last executing test programs: 2m36.076516655s ago: executing program 4 (id=2730): syz_emit_ethernet(0x42, &(0x7f0000000180)={@broadcast, @random="af8fa5628063", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @random="b2bd70e87a85", @private2}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) close(r4) sendto$inet6(0xffffffffffffffff, 0x0, 0xf5, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto(r0, &(0x7f0000000580), 0x0, 0x8094, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) pipe2$watch_queue(0x0, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r5, @ANYBLOB='6\x00\x00\x00', @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m34.80171199s ago: executing program 4 (id=2733): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xb, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1a0}}, 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m33.513556618s ago: executing program 4 (id=2737): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e26, 0x41200000, @mcast2, 0xb}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0xe, 0x4e20, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x10000}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) 2m31.758693814s ago: executing program 4 (id=2743): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m31.593730088s ago: executing program 4 (id=2745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$audion(0x0, 0x1, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f00000006c0)=""/226, 0x0, 0xe2, 0x1, 0x2, 0x0, @void, @value}, 0x28) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000102010200"], 0x38}}, 0x0) 2m30.428687318s ago: executing program 4 (id=2746): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4801) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xff}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read(r2, &(0x7f0000000040)=""/123, 0x7b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180a00000000000000000000000000007910000000000000630ae0ff0000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2m29.998630618s ago: executing program 32 (id=2746): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4801) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xff}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000006b40)={0x2020}, 0x206e) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) read(r2, &(0x7f0000000040)=""/123, 0x7b) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180a00000000000000000000000000007910000000000000630ae0ff0000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2m7.196269861s ago: executing program 3 (id=2814): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x4, 0x800006}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.988509255s ago: executing program 3 (id=2816): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m6.833795726s ago: executing program 1 (id=2819): r0 = socket(0x23, 0x5, 0x2) getsockname$packet(r0, 0x0, &(0x7f0000000500)) 2m6.752597987s ago: executing program 1 (id=2821): r0 = socket$inet6(0xa, 0x3, 0x100) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2m6.689677395s ago: executing program 1 (id=2822): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m6.632409795s ago: executing program 1 (id=2823): syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x40, {0x1, 0xe4, "36db117ba67e3455e4f27db6c04ab58308e9f78e5159594f5654e563cd968d18aa6f8846e1023edc5257cff182df37d1e41bfea2587bd3d2cf14499b037c956d9f50017f3fb4b664449fc61e527daeeb95a014c0676fc466b7b19ebf20e1eaa51a483399676be66a4df6b6e08331a903e005f1ec7caf3c3aab46e0b8c427190a84dbcfee4691f23432ae982156cbd21c22eb1ce8d107df91ca46f3ba32bcbfe8a751054c1ee10d1e3dc9423e1186546dd750cc5e8ecfd035233992c9d6c21cc2e00d09fd70590b75422627737854aa8d7cbf02d72e5c70185d67b358bfaeeec8ff4148f9"}}, 0xe9) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0xfffffffffffffffd, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x113) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x21864a, 0x0) 2m5.612470318s ago: executing program 1 (id=2825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2m5.4241918s ago: executing program 1 (id=2827): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000540)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x200, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 2m5.394905308s ago: executing program 3 (id=2828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=0xffffffffffffffff, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x40000000}) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000880)={0x1, &(0x7f0000000840)=[{0xe, 0x1, 0xfb, 0x10001}]}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) bind$netlink(r2, &(0x7f00000008c0)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) 2m4.401151152s ago: executing program 3 (id=2834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0xf08, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) 2m3.395887949s ago: executing program 3 (id=2836): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2m3.297667273s ago: executing program 3 (id=2839): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "f6380000000000000000a93c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = accept$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'rose0\x00', 0x200}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) close(0x3) 1m51.288745133s ago: executing program 2 (id=2903): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x73f, 0x12) 1m51.113931252s ago: executing program 2 (id=2905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 1m49.520014666s ago: executing program 33 (id=2827): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000540)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x200, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 1m49.431329256s ago: executing program 2 (id=2908): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8946, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1m48.637920584s ago: executing program 2 (id=2911): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 1m48.482757792s ago: executing program 2 (id=2913): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)) 1m48.429944674s ago: executing program 5 (id=2914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1m47.789087886s ago: executing program 34 (id=2839): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "f6380000000000000000a93c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = accept$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000003c0)={'rose0\x00', 0x200}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) close(0x3) 1m47.497821435s ago: executing program 2 (id=2917): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24044084) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x76, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0x5}}, @TCA_FLOW_PERTURB={0x0, 0xc, 0xffff8f20}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 1m47.214086925s ago: executing program 35 (id=2917): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24044084) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x76, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0x5}}, @TCA_FLOW_PERTURB={0x0, 0xc, 0xffff8f20}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 1m47.169839953s ago: executing program 5 (id=2919): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000) 1m47.050371687s ago: executing program 5 (id=2920): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) iopl(0x3) accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 1m45.960637363s ago: executing program 5 (id=2922): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 1m45.697447084s ago: executing program 5 (id=2924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0xd, 0xa}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x400000}) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0xc074510c, &(0x7f00000000c0)=@generic) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) setfsgid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040084) 1m44.801743695s ago: executing program 5 (id=2925): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)) 1m44.604979744s ago: executing program 36 (id=2925): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)) 1m0.226935477s ago: executing program 9 (id=3152): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000001580)={0x2000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, 0x0}, 0x58) 59.79427259s ago: executing program 9 (id=3156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x0) 59.691571563s ago: executing program 9 (id=3158): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 59.346655182s ago: executing program 9 (id=3161): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) 59.223610489s ago: executing program 9 (id=3163): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 58.007268973s ago: executing program 9 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = socket(0x2a, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 42.912381656s ago: executing program 37 (id=3169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = socket(0x2a, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 32.580027777s ago: executing program 8 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 32.501660934s ago: executing program 8 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 32.429649999s ago: executing program 8 (id=3366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 31.727895714s ago: executing program 6 (id=3379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa397, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) 31.557717703s ago: executing program 6 (id=3382): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, &(0x7f0000000180)=[@cr4={0x1, 0x244706}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0xa, 0x1, 0x0) fgetxattr(r5, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) 31.521123963s ago: executing program 7 (id=3384): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x30b}, 0x14}}, 0x40000) 30.421285078s ago: executing program 6 (id=3386): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 30.420941169s ago: executing program 7 (id=3387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100040000000800020027"], 0x44}}, 0x0) 30.335299209s ago: executing program 8 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 30.255961253s ago: executing program 8 (id=3391): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 30.247233918s ago: executing program 7 (id=3392): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 30.198036157s ago: executing program 6 (id=3393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x4, 0x4) close(r2) 30.088577799s ago: executing program 7 (id=3394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000340)='sys_enter\x00', r0}, 0x4b) ioprio_get$uid(0x0, 0x0) 30.039096821s ago: executing program 0 (id=3395): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000f80)={&(0x7f0000000800)={0x2, 0x3, @local}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000000)="0f", 0x1}], 0x1}, 0x0) 29.684719923s ago: executing program 7 (id=3396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) 29.683723663s ago: executing program 6 (id=3397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20, &(0x7f0000000180)=[@cr4={0x1, 0x244706}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, 0x0) r4 = getpid() sched_setaffinity(r4, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket(0xa, 0x1, 0x0) fgetxattr(r5, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) socket$inet(0x2, 0xa, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) 29.597790356s ago: executing program 0 (id=3398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) setgid(0xee01) 29.221943366s ago: executing program 7 (id=3399): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x14, 0x1c, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.100607704s ago: executing program 8 (id=3400): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 28.644735833s ago: executing program 0 (id=3401): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 28.536794463s ago: executing program 6 (id=3402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000980)={0xf08, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) dup(0xffffffffffffffff) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 28.437202601s ago: executing program 0 (id=3403): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) 27.641914041s ago: executing program 0 (id=3404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x4) 23.322803367s ago: executing program 0 (id=3405): bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 38 (id=3405): bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): B device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 858.854677][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.878526][ T5861] usb 4-1: config 0 descriptor?? [ 858.886001][T15479] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 858.908843][ T5861] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 858.949976][T15498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2619'. [ 858.966647][ T3076] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 858.993524][ T3076] usb 5-1: USB disconnect, device number 96 [ 859.692770][ T3076] usb 4-1: USB disconnect, device number 74 [ 859.932868][T15511] FAULT_INJECTION: forcing a failure. [ 859.932868][T15511] name failslab, interval 1, probability 0, space 0, times 0 [ 859.946131][T15511] CPU: 0 UID: 0 PID: 15511 Comm: syz.4.2622 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 859.946157][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 859.946168][T15511] Call Trace: [ 859.946175][T15511] [ 859.946182][T15511] dump_stack_lvl+0x16c/0x1f0 [ 859.946210][T15511] should_fail_ex+0x512/0x640 [ 859.946236][T15511] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 859.946264][T15511] should_failslab+0xc2/0x120 [ 859.946283][T15511] __kmalloc_cache_noprof+0x6a/0x3e0 [ 859.946305][T15511] ? lockdep_hardirqs_on+0x7c/0x110 [ 859.946325][T15511] ? alloc_fs_context+0x57/0x9c0 [ 859.946350][T15511] alloc_fs_context+0x57/0x9c0 [ 859.946371][T15511] __x64_sys_fsopen+0xeb/0x240 [ 859.946392][T15511] do_syscall_64+0xcd/0x260 [ 859.946415][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.946434][T15511] RIP: 0033:0x7ffaaf98e969 [ 859.946448][T15511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.946464][T15511] RSP: 002b:00007ffab0796038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 859.946482][T15511] RAX: ffffffffffffffda RBX: 00007ffaafbb5fa0 RCX: 00007ffaaf98e969 [ 859.946494][T15511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 859.946504][T15511] RBP: 00007ffab0796090 R08: 0000000000000000 R09: 0000000000000000 [ 859.946514][T15511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.946525][T15511] R13: 0000000000000000 R14: 00007ffaafbb5fa0 R15: 00007fff6c5b0b68 [ 859.946547][T15511] [ 860.104769][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.360310][T15569] FAULT_INJECTION: forcing a failure. [ 863.360310][T15569] name failslab, interval 1, probability 0, space 0, times 0 [ 863.373117][T15569] CPU: 0 UID: 0 PID: 15569 Comm: syz.0.2638 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 863.373142][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 863.373152][T15569] Call Trace: [ 863.373159][T15569] [ 863.373165][T15569] dump_stack_lvl+0x16c/0x1f0 [ 863.373193][T15569] should_fail_ex+0x512/0x640 [ 863.373215][T15569] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 863.373245][T15569] should_failslab+0xc2/0x120 [ 863.373263][T15569] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 863.373289][T15569] ? alloc_empty_file+0x55/0x1e0 [ 863.373312][T15569] alloc_empty_file+0x55/0x1e0 [ 863.373332][T15569] path_openat+0xe0/0x2d40 [ 863.373355][T15569] ? __schedule+0x1186/0x5de0 [ 863.373373][T15569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.373399][T15569] ? __pfx_path_openat+0x10/0x10 [ 863.373430][T15569] do_filp_open+0x20b/0x470 [ 863.373455][T15569] ? __pfx_do_filp_open+0x10/0x10 [ 863.373497][T15569] ? alloc_fd+0x471/0x7d0 [ 863.373529][T15569] do_sys_openat2+0x11b/0x1d0 [ 863.373548][T15569] ? __pfx_do_sys_openat2+0x10/0x10 [ 863.373576][T15569] __x64_sys_openat+0x174/0x210 [ 863.373596][T15569] ? __pfx___x64_sys_openat+0x10/0x10 [ 863.373614][T15569] ? ksys_write+0x1b9/0x240 [ 863.373652][T15569] do_syscall_64+0xcd/0x260 [ 863.373676][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.373692][T15569] RIP: 0033:0x7fc95e58e969 [ 863.373707][T15569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.373722][T15569] RSP: 002b:00007fc95f346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 863.373739][T15569] RAX: ffffffffffffffda RBX: 00007fc95e7b6160 RCX: 00007fc95e58e969 [ 863.373750][T15569] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 863.373761][T15569] RBP: 00007fc95f346090 R08: 0000000000000000 R09: 0000000000000000 [ 863.373772][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.373782][T15569] R13: 0000000000000000 R14: 00007fc95e7b6160 R15: 00007ffff6b81c48 [ 863.373805][T15569] [ 863.580689][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.085241][T15582] Driver unsupported XDP return value 0 on prog (id 200) dev N/A, expect packet loss! [ 864.402366][T15601] sit0: entered promiscuous mode [ 864.415244][T15601] sit0: entered allmulticast mode [ 864.706477][T15617] pim6reg1: entered promiscuous mode [ 864.711855][T15617] pim6reg1: entered allmulticast mode [ 865.751305][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 865.751326][ T30] audit: type=1400 audit(1746222397.458:2644): avc: denied { connect } for pid=15679 comm="syz.4.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 866.002765][ T30] audit: type=1400 audit(1746222397.708:2645): avc: denied { ioctl } for pid=15679 comm="syz.4.2685" path="socket:[64100]" dev="sockfs" ino=64100 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 866.750497][ T30] audit: type=1400 audit(1746222398.418:2646): avc: denied { ioctl } for pid=15697 comm="syz.1.2689" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 867.091204][ T30] audit: type=1400 audit(1746222398.798:2647): avc: denied { search } for pid=15704 comm="syz.4.2692" name="/" dev="configfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 867.115453][T15705] overlayfs: conflicting lowerdir path [ 867.121129][ T30] audit: type=1400 audit(1746222398.828:2648): avc: denied { mounton } for pid=15704 comm="syz.4.2692" path="/" dev="configfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 867.583958][ T30] audit: type=1400 audit(1746222399.038:2649): avc: denied { bind } for pid=15704 comm="syz.4.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 869.660341][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.667091][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.083590][ T974] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 870.212357][ T3464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 870.323254][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 870.329919][ T974] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 870.343276][ T974] usb 3-1: config 0 has no interface number 0 [ 870.351891][ T974] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 870.369337][ T974] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 870.381903][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.432047][ T974] usb 3-1: config 0 descriptor?? [ 870.444449][ T974] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 871.372854][ T5812] usb 3-1: USB disconnect, device number 104 [ 874.972456][ T3076] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 875.316458][ T3076] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 875.355019][ T3076] usb 5-1: config 0 has no interfaces? [ 875.393460][ T3076] usb 5-1: config 0 has no interfaces? [ 875.413768][ T3076] usb 5-1: config 0 has no interfaces? [ 875.471736][ T3076] usb 5-1: config 0 has no interfaces? [ 875.540139][ T3076] usb 5-1: config 0 has no interfaces? [ 875.805187][ T30] audit: type=1400 audit(1746222407.318:2650): avc: denied { write } for pid=15795 comm="syz.3.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 875.860453][ T3076] usb 5-1: config 0 has no interfaces? [ 875.935039][ T3076] usb 5-1: config 0 has no interfaces? [ 875.951557][ T3076] usb 5-1: config 0 has no interfaces? [ 875.968331][ T3076] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 876.016767][ T3076] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 876.034885][ T10] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 876.058373][ T3076] usb 5-1: Product: syz [ 876.071248][ T3076] usb 5-1: Manufacturer: syz [ 876.087725][ T3076] usb 5-1: SerialNumber: syz [ 876.107593][ T3076] usb 5-1: config 0 descriptor?? [ 876.257738][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.276630][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 876.286066][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 876.297048][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 876.308598][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.319393][T15800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 876.335116][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 876.349897][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 876.361778][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 876.382402][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 876.389714][ T5889] usb 5-1: USB disconnect, device number 97 [ 876.409443][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 877.367247][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 877.613050][ T30] audit: type=1400 audit(1746222409.198:2651): avc: denied { bind } for pid=15808 comm="syz.2.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 878.612148][ T30] audit: type=1400 audit(1746222409.198:2652): avc: denied { name_bind } for pid=15808 comm="syz.2.2722" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 878.634556][ T30] audit: type=1400 audit(1746222409.208:2653): avc: denied { node_bind } for pid=15808 comm="syz.2.2722" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 878.660012][ T30] audit: type=1400 audit(1746222409.358:2654): avc: denied { read } for pid=15808 comm="syz.2.2722" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 879.214190][ T30] audit: type=1400 audit(1746222410.688:2655): avc: denied { bind } for pid=15815 comm="syz.2.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 879.401210][ T3076] usb 2-1: USB disconnect, device number 105 [ 881.595025][ T5820] Bluetooth: hci1: connection err: -111 [ 882.348304][ T30] audit: type=1400 audit(1746222413.298:2656): avc: denied { ioctl } for pid=15836 comm="syz.0.2728" path="socket:[64302]" dev="sockfs" ino=64302 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 882.733121][ T30] audit: type=1326 audit(1746222414.438:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 882.927722][ T30] audit: type=1326 audit(1746222414.468:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.441685][ T30] audit: type=1326 audit(1746222414.468:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.465342][ T30] audit: type=1326 audit(1746222414.468:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.507015][ T30] audit: type=1326 audit(1746222414.468:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.570044][ T30] audit: type=1326 audit(1746222414.468:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.671186][ T30] audit: type=1326 audit(1746222414.468:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.696880][ T30] audit: type=1326 audit(1746222414.468:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.730133][ T30] audit: type=1326 audit(1746222414.468:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15850 comm="syz.4.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaaf98e969 code=0x7ffc0000 [ 883.805849][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 884.495534][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.544438][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 884.627244][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.754984][ T10] usb 4-1: config 0 descriptor?? [ 885.433678][ T5862] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 885.530836][ T10] elecom 0003:056E:00FE.0026: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 885.544840][T15883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.651137][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 885.668645][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.686400][ T5862] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 885.699150][ T5862] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 885.707410][ T5862] usb 3-1: Manufacturer: syz [ 886.035293][ T5862] usb 3-1: config 0 descriptor?? [ 886.854170][ T7528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.989953][ T5862] cougar 0003:060B:700A.0027: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 887.006824][ T7528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.134958][ T7528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.256657][ T3076] usb 3-1: USB disconnect, device number 105 [ 887.386804][ T7528] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.113509][ T10] usb 4-1: USB disconnect, device number 75 [ 889.756906][T15903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 889.935541][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 889.935561][ T30] audit: type=1400 audit(1746222421.648:2685): avc: denied { ioctl } for pid=15902 comm="syz.3.2751" path="socket:[64942]" dev="sockfs" ino=64942 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 890.442325][ T30] audit: type=1400 audit(1746222422.068:2686): avc: denied { ioctl } for pid=15904 comm="syz.1.2752" path="socket:[64432]" dev="sockfs" ino=64432 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 890.479018][ T7528] bridge_slave_1: left allmulticast mode [ 890.607077][ T7528] bridge_slave_1: left promiscuous mode [ 890.983265][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.086434][T15917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 891.095850][T15917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 891.105130][T15917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 891.112954][T15917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 891.120888][T15917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 891.134615][ T7528] bridge_slave_0: left allmulticast mode [ 891.161533][ T30] audit: type=1400 audit(1746222422.848:2687): avc: denied { mounton } for pid=15914 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 891.188166][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.274537][ T5820] Bluetooth: hci2: command tx timeout [ 893.755119][ T30] audit: type=1400 audit(1746222425.458:2688): avc: denied { mount } for pid=15941 comm="syz.2.2761" name="/" dev="autofs" ino=65166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 893.782616][ T30] audit: type=1400 audit(1746222425.488:2689): avc: denied { mount } for pid=15942 comm="syz.1.2762" name="/" dev="autofs" ino=65169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 894.417671][ T7528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.430374][ T7528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.442660][ T7528] bond0 (unregistering): Released all slaves [ 894.507767][ T7528] tipc: Disabling bearer [ 894.513798][ T7528] tipc: Left network mode [ 894.601679][ T30] audit: type=1400 audit(1746222426.308:2690): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 894.838302][ T30] audit: type=1400 audit(1746222426.538:2691): avc: denied { connect } for pid=15967 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 894.925469][ T30] audit: type=1400 audit(1746222426.548:2692): avc: denied { shutdown } for pid=15967 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 894.981947][ T30] audit: type=1400 audit(1746222426.618:2693): avc: denied { module_request } for pid=15914 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 895.023386][ T5862] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 895.040191][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'. [ 895.050206][T15914] chnl_net:caif_netlink_parms(): no params data found [ 895.313374][ T5820] Bluetooth: hci2: command tx timeout [ 895.703160][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 895.717293][ T5862] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 895.730883][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.741254][ T5862] usb 2-1: config 0 descriptor?? [ 896.193731][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 896.242533][ T7528] hsr_slave_0: left promiscuous mode [ 896.433199][ T7528] hsr_slave_1: left promiscuous mode [ 896.439339][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.452277][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.462181][ T7528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.935992][ T30] audit: type=1400 audit(1746222428.238:2694): avc: denied { allowed } for pid=15987 comm="syz.2.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 896.985017][ T7528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.039494][ T7528] veth1_macvtap: left promiscuous mode [ 897.064584][T15995] input: syz1 as /devices/virtual/input/input144 [ 897.287792][ T7528] veth0_macvtap: left promiscuous mode [ 897.380013][ T5862] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 897.390669][ T5862] asix 2-1:0.0: probe with driver asix failed with error -71 [ 897.407969][ T5820] Bluetooth: hci2: command tx timeout [ 897.444046][ T5862] usb 2-1: USB disconnect, device number 106 [ 899.356479][ T5862] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 899.475561][ T5820] Bluetooth: hci2: command tx timeout [ 899.569080][ T5862] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 899.609930][ T5862] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 899.651086][ T5862] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 899.665622][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.675302][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.879215][ T5862] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.043003][ T5862] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 901.082206][ T7528] team0 (unregistering): Port device team_slave_1 removed [ 903.413252][ T974] IPVS: starting estimator thread 0... [ 903.427730][ T974] usb 1-1: USB disconnect, device number 101 [ 903.583362][T16055] IPVS: using max 77 ests per chain, 184800 per kthread [ 903.632582][ T7528] team0 (unregistering): Port device team_slave_0 removed [ 904.090233][ T5820] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 904.097123][ T974] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 904.293292][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 905.302693][ T974] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 905.316125][ T974] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 905.324636][ T974] usb 1-1: Product: syz [ 905.446251][ T974] usb 1-1: Manufacturer: syz [ 905.450967][ T974] usb 1-1: SerialNumber: syz [ 905.467541][ T974] usb 1-1: config 0 descriptor?? [ 906.067080][ T974] usb 1-1: USB disconnect, device number 102 [ 906.568480][T15914] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.575932][T15914] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.590367][T15914] bridge_slave_0: entered allmulticast mode [ 906.598843][T15914] bridge_slave_0: entered promiscuous mode [ 906.606685][T15914] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.613912][T15914] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.621051][T15914] bridge_slave_1: entered allmulticast mode [ 906.627814][T15914] bridge_slave_1: entered promiscuous mode [ 906.640149][T16061] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 906.654551][T16061] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 906.712741][T15914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.738181][T15914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.818017][T16086] xt_hashlimit: max too large, truncated to 1048576 [ 906.852464][T15914] team0: Port device team_slave_0 added [ 906.864641][T15914] team0: Port device team_slave_1 added [ 907.904687][T15914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.926607][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.241270][T15914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.253913][T15914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.260881][T15914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.291061][T15914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.459700][T15914] hsr_slave_0: entered promiscuous mode [ 908.474628][T15914] hsr_slave_1: entered promiscuous mode [ 909.631274][ T30] audit: type=1400 audit(1746222441.308:2695): avc: denied { create } for pid=16114 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 910.069738][T15914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 910.094684][T15914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 910.208000][T15914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 910.254128][T15914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 910.556896][T15914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.577485][T15914] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.511308][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.518502][T10874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.614485][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.621644][T12225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.985363][ T30] audit: type=1326 audit(1746222443.688:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.033262][ T30] audit: type=1326 audit(1746222443.688:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.081303][ T30] audit: type=1326 audit(1746222443.718:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.139380][T15914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.147022][ T30] audit: type=1326 audit(1746222443.828:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.202643][ T30] audit: type=1326 audit(1746222443.828:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.258925][ T30] audit: type=1326 audit(1746222443.828:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.324795][ T30] audit: type=1326 audit(1746222443.838:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.365340][ T30] audit: type=1326 audit(1746222443.838:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.423303][ T30] audit: type=1326 audit(1746222443.848:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.3.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0de8f8e969 code=0x7ffc0000 [ 912.511873][T15914] veth0_vlan: entered promiscuous mode [ 912.524223][T15914] veth1_vlan: entered promiscuous mode [ 912.546947][T15914] veth0_macvtap: entered promiscuous mode [ 912.556322][T15914] veth1_macvtap: entered promiscuous mode [ 912.570827][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.582155][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.593133][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.604718][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.616401][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.628561][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.638811][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.649445][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.660735][T15914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.696070][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.717762][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.731538][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.744674][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.761539][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.772316][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.785415][T15914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.796860][T15914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.812556][T15914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.868686][T15914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.883157][T15914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.892295][T15914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.903338][T15914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.915329][ T6389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.929912][ T6389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.977222][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.989382][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.525758][T15917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 914.539870][T15917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 914.549620][T15917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 914.557633][T15917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 914.567364][T15917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 914.658252][ T3521] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.769976][ T3521] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.866213][ T3521] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.018699][ T3521] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.029829][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 915.029843][ T30] audit: type=1400 audit(1746222446.738:2713): avc: denied { create } for pid=16219 comm="syz.2.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 915.055582][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.082178][ T30] audit: type=1326 audit(1746222446.788:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.160012][T16213] chnl_net:caif_netlink_parms(): no params data found [ 915.170196][ T30] audit: type=1326 audit(1746222446.788:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.223283][ T30] audit: type=1326 audit(1746222446.788:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.255920][ T30] audit: type=1326 audit(1746222446.788:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.285060][ T30] audit: type=1326 audit(1746222446.788:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.314484][ T30] audit: type=1326 audit(1746222446.788:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.349131][ T3521] bridge_slave_1: left allmulticast mode [ 915.372753][ T3521] bridge_slave_1: left promiscuous mode [ 915.374001][ T30] audit: type=1326 audit(1746222446.788:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.387546][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.423694][ T30] audit: type=1326 audit(1746222446.788:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.460837][ T30] audit: type=1326 audit(1746222446.788:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16219 comm="syz.2.2845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fde9658e969 code=0x7ffc0000 [ 915.491761][ T3521] bridge_slave_0: left allmulticast mode [ 915.499215][ T3521] bridge_slave_0: left promiscuous mode [ 915.507962][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.594664][T15917] Bluetooth: hci1: command tx timeout [ 916.628368][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.638535][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.648015][ T3521] bond0 (unregistering): Released all slaves [ 916.748520][T16213] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.756452][T16213] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.764295][T16213] bridge_slave_0: entered allmulticast mode [ 916.771665][T16213] bridge_slave_0: entered promiscuous mode [ 916.779764][T16213] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.787426][T16213] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.795212][T16213] bridge_slave_1: entered allmulticast mode [ 916.802940][T16213] bridge_slave_1: entered promiscuous mode [ 916.809850][ T3521] tipc: Disabling bearer [ 916.816126][ T3521] tipc: Left network mode [ 916.856447][T16247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.909955][T16213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.925233][T16213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.969059][T16213] team0: Port device team_slave_0 added [ 916.991286][T16213] team0: Port device team_slave_1 added [ 917.025088][T16213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.032535][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.061503][T16213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.074922][T16213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.081894][T16213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.111611][T16213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.126140][ T3521] hsr_slave_0: left promiscuous mode [ 917.131931][ T3521] hsr_slave_1: left promiscuous mode [ 917.137880][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.145411][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.153256][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.160667][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.179002][ T3521] veth1_macvtap: left promiscuous mode [ 917.185191][ T3521] veth0_macvtap: left promiscuous mode [ 917.190733][ T3521] veth1_vlan: left promiscuous mode [ 917.196309][ T3521] veth0_vlan: left promiscuous mode [ 917.586194][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 917.672815][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 918.723379][T15917] Bluetooth: hci1: command tx timeout [ 920.043281][T16281] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2865'. [ 920.112177][T16213] hsr_slave_0: entered promiscuous mode [ 920.119127][T16213] hsr_slave_1: entered promiscuous mode [ 920.125333][T16213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.133990][T16213] Cannot create hsr debugfs directory [ 920.588063][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 920.588080][ T30] audit: type=1400 audit(1746222452.298:2741): avc: denied { mount } for pid=16296 comm="syz.2.2873" name="/" dev="ramfs" ino=66453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 920.603170][ T5862] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 920.706619][T16213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 920.717141][T16213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 920.728364][T16213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 920.738519][T16213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 920.754141][T15917] Bluetooth: hci1: command tx timeout [ 920.823886][T16213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.846164][T16213] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.879362][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.886551][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 920.897088][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.904241][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.453163][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 921.459809][ T5862] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 921.474871][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 921.492524][ T5862] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.502658][ T5862] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.516488][ T5862] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 921.526037][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.648594][T16213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.717839][T16213] veth0_vlan: entered promiscuous mode [ 921.805573][ T5862] usb 6-1: GET_CAPABILITIES returned 0 [ 921.811105][ T5862] usbtmc 6-1:16.0: can't read capabilities [ 921.812540][T16213] veth1_vlan: entered promiscuous mode [ 921.880296][T16213] veth0_macvtap: entered promiscuous mode [ 921.907044][T16213] veth1_macvtap: entered promiscuous mode [ 921.937580][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.952030][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.962831][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.969060][T16316] IPVS: ip_vs_add_dest(): server weight less than zero [ 921.976714][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.980275][ T5890] IPVS: starting estimator thread 0... [ 921.990710][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.042918][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.058003][ T3076] usb 6-1: USB disconnect, device number 2 [ 922.069343][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 922.079985][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.091237][T16213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.100184][T16317] IPVS: using max 50 ests per chain, 120000 per kthread [ 922.117666][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.134836][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.146501][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.159989][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.171986][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.186712][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.199115][T16213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.209656][T16213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.224335][T16213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.268038][T16213] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.278113][T16213] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.298336][T15917] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 922.305807][T16213] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.314872][T16213] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.661491][ T7528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.671761][ T7528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.695844][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.704047][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.834616][T15917] Bluetooth: hci1: command tx timeout [ 922.882562][ T30] audit: type=1400 audit(1746222454.588:2742): avc: denied { getopt } for pid=16327 comm="syz.0.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 923.379499][ T30] audit: type=1400 audit(1746222455.088:2743): avc: denied { ioctl } for pid=16346 comm="syz.0.2889" path="socket:[67902]" dev="sockfs" ino=67902 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 923.427163][ T30] audit: type=1400 audit(1746222455.118:2744): avc: denied { write } for pid=16346 comm="syz.0.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 923.528510][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.541649][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.550576][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.559490][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.568311][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.591689][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.632628][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.648861][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.657444][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.665920][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.673857][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.681381][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.688912][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.696975][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.704501][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.712002][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.723204][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.730726][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.738724][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.762263][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.782418][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.802681][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.810485][T16355] ALSA: seq fatal error: cannot create timer (-19) [ 923.818508][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.825978][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 923.841820][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.311738][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.319263][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.329956][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.338379][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.356374][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.365344][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.377741][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.389037][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.397119][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.413675][ T5890] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 924.735743][ T5890] hid-generic 0000:0004:0000.0028: hidraw0: HID v0.02 Device [syz0] on syz1 [ 928.565882][ T30] audit: type=1326 audit(1746222460.278:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.685754][ T30] audit: type=1326 audit(1746222460.278:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.753360][ T30] audit: type=1326 audit(1746222460.318:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.777198][ T30] audit: type=1326 audit(1746222460.318:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.801352][ T30] audit: type=1326 audit(1746222460.318:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.842105][ T30] audit: type=1326 audit(1746222460.318:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.844585][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.870869][ T30] audit: type=1326 audit(1746222460.328:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.897561][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.910119][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.912465][ T30] audit: type=1326 audit(1746222460.328:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 928.919389][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.953019][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.300535][ T30] audit: type=1326 audit(1746222460.328:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 929.325774][ T30] audit: type=1326 audit(1746222460.328:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.5.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fca6f18e969 code=0x7ffc0000 [ 929.894932][T15917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 929.907914][T15917] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 929.917713][T15917] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 929.933916][T15917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.943855][T15917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 930.160546][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 930.165136][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.169794][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 930.190459][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 930.204049][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 930.211801][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 930.751788][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.072043][ T5820] Bluetooth: hci5: command tx timeout [ 931.080866][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.087747][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.159951][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.223230][T16414] chnl_net:caif_netlink_parms(): no params data found [ 931.418926][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.743231][T16453] siw: device registration error -23 [ 932.034338][ T5820] Bluetooth: hci0: command tx timeout [ 932.170096][T16414] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.177506][T16414] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.185370][T16414] bridge_slave_0: entered allmulticast mode [ 932.192101][T16414] bridge_slave_0: entered promiscuous mode [ 932.247475][T16414] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.256642][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.265454][T16414] bridge_slave_1: entered allmulticast mode [ 932.272666][T16414] bridge_slave_1: entered promiscuous mode [ 932.283220][ T5820] Bluetooth: hci3: command tx timeout [ 932.305612][T16432] chnl_net:caif_netlink_parms(): no params data found [ 932.344857][T16414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.384269][T16426] chnl_net:caif_netlink_parms(): no params data found [ 932.407633][T16414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.520093][T16414] team0: Port device team_slave_0 added [ 932.616784][T16414] team0: Port device team_slave_1 added [ 933.153202][ T5820] Bluetooth: hci5: command tx timeout [ 933.359180][ T3521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.585462][T15917] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.607561][T15917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.609689][T16414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.625999][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.657778][T15917] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.659206][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 933.659219][ T30] audit: type=1400 audit(1746222465.368:2758): avc: denied { setopt } for pid=16472 comm="syz.0.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 933.664903][T16414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.690212][T15917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.699292][ T30] audit: type=1400 audit(1746222465.408:2759): avc: denied { bind } for pid=16472 comm="syz.0.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 933.730601][T15917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.776709][ T3521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.793027][T16414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.800849][T16414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.827361][T16414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.907757][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.915031][T16426] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.922308][T16426] bridge_slave_0: entered allmulticast mode [ 933.929906][T16426] bridge_slave_0: entered promiscuous mode [ 933.937813][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.945503][T16426] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.952791][T16426] bridge_slave_1: entered allmulticast mode [ 933.960051][T16426] bridge_slave_1: entered promiscuous mode [ 933.998475][ T3521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.014050][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.021228][T16432] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.028797][T16432] bridge_slave_0: entered allmulticast mode [ 934.036456][T16432] bridge_slave_0: entered promiscuous mode [ 934.077599][ T3521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.095273][T16432] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.102530][T16432] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.111485][T16432] bridge_slave_1: entered allmulticast mode [ 934.117550][ T5820] Bluetooth: hci0: command tx timeout [ 934.124541][T16432] bridge_slave_1: entered promiscuous mode [ 934.190533][T16414] hsr_slave_0: entered promiscuous mode [ 934.197950][T16414] hsr_slave_1: entered promiscuous mode [ 934.209185][T16414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.219104][T16414] Cannot create hsr debugfs directory [ 934.232089][T16426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.253246][T16426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.330011][T16426] team0: Port device team_slave_0 added [ 934.365186][ T5820] Bluetooth: hci3: command tx timeout [ 934.614899][T16432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.769976][T16426] team0: Port device team_slave_1 added [ 934.777464][T16432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.873687][T16432] team0: Port device team_slave_0 added [ 934.888524][T16426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.895627][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.923864][T16426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.942723][T16432] team0: Port device team_slave_1 added [ 934.968075][T16426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.975257][T16426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.011518][T16426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.130352][T16432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.142997][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.169561][T16432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.182288][T16432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.191339][T16432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.217722][T16432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.236027][ T5820] Bluetooth: hci5: command tx timeout [ 935.311241][T16426] hsr_slave_0: entered promiscuous mode [ 935.329670][T16426] hsr_slave_1: entered promiscuous mode [ 935.342140][T16426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.351746][T16426] Cannot create hsr debugfs directory [ 935.364964][ T3521] bridge_slave_1: left allmulticast mode [ 935.370889][ T3521] bridge_slave_1: left promiscuous mode [ 935.379662][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.454078][ T3521] bridge_slave_0: left allmulticast mode [ 935.459969][ T3521] bridge_slave_0: left promiscuous mode [ 935.467897][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.610102][ T3521] bridge_slave_1: left allmulticast mode [ 935.615931][ T3521] bridge_slave_1: left promiscuous mode [ 935.621570][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.630460][ T3521] bridge_slave_0: left allmulticast mode [ 935.636351][ T3521] bridge_slave_0: left promiscuous mode [ 935.642334][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.661361][ T30] audit: type=1400 audit(1746222467.368:2760): avc: denied { sqpoll } for pid=16489 comm="syz.0.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 935.712069][ T30] audit: type=1400 audit(1746222467.418:2761): avc: denied { append } for pid=16492 comm="syz.0.2936" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 935.795067][ T5820] Bluetooth: hci2: command tx timeout [ 936.029704][ T3521] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 936.198871][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.205848][ T5820] Bluetooth: hci0: command tx timeout [ 936.224001][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.234882][ T3521] bond0 (unregistering): Released all slaves [ 936.399970][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.410839][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.421143][ T3521] bond0 (unregistering): Released all slaves [ 936.435794][ T3521] bond1 (unregistering): Released all slaves [ 936.447068][ T5820] Bluetooth: hci3: command tx timeout [ 936.544059][T16492] delete_channel: no stack [ 936.580561][T16432] hsr_slave_0: entered promiscuous mode [ 936.589511][T16432] hsr_slave_1: entered promiscuous mode [ 936.599387][T16432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.609663][T16432] Cannot create hsr debugfs directory [ 936.618667][ T3521] tipc: Disabling bearer [ 936.625506][ T3521] tipc: Left network mode [ 936.658054][ T3521] tipc: Disabling bearer [ 936.664194][ T3521] tipc: Left network mode [ 937.021924][T16470] chnl_net:caif_netlink_parms(): no params data found [ 937.059173][T16414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 937.087126][T16414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 937.116966][T16414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 937.159821][T16414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 937.318832][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.323224][ T5820] Bluetooth: hci5: command tx timeout [ 937.330940][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.340065][T16470] bridge_slave_0: entered allmulticast mode [ 937.347528][T16470] bridge_slave_0: entered promiscuous mode [ 937.358536][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.365786][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.372988][T16470] bridge_slave_1: entered allmulticast mode [ 937.380287][T16470] bridge_slave_1: entered promiscuous mode [ 937.446017][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.457522][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.468219][T16426] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 937.511071][ T3521] hsr_slave_0: left promiscuous mode [ 937.518517][ T3521] hsr_slave_1: left promiscuous mode [ 937.527451][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.535979][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.544124][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.551565][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.561722][ T3521] hsr_slave_0: left promiscuous mode [ 937.577490][ T3521] hsr_slave_1: left promiscuous mode [ 937.586545][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.596667][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.606979][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.617723][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.660655][ T3521] veth1_macvtap: left promiscuous mode [ 937.666122][ T30] audit: type=1326 audit(1746222469.368:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.667953][ T30] audit: type=1326 audit(1746222469.378:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.697221][ T3521] veth0_macvtap: left promiscuous mode [ 937.724296][ T3521] veth1_vlan: left promiscuous mode [ 937.729670][ T3521] veth0_vlan: left promiscuous mode [ 937.745939][ T3521] veth1_macvtap: left promiscuous mode [ 937.751568][ T30] audit: type=1326 audit(1746222469.428:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.780337][ T3521] veth0_macvtap: left promiscuous mode [ 937.786992][ T3521] veth1_vlan: left promiscuous mode [ 937.792339][ T3521] veth0_vlan: left promiscuous mode [ 937.816645][ T30] audit: type=1326 audit(1746222469.428:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.846523][ T30] audit: type=1326 audit(1746222469.428:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.871440][ T30] audit: type=1326 audit(1746222469.428:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.0.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 937.896293][ T5820] Bluetooth: hci2: command tx timeout [ 938.285188][ T5820] Bluetooth: hci0: command tx timeout [ 938.533708][ T5820] Bluetooth: hci3: command tx timeout [ 938.700436][T16511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2940'. [ 938.709879][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2940'. [ 938.719275][T16511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2940'. [ 938.728565][T16511] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2940'. [ 939.589377][T16515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2942'. [ 939.963807][ T5820] Bluetooth: hci2: command tx timeout [ 940.226367][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 940.266380][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 940.656712][T16426] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 940.702241][T16470] team0: Port device team_slave_0 added [ 940.718798][T16426] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 940.765717][T16470] team0: Port device team_slave_1 added [ 940.775286][T16426] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 940.849196][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.857639][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 940.857652][ T30] audit: type=1400 audit(1746222472.568:2785): avc: denied { load_policy } for pid=16524 comm="syz.0.2946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 940.858072][T16525] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 940.873207][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.891873][T16525] SELinux: failed to load policy [ 940.894707][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.966033][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.973014][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.014173][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.020641][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.106433][T16470] hsr_slave_0: entered promiscuous mode [ 941.112681][T16470] hsr_slave_1: entered promiscuous mode [ 941.122331][T16470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.130382][T16470] Cannot create hsr debugfs directory [ 941.161722][T16432] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 941.206828][T16432] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 941.245865][T16432] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 941.270801][T16432] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 941.278249][ T974] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 941.368714][T16414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.456946][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.470757][T16426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.478099][ T974] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 941.503532][ T974] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 941.503747][ T3521] IPVS: stop unused estimator thread 0... [ 941.512623][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.533610][ T974] usb 1-1: Product: syz [ 941.541710][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.548856][T10874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.558025][ T974] usb 1-1: Manufacturer: syz [ 941.561995][ T3521] IPVS: stop unused estimator thread 0... [ 941.562652][ T974] usb 1-1: SerialNumber: syz [ 941.604727][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.611849][T10874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.621566][ T974] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 941.656805][T16426] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.672113][T16470] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 941.694142][T16470] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 941.706404][T16470] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 941.717318][T16470] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 941.737145][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.744271][T12224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.765632][T16432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.786870][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.794098][T10874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.852107][T12222] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.968377][T12222] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.995174][T16432] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.007169][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.014325][T10874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.033386][ T5820] Bluetooth: hci2: command tx timeout [ 942.040666][T16426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.052693][ T974] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 942.078773][ T974] usb 1-1: USB disconnect, device number 103 [ 942.087350][T12222] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.111802][T16414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.145863][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.153319][T12225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.221205][T12222] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.321928][T16432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 942.535871][T12222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.566498][T16426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.602770][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.656285][T12222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.794519][T16432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.826391][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.668733][T12222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.695473][T16414] veth0_vlan: entered promiscuous mode [ 943.706825][T16414] veth1_vlan: entered promiscuous mode [ 943.742542][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.749730][T12225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.801179][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.808386][T12225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.871318][T12222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.927604][T16414] veth0_macvtap: entered promiscuous mode [ 943.969753][T16414] veth1_macvtap: entered promiscuous mode [ 944.015569][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.026727][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 944.034311][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.044954][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.055456][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.066166][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.077138][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.089848][T16414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.102234][T16426] veth0_vlan: entered promiscuous mode [ 944.124736][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.135622][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.146184][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.157130][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.167232][T16414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 944.177913][T16414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.189369][T16414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.197638][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 944.209959][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 944.226491][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 944.228040][T16414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.238423][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 944.247773][T16414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.257392][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.264762][T16414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.281813][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 944.287400][T16414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.299414][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.345701][T16426] veth1_vlan: entered promiscuous mode [ 944.406890][T12222] bridge_slave_1: left allmulticast mode [ 944.412574][T12222] bridge_slave_1: left promiscuous mode [ 944.418578][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.428826][T12222] bridge_slave_0: left allmulticast mode [ 944.434973][T12222] bridge_slave_0: left promiscuous mode [ 944.440737][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.451033][T12222] bridge_slave_1: left allmulticast mode [ 944.457260][T12222] bridge_slave_1: left promiscuous mode [ 944.462989][T12222] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.472036][T12222] bridge_slave_0: left allmulticast mode [ 944.478348][T12222] bridge_slave_0: left promiscuous mode [ 944.484275][T12222] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.527479][ T10] usb 1-1: usb_control_msg returned -71 [ 944.534364][ T10] usbtmc 1-1:16.0: can't read capabilities [ 944.549708][ T10] usb 1-1: USB disconnect, device number 104 [ 945.032786][T12222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.053728][T12222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.067166][T12222] bond0 (unregistering): Released all slaves [ 945.247128][T12222] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 945.262246][T12222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.276689][T12222] bond0 (unregistering): Released all slaves [ 945.336200][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.397392][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.407225][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.457988][T16432] veth0_vlan: entered promiscuous mode [ 945.504801][T12222] tipc: Disabling bearer [ 945.518633][T12222] tipc: Left network mode [ 945.547301][T16432] veth1_vlan: entered promiscuous mode [ 945.572636][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.583926][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.659000][T16426] veth0_macvtap: entered promiscuous mode [ 945.690786][T16426] veth1_macvtap: entered promiscuous mode [ 945.775273][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.787078][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.798869][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.816976][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.827002][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.837630][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.847580][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.858375][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.870948][T16426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.257197][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.290384][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.310398][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.321295][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.331253][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.345388][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.355813][T16426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.366380][T16426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.377681][T16426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.395872][T16432] veth0_macvtap: entered promiscuous mode [ 946.482090][T16426] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.504474][T16426] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.519001][T16426] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.528206][T16426] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.540909][T16432] veth1_macvtap: entered promiscuous mode [ 946.620012][T16470] veth0_vlan: entered promiscuous mode [ 946.632496][ T30] audit: type=1326 audit(1746222478.338:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.0.2956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f007d18e969 code=0x0 [ 946.690404][ T30] audit: type=1400 audit(1746222478.398:2787): avc: denied { bind } for pid=16592 comm="syz.0.2956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 946.697250][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.730177][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.740144][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.756690][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.768736][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.782989][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.798927][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.809535][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.822971][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.839264][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.850995][T16432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.916019][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.928347][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.938438][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.951652][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.962749][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.973218][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.983180][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.044786][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.055100][T16432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 947.065929][T16432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.121321][T16602] input: syz1 as /devices/virtual/input/input146 [ 947.196406][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.398747][T12222] hsr_slave_0: left promiscuous mode [ 947.407184][T12222] hsr_slave_1: left promiscuous mode [ 947.416110][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.425887][T12222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.440740][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 947.448575][T12222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.466868][T12222] hsr_slave_0: left promiscuous mode [ 947.478174][T12222] hsr_slave_1: left promiscuous mode [ 947.485068][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 947.492991][T12222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.161410][T12222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.294770][T12222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.398075][T12222] veth1_macvtap: left promiscuous mode [ 948.409421][T12222] veth0_macvtap: left promiscuous mode [ 948.416437][T12222] veth1_vlan: left promiscuous mode [ 948.422012][T12222] veth0_vlan: left promiscuous mode [ 948.454875][T12222] veth1_macvtap: left promiscuous mode [ 948.460582][T12222] veth0_macvtap: left promiscuous mode [ 948.466697][T12222] veth1_vlan: left promiscuous mode [ 948.472119][T12222] veth0_vlan: left promiscuous mode [ 949.688776][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2964'. [ 949.766117][T12222] team0 (unregistering): Port device team_slave_1 removed [ 949.809730][T12222] team0 (unregistering): Port device team_slave_0 removed [ 950.560452][T12222] team0 (unregistering): Port device team_slave_1 removed [ 950.604872][T12222] team0 (unregistering): Port device team_slave_0 removed [ 950.988056][T16470] veth1_vlan: entered promiscuous mode [ 951.045238][T16620] bond0: (slave bond_slave_0): Releasing backup interface [ 951.057869][T16432] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.069401][T16432] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.078339][T16432] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.087244][T16432] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.144348][ T7528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.166854][ T7528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.274670][T16470] veth0_macvtap: entered promiscuous mode [ 951.281779][ T7528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.307053][ T7528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.355196][T16470] veth1_macvtap: entered promiscuous mode [ 951.651178][T16632] input: syz1 as /devices/virtual/input/input147 [ 952.338455][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.355521][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.366112][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.376535][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.386343][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.396761][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.406609][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.423130][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.445551][T16470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.453582][T12224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.455677][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.462921][T12224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.481020][T16640] SELinux: ebitmap: truncated map [ 952.513194][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.523323][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.533823][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.543668][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.549248][T16640] SELinux: failed to load policy [ 952.554153][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.554172][T16470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 952.554186][T16470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.555240][T16470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.802021][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2915'. [ 952.835088][T16470] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.845643][T16470] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.854603][T16470] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.863563][T16470] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.876050][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.884970][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.222938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.237710][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.302930][T16660] syz.0.2976 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 953.368676][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.386933][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.485238][ T30] audit: type=1400 audit(1746222485.198:2788): avc: denied { connect } for pid=16665 comm="syz.9.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 954.404560][T16668] input: syz1 as /devices/virtual/input/input148 [ 954.811536][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2981'. [ 954.815493][ T30] audit: type=1400 audit(1746222486.518:2789): avc: denied { bind } for pid=16677 comm="syz.8.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 955.260005][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 955.444035][ T9] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 955.463673][ T9] usb 9-1: config 0 has no interfaces? [ 955.547116][ T9] usb 9-1: config 0 has no interfaces? [ 955.556742][ T9] usb 9-1: config 0 has no interfaces? [ 955.565663][ T9] usb 9-1: config 0 has no interfaces? [ 955.572206][ T9] usb 9-1: config 0 has no interfaces? [ 955.579181][ T9] usb 9-1: config 0 has no interfaces? [ 955.588146][ T9] usb 9-1: config 0 has no interfaces? [ 955.597123][ T9] usb 9-1: config 0 has no interfaces? [ 955.606992][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 955.617548][ T9] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 955.626303][ T9] usb 9-1: Product: syz [ 955.630550][ T9] usb 9-1: Manufacturer: syz [ 955.638596][ T9] usb 9-1: SerialNumber: syz [ 955.645894][ T9] usb 9-1: config 0 descriptor?? [ 955.862694][T16565] usb 9-1: USB disconnect, device number 2 [ 955.900455][T16719] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2995'. [ 955.931486][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2996'. [ 958.148414][T16739] delete_channel: no stack [ 958.493925][ T30] audit: type=1400 audit(1746222490.208:2790): avc: denied { bind } for pid=16761 comm="syz.9.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 958.514285][ C0] vkms_vblank_simulate: vblank timer overrun [ 958.826640][T16777] input: syz1 as /devices/virtual/input/input149 [ 960.221322][T16786] delete_channel: no stack [ 960.430504][T16823] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3038'. [ 960.478480][T16823] ksmbd: Unknown IPC event: 1, ignore. [ 960.909262][T16842] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3045'. [ 961.036706][T16836] ptrace attach of "./syz-executor exec"[16848] was attempted by "./syz-executor exec"[16836] [ 961.599251][T16835] delete_channel: no stack [ 962.425062][T16888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.520681][T16890] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3065'. [ 962.563235][T16890] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3065'. [ 962.587765][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3065'. [ 964.250661][T16935] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 964.265800][T16935] gretap1: entered promiscuous mode [ 964.271113][T16935] gretap1: entered allmulticast mode [ 964.624062][ T30] audit: type=1804 audit(1746222496.308:2791): pid=16933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.3080" name="/newroot/31/bus/file1" dev="overlay" ino=184 res=1 errno=0 [ 964.958155][ T30] audit: type=1400 audit(1746222496.458:2792): avc: denied { bind } for pid=16936 comm="syz.0.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 965.448448][ T30] audit: type=1326 audit(1746222497.158:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 965.507839][ T30] audit: type=1326 audit(1746222497.158:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 965.534151][ T30] audit: type=1326 audit(1746222497.158:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 965.606664][ T30] audit: type=1326 audit(1746222497.158:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 965.640465][ T30] audit: type=1326 audit(1746222497.158:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 965.667712][ T30] audit: type=1326 audit(1746222497.198:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16944 comm="syz.7.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 966.347815][T16909] syz.8.3073: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 966.365940][T16909] CPU: 0 UID: 0 PID: 16909 Comm: syz.8.3073 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 966.365973][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 966.365984][T16909] Call Trace: [ 966.365990][T16909] [ 966.365997][T16909] dump_stack_lvl+0x16c/0x1f0 [ 966.366026][T16909] warn_alloc+0x248/0x3a0 [ 966.366058][T16909] ? __pfx_warn_alloc+0x10/0x10 [ 966.366094][T16909] ? __get_vm_area_node+0x1b9/0x300 [ 966.366116][T16909] ? __get_vm_area_node+0x1e5/0x300 [ 966.366144][T16909] __vmalloc_node_range_noprof+0x1110/0x1540 [ 966.366177][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366209][T16909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.366237][T16909] ? __get_vm_area_node+0x1b9/0x300 [ 966.366258][T16909] ? __get_vm_area_node+0x1e5/0x300 [ 966.366284][T16909] __vmalloc_node_range_noprof+0xd91/0x1540 [ 966.366309][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366332][T16909] ? nfnetlink_rcv_msg+0x9f9/0x1200 [ 966.366353][T16909] ? netlink_rcv_skb+0x16a/0x440 [ 966.366379][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366410][T16909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.366445][T16909] __kvmalloc_node_noprof+0x2ff/0x600 [ 966.366473][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366498][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366527][T16909] ? hash_netiface_create+0x3ec/0x1250 [ 966.366550][T16909] hash_netiface_create+0x3ec/0x1250 [ 966.366577][T16909] ? __nla_validate+0x3b/0x50 [ 966.366604][T16909] ? __pfx_hash_netiface_create+0x10/0x10 [ 966.366630][T16909] ip_set_create+0x7e1/0x14d0 [ 966.366661][T16909] ? __pfx_ip_set_create+0x10/0x10 [ 966.366700][T16909] ? find_held_lock+0x2b/0x80 [ 966.366729][T16909] nfnetlink_rcv_msg+0x9f9/0x1200 [ 966.366760][T16909] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 966.366781][T16909] ? kmem_cache_free+0x2d4/0x4d0 [ 966.366832][T16909] ? avc_has_perm_noaudit+0x117/0x3b0 [ 966.366865][T16909] netlink_rcv_skb+0x16a/0x440 [ 966.366884][T16909] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 966.366905][T16909] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 966.366934][T16909] ? bpf_lsm_capable+0x9/0x10 [ 966.366954][T16909] ? security_capable+0x7e/0x260 [ 966.366973][T16909] ? ns_capable+0xd7/0x110 [ 966.366997][T16909] nfnetlink_rcv+0x1b3/0x430 [ 966.367017][T16909] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 966.367037][T16909] ? netlink_deliver_tap+0x1ae/0xd30 [ 966.367058][T16909] netlink_unicast+0x53a/0x7f0 [ 966.367081][T16909] ? __pfx_netlink_unicast+0x10/0x10 [ 966.367106][T16909] netlink_sendmsg+0x8d1/0xdd0 [ 966.367129][T16909] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.367159][T16909] ____sys_sendmsg+0xa95/0xc70 [ 966.367180][T16909] ? copy_msghdr_from_user+0x10a/0x160 [ 966.367196][T16909] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.367222][T16909] ? try_to_wake_up+0xa2f/0x1680 [ 966.367246][T16909] ___sys_sendmsg+0x134/0x1d0 [ 966.367264][T16909] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.367314][T16909] __sys_sendmsg+0x16d/0x220 [ 966.367332][T16909] ? __pfx___sys_sendmsg+0x10/0x10 [ 966.367347][T16909] ? __x64_sys_futex+0x1e0/0x4c0 [ 966.367378][T16909] ? rcu_is_watching+0x12/0xc0 [ 966.367406][T16909] do_syscall_64+0xcd/0x260 [ 966.367432][T16909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.367450][T16909] RIP: 0033:0x7f2ecd98e969 [ 966.367465][T16909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.367482][T16909] RSP: 002b:00007f2ece74f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.367501][T16909] RAX: ffffffffffffffda RBX: 00007f2ecdbb5fa0 RCX: 00007f2ecd98e969 [ 966.367512][T16909] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 966.367523][T16909] RBP: 00007f2ecda10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 966.367533][T16909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.367544][T16909] R13: 0000000000000000 R14: 00007f2ecdbb5fa0 R15: 00007fffbd00bf28 [ 966.367568][T16909] [ 966.367575][T16909] Mem-Info: [ 966.512260][ T30] audit: type=1804 audit(1746222498.218:2799): pid=16971 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3095" name="/newroot/24/bus/file1" dev="overlay" ino=147 res=1 errno=0 [ 966.527904][T16909] active_anon:6406 inactive_anon:0 isolated_anon:0 [ 966.527904][T16909] active_file:11054 inactive_file:49669 isolated_file:0 [ 966.527904][T16909] unevictable:768 dirty:384 writeback:0 [ 966.527904][T16909] slab_reclaimable:12033 slab_unreclaimable:103944 [ 966.527904][T16909] mapped:33581 shmem:4268 pagetables:707 [ 966.527904][T16909] sec_pagetables:0 bounce:0 [ 966.527904][T16909] kernel_misc_reclaimable:0 [ 966.527904][T16909] free:1273258 free_pcp:1066 free_cma:0 [ 966.920364][T16979] input: syz1 as /devices/virtual/input/input150 [ 967.072108][T16909] Node 0 active_anon:39624kB inactive_anon:0kB active_file:44216kB inactive_file:198604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:154024kB dirty:1536kB writeback:0kB shmem:29336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10636kB pagetables:2928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 967.206422][T16909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 967.237828][T16909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.271597][T16909] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 967.277521][T16909] Node 0 DMA32 free:1151380kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:39572kB inactive_anon:0kB active_file:44216kB inactive_file:196772kB unevictable:1536kB writepending:1536kB present:3129332kB managed:2543940kB mlocked:0kB bounce:0kB free_pcp:3784kB local_pcp:3732kB free_cma:0kB [ 967.354298][T16909] lowmem_reserve[]: 0 0 1 1 1 [ 967.369313][T16909] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 967.372844][T16983] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3097'. [ 967.409950][T16909] lowmem_reserve[]: 0 0 0 0 0 [ 967.417696][T16909] Node 1 Normal free:3914912kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.447032][T16983] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3097'. [ 967.447058][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3097'. [ 967.520498][T16909] lowmem_reserve[]: 0 0 0 0 0 [ 967.525351][T16909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 967.563322][ T30] audit: type=1400 audit(1746222499.198:2800): avc: denied { create } for pid=16984 comm="syz.6.3098" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 967.580323][T16909] Node 0 DMA32: 317*4kB (UME) 896*8kB (UME) 824*16kB (UME) 592*32kB (ME) 592*64kB (UME) 47*128kB (UME) 61*256kB (UME) 36*512kB (UME) 23*1024kB (UM) 10*2048kB (UME) 248*4096kB (UM) = 1178356kB [ 967.605529][T16909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 967.638286][T16909] Node 1 Normal: 216*4kB (UE) 60*8kB (UME) 36*16kB (UME) 211*32kB (UME) 101*64kB (UME) 31*128kB (UME) 18*256kB (UME) 10*512kB (UM) 3*1024kB (UME) 6*2048kB (UME) 945*4096kB (M) = 3914912kB [ 967.657257][T16909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.667419][T16909] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 967.678559][T16991] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 967.679950][T16909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.693527][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.708831][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.709376][T16909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 967.736558][T16909] 62156 total pagecache pages [ 967.741407][T16909] 0 pages in swap cache [ 967.798380][T16909] Free swap = 124996kB [ 967.802609][T16909] Total swap = 124996kB [ 967.808293][T16909] 2097051 pages RAM [ 967.812632][T16909] 0 pages HighMem/MovableOnly [ 968.255941][T16909] 428960 pages reserved [ 968.302623][T16909] 0 pages cma reserved [ 969.424935][T17022] input: syz1 as /devices/virtual/input/input151 [ 970.456606][T17026] netlink: 216 bytes leftover after parsing attributes in process `syz.9.3111'. [ 970.496689][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3111'. [ 970.516061][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3111'. [ 970.574311][T16565] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 970.730790][T16565] usb 1-1: device descriptor read/64, error -71 [ 971.323160][T16565] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 971.523154][T16565] usb 1-1: device descriptor read/64, error -71 [ 971.663653][T16565] usb usb1-port1: attempt power cycle [ 972.039463][T16565] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 972.304244][T16565] usb 1-1: device descriptor read/8, error -71 [ 974.574345][T16565] IPVS: starting estimator thread 0... [ 974.943161][T17091] IPVS: using max 45 ests per chain, 108000 per kthread [ 975.277533][T17099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3137'. [ 975.328958][T17101] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3138'. [ 975.701504][T17119] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3145'. [ 976.291448][T17135] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3150'. [ 977.034612][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 977.034631][ T30] audit: type=1326 audit(1746222508.738:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 977.074498][ T30] audit: type=1326 audit(1746222508.738:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 977.099523][ T30] audit: type=1326 audit(1746222508.788:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 977.165672][T17144] hub 9-0:1.0: USB hub found [ 977.173348][T17144] hub 9-0:1.0: 1 port detected [ 977.258791][ T30] audit: type=1326 audit(1746222508.908:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 977.282475][ T30] audit: type=1326 audit(1746222508.908:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17138 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 977.306211][ T30] audit: type=1326 audit(1746222508.908:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8d42bc1225 code=0x7ffc0000 [ 977.392802][ T30] audit: type=1326 audit(1746222509.088:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.9.3152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8d42b8e969 code=0x7ffc0000 [ 978.148272][ T30] audit: type=1400 audit(1746222509.848:2825): avc: denied { mounton } for pid=17168 comm="syz.9.3163" path="/51/file1/file0" dev="autofs" ino=73320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 978.280600][T17179] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3165'. [ 978.290019][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3165'. [ 978.299566][T17179] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3165'. [ 978.309117][T17179] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3165'. [ 979.150052][ T30] audit: type=1400 audit(1746222510.858:2826): avc: denied { unmount } for pid=16470 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 980.295371][T17205] ptrace attach of "./syz-executor exec"[17207] was attempted by "./syz-executor exec"[17205] [ 980.413823][ T5935] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 980.553189][ T5935] usb 1-1: device descriptor read/64, error -71 [ 980.894757][ T5935] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 981.163318][ T5935] usb 1-1: device descriptor read/64, error -71 [ 981.294672][ T5935] usb usb1-port1: attempt power cycle [ 981.728370][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3188'. [ 981.737939][ T5935] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 981.794671][ T5935] usb 1-1: device descriptor read/8, error -71 [ 981.862184][ T30] audit: type=1326 audit(1746222513.568:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17243 comm="syz.7.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 982.052480][ T5935] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 982.351618][ T5935] usb 1-1: device descriptor read/8, error -71 [ 982.465541][ T5935] usb usb1-port1: unable to enumerate USB device [ 983.757372][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 983.757388][ T30] audit: type=1400 audit(1746222515.468:2831): avc: denied { write } for pid=17268 comm="syz.0.3201" name="file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 983.786555][ T30] audit: type=1400 audit(1746222515.468:2832): avc: denied { open } for pid=17268 comm="syz.0.3201" path="/95/file0" dev="tmpfs" ino=507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 984.154278][T17281] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 984.199137][ T30] audit: type=1400 audit(1746222515.908:2833): avc: denied { mounton } for pid=17282 comm="syz.0.3206" path="/97/bus" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 984.243462][ T30] audit: type=1400 audit(1746222515.958:2834): avc: denied { unmount } for pid=16213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 984.302049][T17287] netlink: 'syz.0.3207': attribute type 4 has an invalid length. [ 984.311796][T17287] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3207'. [ 984.355592][T17289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.381994][T17302] 9pnet_fd: Insufficient options for proto=fd [ 985.556870][ T30] audit: type=1326 audit(1746222517.268:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e18e969 code=0x7ffc0000 [ 985.581368][ T30] audit: type=1326 audit(1746222517.288:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f752e18e969 code=0x7ffc0000 [ 985.605321][ T30] audit: type=1326 audit(1746222517.288:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e18e969 code=0x7ffc0000 [ 985.633609][ T30] audit: type=1326 audit(1746222517.288:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.6.3217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752e18e969 code=0x7ffc0000 [ 985.681469][T17313] IPv6: NLM_F_CREATE should be specified when creating new route [ 985.811493][ T30] audit: type=1326 audit(1746222517.518:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 985.844676][ T30] audit: type=1326 audit(1746222517.548:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17319 comm="syz.0.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007d18e969 code=0x7ffc0000 [ 985.885288][T17325] 9pnet_fd: Insufficient options for proto=fd [ 987.113954][T17355] 9pnet_fd: Insufficient options for proto=fd [ 988.670177][T17394] 9pnet_fd: Insufficient options for proto=fd [ 990.115480][T17424] xt_hashlimit: max too large, truncated to 1048576 [ 990.129489][T17424] No such timeout policy "syz1" [ 990.453362][ T5889] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 990.603338][ T5889] usb 1-1: device descriptor read/64, error -71 [ 990.857578][ T5889] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 991.006336][ T5889] usb 1-1: device descriptor read/64, error -71 [ 991.123590][ T5889] usb usb1-port1: attempt power cycle [ 992.277888][ T5889] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 992.379294][T17447] netlink: 'syz.6.3266': attribute type 3 has an invalid length. [ 992.383538][ T5889] usb 1-1: device descriptor read/8, error -71 [ 992.500987][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3269'. [ 992.526950][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.663306][ T5889] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 992.694756][ T5889] usb 1-1: device descriptor read/8, error -71 [ 992.816664][ T5889] usb usb1-port1: unable to enumerate USB device [ 994.190318][T17491] 9pnet_fd: Insufficient options for proto=fd [ 994.709887][T15917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.719940][T15917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.729215][T15917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.747174][T15917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 994.757946][T15917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.785816][T17509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3290'. [ 995.818094][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 995.818121][ T30] audit: type=1400 audit(1746222527.518:2913): avc: denied { validate_trans } for pid=17524 comm="syz.8.3295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 995.849063][ T3464] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.958401][ T3464] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.071422][T17542] ksmbd: Unknown IPC event: 4, ignore. [ 996.095076][ T3464] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.172671][T17547] 9pnet_fd: Insufficient options for proto=fd [ 996.217102][ T3464] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.241798][T17505] chnl_net:caif_netlink_parms(): no params data found [ 996.380906][T17505] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.389083][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.400374][T17505] bridge_slave_0: entered allmulticast mode [ 996.408288][T17505] bridge_slave_0: entered promiscuous mode [ 996.445468][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.466725][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.474102][T17505] bridge_slave_1: entered allmulticast mode [ 996.481394][T17505] bridge_slave_1: entered promiscuous mode [ 996.506528][ T3464] bridge_slave_1: left allmulticast mode [ 996.512192][ T3464] bridge_slave_1: left promiscuous mode [ 996.518709][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.538481][ T3464] bridge_slave_0: left allmulticast mode [ 996.544555][ T3464] bridge_slave_0: left promiscuous mode [ 996.551960][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.585768][T17562] input: syz1 as /devices/virtual/input/input152 [ 996.840726][ T5820] Bluetooth: hci4: command tx timeout [ 996.992776][ T30] audit: type=1400 audit(1746222528.698:2914): avc: denied { write } for pid=17565 comm="syz.6.3309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 998.914803][ T5820] Bluetooth: hci4: command tx timeout [ 999.187300][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.201291][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.221551][ T3464] bond0 (unregistering): Released all slaves [ 999.257372][T17505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.294463][T17505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.397762][T17505] team0: Port device team_slave_0 added [ 999.412467][T17505] team0: Port device team_slave_1 added [ 999.780569][T17505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.798207][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.836446][T17505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.872936][T17505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.977712][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.410313][ T5862] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1000.418629][T17505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.993173][ T5820] Bluetooth: hci4: command tx timeout [ 1001.013346][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1001.343117][ T5862] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 1001.400542][T17505] hsr_slave_0: entered promiscuous mode [ 1001.416299][T17505] hsr_slave_1: entered promiscuous mode [ 1001.493141][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1001.506106][ T30] audit: type=1326 audit(1746222533.218:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.7.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 1001.535770][ T30] audit: type=1326 audit(1746222533.238:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.7.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 1001.561780][ T30] audit: type=1326 audit(1746222533.238:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.7.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 1001.590215][ T30] audit: type=1326 audit(1746222533.238:2918): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.7.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 1001.621111][ T5862] usb usb1-port1: attempt power cycle [ 1001.629061][ T3464] hsr_slave_0: left promiscuous mode [ 1001.631016][ T30] audit: type=1326 audit(1746222533.238:2919): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17641 comm="syz.7.3337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa903d8e969 code=0x7ffc0000 [ 1001.662698][ T3464] hsr_slave_1: left promiscuous mode [ 1001.665448][ T30] audit: type=1400 audit(1746222533.368:2920): avc: denied { setopt } for pid=17646 comm="syz.7.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1001.668861][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.698945][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.722379][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.738839][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.781927][ T3464] veth1_macvtap: left promiscuous mode [ 1001.787879][ T3464] veth0_macvtap: left promiscuous mode [ 1001.801403][ T3464] veth1_vlan: left promiscuous mode [ 1001.807929][ T3464] veth0_vlan: left promiscuous mode [ 1001.973420][ T5862] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1002.007975][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1002.284332][ T5862] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1002.324002][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1002.453712][ T5862] usb usb1-port1: unable to enumerate USB device [ 1003.102848][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1003.110604][ T5820] Bluetooth: hci4: command tx timeout [ 1003.187495][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1004.077795][T17672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.162682][T17672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.307722][T17672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.406739][T17672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.440986][T17698] netlink: 216 bytes leftover after parsing attributes in process `syz.8.3360'. [ 1004.450223][T17698] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3360'. [ 1004.463208][T17698] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3360'. [ 1004.495980][T17672] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.536514][T17672] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.567722][T17672] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.586474][T17672] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.732956][T17708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1004.742052][T17708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1004.751029][T17708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1004.760296][T17708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1004.792638][T17505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.834687][T17505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.863668][T17505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1004.885722][T17505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1005.036279][T17505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.062172][T17505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.076518][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.083719][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.112704][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.119888][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.301815][T17732] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3377'. [ 1005.310938][T17732] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3377'. [ 1005.320611][T17732] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3377'. [ 1005.426072][T17738] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1005.582474][T17505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.779697][T17763] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 1006.785481][ T30] audit: type=1400 audit(1746222538.488:2921): avc: denied { read } for pid=17764 comm="syz.0.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1007.029141][T17777] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1007.041971][T17777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.051040][T17777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.481143][T17505] veth0_vlan: entered promiscuous mode [ 1007.541696][T17505] veth1_vlan: entered promiscuous mode [ 1008.352635][T17505] veth0_macvtap: entered promiscuous mode [ 1008.468134][T17505] veth1_macvtap: entered promiscuous mode [ 1008.756353][ C1] hrtimer: interrupt took 34087400 ns [ 1142.142985][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1142.149972][ C0] rcu: 1-...!: (3 ticks this GP) idle=f0b4/1/0x4000000000000000 softirq=89806/89856 fqs=1 [ 1142.160862][ C0] rcu: (detected by 0, t=10502 jiffies, g=84521, q=678 ncpus=2) [ 1142.168584][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1142.168613][ C1] NMI backtrace for cpu 1 [ 1142.168624][ C1] CPU: 1 UID: 0 PID: 16213 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(full) [ 1142.168641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1142.168649][ C1] RIP: 0010:match_held_lock+0x0/0xc0 [ 1142.168670][ C1] Code: e8 e1 a1 8d e8 41 2a 0e f6 90 0f 0b 90 90 e9 58 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <53> 48 89 fb 48 39 77 10 74 55 66 83 7f 22 1f 76 65 48 8b 46 08 48 [ 1142.168682][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00000006 [ 1142.168694][ C1] RAX: 0000000000000000 RBX: ffff88802dbb8af0 RCX: 0000000000000001 [ 1142.168702][ C1] RDX: 0000000000000000 RSI: ffff88805c72f300 RDI: ffff88802dbb8af0 [ 1142.168711][ C1] RBP: ffff88805c72f300 R08: 0000000000000005 R09: 0000000000000000 [ 1142.168718][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802dbb8000 [ 1142.168726][ C1] R13: ffff88802dbb8af0 R14: 00000000ffffffff R15: 0000000000000000 [ 1142.168735][ C1] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 1142.168748][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.168756][ C1] CR2: 000055555ee40808 CR3: 000000004a158000 CR4: 00000000003526f0 [ 1142.168765][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.168772][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1142.168780][ C1] Call Trace: [ 1142.168786][ C1] [ 1142.168791][ C1] lock_is_held_type+0xb0/0x150 [ 1142.168809][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1142.168826][ C1] advance_sched+0x83b/0xc80 [ 1142.168842][ C1] ? find_held_lock+0x2b/0x80 [ 1142.168860][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1142.168873][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1142.168888][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 1142.168905][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1142.168917][ C1] ? read_tsc+0x9/0x20 [ 1142.168937][ C1] hrtimer_interrupt+0x397/0x8e0 [ 1142.168956][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1142.168971][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1142.168985][ C1] [ 1142.168990][ C1] [ 1142.168995][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1142.169010][ C1] RIP: 0010:lock_release+0x68/0x2f0 [ 1142.169027][ C1] Code: 0f a3 05 fb f3 ec 0e 0f 82 b1 01 00 00 8b 3d 93 23 ed 0e 85 ff 0f 84 25 01 00 00 65 8b 05 58 22 0c 12 85 c0 0f 85 16 01 00 00 <65> 4c 8b 35 d8 e4 0b 12 41 8b b6 ec 0a 00 00 85 f6 0f 85 ff 00 00 [ 1142.169038][ C1] RSP: 0018:ffffc90003f4f380 EFLAGS: 00000246 [ 1142.169048][ C1] RAX: 0000000000000000 RBX: ffffffff8e3bf5c0 RCX: ffffc90003f50001 [ 1142.169055][ C1] RDX: 0000000000000000 RSI: ffffffff8bf48120 RDI: 0000000000000001 [ 1142.169063][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1142.169070][ C1] R10: 0000000000000001 R11: 00000000000079f1 R12: ffffffff8169cd14 [ 1142.169078][ C1] R13: ffffc90003f4f438 R14: ffffc90003f4fbd8 R15: ffffc90003f4f46c [ 1142.169087][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 1142.169108][ C1] unwind_next_frame+0x3f9/0x20a0 [ 1142.169122][ C1] ? mmput+0x62/0x70 [ 1142.169137][ C1] ? unwind_get_return_address+0x59/0xa0 [ 1142.169152][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1142.169168][ C1] arch_stack_walk+0x94/0x100 [ 1142.169185][ C1] ? do_exit+0x9d1/0x2c30 [ 1142.169205][ C1] stack_trace_save+0x8e/0xc0 [ 1142.169219][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1142.169236][ C1] ? kasan_save_stack+0x42/0x60 [ 1142.169254][ C1] ? kasan_save_stack+0x33/0x60 [ 1142.169271][ C1] kasan_save_stack+0x33/0x60 [ 1142.169288][ C1] ? kasan_save_stack+0x33/0x60 [ 1142.169309][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 1142.169325][ C1] ? kmem_cache_free+0x160/0x4d0 [ 1142.169346][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1142.169363][ C1] ? unlink_anon_vmas+0x58a/0x820 [ 1142.169379][ C1] ? free_pgtables+0x2d4/0x810 [ 1142.169392][ C1] ? exit_mmap+0x3fb/0xb90 [ 1142.169406][ C1] ? __mmput+0x12a/0x410 [ 1142.169419][ C1] ? mmput+0x62/0x70 [ 1142.169444][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 1142.169459][ C1] kmem_cache_free+0x160/0x4d0 [ 1142.169476][ C1] ? __pfx___might_resched+0x10/0x10 [ 1142.169492][ C1] ? __put_anon_vma+0x114/0x3a0 [ 1142.169510][ C1] __put_anon_vma+0x114/0x3a0 [ 1142.169528][ C1] unlink_anon_vmas+0x58a/0x820 [ 1142.169546][ C1] free_pgtables+0x2d4/0x810 [ 1142.169561][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 1142.169574][ C1] ? mas_next_slot+0x12d3/0x21b0 [ 1142.169592][ C1] ? __pfx_down_write+0x10/0x10 [ 1142.169609][ C1] exit_mmap+0x3fb/0xb90 [ 1142.169625][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1142.169643][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 1142.169666][ C1] __mmput+0x12a/0x410 [ 1142.169680][ C1] mmput+0x62/0x70 [ 1142.169694][ C1] do_exit+0x9d1/0x2c30 [ 1142.169711][ C1] ? __pfx_do_exit+0x10/0x10 [ 1142.169728][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1142.169740][ C1] ? find_held_lock+0x2b/0x80 [ 1142.169754][ C1] do_group_exit+0xd3/0x2a0 [ 1142.169772][ C1] get_signal+0x2673/0x26d0 [ 1142.169790][ C1] ? __pfx_get_signal+0x10/0x10 [ 1142.169807][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1142.169825][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1142.169843][ C1] ? ksys_read+0x1b9/0x240 [ 1142.169860][ C1] ? __pfx_ksys_read+0x10/0x10 [ 1142.169877][ C1] syscall_exit_to_user_mode+0x150/0x2a0 [ 1142.169893][ C1] do_syscall_64+0xda/0x260 [ 1142.169908][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.169921][ C1] RIP: 0033:0x7f007d18d37c [ 1142.169930][ C1] Code: Unable to access opcode bytes at 0x7f007d18d352. [ 1142.169936][ C1] RSP: 002b:00007fffeddc5250 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.169948][ C1] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f007d18d37c [ 1142.169956][ C1] RDX: 0000000000000030 RSI: 00007fffeddc5310 RDI: 00000000000000f9 [ 1142.169964][ C1] RBP: 00007fffeddc52bc R08: 0000000000000000 R09: 0079746972756365 [ 1142.169972][ C1] R10: 00007f007d3807e0 R11: 0000000000000246 R12: 000000000000008c [ 1142.169980][ C1] R13: 000000000000005f R14: 00000000000fd319 R15: 00007fffeddc5310 [ 1142.169992][ C1] [ 1142.170605][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10495 jiffies! g84521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1142.777777][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=73301 [ 1142.785658][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g84521 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1142.797025][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1142.807016][ C0] rcu: RCU grace-period kthread stack dump: [ 1142.812937][ C0] task:rcu_preempt state:I stack:28152 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1142.824857][ C0] Call Trace: [ 1142.828128][ C0] [ 1142.831056][ C0] __schedule+0x116f/0x5de0 [ 1142.835568][ C0] ? find_held_lock+0x2b/0x80 [ 1142.840273][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 1142.845242][ C0] ? __pfx___schedule+0x10/0x10 [ 1142.850096][ C0] ? find_held_lock+0x2b/0x80 [ 1142.854772][ C0] ? schedule+0x2d7/0x3a0 [ 1142.859102][ C0] schedule+0xe7/0x3a0 [ 1142.863191][ C0] schedule_timeout+0x123/0x290 [ 1142.868059][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1142.873438][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1142.878730][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1142.884534][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1142.890112][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1142.894897][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1142.900196][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1142.905059][ C0] rcu_gp_kthread+0x270/0x380 [ 1142.909746][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1142.914945][ C0] ? rcu_is_watching+0x12/0xc0 [ 1142.919709][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1142.924907][ C0] ? __kthread_parkme+0x19e/0x250 [ 1142.929935][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1142.935135][ C0] kthread+0x3c2/0x780 [ 1142.939200][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.943803][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.948385][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.952968][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.957565][ C0] ? rcu_is_watching+0x12/0xc0 [ 1142.962328][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.966920][ C0] ret_from_fork+0x45/0x80 [ 1142.971346][ C0] ? __pfx_kthread+0x10/0x10 [ 1142.975930][ C0] ret_from_fork_asm+0x1a/0x30 [ 1142.980707][ C0]