20308] usb 9-1: config 0 has no interface number 0 [ 1067.902373][T20308] usb 9-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1067.947485][T20308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.976121][T20308] usb 9-1: Product: syz [ 1068.002876][T20308] usb 9-1: Manufacturer: syz [ 1068.013163][T20308] usb 9-1: SerialNumber: syz [ 1068.079015][T20308] usb 9-1: config 0 descriptor?? [ 1068.099932][T20308] net1080 9-1:0.183: probe with driver net1080 failed with error -22 [ 1071.135470][ T579] : renamed from lo (while UP) [ 1071.168720][T20297] usb 9-1: USB disconnect, device number 10 [ 1071.848461][ T575] xt_connbytes: Forcing CT accounting to be enabled [ 1071.874690][ T585] batman_adv: batadv0: Adding interface: dummy0 [ 1071.905813][ T585] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.951420][ T595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10207'. [ 1072.129089][ T585] batman_adv: batadv0: Interface activated: dummy0 [ 1072.590706][ T590] batadv0: mtu less than device minimum [ 1072.621326][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.632400][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.643209][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.654009][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.664795][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.675582][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.686361][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.697135][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.707946][ T590] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.727533][ T575] set match dimension is over the limit! [ 1072.754091][ T595] nbd: socks must be embedded in a SOCK_ITEM attr [ 1073.490308][ T586] udevd[586]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1073.779762][ T610] netlink: 'syz.3.10210': attribute type 4 has an invalid length. [ 1074.390229][ T618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10214'. [ 1075.913365][ T639] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1078.526079][ T664] sctp: [Deprecated]: syz.6.10226 (pid 664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1078.526079][ T664] Use struct sctp_sack_info instead [ 1079.604415][ T680] vxcan1 speed is unknown, defaulting to 1000 [ 1081.424804][ T30] audit: type=1400 audit(1771648581.757:1529): avc: denied { getopt } for pid=696 comm="syz.6.10235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1082.692976][ T724] kAFS: unable to lookup cell '(' [ 1083.575737][ T30] audit: type=1800 audit(1771648584.015:1530): pid=735 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.10242" name="bus" dev="ramfs" ino=138606 res=0 errno=0 [ 1083.728541][ T737] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1084.232092][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1085.487385][ T758] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10250'. [ 1086.675021][ T780] sctp: [Deprecated]: syz.8.10255 (pid 780) Use of int in maxseg socket option. [ 1086.675021][ T780] Use struct sctp_assoc_value instead [ 1089.381326][ T803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10259'. [ 1102.808394][ T929] xt_SECMARK: invalid mode: 2 [ 1103.679801][ T939] netlink: 'syz.7.10289': attribute type 40 has an invalid length. [ 1105.447726][ T952] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1105.455602][ T952] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1105.463922][ T952] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1105.471771][ T952] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1106.391395][ T958] netlink: 'syz.8.10294': attribute type 4 has an invalid length. [ 1106.572233][ T958] netlink: 152 bytes leftover after parsing attributes in process `syz.8.10294'. [ 1109.093378][ T981] bond0: entered promiscuous mode [ 1109.100003][ T981] batadv0: entered promiscuous mode [ 1109.206608][ T981] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1109.295337][ T987] cgroup: Unknown subsys name 'uid>00000000000000000000' [ 1109.615429][ T981] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1109.636169][ T30] audit: type=1326 audit(1771648611.018:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1109.697151][ T981] bond0: left promiscuous mode [ 1109.723888][ T981] batadv0: left promiscuous mode [ 1109.758141][ T30] audit: type=1326 audit(1771648611.018:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.066532][ T30] audit: type=1326 audit(1771648611.018:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.674018][ T30] audit: type=1326 audit(1771648611.029:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.773173][ T30] audit: type=1326 audit(1771648611.029:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.849445][ T30] audit: type=1326 audit(1771648611.029:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.915705][ T30] audit: type=1326 audit(1771648611.029:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1110.939837][ T30] audit: type=1326 audit(1771648611.029:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1111.013341][ T30] audit: type=1326 audit(1771648611.039:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1111.072173][ T30] audit: type=1326 audit(1771648611.050:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=978 comm="syz.7.10300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4cf9c629 code=0x7ffc0000 [ 1111.276062][ T1000] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1113.165603][ T1032] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1113.173664][ T1032] overlayfs: failed to set xattr on upper [ 1113.180977][ T1032] overlayfs: ...falling back to redirect_dir=nofollow. [ 1113.188735][ T1032] overlayfs: ...falling back to index=off. [ 1113.194611][ T1032] overlayfs: ...falling back to uuid=null. [ 1113.241250][ T1033] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1113.702924][ T1037] net_ratelimit: 10 callbacks suppressed [ 1113.702937][ T1037] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1114.138824][T22754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1114.151107][T22754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1114.160303][T22754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.173519][T22754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.184181][T22754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1114.210997][T22891] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1114.219533][T22891] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1114.229982][T22891] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1114.238169][T22891] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1114.247776][T22891] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1114.306770][ T1041] vxcan1 speed is unknown, defaulting to 1000 [ 1114.799446][ T1041] chnl_net:caif_netlink_parms(): no params data found [ 1115.001263][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.042461][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.074149][ T1041] bridge_slave_0: entered allmulticast mode [ 1115.209949][ T1041] bridge_slave_0: entered promiscuous mode [ 1115.251364][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.274201][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.301786][ T1041] bridge_slave_1: entered allmulticast mode [ 1115.332269][ T1041] bridge_slave_1: entered promiscuous mode [ 1115.438514][ T1041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.471841][ T1041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.604860][ T1041] team0: Port device team_slave_0 added [ 1115.627851][ T1041] team0: Port device team_slave_1 added [ 1115.650280][ T1041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.659900][ T1041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.694377][ T1041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.783872][ T1041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.807619][ T1041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.943388][ T1041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.231973][T22754] Bluetooth: hci4: command tx timeout [ 1116.306124][ T1041] hsr_slave_0: entered promiscuous mode [ 1116.377604][ T1041] hsr_slave_1: entered promiscuous mode [ 1116.383804][ T1041] debugfs: 'hsr0' already exists in 'hsr' [ 1116.412617][ T1041] Cannot create hsr debugfs directory [ 1117.085604][T18453] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1118.189059][ T1041] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1118.204119][T22754] Bluetooth: hci4: command tx timeout [ 1118.258744][ T1041] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1118.291287][ T1041] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1119.197335][T18453] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 1120.086460][T18453] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1120.165444][T18453] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1120.184268][T22754] Bluetooth: hci4: command tx timeout [ 1120.588372][T18453] bond8 (unregistering): (slave bridge6): Releasing active interface [ 1120.669303][T18453] bond0 (unregistering): Released all slaves [ 1120.701171][T18453] bond1 (unregistering): Released all slaves [ 1120.725109][T18453] bond2 (unregistering): Released all slaves [ 1120.744967][T18453] bond3 (unregistering): Released all slaves [ 1120.770944][T18453] bond4 (unregistering): Released all slaves [ 1120.796497][T18453] bond5 (unregistering): (slave veth3): Releasing active interface [ 1120.806819][T18453] bond5 (unregistering): Released all slaves [ 1120.872463][T18453] bond6 (unregistering): Released all slaves [ 1120.909484][T18453] bond7 (unregistering): Released all slaves [ 1120.932887][T18453] bond8 (unregistering): Released all slaves [ 1120.951973][ T1041] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1121.019196][ T1128] vxcan1 speed is unknown, defaulting to 1000 [ 1121.985103][T18453] tipc: Left network mode [ 1122.178609][T22754] Bluetooth: hci4: command tx timeout [ 1122.253035][ T1041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.286305][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1122.286322][ T30] audit: type=1400 audit(1771648624.672:1548): avc: denied { create } for pid=1168 comm="syz.8.10339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1122.429546][ T30] audit: type=1326 audit(1771648624.830:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13cb9c629 code=0x7ffc0000 [ 1122.513251][ T1041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.528521][ T30] audit: type=1326 audit(1771648624.830:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc13cb9c629 code=0x7ffc0000 [ 1122.641577][ T30] audit: type=1326 audit(1771648624.830:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1122.724387][ T30] audit: type=1326 audit(1771648624.830:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1122.833214][ T30] audit: type=1326 audit(1771648624.830:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1122.872127][T32285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.873234][ T30] audit: type=1326 audit(1771648624.830:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1122.879276][T32285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.886558][T32285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.917774][T32285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1123.075719][ T30] audit: type=1326 audit(1771648624.830:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1123.138506][ T30] audit: type=1326 audit(1771648624.830:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1123.165447][ T30] audit: type=1326 audit(1771648624.830:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1168 comm="syz.8.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc13cb9c2bb code=0x7ffc0000 [ 1123.858284][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.118245][ T1200] vxcan1 speed is unknown, defaulting to 1000 [ 1125.692270][T18453] pim6reg (unregistering): left allmulticast mode [ 1128.425753][T30187] smc: removing ib device syz2 [ 1129.492480][ T1253] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1129.770377][ T1041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.870987][ T1263] fuse: Bad value for 'fd' [ 1132.696757][ T1289] bridge_slave_1: default FDB implementation only supports local addresses [ 1134.220528][ T1041] veth0_vlan: entered promiscuous mode [ 1134.254447][ T1041] veth1_vlan: entered promiscuous mode [ 1134.350417][ T1041] veth0_macvtap: entered promiscuous mode [ 1134.385286][ T1041] veth1_macvtap: entered promiscuous mode [ 1134.473913][ T1041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.508974][ T1041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.549935][T20311] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.579736][T20311] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.120532][T20311] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.183983][T20311] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.139734][ T3592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.248828][T18453] IPVS: stop unused estimator thread 0... [ 1136.261092][ T3592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.859591][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.973988][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.150851][ T1353] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.10370'. [ 1139.755386][ T1365] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1139.755386][ T1365] program syz.9.10372 not setting count and/or reply_len properly [ 1141.274744][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1141.274764][ T30] audit: type=1400 audit(2000000018.088:1583): avc: denied { read write } for pid=1375 comm="syz.8.10374" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1141.643949][ T1387] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1141.650997][ T1387] overlayfs: failed to set xattr on upper [ 1141.656818][ T1387] overlayfs: ...falling back to redirect_dir=nofollow. [ 1141.663770][ T1387] overlayfs: ...falling back to index=off. [ 1141.669609][ T1387] overlayfs: ...falling back to uuid=null. [ 1141.698688][ T1388] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1142.319607][ T30] audit: type=1400 audit(2000000018.088:1584): avc: denied { open } for pid=1375 comm="syz.8.10374" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1142.639770][ T30] audit: type=1400 audit(2000000018.486:1585): avc: denied { ioctl } for pid=1375 comm="syz.8.10374" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1144.970008][ T1413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1147.788504][ T1443] loop6: detected capacity change from 0 to 7 [ 1147.865328][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1147.874957][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1147.890126][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1147.899745][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1147.928405][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1147.938022][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1147.959691][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1147.969296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.000553][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.010167][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.020541][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.030136][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.054454][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.064060][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.071881][ T1312] ldm_validate_partition_table(): Disk read failed. [ 1148.188481][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.198142][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.206373][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.215994][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.234066][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1148.243670][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1148.264445][ T1312] Dev loop6: unable to read RDB block 0 [ 1148.311838][ T1312] loop6: unable to read partition table [ 1148.317686][ T1312] loop6: partition table beyond EOD, truncated [ 1148.488543][ T1450] tmpfs: Bad value for 'mpol' [ 1148.498392][ T1443] ldm_validate_partition_table(): Disk read failed. [ 1148.515341][ T1443] Dev loop6: unable to read RDB block 0 [ 1148.531192][ T30] audit: type=1400 audit(2000000026.150:1586): avc: denied { getopt } for pid=1452 comm="syz.6.10389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1148.569798][ T1451] futex_wake_op: syz.5.10390 tries to shift op by 144; fix this program [ 1148.648795][ T1443] loop6: unable to read partition table [ 1148.660268][ T1443] loop6: partition table beyond EOD, truncated [ 1148.699754][ T1443] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1149.523579][ T1481] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1149.532916][ T1481] overlayfs: missing 'lowerdir' [ 1151.983188][ T1494] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.173054][ T1494] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.364676][ T1494] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.462987][ T1503] overlayfs: failed to clone lowerpath [ 1154.761164][ T1494] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.951066][T20311] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.960117][ T1026] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.746185][T20311] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.871909][T20311] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.985367][ T1521] random: crng reseeded on system resumption [ 1157.893869][ T1539] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10407'. [ 1157.922524][ T1539] netlink: 'syz.7.10407': attribute type 10 has an invalid length. [ 1158.031139][ T1540] netlink: 'syz.7.10407': attribute type 10 has an invalid length. [ 1158.039268][ T1540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10407'. [ 1158.041277][ T1539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.124783][ T1539] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1158.276891][ T1540] batadv0: entered promiscuous mode [ 1158.283894][ T1540] batadv0: entered allmulticast mode [ 1158.370302][ T1547] o2cb: This node has not been configured. [ 1158.377295][ T1547] o2cb: Cluster check failed. Fix errors before retrying. [ 1158.384585][ T1547] (syz.9.10408,1547,1):user_dlm_register:674 ERROR: status = -22 [ 1158.392957][ T1547] (syz.9.10408,1547,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 1158.645968][ T30] audit: type=1400 audit(2000000036.491:1587): avc: denied { add_name } for pid=1543 comm="syz.9.10408" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.686570][ T30] audit: type=1400 audit(2000000036.491:1588): avc: denied { create } for pid=1543 comm="syz.9.10408" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.708508][ T1540] bond0: (slave batadv0): Releasing backup interface [ 1158.716110][ T30] audit: type=1400 audit(2000000036.491:1589): avc: denied { associate } for pid=1543 comm="syz.9.10408" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1158.768528][ T1540] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1162.598383][ T30] audit: type=1400 audit(2000000040.889:1590): avc: denied { shutdown } for pid=1581 comm="syz.9.10418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1164.518887][ T1602] zonefs (nullb0) ERROR: Not a zoned block device [ 1165.608550][ T1616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10422'. [ 1169.276375][ T30] audit: type=1400 audit(2000000047.513:1591): avc: denied { getopt } for pid=1654 comm="syz.5.10427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1170.099281][ T1674] overlayfs: failed to clone upperpath [ 1170.601490][T20308] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1171.833098][T20308] usb 9-1: Using ep0 maxpacket: 32 [ 1171.858285][T20308] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.902997][T20308] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1171.946791][T20308] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1172.022804][T20308] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1172.136273][T20308] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1172.163871][ T1714] No control pipe specified [ 1172.180409][ T1713] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1172.188984][T20308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.209798][ T1714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10442'. [ 1172.225902][T20308] usb 9-1: Product: syz [ 1172.231832][T20308] usb 9-1: Manufacturer: syz [ 1172.236415][T20308] usb 9-1: SerialNumber: syz [ 1172.730377][ T30] audit: type=1400 audit(2000000051.125:1592): avc: denied { write } for pid=1712 comm="syz.9.10443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1172.750965][ T1714] hsr_slave_0: left promiscuous mode [ 1172.769701][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1172.788042][T20308] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input97 [ 1172.805382][ T1714] hsr_slave_1: left promiscuous mode [ 1172.994092][ T1717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1173.002621][ T1717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1173.051874][T20308] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1173.095119][T20308] (id 0x00) [ 1173.213045][T20308] rc_core: IR keymap rc-imon-pad not found [ 1173.225448][T20308] Registered IR keymap rc-empty [ 1173.248380][T20308] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1173.283023][T20308] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1173.302270][T20308] imon:send_packet: packet tx failed (-71) [ 1173.317417][T20297] IPVS: starting estimator thread 0... [ 1173.330360][ T1735] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1173.345187][T20308] imon 9-1:155.0: remote input dev register failed [ 1173.361975][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1173.375595][T20308] imon 9-1:155.0: imon_init_intf0: rc device setup failed [ 1173.400362][ T1735] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1173.411328][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1173.478392][ T1736] IPVS: using max 40 ests per chain, 96000 per kthread [ 1173.671114][T20308] imon 9-1:155.0: unable to initialize intf0, err 0 [ 1173.742330][ T1745] tipc: Enabling of bearer rejected, failed to enable media [ 1174.211302][T20308] imon:imon_probe: failed to initialize context! [ 1175.345233][T20308] imon 9-1:155.0: unable to register, err -19 [ 1175.478672][T20308] usb 9-1: USB disconnect, device number 11 [ 1175.723830][ T1768] input: syz1 as /devices/virtual/input/input99 [ 1176.702575][ T1766] netlink: 184 bytes leftover after parsing attributes in process `syz.5.10453'. [ 1177.422081][ T1786] : Can't lookup blockdev [ 1178.257185][ T1792] overlayfs: failed to clone upperpath [ 1180.312489][ T1809] vivid-007: disconnect [ 1180.953903][ T1805] vivid-007: reconnect [ 1182.318722][T20297] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1182.370324][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.454058][ T1826] netlink: 'syz.6.10449': attribute type 16 has an invalid length. [ 1182.463837][ T1826] netlink: 'syz.6.10449': attribute type 17 has an invalid length. [ 1182.486298][ T1826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.494070][ T1826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.503081][ T1826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1183.215708][T20297] usb 10-1: Using ep0 maxpacket: 8 [ 1183.237247][T20297] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1183.265024][T20297] usb 10-1: config 8 has an invalid interface number: 255 but max is 8 [ 1183.286887][T20297] usb 10-1: config 8 has 1 interface, different from the descriptor's value: 9 [ 1183.339279][T20297] usb 10-1: config 8 has no interface number 0 [ 1183.393016][T20297] usb 10-1: config 8 interface 255 has no altsetting 0 [ 1183.549448][T20297] usb 10-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00 [ 1184.100134][T20297] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1184.131698][ T1842] overlayfs: failed to clone upperpath [ 1184.165257][T20297] usb 10-1: Product: syz [ 1184.170171][T20297] usb 10-1: Manufacturer: syz [ 1184.177438][T20297] usb 10-1: SerialNumber: syz [ 1184.393799][T20297] catc 10-1:8.255: Can't set altsetting 1. [ 1184.410470][T20297] catc 10-1:8.255: probe with driver catc failed with error -5 [ 1185.151068][T20297] usb 10-1: USB disconnect, device number 2 [ 1185.180812][ T1845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1185.189811][ T1845] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1185.201881][ T1845] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1186.410710][ T1862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10472'. [ 1186.450308][ T1862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10472'. [ 1196.750011][ T1952] overlayfs: failed to clone upperpath [ 1200.674348][ T1992] bridge0: port 3(gretap0) entered blocking state [ 1200.681135][ T1992] bridge0: port 3(gretap0) entered disabled state [ 1200.688577][ T1992] gretap0: entered allmulticast mode [ 1200.700875][ T1992] gretap0: entered promiscuous mode [ 1200.708480][ T1992] bridge0: port 3(gretap0) entered blocking state [ 1200.715057][ T1992] bridge0: port 3(gretap0) entered forwarding state [ 1202.290486][ T30] audit: type=1400 audit(2000000082.598:1593): avc: denied { map } for pid=1994 comm="syz.9.10508" path="/dev/video2" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1204.678657][ T5957] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 1204.909134][ T2026] netlink: 277 bytes leftover after parsing attributes in process `syz.8.10511'. [ 1205.260868][ T5957] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1205.789299][T20304] libceph: connect (1)[c::]:6789 error -22 [ 1205.817751][T20304] libceph: mon0 (1)[c::]:6789 connect error [ 1205.966521][ T2038] input: syz1 as /devices/virtual/input/input100 [ 1206.112928][T20304] libceph: connect (1)[c::]:6789 error -22 [ 1206.122667][T20304] libceph: mon0 (1)[c::]:6789 connect error [ 1206.298151][T22754] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1206.386129][ T2034] ceph: No mds server is up or the cluster is laggy [ 1206.420970][ T2044] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10519'. [ 1206.430454][ T2044] lo: Caught tx_queue_len zero misconfig [ 1207.101128][ T2051] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10512'. [ 1213.470336][T20304] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1213.517895][ T2129] netlink: 'syz.7.10540': attribute type 40 has an invalid length. [ 1214.060227][T20304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1214.078869][T20304] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.102408][T20304] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1214.130721][T20304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.174541][T20304] usb 10-1: config 0 descriptor?? [ 1215.385946][ T2149] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10538'. [ 1215.408292][T20304] isku 0003:1E7D:319C.0057: item fetching failed at offset 6/7 [ 1215.429840][T20304] isku 0003:1E7D:319C.0057: parse failed [ 1215.435535][T20304] isku 0003:1E7D:319C.0057: probe with driver isku failed with error -22 [ 1215.450478][ T2147] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.761475][T20304] usb 10-1: USB disconnect, device number 3 [ 1215.777162][ T2147] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.825170][ T2147] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.854694][ T2147] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.935849][T20311] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.968634][T20311] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.078207][T20311] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.134895][T20311] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.804714][ T2166] netlink: 'syz.9.10551': attribute type 40 has an invalid length. [ 1217.802148][ T2176] netlink: 'syz.9.10564': attribute type 1 has an invalid length. [ 1217.872354][ T2176] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1217.890462][ T2176] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1218.878559][ T2187] bond1: (slave gretap1): making interface the new active one [ 1219.148737][ T2189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1219.755451][ T2187] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1220.112316][T20304] IPVS: starting estimator thread 0... [ 1220.248881][ T2195] IPVS: using max 42 ests per chain, 100800 per kthread [ 1220.278159][ T2176] macvlan2: entered promiscuous mode [ 1220.283473][ T2176] macvlan2: entered allmulticast mode [ 1220.289766][ T2176] bond1: entered promiscuous mode [ 1220.294804][ T2176] gretap1: entered promiscuous mode [ 1220.300894][ T2176] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1221.049615][ T2176] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1221.200543][ T2176] bond1: left promiscuous mode [ 1221.460588][ T2176] gretap1: left promiscuous mode [ 1222.366785][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10565'. [ 1223.537432][T20308] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0 [ 1223.699267][T20308] hid-generic 0000:0000:0000.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1224.269092][ T2236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10570'. [ 1224.278851][ T2236] IPv6: NLM_F_CREATE should be specified when creating new route [ 1225.942001][ T2242] fido_id[2242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1226.403483][ T2265] bridge0: port 3(syz_tun) entered blocking state [ 1226.413068][ T2265] bridge0: port 3(syz_tun) entered disabled state [ 1226.422807][ T2265] syz_tun: entered allmulticast mode [ 1226.440639][ T2265] syz_tun: entered promiscuous mode [ 1226.461155][ T2265] bridge0: port 3(syz_tun) entered blocking state [ 1226.467867][ T2265] bridge0: port 3(syz_tun) entered forwarding state [ 1226.978497][ T2276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1227.515977][ T2269] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1227.738452][ T2287] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1228.417054][T20304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1228.441554][ T58] Bluetooth: hci1: Frame reassembly failed (-84) [ 1228.540727][T20304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1228.569635][T20304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1228.578925][T20304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1228.907026][T20304] rtc rtc0: __rtc_set_alarm: err=-22 [ 1229.689116][T22754] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1233.122698][T22754] Bluetooth: hci4: command 0x0406 tx timeout [ 1234.216660][ T2357] overlayfs: failed to clone upperpath [ 1234.483516][ T2364] netlink: 184 bytes leftover after parsing attributes in process `syz.7.10597'. [ 1235.284729][ T2373] netlink: 184 bytes leftover after parsing attributes in process `syz.7.10600'. [ 1235.336504][ T2375] Bluetooth: MGMT ver 1.23 [ 1236.826811][ T2393] tipc: Started in network mode [ 1236.831711][ T2393] tipc: Node identity aa04d29cfad4, cluster identity 4711 [ 1236.841480][ T2393] tipc: Enabled bearer , priority 0 [ 1237.018309][ T2389] tipc: Disabling bearer [ 1237.170422][ T2405] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1237.180190][ T2405] overlayfs: missing 'lowerdir' [ 1239.048301][ T2419] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10608'. [ 1239.326154][ T2419] ================================================================== [ 1239.334218][ T2419] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x105/0x130 [ 1239.342878][ T2419] Read of size 8 at addr ffff88806536fcc0 by task syz.7.10608/2419 [ 1239.350738][ T2419] [ 1239.353048][ T2419] CPU: 1 UID: 0 PID: 2419 Comm: syz.7.10608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.353064][ T2419] Tainted: [L]=SOFTLOCKUP [ 1239.353070][ T2419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.353078][ T2419] Call Trace: [ 1239.353084][ T2419] [ 1239.353089][ T2419] dump_stack_lvl+0x100/0x190 [ 1239.353108][ T2419] print_report+0x156/0x4c9 [ 1239.353125][ T2419] ? __virt_addr_valid+0x81/0x620 [ 1239.353142][ T2419] ? __phys_addr+0xe8/0x180 [ 1239.353159][ T2419] ? __list_add_valid_or_report+0x105/0x130 [ 1239.353172][ T2419] kasan_report+0xdf/0x1e0 [ 1239.353190][ T2419] ? __list_add_valid_or_report+0x105/0x130 [ 1239.353203][ T2419] __list_add_valid_or_report+0x105/0x130 [ 1239.353217][ T2419] clone_mnt+0x633/0x930 [ 1239.353233][ T2419] copy_tree+0xfc/0xbf0 [ 1239.353243][ T2419] ? __pfx_down_write+0x10/0x10 [ 1239.353258][ T2419] copy_mnt_ns+0x2bd/0xc30 [ 1239.353270][ T2419] ? create_new_namespaces+0x30/0xac0 [ 1239.353285][ T2419] ? rcu_is_watching+0x12/0xc0 [ 1239.353298][ T2419] create_new_namespaces+0xd3/0xac0 [ 1239.353313][ T2419] ? bpf_lsm_capable+0x9/0x10 [ 1239.353323][ T2419] ? security_capable+0x80/0x260 [ 1239.353340][ T2419] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1239.353356][ T2419] ksys_unshare+0x455/0xab0 [ 1239.353371][ T2419] ? __pfx_ksys_unshare+0x10/0x10 [ 1239.353389][ T2419] __x64_sys_unshare+0x31/0x40 [ 1239.353404][ T2419] do_syscall_64+0x106/0xf80 [ 1239.353414][ T2419] ? clear_bhb_loop+0x40/0x90 [ 1239.353426][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.353438][ T2419] RIP: 0033:0x7fac4cf9c629 [ 1239.353448][ T2419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.353458][ T2419] RSP: 002b:00007fac4dd7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1239.353469][ T2419] RAX: ffffffffffffffda RBX: 00007fac4d216180 RCX: 00007fac4cf9c629 [ 1239.353477][ T2419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1239.353483][ T2419] RBP: 00007fac4d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1239.353490][ T2419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1239.353496][ T2419] R13: 00007fac4d216218 R14: 00007fac4d216180 R15: 00007ffd79782f78 [ 1239.353506][ T2419] [ 1239.353511][ T2419] [ 1239.579602][ T2419] Allocated by task 31522: [ 1239.583994][ T2419] kasan_save_stack+0x30/0x50 [ 1239.588659][ T2419] kasan_save_track+0x14/0x30 [ 1239.593323][ T2419] __kasan_slab_alloc+0x89/0x90 [ 1239.598155][ T2419] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1239.603593][ T2419] alloc_vfsmnt+0x23/0x6a0 [ 1239.607987][ T2419] clone_mnt+0x4b/0x930 [ 1239.612123][ T2419] vfs_open_tree+0xb02/0x1500 [ 1239.616783][ T2419] __x64_sys_open_tree+0xa3/0x150 [ 1239.621788][ T2419] do_syscall_64+0x106/0xf80 [ 1239.626355][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.632225][ T2419] [ 1239.634525][ T2419] Freed by task 12: [ 1239.638307][ T2419] kasan_save_stack+0x30/0x50 [ 1239.642963][ T2419] kasan_save_track+0x14/0x30 [ 1239.647621][ T2419] kasan_save_free_info+0x3b/0x70 [ 1239.652622][ T2419] __kasan_slab_free+0x5f/0x80 [ 1239.657367][ T2419] kmem_cache_free+0x124/0x6a0 [ 1239.662110][ T2419] rcu_core+0x5a2/0x10d0 [ 1239.666330][ T2419] handle_softirqs+0x1eb/0x9e0 [ 1239.671071][ T2419] __irq_exit_rcu+0xef/0x150 [ 1239.675642][ T2419] irq_exit_rcu+0x9/0x30 [ 1239.679864][ T2419] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1239.685481][ T2419] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1239.691440][ T2419] [ 1239.693747][ T2419] Last potentially related work creation: [ 1239.699446][ T2419] kasan_save_stack+0x30/0x50 [ 1239.704123][ T2419] kasan_record_aux_stack+0xa7/0xc0 [ 1239.709308][ T2419] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1239.715190][ T2419] task_work_run+0x150/0x240 [ 1239.719760][ T2419] exit_to_user_mode_loop+0x100/0x4a0 [ 1239.725114][ T2419] do_syscall_64+0x67c/0xf80 [ 1239.729680][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.735725][ T2419] [ 1239.738026][ T2419] Second to last potentially related work creation: [ 1239.744585][ T2419] kasan_save_stack+0x30/0x50 [ 1239.749242][ T2419] kasan_record_aux_stack+0xa7/0xc0 [ 1239.754421][ T2419] task_work_add+0x28b/0x3b0 [ 1239.758985][ T2419] mntput_no_expire_slowpath+0x3da/0xb00 [ 1239.764600][ T2419] mntput_no_expire+0x1fd/0x220 [ 1239.769432][ T2419] mntput+0x6b/0xa0 [ 1239.773223][ T2419] vfs_open_tree+0x1235/0x1500 [ 1239.777963][ T2419] __x64_sys_open_tree+0xa3/0x150 [ 1239.782967][ T2419] do_syscall_64+0x106/0xf80 [ 1239.787535][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.793403][ T2419] [ 1239.795704][ T2419] The buggy address belongs to the object at ffff88806536fc00 [ 1239.795704][ T2419] which belongs to the cache mnt_cache of size 352 [ 1239.809556][ T2419] The buggy address is located 192 bytes inside of [ 1239.809556][ T2419] freed 352-byte region [ffff88806536fc00, ffff88806536fd60) [ 1239.823333][ T2419] [ 1239.825646][ T2419] The buggy address belongs to the physical page: [ 1239.832048][ T2419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806536e1c0 pfn:0x6536e [ 1239.842354][ T2419] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1239.850837][ T2419] memcg:ffff88806536e171 [ 1239.855050][ T2419] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1239.863526][ T2419] page_type: f5(slab) [ 1239.867486][ T2419] raw: 00fff00000000240 ffff888140416140 ffffea00007daa90 ffffea000073b210 [ 1239.876046][ T2419] raw: ffff88806536e1c0 000001c00012000d 00000000f5000000 ffff88806536e171 [ 1239.884609][ T2419] head: 00fff00000000240 ffff888140416140 ffffea00007daa90 ffffea000073b210 [ 1239.893255][ T2419] head: ffff88806536e1c0 000001c00012000d 00000000f5000000 ffff88806536e171 [ 1239.901901][ T2419] head: 00fff00000000001 ffffea000194db81 00000000ffffffff 00000000ffffffff [ 1239.910545][ T2419] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1239.919186][ T2419] page dumped because: kasan: bad access detected [ 1239.925580][ T2419] page_owner tracks the page as allocated [ 1239.931268][ T2419] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 25813, tgid 25810 (syz.0.8218), ts 592977569462, free_ts 592976581809 [ 1239.952780][ T2419] post_alloc_hook+0x153/0x170 [ 1239.957531][ T2419] get_page_from_freelist+0x111d/0x3140 [ 1239.963055][ T2419] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1239.968927][ T2419] new_slab+0xa6/0x6d0 [ 1239.972976][ T2419] refill_objects+0x26b/0x400 [ 1239.977632][ T2419] __pcs_replace_empty_main+0x19f/0x600 [ 1239.983160][ T2419] kmem_cache_alloc_noprof+0x480/0x6e0 [ 1239.988600][ T2419] alloc_vfsmnt+0x23/0x6a0 [ 1239.993002][ T2419] clone_mnt+0x4b/0x930 [ 1239.997136][ T2419] copy_tree+0xfc/0xbf0 [ 1240.001270][ T2419] propagate_mnt+0x16d/0xca0 [ 1240.005845][ T2419] attach_recursive_mnt.isra.0+0x106e/0x1aa0 [ 1240.011803][ T2419] graft_tree+0x19f/0x250 [ 1240.016113][ T2419] do_add_mount+0x1e2/0x360 [ 1240.020594][ T2419] path_mount+0x907/0x23d0 [ 1240.024987][ T2419] __x64_sys_mount+0x293/0x310 [ 1240.029730][ T2419] page last free pid 5177 tgid 5177 stack trace: [ 1240.036034][ T2419] __free_frozen_pages+0x7e1/0x10d0 [ 1240.041208][ T2419] qlist_free_all+0x47/0xe0 [ 1240.045693][ T2419] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1240.051133][ T2419] __kasan_slab_alloc+0x69/0x90 [ 1240.055967][ T2419] kmem_cache_alloc_lru_noprof+0x246/0x6e0 [ 1240.061753][ T2419] shmem_alloc_inode+0x25/0x50 [ 1240.066491][ T2419] alloc_inode+0x68/0x250 [ 1240.070800][ T2419] new_inode+0x22/0x1c0 [ 1240.074936][ T2419] shmem_get_inode+0x212/0x1040 [ 1240.079762][ T2419] shmem_mknod+0x20c/0x470 [ 1240.084156][ T2419] lookup_open.isra.0+0xc47/0x11b0 [ 1240.089250][ T2419] path_openat+0x2291/0x31a0 [ 1240.093816][ T2419] do_file_open+0x20e/0x430 [ 1240.098300][ T2419] do_sys_openat2+0x10d/0x1e0 [ 1240.102953][ T2419] __x64_sys_openat+0x12d/0x210 [ 1240.107779][ T2419] do_syscall_64+0x106/0xf80 [ 1240.112348][ T2419] [ 1240.114649][ T2419] Memory state around the buggy address: [ 1240.120252][ T2419] ffff88806536fb80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1240.128287][ T2419] ffff88806536fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1240.136501][ T2419] >ffff88806536fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1240.144536][ T2419] ^ [ 1240.150661][ T2419] ffff88806536fd00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1240.158696][ T2419] ffff88806536fd80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1240.166728][ T2419] ================================================================== [ 1240.301282][ T2419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1240.308515][ T2419] CPU: 0 UID: 0 PID: 2419 Comm: syz.7.10608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1240.319457][ T2419] Tainted: [L]=SOFTLOCKUP [ 1240.323773][ T2419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1240.333825][ T2419] Call Trace: [ 1240.337096][ T2419] [ 1240.340018][ T2419] dump_stack_lvl+0x100/0x190 [ 1240.344705][ T2419] vpanic+0x552/0x970 [ 1240.348680][ T2419] ? __pfx_vpanic+0x10/0x10 [ 1240.353176][ T2419] ? __list_add_valid_or_report+0x105/0x130 [ 1240.359066][ T2419] panic+0xd1/0xe0 [ 1240.362782][ T2419] ? __pfx_panic+0x10/0x10 [ 1240.367191][ T2419] ? __list_add_valid_or_report+0x105/0x130 [ 1240.373077][ T2419] ? preempt_schedule_common+0x42/0xc0 [ 1240.378549][ T2419] check_panic_on_warn.cold+0x19/0x34 [ 1240.383922][ T2419] end_report.part.0+0x3a/0x90 [ 1240.388688][ T2419] kasan_report.cold+0xe/0x18 [ 1240.393364][ T2419] ? __list_add_valid_or_report+0x105/0x130 [ 1240.399254][ T2419] __list_add_valid_or_report+0x105/0x130 [ 1240.404974][ T2419] clone_mnt+0x633/0x930 [ 1240.409225][ T2419] copy_tree+0xfc/0xbf0 [ 1240.413381][ T2419] ? __pfx_down_write+0x10/0x10 [ 1240.418236][ T2419] copy_mnt_ns+0x2bd/0xc30 [ 1240.422659][ T2419] ? create_new_namespaces+0x30/0xac0 [ 1240.428019][ T2419] ? rcu_is_watching+0x12/0xc0 [ 1240.432780][ T2419] create_new_namespaces+0xd3/0xac0 [ 1240.437977][ T2419] ? bpf_lsm_capable+0x9/0x10 [ 1240.442635][ T2419] ? security_capable+0x80/0x260 [ 1240.447559][ T2419] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1240.453180][ T2419] ksys_unshare+0x455/0xab0 [ 1240.457670][ T2419] ? __pfx_ksys_unshare+0x10/0x10 [ 1240.462706][ T2419] __x64_sys_unshare+0x31/0x40 [ 1240.467464][ T2419] do_syscall_64+0x106/0xf80 [ 1240.472042][ T2419] ? clear_bhb_loop+0x40/0x90 [ 1240.476710][ T2419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.482585][ T2419] RIP: 0033:0x7fac4cf9c629 [ 1240.486986][ T2419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.506576][ T2419] RSP: 002b:00007fac4dd7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1240.514993][ T2419] RAX: ffffffffffffffda RBX: 00007fac4d216180 RCX: 00007fac4cf9c629 [ 1240.522949][ T2419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 1240.530913][ T2419] RBP: 00007fac4d032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1240.538865][ T2419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1240.546828][ T2419] R13: 00007fac4d216218 R14: 00007fac4d216180 R15: 00007ffd79782f78 [ 1240.554801][ T2419] [ 1240.558086][ T2419] Kernel Offset: disabled [ 1240.562386][ T2419] Rebooting in 86400 seconds..