last executing test programs: 32.668389378s ago: executing program 2 (id=1459): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 30.919418735s ago: executing program 4 (id=1461): mkdir(&(0x7f0000000000)='./file0\x00', 0x11a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x30081}, 0x20000010) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000040)=0x10001, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) close(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='omfs\x00', 0x0, 0x0) 30.104357979s ago: executing program 3 (id=1463): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000024000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppoe(r7, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x3, r5}) socket$kcm(0x2, 0xa, 0x2) 29.102958531s ago: executing program 4 (id=1465): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 28.819477052s ago: executing program 3 (id=1467): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xffe3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 19.857454414s ago: executing program 2 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x7, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1f, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendto(r0, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf108}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 17.699297673s ago: executing program 2 (id=1477): eventfd2(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYRESDEC=r4]) sendmmsg$inet(r4, 0x0, 0x0, 0x4000020) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x94a}}, 0x1006) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x1, 0x4) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000600000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100090810000000000000040000", 0x58}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) 17.357350244s ago: executing program 4 (id=1480): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17.341049306s ago: executing program 3 (id=1481): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb", 0x40}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 16.038101284s ago: executing program 2 (id=1482): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a0000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000240)=0x5, 0x4, 0x2) 14.422059298s ago: executing program 0 (id=1483): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a367963c117f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x400000009, 0xfffffffe, 0x0, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3962, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, 0x0, 0x0) dup2(r7, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, 0x0, &(0x7f00000001c0)='binder\x00', 0x1a14041, 0x0) 11.96937024s ago: executing program 2 (id=1486): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906125a10053c8e288ac4445ff0e999d423cc250e", 0x57}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 11.067690219s ago: executing program 0 (id=1488): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) openat$cgroup_type(r7, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3}]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 10.836500271s ago: executing program 3 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cf"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)={0x3e0, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x3b0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x360, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x31c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmmsg$inet(r0, &(0x7f0000000280), 0x0, 0x20000000) timer_create(0x0, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='\"', @ANYRESOCT], 0x33) close(r5) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) preadv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x10) 9.270190289s ago: executing program 4 (id=1491): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xffe3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 9.061338994s ago: executing program 1 (id=1492): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000140)='j', 0x1}, {&(0x7f0000001440)="da588a7f52d584e75f5650ac8db28854300fe129e722c452e01d804c5f674860665b8229217350767968420c1ae014006e5ff709dbd14d390edf4a09fbab3fd1fc8a2917ad0a19ee42e247cebd8b3461af7bc22f1b5358a95bad520a2afac066005fdad7304275e6bbdf41c8847624bfa7c73f8bd7cad4fa82c9a14ba07c76d24272de860070ba21e3fe6a269e8b9023332bd17477a170a42767829fb53769c38f5d7fb277f7e4dc77c395a9ddf4ea71fa925ecb154ce8a205407600319a715fe0f60ac1e8603569cda0b6fdd8988c44881071d8b8d6", 0xd6}, {0x0}, {&(0x7f0000001640)="35d42092d9e8156290b25f9e664b408037b54b6b83ce456c3ecf6f564aaf698a6ae4226c403c4da6f34679bef41d387a913f3f90c4a6d77b66ad073f062d46a610fdcf7eb4dffc2cc857b62c9d2d", 0x4e}], 0x4}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000000c0)="18", 0x1}], 0x1}}], 0x2, 0x20040040) r4 = fanotify_init(0x2, 0x1) fanotify_mark(r4, 0x0, 0x800001b, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x3}, 0x8) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf3bc02d4ce92c460}, 0xc0d0) 8.485419556s ago: executing program 1 (id=1493): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r6 = shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) shmdt(r6) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 7.705474569s ago: executing program 0 (id=1494): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000480)='wg0\x00', 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4d, &(0x7f00000005c0)=ANY=[@ANYBLOB="0580c20000000000000000020011807e09a35f6ddc73f1c2c14e726a0af7127a80e4e73e77bb1bc7fe10b137bcd6a140488dffba6a946275ab0a8f0bdcacb18e7239c4b0e762b12a8d1934085dd7deb645747898f91c81"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ce47ce831050f46dba3a6500536808002fb0a23c430524f6bd06e99c93d0a292b7d48bddaf1241eae9dbc0e40610cf8c74896407381a08b25eef16e6a1974a7eba63ed0abf", @ANYRES16=r5, @ANYBLOB="000427bd7000fddbdf25080000002600070073797374656d5f753a6f626a6563745f723a6b736d5f6465766963655f743a733000000014000200fc00000000000000000000000000000108000500e0000001050001000000000014000300fe80000000000000000000000000000a2900070073797374656d5f753a6f626a6563745f723a6966636f6e6669675f657865635f743a73300000000014000200fe8000000000000000000000000000aa"], 0xb4}, 0x1, 0x0, 0x0, 0x240480d1}, 0x4048840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000540)=@sack_info={0x0, 0x8}, &(0x7f0000000280)=0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030402000000fedbdf2500000300a11625bb", @ANYRES32=0x0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x40305828, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r9], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 7.034548094s ago: executing program 1 (id=1495): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000280)=""/235) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000380)={{r2}, 0x8, &(0x7f00000001c0)=[0x1000, 0xffffffffffff7fff, 0x7, 0x7, 0x4, 0x2, 0x0, 0x6c22700a], 0x8000, 0x5}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf70000ff571587e022bda183"], 0x40) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x29, 0x43, 0x0, &(0x7f0000001ffc)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6.509023303s ago: executing program 0 (id=1496): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e00010028bd7000fbdbdf25ac1e0101000000000000000000000000000004d402003300ac1414aa000000000000000000e2b400000000000000000008000b000500"], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=@gettaction={0xc0, 0x32, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r3, &(0x7f0000000240), &(0x7f0000000080)=@tcp, 0x1000000}, 0x20) r4 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x47) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r7, 0x301, 0x70bd27, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44001) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) 5.54644644s ago: executing program 0 (id=1497): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x124}}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000004c0)={0x5, 0x10, 0xc7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r7) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 5.406103102s ago: executing program 1 (id=1498): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000819000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB='\n\x00']) openat$cgroup_type(r7, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcffffff100000001800018014000200776c616e3000000000000000000000000800070000000000"], 0x34}}, 0x0) io_submit(r5, 0x2, &(0x7f00000011c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0xe3, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x6, 0x453, r4, 0x0, 0x0, 0xffffeffffffffffe}]) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 4.334458724s ago: executing program 2 (id=1499): socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb", 0x40}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4.092394079s ago: executing program 4 (id=1500): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000700)=@mpls_getroute={0xd4, 0x1a, 0x200, 0x70bd25, 0x25dfdbfb, {0x1c, 0x20, 0x14, 0x6, 0xff, 0x1, 0x0, 0x0, 0x1000}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x4}, {0x4}, {0x200}, {0x4}, {0x3ff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x10}, {0x8}, {0xc20, 0x0, 0x1}, {0x94d}, {0xffff}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0x3, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x6}, {}, {0x3, 0x0, 0x1}, {0xaba, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xa08, 0x0, 0x1}, {0x200}, {}, {0x47d0, 0x0, 0x1}, {0xffffd}, {0x81, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xb}, @RTA_VIA={0x14, 0x12, {0xa, "a32aab4ff55ef600d04cc644cbe4"}}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r7, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, r6) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3.702301402s ago: executing program 3 (id=1501): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd, 0xffe3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000092461340000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) 3.065270483s ago: executing program 0 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, r1, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04080902c9"], 0xc) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getpeername(r5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x7ff, &(0x7f0000000280)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='\n\x00'], 0x50) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) write$uinput_user_dev(r7, 0x0, 0x0) 1.94271456s ago: executing program 1 (id=1503): r0 = syz_open_dev$I2C(&(0x7f0000001940), 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$I2C_PEC(r0, 0x703, 0x60) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r8, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8}) 1.640889055s ago: executing program 3 (id=1504): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) socket(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2}, 0x10, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r10, 0xf}}, 0x10) 189.330006ms ago: executing program 4 (id=1505): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r6 = shmat(r5, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) shmdt(r6) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 0s ago: executing program 1 (id=1506): syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x200, 0x1004}, 0x4, [0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x6c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0x0, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x0, 0x6, 0x0, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x0, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000002, 0x0, 0xab47, 0x0, 0x400526b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x100, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_DEV_DESTROY(r6, 0x5502) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3e, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x2, 0x7, 0x200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x200006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x4, 0x3, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) kernel console output (not intermixed with test programs): ied { setopt } for pid=10909 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 631.799462][ T29] audit: type=1400 audit(1775700843.632:546): avc: denied { create } for pid=10909 comm="syz.0.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 631.847476][ T29] audit: type=1400 audit(1775700843.712:547): avc: denied { sys_admin } for pid=10909 comm="syz.0.969" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 633.330572][ T29] audit: type=1326 audit(1775700845.572:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 633.356289][ T29] audit: type=1326 audit(1775700845.572:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 633.381030][ T29] audit: type=1326 audit(1775700845.572:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.129494][ T29] audit: type=1326 audit(1775700845.582:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.199376][T10931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 634.743888][ T29] audit: type=1326 audit(1775700845.582:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.769856][ T29] audit: type=1326 audit(1775700845.602:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.810224][ T29] audit: type=1326 audit(1775700845.602:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.869146][ T29] audit: type=1326 audit(1775700845.602:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 634.897001][ T29] audit: type=1326 audit(1775700845.602:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10921 comm="syz.2.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6f9a39c819 code=0x7ffc0000 [ 636.902713][ T5877] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 637.093907][T10950] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 637.248868][ T5877] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 637.272485][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.801904][ T5877] usb 3-1: config 0 descriptor?? [ 637.815399][ T5877] cp210x 3-1:0.0: cp210x converter detected [ 638.016170][ T5877] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 638.026075][ T5877] cp210x 3-1:0.0: querying part number failed [ 638.223147][ T5877] usb 3-1: cp210x converter now attached to ttyUSB0 [ 638.417118][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 638.488072][T10963] xt_hashlimit: size too large, truncated to 1048576 [ 639.940076][T10977] netem: incorrect ge model size [ 639.947405][T10977] netem: change failed [ 640.462647][ T5877] usb 3-1: USB disconnect, device number 19 [ 640.486444][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.496330][ T5877] cp210x 3-1:0.0: device disconnected [ 640.738973][T10983] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 642.266883][T10377] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 642.448193][T10377] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 642.534796][T10377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.553484][T10377] usb 4-1: Product: syz [ 642.557856][T10377] usb 4-1: Manufacturer: syz [ 642.568467][T10377] usb 4-1: SerialNumber: syz [ 642.693659][ T51] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 642.965051][T10377] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 643.015863][ T1207] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 644.072772][ T1207] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 644.085060][ T1207] ath9k_htc: Failed to initialize the device [ 644.559467][ T1207] usb 4-1: ath9k_htc: USB layer deinitialized [ 645.724272][ T5894] usb 4-1: USB disconnect, device number 21 [ 646.745657][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 646.788819][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 646.897736][ T51] Bluetooth: hci4: hardware error 0x00 [ 647.127731][T11031] cgroup: fork rejected by pids controller in /syz0 [ 649.122563][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 649.277562][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.318202][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.484336][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.510387][T11057] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 649.575683][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.824301][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.842747][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.953389][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 649.987635][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.166004][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.077268][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.087836][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.112497][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.124377][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.137871][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.252649][T11068] lo speed is unknown, defaulting to 1000 [ 651.360100][T11068] lo speed is unknown, defaulting to 1000 [ 651.400024][T11074] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 651.443047][ T12] dummy0: left promiscuous mode [ 651.449350][ T12] bridge0: port 3(dummy0) entered disabled state [ 651.533976][ T12] bridge_slave_1: left allmulticast mode [ 651.573152][ T12] bridge_slave_1: left promiscuous mode [ 651.594298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.605315][ T12] bridge_slave_0: left allmulticast mode [ 651.611920][ T12] bridge_slave_0: left promiscuous mode [ 651.678085][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.752482][T11085] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 652.155814][T11088] libceph: resolve '0..' (ret=-3): failed [ 652.453478][T11093] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 653.192655][ T5818] Bluetooth: hci1: command tx timeout [ 653.307417][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 653.430079][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.443820][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.454640][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 653.466152][ T12] bond0 (unregistering): Released all slaves [ 653.476679][ T12] bond1 (unregistering): Released all slaves [ 653.495472][ T12] bond2 (unregistering): Released all slaves [ 653.507573][ T12] bond3 (unregistering): Released all slaves [ 653.522825][ T12] bond4 (unregistering): Released all slaves [ 653.556388][T11080] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 653.853529][ T29] audit: type=1400 audit(1775700866.092:557): avc: denied { append } for pid=11101 comm="syz.4.1009" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 654.052573][ T5894] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 654.224728][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 654.319150][ T5894] usb 4-1: config 1 has an invalid descriptor of length 84, skipping remainder of the config [ 654.429900][ T5894] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 654.456309][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.497414][T11068] chnl_net:caif_netlink_parms(): no params data found [ 654.516137][ T5894] usb 4-1: Product: syz [ 654.565718][ T5894] usb 4-1: Manufacturer: syz [ 654.587982][ T5894] usb 4-1: SerialNumber: syz [ 654.619055][ T5894] usb 4-1: selecting invalid altsetting 1 [ 654.640381][ T5894] usb 4-1: unit 6 not found! [ 654.847983][ T12] hsr_slave_0: left promiscuous mode [ 654.889936][ T12] hsr_slave_1: left promiscuous mode [ 654.899308][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.087365][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.296462][ T5818] Bluetooth: hci1: command tx timeout [ 655.319780][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.357492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.414799][ T12] batman_adv: batadv0: Interface deactivated: macsec1 [ 655.464568][ T12] batman_adv: batadv0: Removing interface: macsec1 [ 655.533918][ T12] veth1_macvtap: left promiscuous mode [ 655.543964][ T12] veth0_macvtap: left promiscuous mode [ 655.557414][ T12] veth1_vlan: left promiscuous mode [ 655.619704][ T12] veth0_vlan: left promiscuous mode [ 657.298705][ T12] team0 (unregistering): Port device team_slave_1 removed [ 657.333716][ T12] team0 (unregistering): Port device team_slave_0 removed [ 657.364469][ T5818] Bluetooth: hci1: command tx timeout [ 657.868743][T11149] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 657.939919][T11150] loop5: detected capacity change from 0 to 7 [ 657.993335][T11151] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 658.003086][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 658.512458][T11150] Dev loop5: unable to read RDB block 7 [ 658.518062][T11150] loop5: AHDI p1 [ 658.523465][T11150] loop5: partition table partially beyond EOD, truncated [ 658.626192][T11149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.636474][T11149] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 658.646574][T11151] batadv0: entered promiscuous mode [ 658.653643][T11151] batadv0: entered allmulticast mode [ 658.678653][T11151] bond0: (slave batadv0): Releasing backup interface [ 658.716197][T11151] bridge0: port 5(batadv0) entered blocking state [ 658.724480][T11151] bridge0: port 5(batadv0) entered disabled state [ 659.054940][ T7113] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 659.066330][ T7113] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 659.086635][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'. [ 659.579728][ T5818] Bluetooth: hci1: command tx timeout [ 659.588652][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.872547][ T5894] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 659.886181][ T5894] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 659.896475][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.907835][ T5894] usb 4-1: selecting invalid altsetting 1 [ 659.915555][T11068] bridge_slave_0: entered allmulticast mode [ 659.924002][T11068] bridge_slave_0: entered promiscuous mode [ 659.930267][ T5894] usb 4-1: unit 6 not found! [ 659.937959][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.490441][ T5894] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 660.510211][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.533811][T11175] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 660.546922][ T5894] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 660.568333][T11068] bridge_slave_1: entered allmulticast mode [ 660.614918][ T5894] usb 4-1: selecting invalid altsetting 1 [ 660.623644][T11068] bridge_slave_1: entered promiscuous mode [ 660.629466][ T29] audit: type=1326 audit(1775700872.862:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 660.662255][ T5894] usb 4-1: unit 6 not found! [ 660.959012][T11184] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 661.312973][ T29] audit: type=1326 audit(1775700872.862:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 661.338302][ T5894] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 661.347681][ T29] audit: type=1326 audit(1775700872.862:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 661.428906][ T29] audit: type=1326 audit(1775700872.862:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 661.475503][T11186] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 661.536438][ T5894] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 661.558523][ T29] audit: type=1326 audit(1775700872.862:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 661.591028][ T5894] usb 4-1: USB disconnect, device number 22 [ 661.657610][ T29] audit: type=1326 audit(1775700872.872:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 661.745697][ T29] audit: type=1326 audit(1775700872.872:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 663.018706][ T29] audit: type=1326 audit(1775700872.872:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 663.086365][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.114670][ T8166] udevd[8166]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.196114][ T29] audit: type=1326 audit(1775700872.872:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.3.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 663.326847][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.465659][T11068] team0: Port device team_slave_0 added [ 663.500278][T11068] team0: Port device team_slave_1 added [ 663.749643][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.757604][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.936651][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.949287][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.958217][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.985934][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.127060][T11068] hsr_slave_0: entered promiscuous mode [ 664.144488][T11068] hsr_slave_1: entered promiscuous mode [ 666.005064][T11227] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 666.861273][T11235] cgroup: fork rejected by pids controller in /syz4 [ 668.588968][T11248] netlink: 'syz.1.1026': attribute type 10 has an invalid length. [ 668.599373][T11248] batman_adv: batadv0: Adding interface: netdevsim0 [ 668.607776][T11248] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.705454][T11248] batman_adv: batadv0: Interface activated: netdevsim0 [ 669.564336][T10706] bridge0: port 3(syz_tun) entered disabled state [ 670.330354][T10706] syz_tun (unregistering): left allmulticast mode [ 670.340424][T10706] syz_tun (unregistering): left promiscuous mode [ 670.347746][T10706] bridge0: port 3(syz_tun) entered disabled state [ 671.450943][T11282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.579929][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 672.593463][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 672.603048][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.612956][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.620491][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 672.765930][ T1143] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.806817][T11068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 672.956238][T11068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 672.976177][T11068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.005195][ T1143] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.226741][ T29] audit: type=1400 audit(1775700885.342:567): avc: denied { connect } for pid=11293 comm="syz.1.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 673.515326][T11068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.572907][T11289] lo speed is unknown, defaulting to 1000 [ 673.595884][ T1143] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.627724][T11289] lo speed is unknown, defaulting to 1000 [ 673.814810][ T1143] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.355999][T11316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.372931][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.763829][ T51] Bluetooth: hci0: command tx timeout [ 675.096141][T11322] mkiss: ax0: crc mode is auto. [ 675.239837][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.357807][T11328] tipc: Started in network mode [ 675.366644][T11328] tipc: Node identity 2, cluster identity 4711 [ 675.380690][T11328] tipc: Node number set to 2 [ 675.624622][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.631766][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.822082][T11333] cgroup: fork rejected by pids controller in /syz2 [ 676.152503][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.159656][ T7113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.547814][T11068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.652949][T11068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.720307][ T1143] bridge_slave_1: left allmulticast mode [ 676.754421][ T1143] bridge_slave_1: left promiscuous mode [ 676.805811][ T51] Bluetooth: hci0: command tx timeout [ 676.813259][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.012916][ T1143] bridge_slave_0: left allmulticast mode [ 677.026427][ T1143] bridge_slave_0: left promiscuous mode [ 677.124854][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.973453][ T1143] bond1 (unregistering): (slave gretap1): Releasing active interface [ 678.081678][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.096484][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.115496][ T1143] bond0 (unregistering): (slave team0): Releasing backup interface [ 678.130278][ T1143] bond0 (unregistering): Released all slaves [ 678.157372][ T1143] bond1 (unregistering): Released all slaves [ 678.183481][ T1143] bond2 (unregistering): Released all slaves [ 678.219935][ T1143] bond3 (unregistering): Released all slaves [ 678.356000][T11349] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 678.444502][ T1143] IPVS: stopping backup sync thread 7497 ... [ 678.607486][T10932] syz_tun (unregistering): left allmulticast mode [ 678.614971][T10932] syz_tun (unregistering): left promiscuous mode [ 678.622332][T10932] bridge0: port 3(syz_tun) entered disabled state [ 678.891636][ T51] Bluetooth: hci0: command tx timeout [ 679.358992][T11289] chnl_net:caif_netlink_parms(): no params data found [ 679.885579][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.896766][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.998774][T11289] bridge_slave_0: entered allmulticast mode [ 680.012218][T11289] bridge_slave_0: entered promiscuous mode [ 680.058707][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.090604][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.114610][T11289] bridge_slave_1: entered allmulticast mode [ 680.141133][T11289] bridge_slave_1: entered promiscuous mode [ 680.165905][T11394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 680.318031][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.329330][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.339634][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.357266][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.365663][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.543773][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.579814][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.634569][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.762596][ T1143] hsr_slave_0: left promiscuous mode [ 680.776392][ T1143] hsr_slave_1: left promiscuous mode [ 680.799352][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.817841][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.911050][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.918443][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.952396][ T5818] Bluetooth: hci0: command tx timeout [ 681.021623][ T1143] veth1_macvtap: left promiscuous mode [ 681.027108][ T1143] veth0_macvtap: left promiscuous mode [ 681.032994][ T1143] veth1_vlan: left promiscuous mode [ 681.042361][ T1143] veth0_vlan: left promiscuous mode [ 681.389340][ T1143] team_slave_1 (unregistering): left allmulticast mode [ 681.398501][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 681.423934][ T1143] team_slave_0 (unregistering): left allmulticast mode [ 681.433659][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 681.615922][T11417] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 681.686279][T11289] team0: Port device team_slave_0 added [ 681.739973][T11289] team0: Port device team_slave_1 added [ 681.749146][T11399] lo speed is unknown, defaulting to 1000 [ 681.893072][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.900029][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.938700][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.399027][ T5818] Bluetooth: hci4: command tx timeout [ 682.483814][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.491702][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.522429][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.549555][T11399] lo speed is unknown, defaulting to 1000 [ 682.633037][T11289] hsr_slave_0: entered promiscuous mode [ 682.649338][T11289] hsr_slave_1: entered promiscuous mode [ 682.663627][T11289] debugfs: 'hsr0' already exists in 'hsr' [ 682.672544][T11289] Cannot create hsr debugfs directory [ 682.705834][T11068] veth0_vlan: entered promiscuous mode [ 682.779922][T11068] veth1_vlan: entered promiscuous mode [ 682.940072][T11068] veth0_macvtap: entered promiscuous mode [ 683.045827][T11068] veth1_macvtap: entered promiscuous mode [ 683.173614][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.203188][T11437] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 683.617449][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 683.628603][T11447] openvswitch: netlink: Flow actions attr not present in new flow. [ 684.089495][T11399] chnl_net:caif_netlink_parms(): no params data found [ 684.128557][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.262827][ T1143] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.481931][ T5818] Bluetooth: hci4: command tx timeout [ 684.493574][ T29] audit: type=1400 audit(1775700896.662:568): avc: denied { getopt } for pid=11451 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 684.688320][ T7113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.706188][T11457] syz_tun: entered allmulticast mode [ 684.753834][ T7113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.763120][ T7113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.778692][ T1143] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.848092][ T7113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.058242][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.071815][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.082968][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 685.089197][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 685.097905][T11399] bridge_slave_0: entered allmulticast mode [ 685.127636][T11399] bridge_slave_0: entered promiscuous mode [ 685.198440][T11464] ceph: No mds server is up or the cluster is laggy [ 685.323938][ T1143] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.378634][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 685.433411][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 685.463160][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.477581][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.499965][T11399] bridge_slave_1: entered allmulticast mode [ 685.518208][T11399] bridge_slave_1: entered promiscuous mode [ 685.526761][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.526825][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.552297][ T1143] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.615553][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.634239][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.673042][T11457] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1051'. [ 685.683572][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 685.696336][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 685.818505][T11399] team0: Port device team_slave_0 added [ 685.838466][T11399] team0: Port device team_slave_1 added [ 685.852391][T11475] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 685.895334][ T7111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.907205][ T7111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.964056][ T7121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.974285][ T7121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.320283][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.342798][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.610371][ T5818] Bluetooth: hci4: command tx timeout [ 686.623887][ T29] audit: type=1400 audit(1775700898.852:569): avc: denied { write } for pid=11482 comm="syz.1.1054" path="socket:[31934]" dev="sockfs" ino=31934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 686.953389][T11491] overlayfs: workdir and upperdir must be separate subtrees [ 687.563739][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.579026][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.596673][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.624006][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.732503][ T5877] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 687.896064][T11399] hsr_slave_0: entered promiscuous mode [ 687.903623][T11399] hsr_slave_1: entered promiscuous mode [ 687.909826][T11399] debugfs: 'hsr0' already exists in 'hsr' [ 688.034276][T11399] Cannot create hsr debugfs directory [ 688.456010][ T5877] usb 4-1: device descriptor read/64, error -71 [ 688.574371][T11289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 688.633008][ T5818] Bluetooth: hci4: command tx timeout [ 688.693373][T11289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 688.784829][T11289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 688.806945][ T1143] bridge0: port 5(batadv0) entered disabled state [ 688.822788][ T5877] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 688.836581][ T1143] erspan0: left allmulticast mode [ 688.856751][ T1143] erspan0: left promiscuous mode [ 688.877289][ T1143] bridge0: port 4(erspan0) entered disabled state [ 688.954581][ T1143] bridge_slave_1: left allmulticast mode [ 688.965721][ T1143] bridge_slave_1: left promiscuous mode [ 688.982008][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.993174][ T5877] usb 4-1: device descriptor read/64, error -71 [ 689.004554][ T1143] bridge_slave_0: left allmulticast mode [ 689.020379][ T1143] bridge_slave_0: left promiscuous mode [ 689.030666][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.104336][ T5877] usb usb4-port1: attempt power cycle [ 689.238036][T11524] comedi comedi2: pcmmio: I/O port conflict (0x5c22,32) [ 689.534908][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.776644][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.810887][ T1143] bond0 (unregistering): Released all slaves [ 689.825505][ T1143] bond1 (unregistering): Released all slaves [ 689.848668][T11289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 690.479632][ T1143] : left promiscuous mode [ 691.253799][ T5877] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 691.375286][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.414072][ T5877] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 691.433154][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.449924][ T5877] usb 4-1: config 0 has no interface number 0 [ 691.458164][ T5877] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 691.479946][ T5877] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 691.501206][ T5877] usb 4-1: config 0 interface 106 has no altsetting 0 [ 691.558670][ T5877] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 691.596090][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.605580][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.629022][ T5877] usb 4-1: config 0 descriptor?? [ 691.652340][ T5877] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 691.785851][ T1143] hsr_slave_0: left promiscuous mode [ 691.799744][ T1143] hsr_slave_1: left promiscuous mode [ 691.816127][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.825821][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.853211][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.862603][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.876128][ T1143] veth1_macvtap: left promiscuous mode [ 691.882800][ T1143] veth0_macvtap: left promiscuous mode [ 691.888380][ T1143] veth1_vlan: left promiscuous mode [ 691.895999][ T1143] veth0_vlan: left promiscuous mode [ 691.917399][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.972484][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.715153][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 692.723698][ T7117] usb 4-1: Failed to submit usb control message: -110 [ 692.740266][ T7117] usb 4-1: unable to send the bmi data to the device: -110 [ 692.752964][ T7117] usb 4-1: unable to get target info from device [ 692.765634][ T7117] usb 4-1: could not get target info (-110) [ 692.773781][ T7117] usb 4-1: could not probe fw (-110) [ 692.780567][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 692.795594][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 692.940914][ T1207] infiniband syz0: ib_query_port failed (-19) [ 693.283890][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.291131][ T9885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.353271][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.360421][ T9885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.407194][T11399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 693.533351][T11399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 694.097921][ T29] audit: type=1400 audit(1775700905.872:570): avc: denied { cmd } for pid=11579 comm="syz.1.1063" path="socket:[32273]" dev="sockfs" ino=32273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 694.123610][T11399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 694.187705][T11399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 694.515164][ T5877] usb 4-1: USB disconnect, device number 26 [ 695.281453][ T29] audit: type=1400 audit(1775700907.462:571): avc: denied { listen } for pid=11601 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 695.334283][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.466914][T11399] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.886213][ T29] audit: type=1800 audit(1775700907.962:572): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1065" name="file0" dev="overlay" ino=1282 res=0 errno=0 [ 696.207021][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.214220][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.342020][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.349178][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.672500][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.957233][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 697.731975][T11638] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 698.103019][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.504901][T11399] veth0_vlan: entered promiscuous mode [ 698.596012][T11399] veth1_vlan: entered promiscuous mode [ 698.656883][T11289] veth0_vlan: entered promiscuous mode [ 698.669024][T11399] veth0_macvtap: entered promiscuous mode [ 698.687869][T11289] veth1_vlan: entered promiscuous mode [ 698.717170][T11399] veth1_macvtap: entered promiscuous mode [ 698.767125][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.795499][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.837593][ T7117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.848003][ T7117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.863396][T11289] veth0_macvtap: entered promiscuous mode [ 698.889773][ T7117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.914183][ T7117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.928716][T11289] veth1_macvtap: entered promiscuous mode [ 699.100295][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.133620][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.184391][ T7121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.206728][ T7121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.240215][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.327692][ T29] audit: type=1400 audit(1775700911.562:573): avc: denied { name_bind } for pid=11648 comm="syz.3.1073" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 699.982176][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.226341][ T9885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.240366][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.323739][ T29] audit: type=1400 audit(1775700912.512:574): avc: denied { ioctl } for pid=11658 comm="syz.1.1074" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 700.330657][ T9885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.363284][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.483225][T11664] random: crng reseeded on system resumption [ 700.678191][ T29] audit: type=1400 audit(1775700912.732:575): avc: denied { setopt } for pid=11658 comm="syz.1.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 701.193321][ T7111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.205834][ T7111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.234362][ T7113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.246293][ T7113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.084278][T11679] fuse: Unknown parameter '–C–' [ 703.097732][T11679] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 705.980353][T11704] batman_adv: batadv0: Adding interface: macsec1 [ 706.003183][T11704] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.056458][T11704] batman_adv: batadv0: Interface activated: macsec1 [ 706.148024][T11709] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 706.573349][ T29] audit: type=1400 audit(1775700918.822:576): avc: denied { read } for pid=11714 comm="syz.4.1086" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 707.272253][ T29] audit: type=1400 audit(1775700918.822:577): avc: denied { open } for pid=11714 comm="syz.4.1086" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 707.868087][T11728] IPVS: length: 528 != 8 [ 708.218944][ T29] audit: type=1400 audit(1775700920.352:578): avc: denied { setopt } for pid=11713 comm="syz.0.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 708.527540][T11735] nfs: Unknown parameter 'ÿÿÿÿ' [ 708.547576][T11735] comedi comedi1: comedi_config --init_data is deprecated [ 708.892790][ T5877] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 708.921195][T11730] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 708.933114][T11730] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 708.949292][ T29] audit: type=1400 audit(1775700921.192:579): avc: denied { firmware_load } for pid=11727 comm="syz.4.1087" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 708.972380][T11730] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 709.102711][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 709.112126][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.163897][T11739] netlink: 'syz.3.1089': attribute type 11 has an invalid length. [ 709.177212][ T5877] usb 3-1: config 0 has no interfaces? [ 709.205055][T11739] netlink: 'syz.3.1089': attribute type 23 has an invalid length. [ 709.225231][ T5877] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 709.252489][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.265257][T11739] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1089'. [ 709.302494][ T5877] usb 3-1: Product: syz [ 709.314366][ T5877] usb 3-1: Manufacturer: syz [ 709.342608][ T5877] usb 3-1: SerialNumber: syz [ 709.362836][ T29] audit: type=1400 audit(1775700921.612:580): avc: denied { connect } for pid=11736 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 709.448975][ T5877] usb 3-1: config 0 descriptor?? [ 711.049669][T11751] IPv6: Can't replace route, no match found [ 711.056221][T11751] IPv6: Can't replace route, no match found [ 711.088660][ T5921] usb 3-1: USB disconnect, device number 20 [ 711.130467][T11756] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1089'. [ 711.148968][T11739] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.250360][T11758] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.1093'. [ 712.103368][T11763] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 712.114767][T11763] block device autoloading is deprecated and will be removed. [ 712.266745][T11765] bridge1: entered promiscuous mode [ 712.273818][T11765] bridge1: entered allmulticast mode [ 713.414208][T11781] netem: incorrect ge model size [ 713.419530][T11781] netem: change failed [ 714.636671][T11786] random: crng reseeded on system resumption [ 715.220589][T11799] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 715.284246][T11800] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 715.402166][T11801] serio: Serial port ptm0 [ 716.260207][T11813] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 716.753157][T11814] ceph: No mds server is up or the cluster is laggy [ 716.760033][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 716.766968][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 717.327023][T11822] overlayfs: overlapping lowerdir path [ 718.153889][T11827] mkiss: ax0: crc mode is auto. [ 718.767252][T11833] hub 1-0:1.0: USB hub found [ 718.773541][ T29] audit: type=1400 audit(1775700930.972:581): avc: denied { bind } for pid=11828 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 718.792774][T11833] hub 1-0:1.0: 1 port detected [ 718.949213][ T29] audit: type=1400 audit(1775700930.982:582): avc: denied { setopt } for pid=11828 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 719.200538][ T29] audit: type=1400 audit(1775700930.982:583): avc: denied { write } for pid=11828 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 719.222463][ T29] audit: type=1400 audit(1775700931.172:584): avc: denied { ioctl } for pid=11830 comm="syz.4.1109" path="socket:[34115]" dev="sockfs" ino=34115 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 720.046967][T11842] tipc: Started in network mode [ 720.060029][T11842] tipc: Node identity 2, cluster identity 4711 [ 720.072401][T11842] tipc: Node number set to 2 [ 720.648591][ T29] audit: type=1400 audit(1775700932.892:585): avc: denied { append } for pid=11845 comm="syz.0.1112" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 721.303756][T11854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1111'. [ 721.807304][T11856] random: crng reseeded on system resumption [ 721.923565][T11863] can0: slcan on ttyS3. [ 722.673234][T11858] can0 (unregistered): slcan off ttyS3. [ 724.548875][T11880] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 725.836988][T11889] loop6: detected capacity change from 0 to 7 [ 725.860427][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.870014][ C0] buffer_io_error: 6 callbacks suppressed [ 725.870029][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.932486][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.942071][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.952172][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.961750][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.974988][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 725.984566][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 725.996706][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.006285][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.026353][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.035932][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.046582][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.056167][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.067017][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.076599][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.084530][T11889] ldm_validate_partition_table(): Disk read failed. [ 726.110645][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.120255][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.135082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 726.144685][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 726.242439][T11889] Dev loop6: unable to read RDB block 0 [ 726.608634][T11889] loop6: unable to read partition table [ 726.617119][T11889] loop6: partition table beyond EOD, truncated [ 726.625156][T11889] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 727.084225][T11895] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 728.145849][T11895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.568621][T11897] bond1: (slave gretap1): making interface the new active one [ 728.586278][T11897] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 728.808067][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 729.201877][T11909] nbd: socks must be embedded in a SOCK_ITEM attr [ 731.063313][T11924] netem: incorrect ge model size [ 731.903269][T11920] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1126'. [ 731.914472][ T29] audit: type=1400 audit(1775700944.142:586): avc: denied { write } for pid=11915 comm="syz.2.1126" path="socket:[34927]" dev="sockfs" ino=34927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 732.890400][T10269] udevd[10269]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 733.507962][ T5818] Bluetooth: hci1: unexpected event 0x08 length: 9 > 4 [ 733.829378][T10005] udevd[10005]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 735.616791][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 735.895292][ T1539] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 736.153171][ T1539] usb 4-1: Using ep0 maxpacket: 16 [ 736.270222][T11961] bridge1: entered promiscuous mode [ 736.277300][T11961] bridge1: entered allmulticast mode [ 736.678166][ T1539] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 736.712106][ T1539] usb 4-1: config 1 has no interface number 1 [ 736.736474][ T1539] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 736.758883][ T1539] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 736.781244][ T1539] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.915645][ T1539] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.067873][ T1539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.077692][ T1539] usb 4-1: Product: syz [ 737.222587][ T1539] usb 4-1: Manufacturer: syz [ 737.227186][ T1539] usb 4-1: SerialNumber: syz [ 738.056673][T11974] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 739.372899][ T1539] usb 4-1: failed to enable PITCH for EP 0x82 [ 739.379386][ T1539] usb 4-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 739.499328][ T1539] usb 4-1: USB disconnect, device number 27 [ 739.915310][T11994] netem: incorrect ge model size [ 740.726162][T11976] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 740.986653][T11998] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 742.609918][T12013] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1145'. [ 742.714428][ T29] audit: type=1400 audit(1775700954.962:587): avc: denied { read write } for pid=12009 comm="syz.4.1145" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 742.749985][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 742.873435][ T29] audit: type=1400 audit(1775700954.962:588): avc: denied { open } for pid=12009 comm="syz.4.1145" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 743.168888][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 743.836994][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 743.902558][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 744.037299][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 744.059194][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.070466][ T24] usb 2-1: Product: syz [ 744.076833][ T24] usb 2-1: Manufacturer: syz [ 744.084065][ T24] usb 2-1: SerialNumber: syz [ 744.177833][ T24] usb 2-1: config 0 descriptor?? [ 744.772717][ T29] audit: type=1400 audit(1775700956.882:589): avc: denied { setopt } for pid=12021 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 744.807814][ T5921] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 745.409531][ T29] audit: type=1400 audit(1775700956.962:590): avc: denied { getopt } for pid=12021 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 745.942855][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 745.959931][ T5921] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 746.086909][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.206782][T12038] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2) [ 746.234446][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.363178][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 746.442613][ T5921] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 746.660297][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.960021][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.973111][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.990091][ T5921] usb 1-1: config 0 descriptor?? [ 748.526290][ T5921] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0002/input/input15 [ 748.576566][ T5921] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0002/input/input16 [ 748.843620][T12049] netem: incorrect ge model size [ 748.848761][T12049] netem: change failed [ 749.337865][ T5921] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 749.603848][ T5921] usb 1-1: USB disconnect, device number 14 [ 749.648864][ T24] usb 2-1: USB disconnect, device number 16 [ 749.669246][T12052] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 749.837794][T12050] fido_id[12050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 752.030028][T12073] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 752.327827][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1158'. [ 754.468828][T12093] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 755.315864][T12105] netlink: 'syz.3.1163': attribute type 10 has an invalid length. [ 755.342462][T12105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 755.358392][T12105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 755.434049][T12105] loop5: detected capacity change from 0 to 7 [ 755.489192][T12106] netlink: 'syz.3.1163': attribute type 10 has an invalid length. [ 755.498818][T12106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1163'. [ 755.509646][T12106] batadv0: entered promiscuous mode [ 755.517161][T12106] batadv0: entered allmulticast mode [ 755.917158][T12106] bond0: (slave batadv0): Releasing backup interface [ 755.927777][T12106] bridge0: port 3(batadv0) entered blocking state [ 755.936066][T12106] bridge0: port 3(batadv0) entered disabled state [ 756.008555][ T7111] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 756.009201][T12105] Dev loop5: unable to read RDB block 7 [ 756.019914][ T7111] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 756.025951][T12105] loop5: AHDI p1 [ 756.025979][T12105] loop5: partition table partially beyond EOD, truncated [ 756.907850][ T29] audit: type=1400 audit(1775700968.672:591): avc: denied { listen } for pid=12108 comm="syz.3.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.284520][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 757.332364][ T51] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 757.348321][T12117] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 758.627324][T12129] binder: 12125:12129 ioctl 4018620d 0 returned -22 [ 758.975412][T12130] netlink: 'syz.4.1168': attribute type 11 has an invalid length. [ 759.121934][T12136] IPv6: sit1: Disabled Multicast RS [ 759.134568][T12136] sit1: entered allmulticast mode [ 759.669898][T12138] netem: incorrect ge model size [ 759.677589][T12138] netem: change failed [ 759.948083][T12142] netlink: 'syz.3.1170': attribute type 1 has an invalid length. [ 760.107322][ T29] audit: type=1400 audit(1775700972.352:592): avc: denied { create } for pid=12139 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 760.139175][ T29] audit: type=1400 audit(1775700972.372:593): avc: denied { write } for pid=12139 comm="syz.3.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 761.010089][T12155] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 761.028895][T12154] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 761.352629][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 761.364859][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 761.376157][ T5818] Bluetooth: hci1: hardware error 0x00 [ 762.350528][T12164] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 762.501912][T12167] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 762.773204][ T1539] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 762.944462][ T1539] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 762.959822][ T1539] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.972728][ T1539] usb 1-1: config 0 has no interface number 0 [ 762.978915][ T1539] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 762.993181][ T1539] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 763.009143][ T1539] usb 1-1: config 0 interface 106 has no altsetting 0 [ 763.019905][ T1539] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 763.030277][ T1539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.067033][ T1539] usb 1-1: config 0 descriptor?? [ 763.096418][ T1539] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 763.372922][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.407535][ T29] audit: type=1400 audit(1775700975.652:594): avc: denied { name_bind } for pid=12175 comm="syz.1.1177" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 763.435789][ T5818] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 763.442890][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.474731][ T3536] usb 1-1: Failed to submit usb control message: -110 [ 764.589393][ T3536] usb 1-1: unable to send the bmi data to the device: -110 [ 764.607661][ T3536] usb 1-1: unable to get target info from device [ 764.807319][ T3536] usb 1-1: could not get target info (-110) [ 765.307752][ T3536] usb 1-1: could not probe fw (-110) [ 765.436050][ T1207] usb 1-1: USB disconnect, device number 15 [ 765.467598][T12193] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 766.564260][T12201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.571538][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 766.578802][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 766.586120][T12201] IPv6: NLM_F_CREATE should be set when creating new route [ 766.743952][ T29] audit: type=1400 audit(1775700978.922:595): avc: denied { remount } for pid=12199 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 767.322574][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 767.595469][T12219] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 767.621019][ T9] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 767.655489][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.689404][T12221] netem: incorrect ge model size [ 767.695945][T12221] netem: change failed [ 767.734668][ T9] usb 1-1: config 0 has no interface number 0 [ 767.803488][ T9] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 767.832742][ T9] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 767.836753][ T29] audit: type=1400 audit(1775700980.052:596): avc: denied { bind } for pid=12222 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 767.909628][ T9] usb 1-1: config 0 interface 106 has no altsetting 0 [ 767.939805][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 767.967657][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.989650][ T29] audit: type=1400 audit(1775700980.182:597): avc: denied { ioctl } for pid=12222 comm="syz.1.1187" path="socket:[35384]" dev="sockfs" ino=35384 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 768.072355][ T29] audit: type=1400 audit(1775700980.202:598): avc: denied { getopt } for pid=12222 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 768.112046][ T9] usb 1-1: config 0 descriptor?? [ 768.118299][ T29] audit: type=1400 audit(1775700980.202:599): avc: denied { write } for pid=12222 comm="syz.1.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 768.188829][ T29] audit: type=1400 audit(1775700980.212:600): avc: denied { ioctl } for pid=12222 comm="syz.1.1187" path="socket:[35386]" dev="sockfs" ino=35386 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 768.254044][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 768.548028][T12230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.559692][T12230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.729989][T12234] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 769.288822][ T3536] usb 1-1: Failed to submit usb control message: -110 [ 769.310160][ T3536] usb 1-1: unable to send the bmi data to the device: -110 [ 769.374959][ T3536] usb 1-1: unable to get target info from device [ 769.416597][ T3536] usb 1-1: could not get target info (-110) [ 769.553379][ T3536] usb 1-1: could not probe fw (-110) [ 770.162259][T12245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 772.013120][T12263] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 772.370427][ T1207] usb 1-1: USB disconnect, device number 16 [ 774.538932][ T29] audit: type=1400 audit(1775700986.420:601): avc: denied { read write } for pid=12286 comm="syz.3.1200" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 775.608268][ T29] audit: type=1400 audit(1775700986.420:602): avc: denied { open } for pid=12286 comm="syz.3.1200" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 775.875826][ T29] audit: type=1800 audit(1775700987.085:603): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1200" name="file1" dev="overlay" ino=1447 res=0 errno=0 [ 776.059618][T12296] Bluetooth: MGMT ver 1.23 [ 776.683471][T12303] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 777.884979][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 781.613780][ T793] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 782.437893][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 782.471163][ T793] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 782.490064][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.532298][ T793] usb 5-1: Product: syz [ 782.581976][ T793] usb 5-1: Manufacturer: syz [ 782.928557][ T793] usb 5-1: SerialNumber: syz [ 783.582476][ T793] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 783.594311][ T793] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 783.657301][ T793] usb 5-1: USB disconnect, device number 13 [ 783.687442][T12374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1221'. [ 783.699157][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 783.723210][T12374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1221'. [ 783.733124][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1221'. [ 783.838900][T12374] netlink: 810 bytes leftover after parsing attributes in process `syz.3.1221'. [ 783.955379][ T29] audit: type=1326 audit(1775700994.118:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.223579][ T29] audit: type=1326 audit(1775700994.118:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.351920][ T29] audit: type=1326 audit(1775700994.137:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.516623][ T29] audit: type=1326 audit(1775700994.146:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.542391][ T29] audit: type=1326 audit(1775700994.146:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.567167][ T29] audit: type=1326 audit(1775700994.155:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.596323][ T29] audit: type=1326 audit(1775700994.165:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.641868][ T29] audit: type=1326 audit(1775700994.165:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.743960][ T29] audit: type=1326 audit(1775700994.165:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 784.938235][ T29] audit: type=1326 audit(1775700994.174:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.3.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09039c819 code=0x7ffc0000 [ 785.231821][T12387] SET target dimension over the limit! [ 785.516704][T12387] netdevsim netdevsim4: Direct firmware load for / [ 785.516704][T12387] failed with error -2 [ 785.676986][T12387] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 785.676986][T12387] [ 785.795116][T12397] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 787.368478][T12406] evm: overlay not supported [ 789.079596][T12412] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 789.741383][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 789.741402][ T29] audit: type=1326 audit(1775700999.583:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12413 comm="syz.2.1230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x0 [ 791.256527][T12435] xt_nfacct: accounting object `syz0' does not exist [ 791.865344][T12448] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 792.063320][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 792.213008][ T5894] usb 5-1: device descriptor read/64, error -71 [ 792.470245][ T5894] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 792.742172][T12457] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 792.779290][ T5894] usb 5-1: device descriptor read/64, error -71 [ 792.899750][ T5894] usb usb5-port1: attempt power cycle [ 793.773070][ T5894] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 793.827141][ T5894] usb 5-1: device descriptor read/8, error -71 [ 794.227821][ T5894] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 794.266608][ T5894] usb 5-1: device descriptor read/8, error -71 [ 794.874516][ T29] audit: type=1400 audit(1775701003.804:644): avc: denied { mount } for pid=12475 comm="syz.2.1238" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 795.010000][ T29] audit: type=1400 audit(1775701003.804:645): avc: denied { search } for pid=12475 comm="syz.2.1238" name="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 795.034807][ T29] audit: type=1400 audit(1775701004.262:646): avc: denied { add_name } for pid=12475 comm="syz.2.1238" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 795.125683][ T5894] usb usb5-port1: unable to enumerate USB device [ 795.356575][ T29] audit: type=1400 audit(1775701004.262:647): avc: denied { create } for pid=12475 comm="syz.2.1238" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 795.975319][T12491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.434211][T12503] trusted_key: encrypted_key: insufficient parameters specified [ 797.161819][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 797.936734][T12514] 9p: Bad value for 'rfdno' [ 798.324676][ T29] audit: type=1400 audit(1775701007.547:648): avc: denied { append } for pid=12511 comm="syz.4.1243" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 798.858348][T12522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.295585][T12527] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 799.308714][T12527] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 799.944738][T12529] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 800.473194][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 800.549671][T12536] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 800.808215][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 801.543551][ T5894] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 801.573807][ T5894] usb 1-1: config 1 has no interface number 1 [ 801.588016][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.622144][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 801.660894][ T5894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 802.242051][ T5894] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 802.259802][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.279996][ T5894] usb 1-1: Product: syz [ 802.295545][ T5894] usb 1-1: Manufacturer: syz [ 802.309385][ T5894] usb 1-1: SerialNumber: syz [ 802.634461][ T5894] usb 1-1: failed to enable PITCH for EP 0x82 [ 802.654140][ T5894] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 803.438930][ T5894] usb 1-1: USB disconnect, device number 17 [ 803.482748][T12553] nfs: Unknown parameter 'ÿÿÿÿ' [ 803.660959][ T8045] udevd[8045]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.704910][T12556] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1252'. [ 803.739488][T12553] comedi comedi1: comedi_config --init_data is deprecated [ 804.454888][ T29] audit: type=1400 audit(1775701013.470:649): avc: denied { accept } for pid=12564 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 804.487998][ T1539] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 804.854530][ T1539] usb 4-1: Using ep0 maxpacket: 32 [ 804.875735][ T1539] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 805.661124][ T1539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.674575][ T1539] usb 4-1: Product: syz [ 805.679671][ T1539] usb 4-1: Manufacturer: syz [ 805.684256][ T1539] usb 4-1: SerialNumber: syz [ 805.693644][ T1539] usb 4-1: config 0 descriptor?? [ 806.002643][T12572] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1254'. [ 807.989955][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 808.043606][T12590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.556635][T12596] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 809.164169][ T1539] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 809.697187][ T1539] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 809.856232][ T1539] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 809.894472][ T1539] usb 4-1: USB disconnect, device number 28 [ 811.106308][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.112732][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.176118][T12611] 9pnet_fd: Insufficient options for proto=fd [ 813.613344][T12619] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 813.901420][T12622] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 814.305723][T12630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.057824][ T1539] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 815.872347][ T1539] usb 1-1: Using ep0 maxpacket: 32 [ 815.895552][ T1539] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 815.930210][ T1539] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.043042][ T1539] usb 1-1: Product: syz [ 816.049707][ T1539] usb 1-1: Manufacturer: syz [ 816.061711][ T1539] usb 1-1: SerialNumber: syz [ 816.082546][ T1539] usb 1-1: config 0 descriptor?? [ 816.144899][ T1539] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 816.197567][ T1539] dvb-usb: bulk message failed: -22 (4/0) [ 816.217013][ T1539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 816.299269][ T29] audit: type=1400 audit(1775701024.503:650): avc: denied { name_bind } for pid=12635 comm="syz.1.1271" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 816.299431][ T1539] dvb-usb: bulk message failed: -22 (5/0) [ 816.646110][ T1539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 816.692253][ T1539] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 816.737506][ T5877] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 816.750749][ T1539] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 816.802403][ T1539] usb 1-1: media controller created [ 816.908397][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 816.920962][ T5877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 816.931347][ T1539] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 816.950967][ T5877] usb 2-1: config 7 has an invalid interface number: 58 but max is 0 [ 816.987725][ T5877] usb 2-1: config 7 has no interface number 0 [ 817.014893][ T5877] usb 2-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.043190][ T1539] usb 1-1: selecting invalid altsetting 3 [ 817.074693][ T1539] ttusb2: set interface to alts=3 failed [ 817.340851][ T5877] usb 2-1: config 7 interface 58 has no altsetting 0 [ 817.360855][ T5877] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 817.372002][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.390244][ T5877] usb 2-1: Product: syz [ 817.436676][ T29] audit: type=1400 audit(1775701025.626:651): avc: denied { map } for pid=12649 comm="syz.2.1273" path="socket:[37357]" dev="sockfs" ino=37357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.485954][ T1539] DVB: Unable to find symbol tda10086_attach() [ 817.492188][ T1539] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 817.502612][ T5877] usb 2-1: Manufacturer: syz [ 817.509152][ T5877] usb 2-1: SerialNumber: syz [ 817.514337][ T1539] dvb-usb: bulk message failed: -22 (4/0) [ 817.521899][ T1539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 817.597892][ T1539] dvb-usb: bulk message failed: -22 (5/0) [ 817.605053][ T5894] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 817.636448][T12652] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1273'. [ 817.645840][ T1539] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 817.645914][ T1539] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 817.748112][ T1539] usb 1-1: USB disconnect, device number 18 [ 817.818071][ T29] audit: type=1400 audit(1775701025.626:652): avc: denied { read accept } for pid=12649 comm="syz.2.1273" path="socket:[37357]" dev="sockfs" ino=37357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 818.058925][ T5894] usb 5-1: not running at top speed; connect to a high speed hub [ 818.178209][ T5894] usb 5-1: config 1 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 818.271834][ T1539] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 818.298610][ T5894] usb 5-1: config 1 interface 0 has no altsetting 0 [ 818.311974][ T5877] usb 2-1: USB disconnect, device number 17 [ 818.336633][ T5894] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 818.347613][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.362108][ T5894] usb 5-1: Product: syz [ 818.366255][ T5894] usb 5-1: Manufacturer: syz [ 818.372728][ T5894] usb 5-1: SerialNumber: syz [ 818.868978][T12645] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 819.144531][T12645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.156453][T12645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.299898][T12666] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 819.471016][ T29] audit: type=1400 audit(1775701027.526:653): avc: denied { listen } for pid=12659 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 821.022774][T12682] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 821.232970][ T5894] usbhid 5-1:1.0: can't add hid device: -71 [ 821.240287][ T5894] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 821.276063][ T5894] usb 5-1: USB disconnect, device number 18 [ 821.448576][T12690] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 821.570759][T12692] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 822.411775][ T5894] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 822.744126][T12699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.117860][ T5894] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 823.131773][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 823.189409][ T5894] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 823.207437][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 823.251490][ T5894] usb 3-1: Product: syz [ 823.269677][ T5894] usb 3-1: Manufacturer: syz [ 823.274281][ T5894] usb 3-1: SerialNumber: syz [ 823.524974][T12703] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 823.572514][ T5894] usb 3-1: config 0 descriptor?? [ 823.601657][T12695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 823.616368][ T5894] usb 3-1: selecting invalid altsetting 0 [ 824.043936][T12711] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 825.446530][ T5894] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 826.132691][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 826.154048][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 826.168745][ T5894] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 826.185840][ T5894] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 826.207267][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 826.232574][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.245283][ T5894] usb 2-1: Product: syz [ 826.250745][ T5894] usb 2-1: Manufacturer: syz [ 826.250935][T12727] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 826.263741][ T5894] usb 2-1: SerialNumber: syz [ 826.455485][T12721] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 826.636064][ T793] usb 3-1: USB disconnect, device number 21 [ 826.757539][T12721] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 826.983085][T12721] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 827.307127][T12721] tipc: Enabled bearer , priority 10 [ 827.697687][T12721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 827.876161][T12742] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 828.546244][T12748] netem: incorrect ge model size [ 828.551238][T12748] netem: change failed [ 830.778866][ T5894] cdc_ncm 2-1:1.0: bind() failure [ 830.872815][T12761] tmpfs: Bad value for 'mpol' [ 830.966517][ T5894] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 831.347830][ T5894] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 831.358779][ T5894] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 831.505678][ T5894] usb 2-1: USB disconnect, device number 18 [ 831.542021][ T29] audit: type=1400 audit(1775701038.821:654): avc: denied { bind } for pid=12763 comm="syz.4.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 832.939990][T12767] mkiss: ax0: crc mode is auto. [ 833.424026][T12776] program syz.1.1299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 833.700643][T12778] lo speed is unknown, defaulting to 1000 [ 834.326596][ T5877] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 835.166287][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.293115][ T5877] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 835.354951][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 835.374701][ T5877] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 835.388344][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.398855][ T5877] usb 2-1: Product: syz [ 835.403085][ T5877] usb 2-1: Manufacturer: syz [ 835.669405][T12795] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 835.677904][ T5877] usb 2-1: SerialNumber: syz [ 836.651432][ T29] audit: type=1400 audit(1775701043.453:655): avc: denied { setopt } for pid=12792 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 836.654077][ T5877] usb 2-1: config 0 descriptor?? [ 836.727930][ T5877] usb 2-1: can't set config #0, error -71 [ 836.745385][ T5877] usb 2-1: USB disconnect, device number 19 [ 836.947478][ T29] audit: type=1400 audit(1775701043.575:656): avc: denied { read } for pid=12792 comm="syz.4.1302" path="socket:[37585]" dev="sockfs" ino=37585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 836.976217][ T29] audit: type=1400 audit(1775701043.631:657): avc: denied { map } for pid=12792 comm="syz.4.1302" path="socket:[37581]" dev="sockfs" ino=37581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 837.032358][T12802] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 837.047042][ T29] audit: type=1400 audit(1775701043.641:658): avc: denied { mounton } for pid=12792 comm="syz.4.1302" path="/file0" dev="ramfs" ino=37593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 838.534240][ T29] audit: type=1326 audit(1775701045.362:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 838.594971][T12819] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 838.933095][ T29] audit: type=1326 audit(1775701045.362:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 839.662747][ T29] audit: type=1326 audit(1775701045.362:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 839.709743][ T29] audit: type=1326 audit(1775701045.362:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 839.738643][ T29] audit: type=1326 audit(1775701045.362:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 840.106596][ T29] audit: type=1326 audit(1775701045.362:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 840.361864][ T29] audit: type=1326 audit(1775701045.362:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2402d9c819 code=0x7ffc0000 [ 840.861853][T12840] mkiss: ax0: crc mode is auto. [ 841.955104][T12847] xt_nfacct: accounting object `syz0' does not exist [ 842.710506][T12860] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1312'. [ 842.722422][T12860] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 843.222538][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 843.222554][ T29] audit: type=1326 audit(1775701049.751:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.576197][ T29] audit: type=1326 audit(1775701049.751:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.603870][ T29] audit: type=1326 audit(1775701049.751:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.629150][ T29] audit: type=1326 audit(1775701049.751:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.656012][ T29] audit: type=1326 audit(1775701049.751:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.684891][T12864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 843.711554][T12861] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 843.779538][ T29] audit: type=1326 audit(1775701049.789:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.935115][ T29] audit: type=1326 audit(1775701049.789:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 843.961261][ T29] audit: type=1326 audit(1775701049.789:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 844.009814][ T29] audit: type=1326 audit(1775701049.789:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.2.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0925f9c819 code=0x7ffc0000 [ 845.092185][ T29] audit: type=1400 audit(1775701051.501:705): avc: denied { read } for pid=12873 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 846.220981][T12882] kAFS: unable to lookup cell 'ÿ' [ 846.226736][T12884] kAFS: unable to lookup cell '(,c¾Ì' [ 846.249138][T12884] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 846.259513][T12884] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 846.273536][T12884] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 846.421676][T12888] netlink: 'syz.0.1320': attribute type 1 has an invalid length. [ 848.565491][T12910] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 849.397422][T12917] fuse: Unknown parameter 'euid<00000000000000000000' [ 849.571715][T12921] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 849.600294][T12921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.739293][T12921] loop5: detected capacity change from 0 to 7 [ 849.787028][T12922] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 849.795827][T12922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1327'. [ 849.805867][T12922] batadv0: entered promiscuous mode [ 849.814544][T12922] batadv0: entered allmulticast mode [ 849.823931][T12922] bridge0: port 3(batadv0) entered blocking state [ 849.833641][T12922] bridge0: port 3(batadv0) entered disabled state [ 849.963798][T12921] Dev loop5: unable to read RDB block 7 [ 849.972326][T12921] loop5: AHDI p1 [ 849.976219][T12921] loop5: partition table partially beyond EOD, truncated [ 850.058760][ T9885] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 850.070807][ T9885] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 850.210367][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 850.210381][ T29] audit: type=1400 audit(1775701056.293:707): avc: denied { set_context_mgr } for pid=12912 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 851.101184][T12926] lo speed is unknown, defaulting to 1000 [ 851.523368][T12935] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 856.373147][ T793] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 856.504341][T12977] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 856.641345][ T793] usb 2-1: config 0 has no interfaces? [ 856.646861][ T793] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 856.661011][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.144923][ T793] usb 2-1: config 0 descriptor?? [ 857.625938][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 861.220963][ T1207] usb 2-1: USB disconnect, device number 20 [ 861.957076][T13012] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 862.287608][T13021] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 863.211165][T13024] futex_wake_op: syz.2.1348 tries to shift op by 144; fix this program [ 863.684258][T13028] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 863.987238][ T29] audit: type=1400 audit(1775701069.122:708): avc: denied { read } for pid=13025 comm="syz.4.1349" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 864.365917][T13035] x_tables: unsorted underflow at hook 3 [ 866.573646][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 866.605814][T13030] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 866.830326][T13030] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 866.930475][T13056] netlink: 'syz.3.1354': attribute type 4 has an invalid length. [ 867.221051][T13030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 867.277150][T13030] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 867.309229][T13030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 867.350097][T13030] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 867.369097][T13030] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 867.379703][T13030] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 867.916248][T13062] netlink: 'syz.4.1355': attribute type 10 has an invalid length. [ 867.926858][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1355'. [ 867.939476][T13062] bridge0: port 3(dummy0) entered blocking state [ 867.950082][T13062] bridge0: port 3(dummy0) entered disabled state [ 868.794835][T13062] dummy0: entered allmulticast mode [ 868.831342][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 868.961022][T13062] dummy0: entered promiscuous mode [ 869.004287][T13062] bridge0: port 3(dummy0) entered blocking state [ 869.010700][T13062] bridge0: port 3(dummy0) entered forwarding state [ 869.410588][T13086] bridge1: entered promiscuous mode [ 869.415854][T13086] bridge1: entered allmulticast mode [ 869.884527][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 869.891952][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 869.898029][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 871.863405][T13102] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 872.172725][T13089] Bluetooth: hci4: command 0x0406 tx timeout [ 872.177227][T13088] Bluetooth: hci0: command 0x0406 tx timeout [ 872.180468][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 872.237590][T13106] ip6t_srh: unknown srh match flags 4000 [ 872.982172][T13117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1364'. [ 873.386798][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1364'. [ 873.407176][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 873.480241][ T5894] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 873.817007][T13123] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 873.963220][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 873.987427][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.498246][ T5894] usb 5-1: config 7 has an invalid interface number: 58 but max is 0 [ 874.518659][ T5894] usb 5-1: config 7 has no interface number 0 [ 874.534691][ T5894] usb 5-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.576068][ T5894] usb 5-1: config 7 interface 58 has no altsetting 0 [ 874.694966][ T5894] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 874.741222][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.749288][ T5894] usb 5-1: Product: syz [ 874.766159][ T5894] usb 5-1: Manufacturer: syz [ 874.770771][ T5894] usb 5-1: SerialNumber: syz [ 874.947700][T13134] blktrace: Concurrent blktraces are not allowed on loop4 [ 875.048067][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 875.504652][T13143] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1370'. [ 876.111199][T13144] netlink: 'syz.2.1369': attribute type 23 has an invalid length. [ 876.708606][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.718475][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.757671][T13152] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 876.900707][ T29] audit: type=1400 audit(1775701081.147:709): avc: denied { relabelto } for pid=13147 comm="syz.3.1372" name="file0" dev="tmpfs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 877.362948][ T29] audit: type=1400 audit(1775701081.157:710): avc: denied { associate } for pid=13147 comm="syz.3.1372" name="file0" dev="tmpfs" ino=1628 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 877.957158][ T5894] usb 5-1: USB disconnect, device number 19 [ 878.488977][T13165] ptrace attach of "./syz-executor exec"[11399] was attempted by "./syz-executor exec"[13165] [ 879.836355][T13163] infiniband syz2: set down [ 879.842269][T13163] infiniband syz2: added ipvlan0 [ 879.888086][T13163] RDS/IB: syz2: added [ 879.893517][T13163] smc: adding ib device syz2 with port count 1 [ 879.900179][T13163] smc: ib device syz2 port 1 has no pnetid [ 881.021845][T13175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13175 comm=syz.1.1377 [ 881.086532][T13175] 9pnet_virtio: no channels available for device syz [ 881.962693][ T29] audit: type=1400 audit(1775701086.004:711): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 882.060041][T13179] dummy0: entered promiscuous mode [ 882.215011][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'. [ 882.499399][ T1207] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 882.606719][T13179] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 882.619368][T13179] debugfs: 'hsr1' already exists in 'hsr' [ 882.625242][T13179] Cannot create hsr debugfs directory [ 882.638468][T13179] hsr1: entered allmulticast mode [ 882.643521][T13179] dummy0: entered allmulticast mode [ 882.680432][ T1207] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 882.688691][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.704550][T13179] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 882.918804][ T1207] usb 4-1: config 0 has no interface number 0 [ 882.962932][ T1207] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 883.012629][ T1207] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 883.048813][ T1207] usb 4-1: config 0 interface 106 has no altsetting 0 [ 883.072092][ T1207] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 883.099722][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.280476][ T1207] usb 4-1: config 0 descriptor?? [ 883.369160][ T1207] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 883.670701][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.686073][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.437982][ T29] audit: type=1400 audit(1775701088.325:712): avc: denied { read } for pid=13204 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 884.438201][T13089] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 884.766554][ T29] audit: type=1400 audit(1775701088.531:713): avc: denied { getopt } for pid=13204 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 884.786303][ T7123] usb 4-1: Failed to submit usb control message: -110 [ 884.786358][ T7123] usb 4-1: unable to send the bmi data to the device: -110 [ 884.786378][ T7123] usb 4-1: unable to get target info from device [ 884.786393][ T7123] usb 4-1: could not get target info (-110) [ 884.786411][ T7123] usb 4-1: could not probe fw (-110) [ 884.824835][T13211] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 884.825129][T13211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 885.861553][ T29] audit: type=1400 audit(1775701089.532:714): avc: denied { setopt } for pid=13204 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 886.032882][T13220] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 886.380718][ T1539] usb 4-1: USB disconnect, device number 29 [ 886.447984][ T29] audit: type=1400 audit(1775701090.206:715): avc: denied { append } for pid=13223 comm="syz.3.1386" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 888.525903][T13251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 888.533122][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 888.540467][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 888.547755][T13251] IPv6: NLM_F_CREATE should be set when creating new route [ 890.077169][T13258] syzkaller0: entered promiscuous mode [ 890.094892][T13258] syzkaller0: entered allmulticast mode [ 890.321925][T13268] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 891.850508][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 891.906308][T13290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1396'. [ 891.918156][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1396'. [ 892.192504][ T24] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 892.258676][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.289882][ T24] usb 1-1: config 0 has no interface number 0 [ 892.309993][ T24] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 892.388241][ T24] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 892.413600][ T24] usb 1-1: config 0 interface 106 has no altsetting 0 [ 892.443132][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 892.488366][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.577862][ T24] usb 1-1: config 0 descriptor?? [ 892.625005][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 892.953458][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.022066][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.046270][T13304] mac80211_hwsim hwsim21 : renamed from wlan1 (while UP) [ 893.124465][T13304] tipc: Disabling bearer [ 893.736260][ T7113] usb 1-1: Failed to submit usb control message: -110 [ 893.746853][ T7113] usb 1-1: unable to send the bmi data to the device: -110 [ 893.765707][ T7113] usb 1-1: unable to get target info from device [ 893.789911][ T7113] usb 1-1: could not get target info (-110) [ 893.808262][ T7113] usb 1-1: could not probe fw (-110) [ 894.076009][T13313] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 894.350142][ T5894] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 894.545662][ T5894] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 894.557964][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.625499][ T5894] usb 2-1: config 0 has no interface number 0 [ 894.655263][ T5894] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 894.715036][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.806843][ T5894] usb 2-1: config 0 descriptor?? [ 894.895889][ T5894] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 895.249379][T13325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.328161][T13325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.034391][ T168] usb 2-1: Failed to submit usb control message: -110 [ 896.043760][ T1539] usb 1-1: USB disconnect, device number 19 [ 896.050906][ T168] usb 2-1: unable to send the bmi data to the device: -110 [ 896.068835][ T168] usb 2-1: unable to get target info from device [ 896.075442][ T168] usb 2-1: could not get target info (-110) [ 896.091494][ T168] usb 2-1: could not probe fw (-110) [ 899.298765][T13355] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 899.536122][T13357] tipc: Started in network mode [ 899.541007][T13357] tipc: Node identity 4004, cluster identity 4711 [ 899.550135][T13357] tipc: Node number set to 16388 [ 899.940654][ T793] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 900.280487][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 900.294309][ T793] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 900.321260][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 900.332081][ T793] usb 3-1: Product: syz [ 900.337287][ T793] usb 3-1: Manufacturer: syz [ 900.341905][ T793] usb 3-1: SerialNumber: syz [ 900.352873][ T793] usb 3-1: config 0 descriptor?? [ 900.369758][ T793] gspca_main: sq905-2.14.0 probing 2770:9120 [ 901.301510][ T24] usb 2-1: USB disconnect, device number 21 [ 901.341491][ T793] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 901.352073][ T793] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 902.207731][ T1539] usb 3-1: USB disconnect, device number 22 [ 903.199085][T13089] Bluetooth: hci2: command 0x0406 tx timeout [ 903.210125][T13374] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 903.823224][T13399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13399 comm=syz.3.1414 [ 903.887037][T13399] 9pnet_virtio: no channels available for device syz [ 904.289257][T13374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 904.305488][T13374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 904.313678][T13374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 904.557960][T13403] mqueue: Unknown parameter 'grpquota' [ 904.572636][T13403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1417'. [ 904.607816][ T1539] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 904.796527][ T1539] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 904.820344][ T1539] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.847760][ T1539] usb 3-1: config 0 has no interface number 0 [ 904.876707][ T1539] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 904.907879][ T1539] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 904.944642][ T1539] usb 3-1: config 0 interface 106 has no altsetting 0 [ 904.967620][ T1539] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 905.000030][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.025963][ T1539] usb 3-1: config 0 descriptor?? [ 905.094051][ T1539] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 905.415523][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.426628][T13089] Bluetooth: hci3: command 0x0406 tx timeout [ 905.488913][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.439067][ T7123] usb 3-1: Failed to submit usb control message: -110 [ 906.451887][T13089] Bluetooth: hci0: command 0x0406 tx timeout [ 906.476343][ T7123] usb 3-1: unable to send the bmi data to the device: -110 [ 906.507605][ T7123] usb 3-1: unable to get target info from device [ 906.519249][ T7123] usb 3-1: could not get target info (-110) [ 906.526172][ T7123] usb 3-1: could not probe fw (-110) [ 906.536457][T13089] Bluetooth: hci4: command 0x0406 tx timeout [ 906.884133][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1419'. [ 907.009367][ T29] audit: type=1400 audit(1775701109.334:716): avc: denied { ioctl } for pid=13420 comm="syz.1.1419" path="/103/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 907.379129][T13430] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 907.915898][ T24] usb 3-1: USB disconnect, device number 23 [ 908.386775][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 908.498957][ T1207] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 908.670012][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 908.676905][ T1207] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 908.694589][ T1207] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.746702][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.809403][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.858488][ T1207] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.923628][ T1207] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 909.080971][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.627629][ T1207] usb 3-1: GET_CAPABILITIES returned 0 [ 909.680117][ T1207] usbtmc 3-1:16.0: can't read capabilities [ 909.917310][ T1207] usb 3-1: USB disconnect, device number 24 [ 910.134749][T13441] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 910.289105][ T29] audit: type=1400 audit(1775701112.515:717): avc: denied { ioctl } for pid=13440 comm="syz.2.1422" path="socket:[41091]" dev="sockfs" ino=41091 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 910.307379][T13469] bridge1: left allmulticast mode [ 910.349022][ T793] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 910.636836][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 910.659439][ T793] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 910.669547][ T793] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 911.195832][ T793] usb 2-1: Product: syz [ 911.237300][ T793] usb 2-1: SerialNumber: syz [ 911.258771][ T793] usb 2-1: config 0 descriptor?? [ 911.289871][ T793] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 911.336444][ T793] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 911.348538][ T793] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 911.358159][ T793] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 912.732088][T13490] xt_hashlimit: size too large, truncated to 1048576 [ 912.774934][ T3536] wlan0: Trigger new scan to find an IBSS to join [ 913.785591][ T793] usb 2-1: USB disconnect, device number 22 [ 914.323803][T13546] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 914.443777][T13548] netem: incorrect ge model size [ 915.352866][T13556] syz2: rxe_newlink: already configured on ipvlan0 [ 916.280235][ T7113] wlan0: Trigger new scan to find an IBSS to join [ 916.564267][T13554] CIFS mount error: No usable UNC path provided in device string! [ 916.564267][T13554] [ 916.577046][T13554] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 917.963873][ T29] audit: type=1400 audit(1775701119.693:718): avc: denied { setopt } for pid=13566 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 917.989667][ T29] audit: type=1400 audit(1775701119.721:719): avc: denied { connect } for pid=13566 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 918.161307][ T7123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.381181][ T29] audit: type=1400 audit(1775701120.011:720): avc: denied { bind } for pid=13566 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 921.202095][T13596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13596 comm=syz.4.1440 [ 921.270231][T13596] 9pnet_virtio: no channels available for device syz [ 923.726988][ T29] audit: type=1400 audit(1775701381.038:721): avc: denied { read open } for pid=13605 comm="syz.4.1441" path="/" dev="configfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 924.290358][T13619] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 924.602364][ T1539] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 924.944645][ T1539] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 924.956804][ T1539] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.076561][ T793] IPVS: starting estimator thread 0... [ 925.409948][ T1539] usb 3-1: config 0 has no interface number 0 [ 925.419598][ T1539] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 925.473306][ T1539] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 925.521882][T13638] IPVS: using max 69 ests per chain, 165600 per kthread [ 925.533735][ T1539] usb 3-1: config 0 interface 106 has no altsetting 0 [ 925.550933][ T1539] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 925.582817][ T1539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.619225][ T1539] usb 3-1: config 0 descriptor?? [ 925.645898][ T1539] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 926.175781][T13651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.750478][T13651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.829729][ T7111] usb 3-1: Failed to submit usb control message: -110 [ 926.840218][ T7111] usb 3-1: unable to send the bmi data to the device: -110 [ 927.043513][ T7111] usb 3-1: unable to get target info from device [ 927.067817][ T7111] usb 3-1: could not get target info (-110) [ 927.087178][ T7111] usb 3-1: could not probe fw (-110) [ 927.619403][T13661] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 928.104734][T13664] input: syz1 as /devices/virtual/input/input19 [ 928.741850][T13666] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 929.895336][T13680] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 931.192773][ T1539] usb 3-1: USB disconnect, device number 25 [ 933.334024][T13710] syz_tun: entered allmulticast mode [ 933.375492][T13710] syz_tun: left allmulticast mode [ 933.879551][T13714] netem: incorrect ge model size [ 933.894991][ T29] audit: type=1400 audit(1775701390.602:722): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 935.684870][T13728] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 937.320472][ T29] audit: type=1400 audit(1775701392.792:723): avc: denied { call } for pid=13734 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 937.374167][ T29] audit: type=1400 audit(1775701392.792:724): avc: denied { transfer } for pid=13734 comm="syz.0.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 939.954472][T13752] netlink: 'syz.1.1471': attribute type 8 has an invalid length. [ 940.015612][T13753] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1471'. [ 941.114637][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1472'. [ 942.314483][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 942.357132][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.364458][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.481518][T13773] nbd: socks must be embedded in a SOCK_ITEM attr [ 945.048117][T13612] udevd[13612]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 945.133252][T13781] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 947.002358][T13796] 9p: Bad value for 'rfdno' [ 947.697133][T13794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 947.997191][ T1207] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 948.165956][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 948.189282][ T1207] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 948.212319][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.240684][ T1207] usb 2-1: Product: syz [ 948.254625][ T1207] usb 2-1: Manufacturer: syz [ 948.286864][ T1207] usb 2-1: SerialNumber: syz [ 948.329497][ T1207] usb 2-1: config 0 descriptor?? [ 948.364295][ T1207] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 948.416072][ T1207] dvb-usb: bulk message failed: -22 (4/0) [ 948.448055][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 948.508658][ T1207] dvb-usb: bulk message failed: -22 (5/0) [ 948.561371][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 948.671795][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.736588][ T1207] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 948.779227][T13815] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 948.801939][ T1207] usb 2-1: media controller created [ 948.945969][ T793] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 949.031010][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.095365][ T793] usb 3-1: device descriptor read/64, error -71 [ 949.120963][ T1207] usb 2-1: selecting invalid altsetting 3 [ 949.138330][ T1207] ttusb2: set interface to alts=3 failed [ 949.217090][ T1207] DVB: Unable to find symbol tda10086_attach() [ 949.227858][ T1207] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 949.251168][ T1207] dvb-usb: bulk message failed: -22 (4/0) [ 949.259802][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 949.281601][ T1207] dvb-usb: bulk message failed: -22 (5/0) [ 949.295050][ T1207] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 949.325965][ T1207] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 949.373590][ T793] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 949.533362][ T793] usb 3-1: device descriptor read/64, error -71 [ 949.651825][ T793] usb usb3-port1: attempt power cycle [ 949.929881][ T5894] usb 2-1: USB disconnect, device number 23 [ 950.013610][ T793] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 950.022043][ T5894] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 950.036660][ T793] usb 3-1: device descriptor read/8, error -71 [ 950.335210][ T793] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 950.763213][ T793] usb 3-1: device descriptor read/8, error -71 [ 950.879200][ T793] usb usb3-port1: unable to enumerate USB device [ 951.365266][ T29] audit: type=1400 audit(1775701406.932:725): avc: denied { mount } for pid=13830 comm="syz.1.1485" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 951.881107][ T29] audit: type=1400 audit(1775701407.241:726): avc: denied { mounton } for pid=13830 comm="syz.1.1485" path="/" dev="autofs" ino=42202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 952.600258][T13840] block device autoloading is deprecated and will be removed. [ 954.225525][ T29] audit: type=1400 audit(1775701409.421:727): avc: denied { ioctl } for pid=13849 comm="syz.1.1490" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 954.700963][T13856] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 956.642747][T13879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1494'. [ 957.814921][T13892] binder: 13890:13892 ioctl 4018620d 0 returned -22 [ 960.978958][T13919] cgroup2: Unknown parameter 'fO±Û¸üjÂavordynmods' [ 962.192984][T13923] nvme_fabrics: missing parameter 'transport=%s' [ 962.202088][T13923] nvme_fabrics: missing parameter 'nqn=%s' [ 963.220319][T13936] netlink: 'syz.3.1504': attribute type 15 has an invalid length. [ 963.228337][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1504'. [ 964.236612][ C1] ------------[ cut here ]------------ [ 964.242566][ C1] ODEBUG: free active (active state 0) object: ffff88802a64a090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 964.255438][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.1506/13941 [ 964.265611][ C1] Modules linked in: [ 964.269957][ C1] CPU: 1 UID: 0 PID: 13941 Comm: syz.1.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 964.280892][ C1] Tainted: [L]=SOFTLOCKUP [ 964.285190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 964.295253][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 964.301061][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 0a e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 964.320664][ C1] RSP: 0000:ffffc90000a08a38 EFLAGS: 00010246 [ 964.326718][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 964.334685][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44d50 [ 964.342665][ C1] RBP: 0000000000000001 R08: ffff88802a64a090 R09: ffffffff8bb2bba0 [ 964.350634][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 964.358610][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cf1b0 R15: ffffc90000a08b38 [ 964.366584][ C1] FS: 00007f2403bee6c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 964.375523][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.382101][ C1] CR2: 00007f2403001358 CR3: 00000000359b9000 CR4: 00000000003526f0 [ 964.390068][ C1] Call Trace: [ 964.393332][ C1] [ 964.396190][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 964.401828][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 964.407649][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 964.413201][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 964.419267][ C1] ? mark_held_locks+0x40/0x70 [ 964.424008][ C1] ? kasan_quarantine_put+0x104/0x240 [ 964.429374][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 964.434557][ C1] ? rose_timer_expiry+0x53f/0x630 [ 964.439675][ C1] kfree+0x38f/0x6b0 [ 964.443582][ C1] rose_timer_expiry+0x53f/0x630 [ 964.448505][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 964.453957][ C1] call_timer_fn+0x19a/0x670 [ 964.458530][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 964.463646][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 964.469089][ C1] ? mark_held_locks+0x40/0x70 [ 964.473849][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 964.479294][ C1] __run_timers+0x757/0xb30 [ 964.483817][ C1] ? __pfx___run_timers+0x10/0x10 [ 964.488853][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 964.493880][ C1] run_timer_base+0x114/0x190 [ 964.498548][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 964.503758][ C1] run_timer_softirq+0x1a/0x50 [ 964.508506][ C1] handle_softirqs+0x1eb/0x9e0 [ 964.513288][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 964.518581][ C1] __irq_exit_rcu+0xef/0x150 [ 964.523156][ C1] irq_exit_rcu+0x9/0x30 [ 964.527392][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 964.533007][ C1] [ 964.535933][ C1] [ 964.538841][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.544801][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 964.550636][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba e8 50 f6 48 89 df e8 a2 38 51 f6 e8 6d d5 7c f6 fb bf 01 00 00 00 c2 59 41 f6 65 8b 05 cb 4e 7a 08 85 c0 74 06 5b c3 cc cc cc cc [ 964.570236][ C1] RSP: 0000:ffffc9000399eaa0 EFLAGS: 00000206 [ 964.576288][ C1] RAX: 000000000000c093 RBX: ffff888037ab2400 RCX: 0000000000000040 [ 964.584265][ C1] RDX: 0000000000000000 RSI: ffffffff8de7af65 RDI: 0000000000000001 [ 964.592228][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 964.600192][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001233 [ 964.608139][ C1] R13: ffffc9000399eb18 R14: 0000000000000000 R15: 0000000000000000 [ 964.616109][ C1] shmem_add_to_page_cache+0x874/0xcd0 [ 964.621590][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 964.627563][ C1] shmem_alloc_and_add_folio+0x558/0xd40 [ 964.633204][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 964.639345][ C1] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 964.645327][ C1] shmem_get_folio_gfp+0x6ab/0x1900 [ 964.650531][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 964.656166][ C1] shmem_write_begin+0x1a4/0x420 [ 964.661096][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 964.666563][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 964.673416][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 964.678627][ C1] generic_perform_write+0x292/0xa40 [ 964.683916][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 964.689706][ C1] ? file_update_time_flags+0x373/0x500 [ 964.695266][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 964.701069][ C1] shmem_file_write_iter+0x10e/0x140 [ 964.706358][ C1] __kernel_write_iter+0x2ac/0x920 [ 964.711462][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 964.717098][ C1] ? cgroup1_freezing+0x12c/0x3b0 [ 964.722132][ C1] ? cgroup1_freezing+0x136/0x3b0 [ 964.727162][ C1] ? freezing_slow_path+0xb5/0x1a0 [ 964.732256][ C1] dump_user_range+0x3f9/0xb50 [ 964.737026][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 964.742361][ C1] ? __pfx_writenote+0x10/0x10 [ 964.747149][ C1] elf_core_dump+0x2d5f/0x3d10 [ 964.751976][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 964.757105][ C1] ? kasan_save_stack+0x3f/0x50 [ 964.761995][ C1] ? kasan_save_stack+0x30/0x50 [ 964.766872][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 964.771675][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 964.777242][ C1] ? vfs_coredump+0x2105/0x5570 [ 964.782133][ C1] ? asm_exc_page_fault+0x26/0x30 [ 964.787161][ C1] ? 0xffffffffff600000 [ 964.791394][ C1] ? vfs_coredump+0x27bc/0x5570 [ 964.796245][ C1] vfs_coredump+0x27bc/0x5570 [ 964.800914][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 964.805933][ C1] ? __lock_acquire+0x4a5/0x2630 [ 964.810861][ C1] ? lock_acquire+0x1cf/0x380 [ 964.815560][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 964.820777][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 964.825564][ C1] ? __kernel_text_address+0xd/0x30 [ 964.830741][ C1] ? unwind_get_return_address+0x59/0xa0 [ 964.836386][ C1] ? arch_stack_walk+0xa6/0xf0 [ 964.841160][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 964.846042][ C1] ? stack_trace_save+0x8e/0xc0 [ 964.850892][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 964.856272][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 964.861732][ C1] ? __lock_acquire+0x4a5/0x2630 [ 964.866687][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 964.872305][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 964.878285][ C1] ? rcu_is_watching+0x12/0xc0 [ 964.883049][ C1] get_signal+0x1f2a/0x21e0 [ 964.887579][ C1] ? __pfx_get_signal+0x10/0x10 [ 964.892452][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 964.898022][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 964.904163][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 964.909468][ C1] irqentry_exit+0x1f8/0x670 [ 964.914076][ C1] asm_exc_page_fault+0x26/0x30 [ 964.918920][ C1] RIP: 0033:0x7f2402d9c821 [ 964.923314][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 964.942919][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 964.948964][ C1] RAX: 0000000000000000 RBX: 00007f2403015fa0 RCX: 00007f2402d9c819 [ 964.956928][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 964.964895][ C1] RBP: 00007f2402e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 964.972883][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 964.980862][ C1] R13: 00007f2403016038 R14: 00007f2403015fa0 R15: 00007fffe7574398 [ 964.988849][ C1] [ 964.991850][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 964.999105][ C1] CPU: 1 UID: 0 PID: 13941 Comm: syz.1.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.010017][ C1] Tainted: [L]=SOFTLOCKUP [ 965.014313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 965.024348][ C1] Call Trace: [ 965.027616][ C1] [ 965.030437][ C1] dump_stack_lvl+0x100/0x190 [ 965.035102][ C1] vpanic+0x552/0x970 [ 965.039063][ C1] ? __pfx_vpanic+0x10/0x10 [ 965.043548][ C1] panic+0xd1/0xe0 [ 965.047248][ C1] ? __pfx_panic+0x10/0x10 [ 965.051665][ C1] ? check_panic_on_warn+0x1f/0x90 [ 965.056754][ C1] check_panic_on_warn.cold+0x19/0x34 [ 965.062106][ C1] ? debug_print_object+0x18e/0x2a0 [ 965.067293][ C1] __warn.cold+0x191/0x348 [ 965.071711][ C1] __report_bug+0x296/0x3d0 [ 965.076199][ C1] ? debug_print_object+0x18e/0x2a0 [ 965.081383][ C1] ? __pfx___report_bug+0x10/0x10 [ 965.086402][ C1] ? lock_acquire+0x1cf/0x380 [ 965.091060][ C1] ? mark_held_locks+0x40/0x70 [ 965.095798][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 965.101590][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 965.106803][ C1] report_bug_entry+0xe1/0x290 [ 965.111551][ C1] ? debug_print_object+0x19b/0x2a0 [ 965.116733][ C1] handle_bug+0x1cd/0x2a0 [ 965.121044][ C1] exc_invalid_op+0x17/0x50 [ 965.125551][ C1] asm_exc_invalid_op+0x1a/0x20 [ 965.130379][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 965.136183][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 0a e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac c6 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 965.155768][ C1] RSP: 0000:ffffc90000a08a38 EFLAGS: 00010246 [ 965.161816][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 965.169770][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e44d50 [ 965.177732][ C1] RBP: 0000000000000001 R08: ffff88802a64a090 R09: ffffffff8bb2bba0 [ 965.185676][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 965.193621][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cf1b0 R15: ffffc90000a08b38 [ 965.201582][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 965.207205][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 965.212817][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 965.218612][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 965.224165][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 965.230221][ C1] ? mark_held_locks+0x40/0x70 [ 965.234961][ C1] ? kasan_quarantine_put+0x104/0x240 [ 965.240314][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 965.245497][ C1] ? rose_timer_expiry+0x53f/0x630 [ 965.250589][ C1] kfree+0x38f/0x6b0 [ 965.254467][ C1] rose_timer_expiry+0x53f/0x630 [ 965.259386][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 965.264838][ C1] call_timer_fn+0x19a/0x670 [ 965.269413][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 965.274516][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 965.279954][ C1] ? mark_held_locks+0x40/0x70 [ 965.284697][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 965.290134][ C1] __run_timers+0x757/0xb30 [ 965.294627][ C1] ? __pfx___run_timers+0x10/0x10 [ 965.299642][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 965.304653][ C1] run_timer_base+0x114/0x190 [ 965.309313][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 965.314500][ C1] run_timer_softirq+0x1a/0x50 [ 965.319268][ C1] handle_softirqs+0x1eb/0x9e0 [ 965.324015][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 965.329280][ C1] __irq_exit_rcu+0xef/0x150 [ 965.333849][ C1] irq_exit_rcu+0x9/0x30 [ 965.338070][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 965.343683][ C1] [ 965.346589][ C1] [ 965.349495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 965.355451][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 965.361259][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 ba e8 50 f6 48 89 df e8 a2 38 51 f6 e8 6d d5 7c f6 fb bf 01 00 00 00 c2 59 41 f6 65 8b 05 cb 4e 7a 08 85 c0 74 06 5b c3 cc cc cc cc [ 965.380846][ C1] RSP: 0000:ffffc9000399eaa0 EFLAGS: 00000206 [ 965.386888][ C1] RAX: 000000000000c093 RBX: ffff888037ab2400 RCX: 0000000000000040 [ 965.394833][ C1] RDX: 0000000000000000 RSI: ffffffff8de7af65 RDI: 0000000000000001 [ 965.402784][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 965.410730][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000001233 [ 965.418679][ C1] R13: ffffc9000399eb18 R14: 0000000000000000 R15: 0000000000000000 [ 965.426634][ C1] shmem_add_to_page_cache+0x874/0xcd0 [ 965.432102][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 965.438074][ C1] shmem_alloc_and_add_folio+0x558/0xd40 [ 965.443692][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 965.449829][ C1] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 965.455793][ C1] shmem_get_folio_gfp+0x6ab/0x1900 [ 965.460975][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 965.466609][ C1] shmem_write_begin+0x1a4/0x420 [ 965.471535][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 965.476981][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 965.483826][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 965.489010][ C1] generic_perform_write+0x292/0xa40 [ 965.494281][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 965.500071][ C1] ? file_update_time_flags+0x373/0x500 [ 965.505603][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 965.511477][ C1] shmem_file_write_iter+0x10e/0x140 [ 965.516739][ C1] __kernel_write_iter+0x2ac/0x920 [ 965.521827][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 965.527432][ C1] ? cgroup1_freezing+0x12c/0x3b0 [ 965.532459][ C1] ? cgroup1_freezing+0x136/0x3b0 [ 965.537463][ C1] ? freezing_slow_path+0xb5/0x1a0 [ 965.542563][ C1] dump_user_range+0x3f9/0xb50 [ 965.547307][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 965.552577][ C1] ? __pfx_writenote+0x10/0x10 [ 965.557326][ C1] elf_core_dump+0x2d5f/0x3d10 [ 965.562079][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 965.567170][ C1] ? kasan_save_stack+0x3f/0x50 [ 965.571998][ C1] ? kasan_save_stack+0x30/0x50 [ 965.576827][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 965.581574][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 965.587126][ C1] ? vfs_coredump+0x2105/0x5570 [ 965.591959][ C1] ? asm_exc_page_fault+0x26/0x30 [ 965.596960][ C1] ? 0xffffffffff600000 [ 965.601110][ C1] ? vfs_coredump+0x27bc/0x5570 [ 965.605935][ C1] vfs_coredump+0x27bc/0x5570 [ 965.610599][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 965.615602][ C1] ? __lock_acquire+0x4a5/0x2630 [ 965.620518][ C1] ? lock_acquire+0x1cf/0x380 [ 965.625173][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 965.630348][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 965.635101][ C1] ? __kernel_text_address+0xd/0x30 [ 965.640294][ C1] ? unwind_get_return_address+0x59/0xa0 [ 965.645908][ C1] ? arch_stack_walk+0xa6/0xf0 [ 965.650651][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 965.655480][ C1] ? stack_trace_save+0x8e/0xc0 [ 965.660307][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 965.665658][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 965.671092][ C1] ? __lock_acquire+0x4a5/0x2630 [ 965.676029][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 965.681637][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 965.687606][ C1] ? rcu_is_watching+0x12/0xc0 [ 965.692376][ C1] get_signal+0x1f2a/0x21e0 [ 965.696867][ C1] ? __pfx_get_signal+0x10/0x10 [ 965.701697][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 965.707222][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 965.713360][ C1] ? do_user_addr_fault+0x8d6/0x12f0 [ 965.718628][ C1] irqentry_exit+0x1f8/0x670 [ 965.723196][ C1] asm_exc_page_fault+0x26/0x30 [ 965.728022][ C1] RIP: 0033:0x7f2402d9c821 [ 965.732410][ C1] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 965.751991][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 965.758030][ C1] RAX: 0000000000000000 RBX: 00007f2403015fa0 RCX: 00007f2402d9c819 [ 965.765972][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 965.773918][ C1] RBP: 00007f2402e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 965.781866][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 965.789811][ C1] R13: 00007f2403016038 R14: 00007f2403015fa0 R15: 00007fffe7574398 [ 965.797771][ C1] [ 965.801059][ C1] Kernel Offset: disabled [ 965.805368][ C1] Rebooting in 86400 seconds..