last executing test programs: 1m11.283066452s ago: executing program 2 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000740)='syz1\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) 1m9.614470803s ago: executing program 2 (id=460): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x800000000000000}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r3}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r4 = semget(0x1, 0x0, 0x80) semop(r4, &(0x7f00000003c0)=[{0x4, 0xff53, 0x1000}, {0x1, 0x7}, {0x1, 0x2, 0x800}], 0x3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000600100008a171d008001000080050800400e60000000000000000000000000000ad14710149fe0f1582f9c97b5356cfe191f5983e08523c23412d652fc309baba00518738c2442587ca834e5d04d19900a9be8fd2edf2a2f0c6c28e68008688b7f88bcf120fcaeef446c6495045ad5050b62acb1a583dd95b608c2fe68e73f0e84076d23dc8877a93e24dc7cd103411e97937491f39ff78336b8d7fb9c03ff845e3bf6a9e1f7584fa9cbc6ea816f052d1e1f83b375c623f6abea7325a81404f84172c815fdb8e121813370434232b819c0d90d0bd783e867b2a55d12a1b19c10300"], 0x1c}}, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x9, 0x0, 0x7fffffffffffffff, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x0, 0xc97e], 0x0, 0x200}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x10, r2, 0xe28f0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m8.264403556s ago: executing program 2 (id=469): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3}) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m8.03295162s ago: executing program 2 (id=472): syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) epoll_create1(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, 0x0, 0x0}, 0x20) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 1m5.703606466s ago: executing program 2 (id=478): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r5, 0x0, 0x0) 1m5.164270618s ago: executing program 2 (id=482): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000100)="b9ff030060", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r8}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f0000000000)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES16, @ANYRES32, @ANYRES32=r10, @ANYRESDEC=r1], 0x3c}}, 0x0) 50.007808583s ago: executing program 32 (id=482): syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000100)="b9ff030060", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$inet(0x2, 0x3, 0x102) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r8}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f0000000000)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) dup(r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES16, @ANYRES32, @ANYRES32=r10, @ANYRESDEC=r1], 0x3c}}, 0x0) 11.595464695s ago: executing program 4 (id=644): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0x1, 0x9, 0x50200, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x5, @void, @value, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000008007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r5, 0x10e, 0x9, 0x0, &(0x7f0000000240)) accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x800) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x0, 0xb, 0x0, "a0e0f75acb43c4bdf45200"}) 10.231494567s ago: executing program 1 (id=647): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/192, 0x1a, 0xc0, 0x1, 0xe0, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) pipe2(0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x42, &(0x7f0000000740)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @multicast, @rand_addr=' \x01\x00'}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 10.040010008s ago: executing program 4 (id=648): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r3, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{}], {}, [], {0x10, 0x6}}, 0x2c, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r6, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r7, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 9.304189384s ago: executing program 1 (id=650): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0x2, 0x80805, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB], 0x2c}}, 0x0) 8.018354541s ago: executing program 5 (id=652): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x806c4120, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000012c0), 0x0, &(0x7f0000001500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000300)) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0x40086602, &(0x7f0000000240)={0x4, 0x401, {}, {r3}, 0x9, 0x8000000000}) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x3c}}) close_range(r4, r0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"fc9074da", 0x7, 0x2, 0x6, 0x8, 0x8, "979a5304312e9c439b1cbb07848cef", "04c6dd7c", "8f3ea3b7", "a2d63885", ["3c4dd5ceb8f4ff658fb56b40", "db3dbb27872104bc2bee36a1", "0006be2f162dcc5a7f2e6de1", "155c94acd6e05e299b65912c"]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.997976904s ago: executing program 1 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0, 0x0) 7.888686519s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f0000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 7.031444352s ago: executing program 5 (id=656): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r2 = socket(0x10, 0x80003, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000500000002000000050000000300000090f3008e553f98bd21dc1d9099cf54dd42ec7d75c7540018b4822e22eeb45262f789776f04801493f503cc388c662a67fe9d8c434ece2e18f91261ea12e05e398845fdf1e2ba4691953835029e8ae436437ebf118408fe8ae2711ff6693469bd2ea3e80f50f3ecfeb9ce1f2afd128b540eb47bbb380fdc228ac50d3fbb4077b675e0b53bcfc4cdb1218dd82f88b70c4a5c471803ebd09261909a69f657d772cbc0727061c1dff9346ff7adf2129ec4"], 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = msgget$private(0x0, 0x442) msgsnd(r4, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 6.969256484s ago: executing program 3 (id=657): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r2 = socket(0x10, 0x80003, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000500000002000000050000000300000090f3008e553f98bd21dc1d9099cf54dd42ec7d75c7540018b4822e22eeb45262f789776f04801493f503cc388c662a67fe9d8c434ece2e18f91261ea12e05e398845fdf1e2ba4691953835029e8ae436437ebf118408fe8ae2711ff6693469bd2ea3e80f50f3ecfeb9ce1f2afd128b540eb47bbb380fdc228ac50d3fbb4077b675e0b53bcfc4cdb1218dd82f88b70c4a5c471803ebd09261909a69f657d772cbc0727061c1dff9346ff7adf2129ec4"], 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) msgsnd(0x0, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800) msgrcv(0x0, &(0x7f0000002ac0)={0x0, ""/159}, 0xa7, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 6.89850319s ago: executing program 1 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x7) 5.992902974s ago: executing program 1 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 5.913047396s ago: executing program 4 (id=660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/192, 0x1a, 0xc0, 0x1, 0xe0, 0x0, @void, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) pipe2(0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x42, &(0x7f0000000740)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @multicast, @rand_addr=' \x01\x00'}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 5.750301707s ago: executing program 3 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000060000000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10152, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 4.073461488s ago: executing program 0 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.778040723s ago: executing program 5 (id=664): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000003002000000058000b4824caff0f00000000000025010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200050c10000000010000000000", 0x58}], 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x58) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.705345715s ago: executing program 0 (id=665): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{0x0}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x80003, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000500000002000000050000000300000090f3008e553f98bd21dc1d9099cf54dd42ec7d75c7540018b4822e22eeb45262f789776f04801493f503cc388c662a67fe9d8c434ece2e18f91261ea12e05e398845fdf1e2ba4691953835029e8ae436437ebf118408fe8ae2711ff6693469bd2ea3e80f50f3ecfeb9ce1f2afd128b540eb47bbb380fdc228ac50d3fbb4077b675e0b53bcfc4cdb1218dd82f88b70c4a5c471803ebd09261909a69f657d772cbc07270"], 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = msgget$private(0x0, 0x442) msgsnd(r4, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800) msgrcv(r4, &(0x7f0000002ac0)={0x0, ""/159}, 0xa7, 0x1, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x1000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 3.686284908s ago: executing program 4 (id=666): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000480)='./file0\x00', r4, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{}], {}, [], {0x10, 0x6}}, 0x2c, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r7 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) getsockopt$nfc_llcp(r7, 0x6a, 0x0, 0x0, 0x20000071) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x20, r8, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265"], 0x40}}, 0x0) 3.104125063s ago: executing program 0 (id=667): getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0xc00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={0x30, r5, 0x1, 0x0, 0xfffffff9, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x20000000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x80, 0x80000000, 0x0, 0xfffffffffffffffe}) 3.102182625s ago: executing program 5 (id=668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0, 0x0) 2.057974804s ago: executing program 5 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) 1.941277955s ago: executing program 4 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200400d0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, &(0x7f0000000180)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000480), 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000340)}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102}}}}}}, 0x26) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 1.809269511s ago: executing program 0 (id=671): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000003002000000058000b4824caff0f00000000000025010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200050c10000000010000000000", 0x58}], 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xab) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf32(r5, 0x0, 0x58) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.473407469s ago: executing program 3 (id=672): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r2 = socket(0x10, 0x80003, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000500000002000000050000000300000090f3008e553f98bd21dc1d9099cf54dd42ec7d75c7540018b4822e22eeb45262f789776f04801493f503cc388c662a67fe9d8c434ece2e18f91261ea12e05e398845fdf1e2ba4691953835029e8ae436437ebf118408fe8ae2711ff6693469bd2ea3e80f50f3ecfeb9ce1f2afd128b540eb47bbb380fdc228ac50d3fbb4077b675e0b53bcfc4cdb1218dd82f88b70c4a5c471803ebd09261909a69f657d772cbc0727061c1dff9346ff7adf2129ec4"], 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) msgsnd(0x0, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800) msgrcv(0x0, &(0x7f0000002ac0)={0x0, ""/159}, 0xa7, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 1.42183303s ago: executing program 0 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/234, 0xea}], 0x1, 0x0, 0x0) 594.322894ms ago: executing program 1 (id=674): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) r4 = semget(0x1, 0x0, 0x80) semop(r4, &(0x7f00000003c0)=[{0x4, 0xff53, 0x1000}, {0x1, 0x7}, {0x1, 0x2, 0x800}], 0x3) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000600100008a171d008001000080050800400e60000000000000000000000000000ad14710149fe0f1582f9c97b5356cfe191f5983e08523c23412d652fc309baba00518738c2442587ca834e5d04d19900a9be8fd2edf2a2f0c6c28e68008688b7f88bcf120fcaeef446c6495045ad5050b62acb1a583dd95b608c2fe68e73f0e84076d23dc8877a93e24dc7cd103411e97937491f39ff78336b8d7fb9c03ff845e3bf6a9e1f7584fa9cbc6ea816f052d1e1f83b375c623f6abea7325a81404f84172c815fdb8e121813370434232b819c0d90d0bd783e867b2a55d12a1b19c10300"], 0x1c}}, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x9, 0x0, 0x7fffffffffffffff, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x0, 0xc97e], 0x0, 0x200}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x10, r2, 0xe28f0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 582.924142ms ago: executing program 3 (id=675): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x8a) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 528.632836ms ago: executing program 0 (id=676): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r2 = socket(0x10, 0x80003, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000500000002000000050000000300000090f3008e553f98bd21dc1d9099cf54dd42ec7d75c7540018b4822e22eeb45262f789776f04801493f503cc388c662a67fe9d8c434ece2e18f91261ea12e05e398845fdf1e2ba4691953835029e8ae436437ebf118408fe8ae2711ff6693469bd2ea3e80f50f3ecfeb9ce1f2afd128b540eb47bbb380fdc228ac50d3fbb4077b675e0b53bcfc4cdb1218dd82f88b70c4a5c471803ebd09261909a69f657d772cbc0727061c1dff9346ff7adf2129ec4"], 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x442) msgsnd(r4, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 402.812519ms ago: executing program 3 (id=677): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200400d0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, &(0x7f0000000180)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000340)}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102}}}}}}, 0x26) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e00cd0214fffffffffffff80765", 0x12) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 209.415562ms ago: executing program 5 (id=678): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="ba4100edbaf80c66b8c4bac38d66efbafc0c66b83549000066ef6766c7442400c40000006766c7442402736343266766c744240600000000670f0114242e0fdfd6ba4200edbaf80c66b8ecc3138766efbafc0c66b80100000066eff30f38f6844e2f3667650f0056db3626f3af0f00988300", 0x72}], 0x1, 0x3b, 0x0, 0x0) 0s ago: executing program 3 (id=679): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x200) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}]}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @empty, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 50.167665][ T29] audit: type=1400 audit(1731002604.082:88): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.170778][ T5818] cgroup: Unknown subsys name 'net' [ 50.190399][ T29] audit: type=1400 audit(1731002604.082:89): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.217793][ T29] audit: type=1400 audit(1731002604.112:90): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.412605][ T5818] cgroup: Unknown subsys name 'cpuset' [ 50.420791][ T5818] cgroup: Unknown subsys name 'rlimit' [ 50.514941][ T29] audit: type=1400 audit(1731002604.432:91): avc: denied { setattr } for pid=5818 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.542901][ T29] audit: type=1400 audit(1731002604.432:92): avc: denied { create } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.563991][ T29] audit: type=1400 audit(1731002604.432:93): avc: denied { write } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.584396][ T29] audit: type=1400 audit(1731002604.432:94): avc: denied { read } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.605237][ T29] audit: type=1400 audit(1731002604.432:95): avc: denied { mounton } for pid=5818 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.624786][ T5822] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 50.630072][ T29] audit: type=1400 audit(1731002604.462:96): avc: denied { mount } for pid=5818 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 50.661901][ T29] audit: type=1400 audit(1731002604.462:97): avc: denied { read } for pid=5494 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 51.463354][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.301145][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.306807][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.308827][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.325683][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.327119][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.333060][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.348274][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.349139][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.356633][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.363412][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.369954][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.377277][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.384737][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.392654][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.398081][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.411790][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.421977][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.430792][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.438793][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.439027][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.446381][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.460736][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.463316][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.479856][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.487436][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.494542][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.502265][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.510468][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.528460][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.535977][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.755976][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 53.834491][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 53.843030][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 53.858430][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.866186][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.873636][ T5829] bridge_slave_0: entered allmulticast mode [ 53.880357][ T5829] bridge_slave_0: entered promiscuous mode [ 53.887954][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.902419][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.909547][ T5829] bridge_slave_1: entered allmulticast mode [ 53.916081][ T5829] bridge_slave_1: entered promiscuous mode [ 53.992534][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.001774][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 54.018447][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.083933][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.092223][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.099303][ T5840] bridge_slave_0: entered allmulticast mode [ 54.106521][ T5840] bridge_slave_0: entered promiscuous mode [ 54.115558][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.122675][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.129834][ T5840] bridge_slave_1: entered allmulticast mode [ 54.136276][ T5840] bridge_slave_1: entered promiscuous mode [ 54.142658][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.149700][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.157051][ T5828] bridge_slave_0: entered allmulticast mode [ 54.163580][ T5828] bridge_slave_0: entered promiscuous mode [ 54.171750][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.178812][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.186071][ T5828] bridge_slave_1: entered allmulticast mode [ 54.192551][ T5828] bridge_slave_1: entered promiscuous mode [ 54.200425][ T5829] team0: Port device team_slave_0 added [ 54.210951][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 54.232008][ T5829] team0: Port device team_slave_1 added [ 54.265510][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.278666][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.289937][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.296960][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.305579][ T5835] bridge_slave_0: entered allmulticast mode [ 54.312344][ T5835] bridge_slave_0: entered promiscuous mode [ 54.319052][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.326212][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.334698][ T5835] bridge_slave_1: entered allmulticast mode [ 54.341220][ T5835] bridge_slave_1: entered promiscuous mode [ 54.348541][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.360945][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.393663][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.402751][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.428832][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.457379][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.464887][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.491003][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.505624][ T5828] team0: Port device team_slave_0 added [ 54.512815][ T5828] team0: Port device team_slave_1 added [ 54.520682][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.533299][ T5840] team0: Port device team_slave_0 added [ 54.557434][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.574191][ T5840] team0: Port device team_slave_1 added [ 54.589262][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.596364][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.622553][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.652942][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.660158][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.686452][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.703040][ T5835] team0: Port device team_slave_0 added [ 54.714743][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.721842][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.748293][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.759288][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.766571][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.773789][ T5843] bridge_slave_0: entered allmulticast mode [ 54.780813][ T5843] bridge_slave_0: entered promiscuous mode [ 54.788182][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.795502][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.802944][ T5843] bridge_slave_1: entered allmulticast mode [ 54.810765][ T5843] bridge_slave_1: entered promiscuous mode [ 54.818252][ T5835] team0: Port device team_slave_1 added [ 54.834931][ T5829] hsr_slave_0: entered promiscuous mode [ 54.840988][ T5829] hsr_slave_1: entered promiscuous mode [ 54.856055][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.863080][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.889077][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.914214][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.921293][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.947291][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.977931][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.987645][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.994983][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.021089][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.051153][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.074051][ T5828] hsr_slave_0: entered promiscuous mode [ 55.080558][ T5828] hsr_slave_1: entered promiscuous mode [ 55.086359][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.094390][ T5828] Cannot create hsr debugfs directory [ 55.109055][ T5840] hsr_slave_0: entered promiscuous mode [ 55.115140][ T5840] hsr_slave_1: entered promiscuous mode [ 55.123133][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.130742][ T5840] Cannot create hsr debugfs directory [ 55.144141][ T5843] team0: Port device team_slave_0 added [ 55.159433][ T5843] team0: Port device team_slave_1 added [ 55.200242][ T5835] hsr_slave_0: entered promiscuous mode [ 55.206228][ T5835] hsr_slave_1: entered promiscuous mode [ 55.212363][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.221521][ T5835] Cannot create hsr debugfs directory [ 55.231627][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.238561][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.264607][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.277717][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.284973][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.310936][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.411394][ T5843] hsr_slave_0: entered promiscuous mode [ 55.417360][ T5843] hsr_slave_1: entered promiscuous mode [ 55.424822][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.432744][ T5843] Cannot create hsr debugfs directory [ 55.517037][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.533920][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.540977][ T5832] Bluetooth: hci2: command tx timeout [ 55.540979][ T5836] Bluetooth: hci0: command tx timeout [ 55.541138][ T5836] Bluetooth: hci3: command tx timeout [ 55.546499][ T5832] Bluetooth: hci1: command tx timeout [ 55.571174][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.590641][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.619936][ T5832] Bluetooth: hci4: command tx timeout [ 55.635650][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.660466][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.674233][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.699140][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.708110][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.717005][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.727469][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.736480][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.788768][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.798752][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.815268][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.824036][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.907474][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.917094][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.929079][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.938211][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.954997][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.974241][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.996847][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.004058][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.049743][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.056811][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.072176][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.084533][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.098471][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.124370][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.137223][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.154512][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.180634][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.194848][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.208781][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.215879][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.225849][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.233413][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.241868][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.248925][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.262338][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.269476][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.285405][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.292496][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.332446][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.349252][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.356350][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.367075][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 56.367088][ T29] audit: type=1400 audit(1731002610.292:111): avc: denied { sys_module } for pid=5840 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.464441][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.484966][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.494019][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.501115][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.518406][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.525508][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.556277][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.626382][ T5840] veth0_vlan: entered promiscuous mode [ 56.673159][ T5840] veth1_vlan: entered promiscuous mode [ 56.686782][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.765803][ T5840] veth0_macvtap: entered promiscuous mode [ 56.786111][ T5840] veth1_macvtap: entered promiscuous mode [ 56.801510][ T5829] veth0_vlan: entered promiscuous mode [ 56.837305][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.847794][ T5829] veth1_vlan: entered promiscuous mode [ 56.868410][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.898994][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.919509][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.949026][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.966676][ T5828] veth0_vlan: entered promiscuous mode [ 56.991174][ T5828] veth1_vlan: entered promiscuous mode [ 57.008225][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.017631][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.026929][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.036947][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.049615][ T5829] veth0_macvtap: entered promiscuous mode [ 57.067338][ T5829] veth1_macvtap: entered promiscuous mode [ 57.133980][ T5828] veth0_macvtap: entered promiscuous mode [ 57.148131][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.161169][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.172684][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.182387][ T5843] veth0_vlan: entered promiscuous mode [ 57.188649][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.200071][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.210693][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.219609][ T5828] veth1_macvtap: entered promiscuous mode [ 57.237322][ T5843] veth1_vlan: entered promiscuous mode [ 57.247434][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.256941][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.265923][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.274794][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.313870][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.340599][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.352983][ T5843] veth0_macvtap: entered promiscuous mode [ 57.365107][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.379084][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.390885][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.401492][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.412071][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.436423][ T5843] veth1_macvtap: entered promiscuous mode [ 57.447440][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.456211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.465040][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.465474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.483203][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.490800][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.500935][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.511673][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.521570][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.532053][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.544235][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.552307][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.562902][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.572885][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.584117][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.594861][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.605240][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.614149][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.623465][ T5836] Bluetooth: hci3: command tx timeout [ 57.627569][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.628847][ T5846] Bluetooth: hci2: command tx timeout [ 57.638113][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.643045][ T5846] Bluetooth: hci0: command tx timeout [ 57.652286][ T5832] Bluetooth: hci1: command tx timeout [ 57.675029][ T5835] veth0_vlan: entered promiscuous mode [ 57.687308][ T29] audit: type=1400 audit(1731002611.602:112): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.M96LoA/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.701733][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.713136][ T5832] Bluetooth: hci4: command tx timeout [ 57.724355][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737589][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.739263][ T29] audit: type=1400 audit(1731002611.602:113): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.748456][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.781268][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.788585][ T29] audit: type=1400 audit(1731002611.602:114): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.M96LoA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.791911][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.822206][ T29] audit: type=1400 audit(1731002611.602:115): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 57.828398][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.870551][ T29] audit: type=1400 audit(1731002611.612:116): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.M96LoA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 57.889122][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.902225][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.915346][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.924286][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.933589][ T29] audit: type=1400 audit(1731002611.612:117): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/root/syzkaller.M96LoA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 57.961712][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.970339][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.973290][ T5835] veth1_vlan: entered promiscuous mode [ 57.987452][ T29] audit: type=1400 audit(1731002611.612:118): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.992454][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.026504][ T29] audit: type=1400 audit(1731002611.782:119): avc: denied { mounton } for pid=5840 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 58.052672][ T29] audit: type=1400 audit(1731002611.782:120): avc: denied { mount } for pid=5840 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.076617][ T5835] veth0_macvtap: entered promiscuous mode [ 58.117093][ T5835] veth1_macvtap: entered promiscuous mode [ 58.152378][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.163499][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.173631][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.184205][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.194269][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.204909][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.214881][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.225487][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.236813][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.258615][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.271392][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.281488][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.292682][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.303488][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.314914][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.325107][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.337711][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.356613][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.451563][ T5910] block nbd0: shutting down sockets [ 58.481960][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.490504][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.495753][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.499199][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.514439][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.524210][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.125147][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.198519][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.249500][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.257704][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.325061][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.337836][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.372633][ T5926] kvm: emulating exchange as write [ 59.387159][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.418129][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.438664][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.469258][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.598038][ T5929] netlink: 'syz.2.7': attribute type 29 has an invalid length. [ 59.803292][ T5832] Bluetooth: hci0: command tx timeout [ 59.809226][ T5832] Bluetooth: hci1: command tx timeout [ 59.814802][ T5832] Bluetooth: hci3: command tx timeout [ 59.820871][ T5832] Bluetooth: hci2: command tx timeout [ 59.826623][ T5832] Bluetooth: hci4: command tx timeout [ 60.839893][ T5942] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 61.455059][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 61.455071][ T29] audit: type=1400 audit(1731002615.262:151): avc: denied { create } for pid=5932 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.549895][ T29] audit: type=1400 audit(1731002615.262:152): avc: denied { connect } for pid=5932 comm="syz.2.8" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.570500][ T29] audit: type=1400 audit(1731002615.262:153): avc: denied { write } for pid=5932 comm="syz.2.8" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.875039][ T5834] Bluetooth: hci1: command tx timeout [ 61.881975][ T5138] Bluetooth: hci0: command tx timeout [ 61.887555][ T5836] Bluetooth: hci3: command tx timeout [ 61.893124][ T5832] Bluetooth: hci2: command tx timeout [ 61.898810][ T5846] Bluetooth: hci4: command tx timeout [ 61.920984][ T29] audit: type=1400 audit(1731002615.652:154): avc: denied { setopt } for pid=5928 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.185938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.188343][ T5954] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 62.290901][ T29] audit: type=1400 audit(1731002615.692:155): avc: denied { create } for pid=5944 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.341761][ T29] audit: type=1400 audit(1731002615.732:156): avc: denied { bind } for pid=5944 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.492567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.622570][ T29] audit: type=1400 audit(1731002615.732:157): avc: denied { name_bind } for pid=5944 comm="syz.1.9" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 62.674934][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 62.691184][ T5955] dccp_close: ABORT with 20 bytes unread [ 62.727866][ T29] audit: type=1400 audit(1731002615.732:158): avc: denied { node_bind } for pid=5944 comm="syz.1.9" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 62.789857][ T29] audit: type=1400 audit(1731002615.862:159): avc: denied { listen } for pid=5944 comm="syz.1.9" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 62.907952][ T29] audit: type=1400 audit(1731002615.992:160): avc: denied { read } for pid=5947 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.986931][ T5963] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 64.770107][ T5973] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.182880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.461284][ T5969] Zero length message leads to an empty skb [ 66.508921][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 66.508937][ T29] audit: type=1400 audit(1731002620.382:170): avc: denied { write } for pid=5968 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.929880][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.23'. [ 67.530787][ T29] audit: type=1400 audit(1731002621.322:171): avc: denied { create } for pid=5980 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.770780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.779201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.794438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.829944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 67.838242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 67.846896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.855309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.873723][ T29] audit: type=1400 audit(1731002621.782:172): avc: denied { ioctl } for pid=5988 comm="syz.4.24" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.945809][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 67.967839][ T29] audit: type=1400 audit(1731002621.832:173): avc: denied { write } for pid=5984 comm="syz.1.22" name="kcm" dev="proc" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.999851][ T29] audit: type=1400 audit(1731002621.832:174): avc: denied { create } for pid=5984 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.039503][ T29] audit: type=1400 audit(1731002621.832:175): avc: denied { read write } for pid=5984 comm="syz.1.22" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.537879][ T29] audit: type=1400 audit(1731002621.832:176): avc: denied { open } for pid=5984 comm="syz.1.22" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.575802][ T29] audit: type=1400 audit(1731002621.832:177): avc: denied { ioctl } for pid=5984 comm="syz.1.22" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.955253][ T29] audit: type=1326 audit(1731002622.012:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a677e719 code=0x7ffc0000 [ 69.202243][ T29] audit: type=1326 audit(1731002622.012:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a677e719 code=0x7ffc0000 [ 69.257939][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 69.266869][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.274359][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.336571][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.414467][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.106792][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.129328][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.410637][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 72.410653][ T29] audit: type=1326 audit(1731002626.322:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 72.839077][ T29] audit: type=1326 audit(1731002626.322:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 72.881520][ T29] audit: type=1326 audit(1731002626.322:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 72.904607][ C0] vkms_vblank_simulate: vblank timer overrun [ 72.966618][ T29] audit: type=1326 audit(1731002626.322:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 72.989973][ T29] audit: type=1326 audit(1731002626.322:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 73.013202][ T29] audit: type=1326 audit(1731002626.322:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 73.036290][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.042669][ T29] audit: type=1326 audit(1731002626.322:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 73.065748][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.072773][ T29] audit: type=1326 audit(1731002626.322:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6061 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90cc17e719 code=0x7ffc0000 [ 73.098463][ T29] audit: type=1400 audit(1731002626.802:219): avc: denied { sys_module } for pid=6060 comm="syz.4.42" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 73.260763][ T29] audit: type=1400 audit(1731002627.182:220): avc: denied { create } for pid=6050 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.937549][ T6088] netlink: 'syz.4.47': attribute type 29 has an invalid length. [ 74.305221][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6090 comm=syz.0.49 [ 74.339846][ T6090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 74.831419][ T6094] netlink: 'syz.4.51': attribute type 72 has an invalid length. [ 74.845049][ T6094] netlink: 'syz.4.51': attribute type 9 has an invalid length. [ 74.856155][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 74.930706][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51'. [ 75.715982][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6112 comm=syz.3.55 [ 75.729854][ T6112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 76.137436][ T46] cfg80211: failed to load regulatory.db [ 77.171803][ T6127] random: crng reseeded on system resumption [ 77.519643][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.529544][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.546490][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 77.546504][ T29] audit: type=1400 audit(1731002631.452:226): avc: denied { name_connect } for pid=6130 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 77.590518][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.610759][ T29] audit: type=1400 audit(1731002631.462:227): avc: denied { listen } for pid=6130 comm="syz.1.63" lport=41443 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.636282][ T29] audit: type=1400 audit(1731002631.512:228): avc: denied { accept } for pid=6130 comm="syz.1.63" lport=41443 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.699679][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.715219][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 77.736482][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.0.66'. [ 78.003461][ T6156] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 78.307159][ T29] audit: type=1400 audit(1731002632.222:229): avc: denied { ioctl } for pid=6126 comm="syz.3.62" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 78.331771][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.217582][ T29] audit: type=1400 audit(1731002633.132:230): avc: denied { create } for pid=6165 comm="syz.2.72" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.262993][ T29] audit: type=1400 audit(1731002633.132:231): avc: denied { map } for pid=6165 comm="syz.2.72" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.357677][ T29] audit: type=1400 audit(1731002633.132:232): avc: denied { read write } for pid=6165 comm="syz.2.72" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.382183][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.479969][ T29] audit: type=1400 audit(1731002633.332:233): avc: denied { create } for pid=6174 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.178879][ T6184] syzkaller1: entered promiscuous mode [ 80.252606][ T6184] syzkaller1: entered allmulticast mode [ 81.220065][ T29] audit: type=1400 audit(1731002635.132:234): avc: denied { bind } for pid=6195 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.478025][ T29] audit: type=1400 audit(1731002635.132:235): avc: denied { write } for pid=6195 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.497109][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.584122][ T6206] netlink: 'syz.0.82': attribute type 29 has an invalid length. [ 82.098211][ T6208] __nla_validate_parse: 3 callbacks suppressed [ 82.098229][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 82.124784][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.133283][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.242928][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.259045][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.645397][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 82.654382][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 82.663259][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 82.799647][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 82.808968][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 82.820856][ T6217] netlink: 88 bytes leftover after parsing attributes in process `syz.4.86'. [ 83.513824][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 83.513839][ T29] audit: type=1400 audit(1731002637.432:237): avc: denied { write } for pid=6209 comm="syz.2.84" lport=42843 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.620805][ T29] audit: type=1400 audit(1731002637.542:238): avc: denied { setopt } for pid=6209 comm="syz.2.84" lport=42843 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.970503][ T6238] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 84.412882][ T46] IPVS: starting estimator thread 0... [ 84.688962][ T29] audit: type=1400 audit(1731002638.082:239): avc: denied { ioctl } for pid=6236 comm="syz.4.92" path="socket:[9373]" dev="sockfs" ino=9373 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.713413][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.756284][ T6241] IPVS: using max 28 ests per chain, 67200 per kthread [ 87.115733][ T29] audit: type=1400 audit(1731002641.032:240): avc: denied { append } for pid=6273 comm="syz.2.99" name="event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.168832][ T29] audit: type=1400 audit(1731002641.062:241): avc: denied { open } for pid=6273 comm="syz.2.99" path="/dev/input/event3" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.917510][ T29] audit: type=1400 audit(1731002641.072:242): avc: denied { read } for pid=6273 comm="syz.2.99" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 88.155187][ T29] audit: type=1400 audit(1731002641.072:243): avc: denied { open } for pid=6273 comm="syz.2.99" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 89.532465][ T6308] netlink: 'syz.0.108': attribute type 29 has an invalid length. [ 91.907093][ T6339] netlink: 'syz.2.118': attribute type 29 has an invalid length. [ 93.078800][ T6348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6348 comm=syz.2.119 [ 93.094063][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.119'. [ 94.268981][ T29] audit: type=1400 audit(1731002648.182:244): avc: denied { connect } for pid=6353 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.323405][ T29] audit: type=1400 audit(1731002648.182:245): avc: denied { ioctl } for pid=6353 comm="syz.3.122" path="socket:[9551]" dev="sockfs" ino=9551 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.348568][ T29] audit: type=1400 audit(1731002648.232:246): avc: denied { read } for pid=6355 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.442326][ T29] audit: type=1400 audit(1731002648.362:247): avc: denied { connect } for pid=6357 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.936316][ T6372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6372 comm=syz.3.127 [ 94.951944][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 94.978494][ T6372] kernel profiling enabled (shift: 17) [ 96.150533][ T29] audit: type=1400 audit(1731002650.012:248): avc: denied { name_bind } for pid=6375 comm="syz.0.130" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 96.223206][ T29] audit: type=1400 audit(1731002650.012:249): avc: denied { node_bind } for pid=6375 comm="syz.0.130" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 96.361183][ T29] audit: type=1400 audit(1731002650.282:250): avc: denied { create } for pid=6382 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 96.420874][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.639920][ T964] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.669874][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 96.774445][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.895576][ T964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.917516][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.927855][ T964] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.942194][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.963589][ T964] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 96.982814][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.005560][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.028886][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.053427][ T964] usb 4-1: config 0 descriptor?? [ 97.175321][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.197323][ T964] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.226165][ T964] dvb-usb: bulk message failed: -22 (3/0) [ 97.475596][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 97.526906][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.560288][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.565948][ T8] usbtmc 2-1:16.0: can't read capabilities [ 97.605488][ T964] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.616718][ T964] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.624611][ T964] usb 4-1: media controller created [ 97.631705][ T964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.660304][ T964] dvb-usb: bulk message failed: -22 (6/0) [ 97.666812][ T964] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 97.684097][ T964] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 97.721304][ T29] audit: type=1400 audit(1731002651.632:251): avc: denied { read } for pid=5185 comm="acpid" name="event4" dev="devtmpfs" ino=2733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.750109][ T29] audit: type=1400 audit(1731002651.632:252): avc: denied { open } for pid=5185 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2733 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.759991][ T8] usb 2-1: USB disconnect, device number 2 [ 97.784694][ T29] audit: type=1400 audit(1731002651.632:253): avc: denied { ioctl } for pid=5185 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2733 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.801045][ T964] dvb-usb: schedule remote query interval to 150 msecs. [ 98.397135][ T964] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.408314][ T964] usb 4-1: USB disconnect, device number 2 [ 98.486786][ T964] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.641378][ T6422] netlink: 'syz.2.141': attribute type 29 has an invalid length. [ 100.637357][ T29] audit: type=1400 audit(1731002654.552:254): avc: denied { watch } for pid=6427 comm="syz.0.143" path="/34" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.980375][ T29] audit: type=1400 audit(1731002654.552:255): avc: denied { watch_sb watch_reads } for pid=6427 comm="syz.0.143" path="/34" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.596466][ T29] audit: type=1400 audit(1731002655.512:256): avc: denied { create } for pid=6435 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.595707][ T29] audit: type=1400 audit(1731002656.512:257): avc: denied { connect } for pid=6435 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.269828][ T6462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6462 comm=syz.0.153 [ 105.967434][ T29] audit: type=1400 audit(1731002658.522:258): avc: denied { create } for pid=6449 comm="syz.3.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.757443][ T29] audit: type=1400 audit(1731002660.672:259): avc: denied { create } for pid=6473 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.776837][ T29] audit: type=1400 audit(1731002660.672:260): avc: denied { getopt } for pid=6473 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.896303][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 107.941456][ T6499] netlink: 'syz.0.165': attribute type 29 has an invalid length. [ 108.388696][ T29] audit: type=1400 audit(1731002662.292:261): avc: denied { map } for pid=6504 comm="syz.0.167" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 112.142643][ T6564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.509367][ T6575] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 113.731305][ T29] audit: type=1400 audit(1731002667.652:262): avc: denied { create } for pid=6585 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.841672][ T6593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.194'. [ 113.913169][ T29] audit: type=1400 audit(1731002667.742:263): avc: denied { write } for pid=6585 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.933776][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.946942][ T29] audit: type=1400 audit(1731002667.752:264): avc: denied { nlmsg_write } for pid=6585 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.383749][ T6602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'. [ 115.061271][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 115.447802][ T29] audit: type=1400 audit(1731002669.362:265): avc: denied { write } for pid=6611 comm="syz.2.200" name="radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.531049][ T29] audit: type=1400 audit(1731002669.442:266): avc: denied { bind } for pid=6617 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.597191][ T29] audit: type=1400 audit(1731002669.452:267): avc: denied { write } for pid=6617 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.597406][ T6623] random: crng reseeded on system resumption [ 116.012206][ T29] audit: type=1400 audit(1731002669.922:268): avc: denied { getopt } for pid=6625 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.032632][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.096419][ T6630] netem: change failed [ 116.141364][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 116.374723][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6640 comm=syz.1.206 [ 116.388191][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 118.315897][ T6668] netlink: 'syz.1.213': attribute type 29 has an invalid length. [ 119.202995][ T29] audit: type=1400 audit(1731002673.122:269): avc: denied { mounton } for pid=6672 comm="syz.1.218" path="/39/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.657852][ T6676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6676 comm=syz.4.217 [ 119.793850][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 122.019803][ T6701] netlink: 'syz.4.222': attribute type 29 has an invalid length. [ 123.257705][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'. [ 124.163696][ T6727] netlink: 'syz.0.232': attribute type 29 has an invalid length. [ 124.898946][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 126.842536][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 127.928375][ T6765] netlink: 'syz.2.241': attribute type 29 has an invalid length. [ 128.686835][ T6768] bridge0: port 3(syz_tun) entered blocking state [ 128.739422][ T6768] bridge0: port 3(syz_tun) entered disabled state [ 128.768364][ T29] audit: type=1400 audit(1731002682.672:270): avc: denied { ioctl } for pid=6771 comm="syz.4.244" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10794 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.777630][ T6768] syz_tun: entered allmulticast mode [ 128.861229][ T6768] syz_tun: entered promiscuous mode [ 128.880492][ T6768] bridge0: port 3(syz_tun) entered blocking state [ 128.887469][ T6768] bridge0: port 3(syz_tun) entered forwarding state [ 129.057321][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.059933][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.075266][ T46] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 129.235924][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.256801][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 129.263815][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.274632][ T46] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 129.285682][ T5879] usb 5-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 129.295120][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.303464][ T5879] usb 5-1: Product: syz [ 129.307763][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.316214][ T5879] usb 5-1: Manufacturer: syz [ 129.322891][ T5879] usb 5-1: SerialNumber: syz [ 129.359363][ T46] usb 2-1: config 0 descriptor?? [ 129.366947][ T5879] usb 5-1: config 0 descriptor?? [ 129.393321][ T5879] cp210x 5-1:0.0: cp210x converter detected [ 129.403484][ T46] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 129.424800][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 129.465975][ T46] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.476326][ T46] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.484060][ T46] usb 2-1: media controller created [ 129.497039][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.545728][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 129.560281][ T46] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.609255][ T5879] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 129.619108][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 129.630904][ T6775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.641243][ T6775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.652436][ T5879] cp210x 5-1:0.0: querying part number failed [ 129.662602][ T5879] usb 5-1: cp210x converter now attached to ttyUSB0 [ 129.740247][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 129.747241][ T46] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.757808][ T5879] usb 5-1: USB disconnect, device number 2 [ 129.784702][ T46] usb 2-1: USB disconnect, device number 3 [ 129.846685][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.854866][ T5879] cp210x 5-1:0.0: device disconnected [ 130.144098][ T46] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.718364][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.069783][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 131.076311][ T5830] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 131.085345][ T5830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.095356][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.114697][ T5830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.138129][ T5830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.170776][ T5830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.184222][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.912778][ T5830] usb 3-1: GET_CAPABILITIES returned 0 [ 131.918330][ T5830] usbtmc 3-1:16.0: can't read capabilities [ 132.440316][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012373][ T6821] netlink: 'syz.1.258': attribute type 72 has an invalid length. [ 133.020270][ T6821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.258'. [ 133.184194][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.257'. [ 133.463882][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.668011][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 133.766305][ T5879] usb 5-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 133.775602][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.783672][ T5879] usb 5-1: Product: syz [ 133.787834][ T5879] usb 5-1: Manufacturer: syz [ 133.794296][ T5879] usb 5-1: SerialNumber: syz [ 133.825189][ T5879] usb 5-1: config 0 descriptor?? [ 134.463019][ T5879] cp210x 5-1:0.0: cp210x converter detected [ 134.488011][ T25] usb 3-1: USB disconnect, device number 2 [ 134.669582][ T29] audit: type=1400 audit(1731002688.582:271): avc: denied { execute } for pid=6815 comm="syz.4.259" path="/50/cpu.stat" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 134.697360][ T5879] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 134.704994][ T5879] cp210x 5-1:0.0: querying part number failed [ 134.714336][ T5879] usb 5-1: cp210x converter now attached to ttyUSB0 [ 134.857519][ T5879] usb 5-1: USB disconnect, device number 3 [ 135.031865][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.049196][ T6840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.054861][ T5879] cp210x 5-1:0.0: device disconnected [ 135.089947][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.361523][ T5830] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.545298][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 135.565618][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.594545][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.607296][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.621448][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.698591][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.802060][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.088692][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'. [ 136.479219][ T5830] usb 4-1: GET_CAPABILITIES returned 0 [ 136.508089][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 136.556413][ T29] audit: type=1400 audit(1731002690.452:272): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 136.718397][ T5830] usb 4-1: USB disconnect, device number 3 [ 136.777860][ T6874] tipc: Started in network mode [ 136.792640][ T6874] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 136.807779][ T6874] tipc: Enabled bearer , priority 0 [ 137.204141][ T6882] netlink: 'syz.2.277': attribute type 29 has an invalid length. [ 137.975131][ T25] tipc: Node number set to 11578026 [ 138.096065][ T6892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6892 comm=syz.3.279 [ 138.115271][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 138.636517][ T29] audit: type=1400 audit(1731002692.552:273): avc: denied { bind } for pid=6893 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 139.207197][ T29] audit: type=1400 audit(1731002693.122:274): avc: denied { name_bind } for pid=6895 comm="syz.3.283" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 139.680338][ T6908] netlink: 216 bytes leftover after parsing attributes in process `syz.0.286'. [ 139.694898][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.137498][ T6914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.226587][ T6915] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 142.839885][ T29] audit: type=1400 audit(1731002696.752:275): avc: denied { connect } for pid=6932 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.075719][ T6950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6950 comm=syz.1.297 [ 143.096109][ T6950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.297'. [ 143.629841][ T29] audit: type=1400 audit(1731002696.752:276): avc: denied { write } for pid=6932 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.219979][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.301'. [ 144.949151][ T6965] bridge0: entered allmulticast mode [ 145.608095][ T6985] netlink: 'syz.3.308': attribute type 29 has an invalid length. [ 146.006740][ T6987] tipc: Started in network mode [ 146.015261][ T6987] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 146.367777][ T6994] netlink: 'syz.1.312': attribute type 29 has an invalid length. [ 146.642604][ T6987] tipc: Enabled bearer , priority 0 [ 147.388848][ T7003] random: crng reseeded on system resumption [ 147.468483][ T7010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7010 comm=syz.0.311 [ 147.488425][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 147.760900][ T5919] tipc: Node number set to 11578026 [ 147.974290][ T29] audit: type=1400 audit(1731002701.892:277): avc: denied { append } for pid=7008 comm="syz.4.317" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 148.198338][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 148.854844][ T29] audit: type=1400 audit(1731002702.772:278): avc: denied { sqpoll } for pid=7029 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.873889][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.792739][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 152.685911][ T7068] netlink: 'syz.2.331': attribute type 29 has an invalid length. [ 153.689166][ T29] audit: type=1400 audit(1731002707.592:279): avc: denied { setopt } for pid=7072 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.728992][ T7094] netem: change failed [ 155.735466][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 156.969786][ T7114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'. [ 160.823003][ T7142] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.356074][ T29] audit: type=1400 audit(1731002715.272:280): avc: denied { unmount } for pid=7151 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 162.340012][ T7168] fuse: Unknown parameter 'group_id00000000000000000000' [ 162.648765][ T7174] netlink: 'syz.4.362': attribute type 29 has an invalid length. [ 163.511009][ T7182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7182 comm=syz.2.355 [ 163.555878][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 164.165711][ T7193] netlink: 'syz.3.367': attribute type 29 has an invalid length. [ 165.442005][ T7209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 166.103202][ T7216] netlink: 'syz.2.373': attribute type 29 has an invalid length. [ 166.728942][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 166.802359][ T29] audit: type=1400 audit(1731002720.632:281): avc: denied { read } for pid=7219 comm="syz.4.375" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.991113][ T29] audit: type=1400 audit(1731002720.632:282): avc: denied { open } for pid=7219 comm="syz.4.375" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 167.014480][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.460681][ T7236] netlink: 'syz.4.378': attribute type 29 has an invalid length. [ 170.050025][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 170.230046][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 170.310760][ T5919] usb 1-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3 [ 170.337430][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.355889][ T5919] usb 1-1: Product: syz [ 170.370235][ T5919] usb 1-1: Manufacturer: syz [ 170.374857][ T5919] usb 1-1: SerialNumber: syz [ 170.666560][ T5919] usb 1-1: config 0 descriptor?? [ 170.861088][ T5919] cp210x 1-1:0.0: cp210x converter detected [ 171.021302][ T5919] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 171.098754][ T5919] cp210x 1-1:0.0: querying part number failed [ 171.183158][ T5919] usb 1-1: cp210x converter now attached to ttyUSB0 [ 171.210694][ T5919] usb 1-1: USB disconnect, device number 2 [ 171.222112][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.231271][ T5919] cp210x 1-1:0.0: device disconnected [ 171.526315][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 172.957868][ T7299] netlink: 'syz.0.398': attribute type 29 has an invalid length. [ 174.631772][ T5846] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 174.640533][ T5846] Bluetooth: hci4: Injecting HCI hardware error event [ 174.649420][ T5846] Bluetooth: hci4: hardware error 0x00 [ 175.416380][ T7322] fuse: Bad value for 'fd' [ 175.447010][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.406'. [ 175.990004][ T5919] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 176.243030][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'. [ 177.499351][ T5846] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.742599][ T7345] netlink: 'syz.4.411': attribute type 29 has an invalid length. [ 178.152446][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.162629][ T5919] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 178.171682][ T5919] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 178.180787][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.215331][ T5919] usb 2-1: config 0 descriptor?? [ 178.245277][ T5919] usb 2-1: can't set config #0, error -71 [ 178.415974][ T29] audit: type=1400 audit(1731002732.282:283): avc: denied { rename } for pid=5182 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.449720][ T29] audit: type=1400 audit(1731002732.282:284): avc: denied { unlink } for pid=5182 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.481201][ T29] audit: type=1400 audit(1731002732.292:285): avc: denied { create } for pid=5182 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 178.572876][ T5919] usb 2-1: USB disconnect, device number 4 [ 179.190787][ T7364] fuse: Bad value for 'fd' [ 179.236769][ T53] Bluetooth: Frame is too long (len 10, expected len 9) [ 180.242146][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.420'. [ 180.456361][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 180.801019][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 180.814511][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 180.824137][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 180.830279][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 182.670102][ T7404] netlink: 'syz.2.424': attribute type 29 has an invalid length. [ 182.971780][ T7411] fuse: Bad value for 'fd' [ 183.973813][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 184.549943][ T5846] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 185.991298][ T7435] netlink: 'syz.4.436': attribute type 29 has an invalid length. [ 186.056598][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 186.403387][ T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 186.717471][ T46] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 187.161220][ T7459] netlink: 'syz.3.444': attribute type 29 has an invalid length. [ 187.397145][ T7460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7460 comm=syz.4.442 [ 187.412597][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.442'. [ 187.702246][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.712499][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.721482][ T25] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 187.731046][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.741079][ T25] usb 1-1: config 0 descriptor?? [ 187.749501][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 187.870992][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 187.878575][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 187.888441][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 187.895570][ T25] usb 1-1: media controller created [ 187.909398][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.095244][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.105660][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.114687][ T46] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 188.124125][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.133065][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 188.139242][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.147881][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 188.160627][ T46] usb 2-1: config 0 descriptor?? [ 188.210860][ T46] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 188.240500][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 188.262119][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 188.269610][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.284845][ T46] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.422808][ T5882] dvb-usb: bulk message failed: -22 (1/0) [ 188.429098][ T5882] dvb-usb: error while querying for an remote control event. [ 188.683228][ T46] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 188.692191][ T46] usb 2-1: media controller created [ 188.772809][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.783063][ T25] usb 1-1: USB disconnect, device number 3 [ 188.806105][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 188.812496][ T46] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.821345][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 188.847243][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 188.855815][ T46] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.910278][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 189.005577][ T46] usb 2-1: USB disconnect, device number 5 [ 189.335565][ T46] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 189.402656][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 189.544443][ T29] audit: type=1400 audit(1731002743.462:286): avc: denied { mounton } for pid=7480 comm="syz.3.451" path="/77/file0" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.635885][ T7485] fuse: Unknown parameter 'group_id00000000000000000000' [ 190.318319][ T29] audit: type=1400 audit(1731002744.232:287): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 191.858664][ T7510] netlink: 'syz.3.455': attribute type 29 has an invalid length. [ 192.204839][ T29] audit: type=1400 audit(1731002745.992:288): avc: denied { bind } for pid=7512 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.276406][ T29] audit: type=1400 audit(1731002745.992:289): avc: denied { write } for pid=7512 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.303821][ T29] audit: type=1400 audit(1731002745.992:290): avc: denied { bind } for pid=7512 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.447110][ T7516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 192.897389][ T7532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7532 comm=syz.4.464 [ 192.917202][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.464'. [ 193.750251][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 194.042899][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180894][ T7552] fuse: Bad value for 'fd' [ 195.287746][ T7564] fuse: Bad value for 'fd' [ 196.154551][ T7572] fuse: Unknown parameter 'group_i00000000000000000000' [ 196.523332][ T29] audit: type=1400 audit(1731002750.442:291): avc: denied { read write } for pid=7571 comm="syz.2.478" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.577038][ T29] audit: type=1400 audit(1731002750.442:292): avc: denied { open } for pid=7571 comm="syz.2.478" path="/99/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.719784][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 196.829779][ T5830] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 196.893666][ T7587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7587 comm=syz.3.477 [ 196.906771][ T25] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 196.930886][ T7582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 197.064927][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.085371][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.513620][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 197.525630][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.538582][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.549447][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.482'. [ 197.551220][ T25] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.568104][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.576317][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.581850][ T25] usb 1-1: config 0 descriptor?? [ 197.595848][ T25] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.607014][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.611928][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 197.639787][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.649445][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.714157][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.729796][ T25] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.736907][ T25] usb 1-1: media controller created [ 197.743138][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.776548][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 197.783148][ T25] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 197.793067][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 197.813625][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 197.820720][ T25] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.836834][ T25] usb 1-1: USB disconnect, device number 4 [ 197.874500][ T25] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.895971][ T5830] usb 2-1: GET_CAPABILITIES returned 0 [ 197.999847][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 198.689558][ T5919] usb 2-1: USB disconnect, device number 6 [ 199.042253][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7606 comm=syz.3.488 [ 199.062071][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.488'. [ 201.417855][ T7640] fuse: Invalid rootmode [ 203.772706][ T7664] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 204.655492][ T7667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.505'. [ 206.013661][ T7687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.099048][ T29] audit: type=1400 audit(1731002759.892:293): avc: denied { mount } for pid=7679 comm="syz.3.512" name="/" dev="ramfs" ino=14595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 206.404868][ T29] audit: type=1400 audit(1731002759.932:294): avc: denied { unlink } for pid=7679 comm="syz.3.512" name="#1" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 206.779532][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.790123][ T29] audit: type=1400 audit(1731002759.952:295): avc: denied { mount } for pid=7679 comm="syz.3.512" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 206.811864][ T29] audit: type=1400 audit(1731002760.682:296): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 206.840367][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.878544][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.000205][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 212.787477][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.839964][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.868491][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.909819][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.957108][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.988730][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.272358][ T29] audit: type=1400 audit(1731002767.192:297): avc: denied { mounton } for pid=7770 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 213.749873][ T5071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.055056][ T5071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.115411][ T5071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.236635][ T5071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.260842][ T7770] chnl_net:caif_netlink_parms(): no params data found [ 214.269900][ T6386] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 214.603303][ T6386] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.686649][ T6386] usb 2-1: config 12 has an invalid interface number: 207 but max is 0 [ 214.701531][ T6386] usb 2-1: config 12 has no interface number 0 [ 214.712151][ T6386] usb 2-1: config 12 interface 207 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.777563][ T6386] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=f3.aa [ 214.788219][ T6386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.857355][ T29] audit: type=1400 audit(1731002768.772:298): avc: denied { read write } for pid=7781 comm="syz.0.539" name="sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.027444][ T29] audit: type=1400 audit(1731002768.772:299): avc: denied { open } for pid=7781 comm="syz.0.539" path="/dev/sg0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.072882][ T7770] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.113263][ T7770] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.137582][ T6386] usb 2-1: Product: syz [ 215.142383][ T6386] usb 2-1: Manufacturer: syz [ 215.149447][ T6386] usb 2-1: SerialNumber: syz [ 215.158055][ T29] audit: type=1400 audit(1731002768.772:300): avc: denied { ioctl } for pid=7781 comm="syz.0.539" path="/dev/sg0" dev="devtmpfs" ino=710 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 215.184078][ T7770] bridge_slave_0: entered allmulticast mode [ 215.199115][ T7770] bridge_slave_0: entered promiscuous mode [ 215.209536][ T5071] bridge_slave_1: left allmulticast mode [ 215.209966][ T29] audit: type=1400 audit(1731002768.822:301): avc: denied { search } for pid=5494 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.237112][ T29] audit: type=1400 audit(1731002768.822:302): avc: denied { read } for pid=5494 comm="dhcpcd" name="n100" dev="tmpfs" ino=3436 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.258738][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.269774][ T5071] bridge_slave_1: left promiscuous mode [ 215.280789][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.303311][ T5071] bridge_slave_0: left allmulticast mode [ 215.303388][ T5846] Bluetooth: hci5: command tx timeout [ 215.308997][ T5071] bridge_slave_0: left promiscuous mode [ 215.345619][ T29] audit: type=1400 audit(1731002768.822:303): avc: denied { open } for pid=5494 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3436 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.368891][ T29] audit: type=1400 audit(1731002768.822:304): avc: denied { getattr } for pid=5494 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3436 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 215.371473][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.484559][ T6386] usb 2-1: USB disconnect, device number 7 [ 215.638850][ T29] audit: type=1400 audit(1731002769.552:305): avc: denied { read } for pid=7823 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.733107][ T29] audit: type=1400 audit(1731002769.582:306): avc: denied { open } for pid=7823 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.379830][ T5846] Bluetooth: hci5: command tx timeout [ 217.538248][ T7843] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 218.390256][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 218.390271][ T29] audit: type=1400 audit(1731002772.302:313): avc: denied { remove_name } for pid=7851 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3458 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.469368][ T29] audit: type=1400 audit(1731002772.302:314): avc: denied { unlink } for pid=7851 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3458 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 218.921728][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.944782][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.965550][ T5071] bond0 (unregistering): Released all slaves [ 218.984244][ T7770] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.992353][ T7770] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.065686][ T5846] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 219.191327][ T7770] bridge_slave_1: entered allmulticast mode [ 219.284421][ T7770] bridge_slave_1: entered promiscuous mode [ 219.470522][ T5846] Bluetooth: hci5: command tx timeout [ 219.589943][ T5071] tipc: Disabling bearer [ 219.635442][ T5071] tipc: Left network mode [ 219.698518][ T7770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.747635][ T7770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.108657][ T29] audit: type=1400 audit(1731002773.762:315): avc: denied { read write } for pid=7885 comm="syz.4.556" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.151169][ T29] audit: type=1400 audit(1731002773.762:316): avc: denied { open } for pid=7885 comm="syz.4.556" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.174351][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.403505][ T29] audit: type=1400 audit(1731002773.762:317): avc: denied { ioctl } for pid=7885 comm="syz.4.556" path="/dev/dlm-control" dev="devtmpfs" ino=94 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 220.708848][ T7770] team0: Port device team_slave_0 added [ 220.754766][ T7770] team0: Port device team_slave_1 added [ 221.468287][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.475664][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.599824][ T7770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.620728][ T5846] Bluetooth: hci5: command tx timeout [ 222.037605][ T5071] hsr_slave_0: left promiscuous mode [ 222.043652][ T5071] hsr_slave_1: left promiscuous mode [ 222.089045][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.098738][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.119213][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.180122][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.449069][ T5071] veth1_macvtap: left promiscuous mode [ 223.455161][ T5071] veth0_macvtap: left promiscuous mode [ 223.461178][ T5071] veth1_vlan: left promiscuous mode [ 223.466959][ T5071] veth0_vlan: left promiscuous mode [ 223.507965][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 223.725780][ T5846] Bluetooth: hci2: Injecting HCI hardware error event [ 223.733675][ T5846] Bluetooth: hci2: hardware error 0x00 [ 225.073674][ T5071] team0 (unregistering): Port device team_slave_1 removed [ 225.675763][ T5071] team0 (unregistering): Port device team_slave_0 removed [ 226.037251][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 226.535866][ T7770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.543410][ T7770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.582237][ T7770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.736705][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.569'. [ 227.062799][ T5846] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 227.824793][ T7770] hsr_slave_0: entered promiscuous mode [ 227.865240][ T7770] hsr_slave_1: entered promiscuous mode [ 229.688745][ T8027] netlink: 'syz.0.584': attribute type 29 has an invalid length. [ 230.953834][ T7770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.993042][ T7770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.036096][ T7770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.086778][ T7770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.140839][ T5846] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 231.153566][ T5846] Bluetooth: hci0: Injecting HCI hardware error event [ 231.161956][ T5846] Bluetooth: hci0: hardware error 0x00 [ 231.494708][ T7770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.217489][ T7770] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.249040][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.256288][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.097390][ T7770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.220411][ T5846] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 233.386098][ T7770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.417851][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.424986][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.881505][ T7770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.115716][ T7770] veth0_vlan: entered promiscuous mode [ 236.208434][ T7770] veth1_vlan: entered promiscuous mode [ 236.837572][ T7770] veth0_macvtap: entered promiscuous mode [ 236.861011][ T7770] veth1_macvtap: entered promiscuous mode [ 237.095150][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.152705][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.203188][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.249906][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.274702][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.450406][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.576702][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.592235][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.739382][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.904823][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.991505][ T7770] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.000586][ T7770] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.009490][ T7770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.018279][ T7770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.157683][ T4065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.174546][ T4065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.545342][ T4065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.561947][ T4065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.600607][ T29] audit: type=1400 audit(1731002792.512:318): avc: denied { mount } for pid=7770 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.686143][ T29] audit: type=1400 audit(1731002792.552:319): avc: denied { mounton } for pid=7770 comm="syz-executor" path="/root/syzkaller.jqMmc6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 239.415007][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.613'. [ 239.639591][ T8212] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 246.898872][ T8319] fuse: Bad value for 'fd' [ 251.142735][ T29] audit: type=1400 audit(1731002805.062:320): avc: denied { ioctl } for pid=8371 comm="syz.3.645" path="socket:[17801]" dev="sockfs" ino=17801 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 253.006143][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 253.700219][ T8397] netem: change failed [ 255.567716][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.802586][ T8484] netem: change failed [ 258.864101][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.666'. [ 262.165224][ T8522] ------------[ cut here ]------------ [ 262.171260][ T8522] WARNING: CPU: 0 PID: 8522 at drivers/gpu/drm/vkms/vkms_crtc.c:100 vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.183072][ T8522] Modules linked in: [ 262.186975][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.674 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 262.197922][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.208254][ T8522] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.214925][ T8522] Code: e0 fb e8 9e 3a ce fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c 4d e0 fb 90 <0f> 0b 90 eb b5 e8 11 d7 41 fc e9 dc fe ff ff 48 89 df e8 94 d7 41 [ 262.234913][ T8522] RSP: 0018:ffffc90003a9f810 EFLAGS: 00010293 [ 262.241471][ T8522] RAX: 0000000000000000 RBX: 0000003d087863f3 RCX: ffffffff85ad2d3c [ 262.249445][ T8522] RDX: ffff88802be6a440 RSI: ffffffff85ad2db4 RDI: 0000000000000006 [ 262.257499][ T8522] RBP: ffffc90003a9f978 R08: 0000000000000006 R09: 0000003d087863f3 [ 262.265519][ T8522] R10: 0000003d087863f3 R11: 0000000000000000 R12: 0000003d087863f3 [ 262.273529][ T8522] R13: ffff888025d34000 R14: 0000000000004e20 R15: ffffffff85ad2c30 [ 262.281693][ T8522] FS: 000055555cf9c500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 262.290971][ T8522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.297559][ T8522] CR2: 0000001b301e4ff8 CR3: 0000000035afa000 CR4: 00000000003526f0 [ 262.305621][ T8522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.313623][ T8522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.321667][ T8522] Call Trace: [ 262.324943][ T8522] [ 262.327872][ T8522] ? __warn+0xea/0x3d0 [ 262.331982][ T8522] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.337813][ T8522] ? report_bug+0x3c0/0x580 [ 262.342651][ T8522] ? handle_bug+0x54/0xa0 [ 262.346960][ T8522] ? exc_invalid_op+0x17/0x50 [ 262.351654][ T8522] ? asm_exc_invalid_op+0x1a/0x20 [ 262.356654][ T8522] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 262.362817][ T8522] ? vkms_get_vblank_timestamp+0x10c/0x1e0 [ 262.368603][ T8522] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 262.374413][ T8522] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.380344][ T8522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.386309][ T8522] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 262.392533][ T8522] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 262.399273][ T8522] drm_crtc_next_vblank_start+0x182/0x300 [ 262.405074][ T8522] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 262.411499][ T8522] ? vkms_prepare_fb+0x5f/0xb0 [ 262.416275][ T8522] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 262.423272][ T8522] drm_atomic_helper_commit+0x1cf/0x380 [ 262.428840][ T8522] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 262.434961][ T8522] drm_atomic_commit+0x229/0x300 [ 262.439895][ T8522] ? __pfx_drm_atomic_commit+0x10/0x10 [ 262.445341][ T8522] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 262.451952][ T8522] ? __pfx___drm_printfn_info+0x10/0x10 [ 262.457490][ T8522] drm_client_modeset_commit_atomic+0x6b0/0x800 [ 262.463749][ T8522] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 262.470529][ T8522] drm_client_modeset_commit_locked+0x14d/0x580 [ 262.476746][ T8522] drm_client_modeset_commit+0x4f/0x80 [ 262.482304][ T8522] drm_fb_helper_lastclose+0xc7/0x160 [ 262.487661][ T8522] ? __pfx_drm_fbdev_shmem_client_restore+0x10/0x10 [ 262.494332][ T8522] drm_fbdev_shmem_client_restore+0x2c/0x40 [ 262.500312][ T8522] drm_client_dev_restore+0x188/0x2a0 [ 262.505665][ T8522] drm_release+0x2c2/0x360 [ 262.510096][ T8522] ? __pfx_drm_release+0x10/0x10 [ 262.515009][ T8522] __fput+0x3f6/0xb60 [ 262.518969][ T8522] task_work_run+0x14e/0x250 [ 262.523559][ T8522] ? __pfx_task_work_run+0x10/0x10 [ 262.528660][ T8522] syscall_exit_to_user_mode+0x27b/0x2a0 [ 262.534311][ T8522] do_syscall_64+0xda/0x250 [ 262.538787][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.544728][ T8522] RIP: 0033:0x7fb888f7e719 [ 262.549131][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.568765][ T8522] RSP: 002b:00007ffc814d0338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 262.577190][ T8522] RAX: 0000000000000000 RBX: 00007fb889137a80 RCX: 00007fb888f7e719 [ 262.585350][ T8522] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 262.593411][ T8522] RBP: 00007fb889137a80 R08: 0000000000000006 R09: 00007ffc814d062f [ 262.601404][ T8522] R10: 00000000005c4be8 R11: 0000000000000246 R12: 000000000003fff0 [ 262.609349][ T8522] R13: 00007ffc814d0440 R14: 0000000000000032 R15: ffffffffffffffff [ 262.617320][ T8522] [ 262.620342][ T8522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.627599][ T8522] CPU: 0 UID: 0 PID: 8522 Comm: syz.1.674 Not tainted 6.12.0-rc6-syzkaller-00110-gff7afaeca1a1 #0 [ 262.638161][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.648195][ T8522] Call Trace: [ 262.651449][ T8522] [ 262.654364][ T8522] dump_stack_lvl+0x3d/0x1f0 [ 262.658939][ T8522] panic+0x71d/0x800 [ 262.662812][ T8522] ? __pfx_panic+0x10/0x10 [ 262.667205][ T8522] ? show_trace_log_lvl+0x29d/0x3d0 [ 262.672379][ T8522] ? check_panic_on_warn+0x1f/0xb0 [ 262.677472][ T8522] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.683255][ T8522] check_panic_on_warn+0xab/0xb0 [ 262.688182][ T8522] __warn+0xf6/0x3d0 [ 262.692063][ T8522] ? vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.697863][ T8522] report_bug+0x3c0/0x580 [ 262.702173][ T8522] handle_bug+0x54/0xa0 [ 262.706311][ T8522] exc_invalid_op+0x17/0x50 [ 262.710792][ T8522] asm_exc_invalid_op+0x1a/0x20 [ 262.715619][ T8522] RIP: 0010:vkms_get_vblank_timestamp+0x185/0x1e0 [ 262.722010][ T8522] Code: e0 fb e8 9e 3a ce fb 48 89 e9 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 75 50 48 89 45 00 eb c0 e8 9c 4d e0 fb 90 <0f> 0b 90 eb b5 e8 11 d7 41 fc e9 dc fe ff ff 48 89 df e8 94 d7 41 [ 262.741604][ T8522] RSP: 0018:ffffc90003a9f810 EFLAGS: 00010293 [ 262.747643][ T8522] RAX: 0000000000000000 RBX: 0000003d087863f3 RCX: ffffffff85ad2d3c [ 262.755585][ T8522] RDX: ffff88802be6a440 RSI: ffffffff85ad2db4 RDI: 0000000000000006 [ 262.763624][ T8522] RBP: ffffc90003a9f978 R08: 0000000000000006 R09: 0000003d087863f3 [ 262.771568][ T8522] R10: 0000003d087863f3 R11: 0000000000000000 R12: 0000003d087863f3 [ 262.779514][ T8522] R13: ffff888025d34000 R14: 0000000000004e20 R15: ffffffff85ad2c30 [ 262.787472][ T8522] ? __pfx_vkms_get_vblank_timestamp+0x10/0x10 [ 262.793607][ T8522] ? vkms_get_vblank_timestamp+0x10c/0x1e0 [ 262.799387][ T8522] ? vkms_get_vblank_timestamp+0x184/0x1e0 [ 262.805168][ T8522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.811130][ T8522] drm_crtc_get_last_vbltimestamp+0x103/0x1b0 [ 262.817181][ T8522] ? __pfx_drm_crtc_get_last_vbltimestamp+0x10/0x10 [ 262.823744][ T8522] drm_crtc_next_vblank_start+0x182/0x300 [ 262.829435][ T8522] drm_atomic_helper_wait_for_fences+0x1fc/0x820 [ 262.835738][ T8522] ? vkms_prepare_fb+0x5f/0xb0 [ 262.840484][ T8522] ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10 [ 262.847321][ T8522] drm_atomic_helper_commit+0x1cf/0x380 [ 262.852939][ T8522] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 262.858979][ T8522] drm_atomic_commit+0x229/0x300 [ 262.863891][ T8522] ? __pfx_drm_atomic_commit+0x10/0x10 [ 262.869321][ T8522] ? __pfx___drm_atomic_helper_set_config+0x10/0x10 [ 262.875907][ T8522] ? __pfx___drm_printfn_info+0x10/0x10 [ 262.881454][ T8522] drm_client_modeset_commit_atomic+0x6b0/0x800 [ 262.887785][ T8522] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 262.894559][ T8522] drm_client_modeset_commit_locked+0x14d/0x580 [ 262.900801][ T8522] drm_client_modeset_commit+0x4f/0x80 [ 262.906238][ T8522] drm_fb_helper_lastclose+0xc7/0x160 [ 262.911586][ T8522] ? __pfx_drm_fbdev_shmem_client_restore+0x10/0x10 [ 262.918160][ T8522] drm_fbdev_shmem_client_restore+0x2c/0x40 [ 262.924031][ T8522] drm_client_dev_restore+0x188/0x2a0 [ 262.929388][ T8522] drm_release+0x2c2/0x360 [ 262.933787][ T8522] ? __pfx_drm_release+0x10/0x10 [ 262.938694][ T8522] __fput+0x3f6/0xb60 [ 262.942652][ T8522] task_work_run+0x14e/0x250 [ 262.947212][ T8522] ? __pfx_task_work_run+0x10/0x10 [ 262.952296][ T8522] syscall_exit_to_user_mode+0x27b/0x2a0 [ 262.957907][ T8522] do_syscall_64+0xda/0x250 [ 262.962381][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.968260][ T8522] RIP: 0033:0x7fb888f7e719 [ 262.972647][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.992233][ T8522] RSP: 002b:00007ffc814d0338 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 263.000621][ T8522] RAX: 0000000000000000 RBX: 00007fb889137a80 RCX: 00007fb888f7e719 [ 263.008572][ T8522] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 263.016515][ T8522] RBP: 00007fb889137a80 R08: 0000000000000006 R09: 00007ffc814d062f [ 263.024458][ T8522] R10: 00000000005c4be8 R11: 0000000000000246 R12: 000000000003fff0 [ 263.032400][ T8522] R13: 00007ffc814d0440 R14: 0000000000000032 R15: ffffffffffffffff [ 263.040352][ T8522] [ 263.043499][ T8522] Kernel Offset: disabled [ 263.047861][ T8522] Rebooting in 86400 seconds..