last executing test programs: 2m34.160394325s ago: executing program 0 (id=2315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) 2m34.138337568s ago: executing program 0 (id=2316): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497090000009b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e80c00000000000000e9c6ad7d2a8103ef2f4f93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef5911cee26d7b48241847bf9e343ef4674c45e2a085060f1119b0527fe5ff48fea9860fe68aa12fbc2e4212fade0ce1bbe83cd44a1f4bbe", 0xed}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) 2m34.110528871s ago: executing program 0 (id=2317): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 2m33.088506153s ago: executing program 0 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r1, 0x5) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc0) 2m32.7982215s ago: executing program 0 (id=2324): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='7', 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0) write(r2, &(0x7f00000005c0)='6', 0x1) 2m32.635145486s ago: executing program 0 (id=2326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) write(r0, &(0x7f00000001c0)='tcp 2000', 0x8) 2m32.455818915s ago: executing program 2 (id=2327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) 2m31.574991956s ago: executing program 2 (id=2330): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) 2m30.347697577s ago: executing program 2 (id=2337): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1)\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00'], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 2m30.265738832s ago: executing program 2 (id=2339): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_open_dev$evdev(0x0, 0x3e, 0x208604) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r1 = syz_open_dev$hiddev(0x0, 0xfffffffffffffffb, 0x44000) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dae04070"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000010050b221800000000000109022400010000c00009040000020300000009210000ff012229000905810300000000e901b7ecf2aed70ef68b7625fc81f1a2a1c7457e87e779915b9902d4c9254ec2db1e476d16490b0d4781656b457d653e75999b1a6d77d5aa9a37ecc178f0e69e74b62415cd882c05f7767446f3750912d450e3aeed2718780dc2c8cde80fea6d9d48de41e4e36abead7bf15e3d080c0d54ccdec5849c3453d6142476a8b2385b692a1af20da9bec578d25e6806b8a7715d314e8f1f638c78e9441805c3a0d701e4b8c51339255a9937e98c74b7fec04333f5f1d317b9bea3"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m27.742331859s ago: executing program 2 (id=2369): r0 = io_uring_setup(0x7b1c, &(0x7f0000000100)={0x0, 0xdfe9}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x200000, 0xffffffff88050214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x68801, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m24.188261024s ago: executing program 2 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 2m17.596259242s ago: executing program 32 (id=2326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) write(r0, &(0x7f00000001c0)='tcp 2000', 0x8) 2m8.977461809s ago: executing program 33 (id=2384): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='3', 0x1) 1m50.356883968s ago: executing program 4 (id=2663): mprotect(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 1m49.46542404s ago: executing program 4 (id=2681): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r3, 0x5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344000000000000000007000040"}}}}, 0x0) 1m49.310739717s ago: executing program 4 (id=2684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m49.177174041s ago: executing program 4 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x2) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="50000200000001020000000000000000091c001080090003400000000508c212a0008140000000020800014000000b9c14001080080002400000e30d080001400072f22588fd24efc1e0a192f70000060c0001800600034000030000ac1c7d"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r6 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) 1m48.120574194s ago: executing program 4 (id=2696): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='100', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m48.04409849s ago: executing program 4 (id=2697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) 1m32.604044792s ago: executing program 34 (id=2697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0), 0x0) 1m5.402122971s ago: executing program 5 (id=3041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/accept_local\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1', 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r4, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r4, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) 1m5.216774542s ago: executing program 5 (id=3042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x1, '\f'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x10, 0x4, "ece46cef"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x40, 0x13, 0x2, "eba0"}, 0x0, 0x0, 0x0, 0x0}) 1m0.05704426s ago: executing program 5 (id=3061): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x4000014) 59.044753839s ago: executing program 5 (id=3071): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000001ac0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 58.875323092s ago: executing program 5 (id=3072): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 58.765721473s ago: executing program 5 (id=3073): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x2) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="50000200000001020000000000000000091c001080090003400000000508c212a0008140000000020800014000000b9c14001080080002400000e30d080001400072f22588fd24ef"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r6 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="6ab0bd0aa27a", @void, {@ipv4={0x8035, @igmp={{0x5, 0x4, 0x3, 0x25, 0x1c, 0x64, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1e, 0x5, 0x0, @private=0xa0100ff}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x20, 0xfffff010}, {0x6, 0xfc, 0x0, 0xffffffff}]}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) 58.420440191s ago: executing program 35 (id=3073): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x2) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="50000200000001020000000000000000091c001080090003400000000508c212a0008140000000020800014000000b9c14001080080002400000e30d080001400072f22588fd24ef"], 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r6 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @random="6ab0bd0aa27a", @void, {@ipv4={0x8035, @igmp={{0x5, 0x4, 0x3, 0x25, 0x1c, 0x64, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1e, 0x5, 0x0, @private=0xa0100ff}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x20, 0xfffff010}, {0x6, 0xfc, 0x0, 0xffffffff}]}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x100000000000000) 32.467091453s ago: executing program 1 (id=3162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x1d84, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d4c, 0x2, [@TCA_CGROUP_ACT={0x1d48, 0x1, [@m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8003}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1c88, 0x5, 0x0, 0x0, {{0xa}, {0x1c5c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0xa, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x209, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x1ff, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0xffffffff, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43a, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xdc1, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x9, 0x5, 0x8, 0x9}, 0x75, 0x6}, [{0x0, 0x7, 0x8, 0x20000, 0x440, 0x60}, {0xb, 0x779, 0x6, 0x8, 0x7fff, 0xff}, {0x9, 0x1, 0x81, 0x7fff, 0x7}, {0x10001, 0xfd27, 0x10, 0x81, 0x80, 0x200}, {0x1ff, 0x8, 0x2c3, 0x4, 0x174, 0x2}, {0xfffffff9, 0x6, 0x563, 0x8, 0xc, 0x6}, {0x2, 0x0, 0x8, 0xb3, 0x5, 0x200}, {0x5, 0xffff, 0x2f, 0xc, 0x1, 0x6cb}, {0x61, 0x222, 0x7651, 0x80000001, 0x1, 0x80}, {0x5, 0x93, 0x1, 0x3165, 0x2, 0x4}, {0x9, 0x7, 0x5, 0x9, 0x2, 0x4}, {0x4, 0x6, 0x9, 0x3, 0xfffffff7, 0x2}, {0x2, 0x6, 0x0, 0x3, 0x4221, 0x7}, {0x455, 0x35, 0x2, 0x2, 0x2, 0xc265}, {0x8, 0x3, 0x1, 0x2, 0x6, 0xa}, {0x2, 0x9, 0xfffffe58, 0x7fffffff, 0x1, 0x56}, {0x6, 0x5, 0x8, 0x6, 0x9, 0x7}, {0x8, 0xf69e, 0xf79, 0x3, 0x6, 0x8}, {0x100, 0x0, 0x9, 0x74b3, 0x2, 0x10000}, {0x400, 0x0, 0x1ff, 0x2, 0xffffffe6, 0x6}, {0x1, 0x59ad8e51, 0x8, 0x7f, 0x4, 0x9}, {0x6, 0xef7, 0xe, 0x400, 0x4, 0xfffffffc}, {0x7a, 0x6, 0x3, 0x7, 0x1800, 0x51f4}, {0xfffe0000, 0x2, 0xfffffffd, 0x8, 0x7, 0x7}, {0xfffffff9, 0x8, 0x8, 0x6, 0x6, 0x5}, {0xa23, 0x6, 0x0, 0x7, 0x2, 0x40}, {0x5e6, 0x6, 0x6, 0x6, 0x3, 0x3}, {0x7fff, 0xb, 0x4, 0xb6, 0xe, 0xdb}, {0xfffffffa, 0xb11, 0x100, 0x9, 0x7ff, 0x1}, {0x4, 0x8, 0x200, 0x9, 0xfffffffb, 0x2}, {0x80000000, 0x1, 0x0, 0x5, 0x81}, {0x9, 0x8, 0x3, 0x2, 0x4, 0xe}, {0x80000001, 0x81, 0x8, 0x5, 0x6, 0xf609}, {0x8000, 0x1, 0x1ff, 0x5, 0xfff, 0x101}, {0x7, 0x3e2, 0x5a1, 0x7, 0x5, 0x5}, {0x5, 0x2, 0x80000000, 0x63674b04, 0x7, 0x923}, {0x8ade, 0x1, 0x4, 0x8, 0x2, 0xd9f5}, {0x5, 0x5, 0x1, 0x9, 0x14, 0x5}, {0x3ff, 0xb, 0x40, 0x2, 0x2, 0x401}, {0x9, 0x9, 0x9, 0x3, 0x0, 0x40}, {0x6, 0x8001, 0x6, 0x5, 0x8000000, 0x1000}, {0x7f, 0xffffac09, 0x3, 0x0, 0x8, 0x101}, {0x7b, 0x6, 0x371, 0x0, 0x6, 0x100}, {0x9f, 0x5, 0x3, 0xc, 0x7, 0x4}, {0x3, 0x1, 0x1d2, 0x2, 0x6db}, {0x1000, 0x51f, 0xe2c, 0x8, 0x206, 0x6}, {0x7, 0x69680000, 0x401, 0x45b, 0x10001, 0x80000000}, {0x0, 0x6, 0x1000, 0x7, 0x4, 0xa}, {0x4, 0x7, 0x10000001, 0xee, 0x0, 0x1}, {0x101, 0x0, 0x9, 0xb539, 0xd7, 0xe3e}, {0xe00c, 0x9, 0xd34, 0x4cc, 0x1ff, 0x6}, {0xa2, 0xbf9, 0x3, 0xa77, 0x2, 0xfffffff9}, {0x87, 0x5, 0x5, 0x5c1, 0x2000000, 0x9}, {0x1ff, 0x200, 0xffffffff, 0xfffffffa, 0x4, 0xbc6a}, {0x40, 0xffffffff, 0x80000001, 0xc, 0xf91, 0x7fffffff}, {0xffffffff, 0x52, 0x6, 0x80000000, 0x8, 0xbf}, {0x1, 0x8001, 0x5, 0x3, 0xda0, 0x2}, {0x9, 0x5, 0x5, 0x0, 0x9, 0x5}, {0x7ff, 0x4cbf, 0xbdde, 0x7, 0x80, 0x8001}, {0x5, 0x4, 0xb, 0x7fff, 0x7}, {0x161, 0x8, 0xfffffffc, 0x5, 0x40, 0x2}, {0xb, 0x6, 0x3, 0x8, 0x6, 0x5}, {0x10, 0x9, 0x6, 0x0, 0x8, 0x3f8}, {0x9, 0xe, 0x7, 0x3, 0x4, 0x2}, {0xffff, 0x2, 0x919c, 0x1000, 0x4, 0x7}, {0x35, 0xfffffff9, 0x117, 0x2, 0x6, 0x6}, {0x42d, 0x57, 0x80000000, 0x30000000, 0x3, 0x400e}, {0x3, 0x7bf, 0xff, 0x6, 0xd, 0x2}, {0x3, 0x3, 0x8000, 0x5, 0x2972a4da, 0x2}, {0x101, 0x40, 0x4, 0x6, 0x0, 0x3f47}, {0x4, 0x4, 0x60dc, 0x6, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x5, 0x401, 0x10001}, {0x8, 0x1, 0xd, 0xfffffff7, 0xc08}, {0x8, 0x0, 0x8000, 0x589, 0xfffffffd, 0x4}, {0xcb83, 0x3, 0x491, 0x4, 0x3, 0xb6e2}, {0x3, 0x2, 0xfff, 0xd48, 0x3, 0x8}, {0x3, 0x2, 0x8, 0x3, 0x3}, {0xb, 0x8, 0x5, 0x69, 0x0, 0x9}, {0x7ff, 0x2, 0x4, 0x5, 0x9, 0x6}, {0x5, 0xfffffffb, 0x6, 0xff, 0x3, 0xb1c}, {0x7, 0x9, 0xfffffffa, 0x4, 0x7, 0x2}, {0x28, 0x3, 0x46, 0x7, 0xffffffff, 0x8}, {0xf, 0xffffffe6, 0x1, 0x100, 0x100, 0x1}, {0x4, 0xfe, 0x46, 0x6, 0x9, 0x5}, {0x4, 0x10, 0x9, 0xfee1, 0x2cc, 0x9}, {0x279b, 0x8f, 0x4, 0x0, 0x3, 0x10001}, {0x7, 0x2, 0x5d, 0x80, 0x10, 0x8d}, {0x2, 0xa6, 0xe4f, 0x400, 0x3de, 0x4}, {0xf, 0x10000, 0x800, 0x0, 0x7, 0xf59}, {0x10, 0x10, 0x7fffffff, 0x2, 0x4e34, 0xd6}, {0x9, 0xfffffffa, 0x9, 0x926, 0x5a2b, 0x7}, {0x3, 0xe7c8, 0x5, 0x9, 0x4, 0x1000}, {0x5, 0x1, 0x5, 0x4, 0x8, 0x6}, {0xfe3, 0x0, 0x9, 0x4, 0x2f8, 0x80000000}, {0x0, 0x9, 0x8, 0x5, 0x7de9, 0x1}, {0x2, 0x0, 0x16000000, 0x8, 0xd5, 0x4c3c}, {0x847c, 0x6, 0xaa5, 0x594ac942, 0xfb7, 0x3}, {0x0, 0x1, 0x2, 0x4, 0x8a, 0xfff}, {0x3, 0xa, 0x9, 0x1, 0x9, 0x80}, {0x5, 0xffff, 0xfffff801, 0xc, 0x6, 0x5}, {0x6e0, 0x5, 0x1, 0x7, 0x9, 0x7}, {0x8, 0x0, 0xffffe1ce, 0x9, 0x800}, {0x6, 0xf, 0x8, 0x2f, 0xfffffff7, 0xc9}, {0xa843, 0x0, 0x5, 0x8eb8, 0x3, 0xfffffffd}, {0x8000, 0x6, 0x7, 0x7, 0x7, 0x1}, {0x4, 0x900, 0x4, 0x3, 0x6, 0xf216}, {0x4, 0xffff, 0x0, 0x9, 0xeb, 0x2}, {0x22c77d2a, 0x200, 0x0, 0x4, 0x8, 0x2e03666f}, {0xf529, 0x800, 0x3, 0x5, 0xe9, 0x1}, {0x5, 0x1, 0x4, 0xc, 0x3, 0xf}, {0xc23ff6c, 0xfffffffc, 0x1, 0x0, 0x0, 0x7}, {0xff, 0x5, 0x800, 0x3, 0x2, 0x7fffffff}, {0x7, 0x6, 0x2, 0x60, 0xd, 0x70}, {0x0, 0xe, 0x200, 0x7, 0x1, 0x7}, {0x7, 0xde27, 0x8, 0x7f, 0xb09, 0x4}, {0xff, 0xac, 0xffffffff, 0x9c07, 0x84f4, 0x7ae3f5e2}, {0x80000001, 0x0, 0x1c00000, 0x1, 0x9, 0x1}, {0x8, 0x5, 0x9, 0xfffffffe, 0x5, 0x62f}, {0x8001, 0x3, 0x0, 0xb, 0x1, 0x9e3b}, {0x40, 0xfffffffc, 0xc, 0x4, 0x9cad, 0x101}, {0xfffffffc, 0xa388a14b, 0x1, 0x6, 0x5, 0x3ff}, {0xffffffff, 0x1, 0x6, 0xc913, 0x401, 0x2}, {0x7ff, 0x3, 0xabf, 0x3cb, 0x9d, 0x3}, {0x7, 0x0, 0x10001, 0x80000000, 0x800, 0x400}, {0xaf1, 0x7f, 0x2, 0x9, 0x80000000, 0x3}, {0x8, 0x0, 0x2, 0x200, 0x80000001, 0xe32}, {0x2, 0x8, 0xce0, 0x71, 0x9, 0x9}, {0x0, 0x2, 0x101, 0x6, 0xfffffbff, 0x1}], [{0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {0x4, 0x1}, {0x4, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {}, {0xf64cd08961e131e7}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x14750f306444a36}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x39ee92b2e05c055b}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3}, {0x4, 0x1}, {0x1}, {0x460300743d89969c, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x2d7ee143859a3e1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0xc196dd3e82dc6dcc}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x7, 0x1}, {}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1d84}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400001a0206"], 0x14}}, 0x2) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.348309323s ago: executing program 1 (id=3164): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 32.154386067s ago: executing program 1 (id=3168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18030000feffffff0000000000000000851000000600000018000000050000000000000005000000250000000000000018000000000000000000000000000000950000000000000087030000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 31.314768356s ago: executing program 1 (id=3170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r5}]}, 0x28}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) 31.198059072s ago: executing program 1 (id=3172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/sctp/parameters/no_checksums\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1', 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r2, &(0x7f0000000380)=@in={0x2, 0x1122, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r3, &(0x7f00000003c0)=@in={0x2, 0x3344, @loopback}, 0x10) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1122, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "1122334400000000000000000a00004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100001400"/76}}}}, 0x0) 29.869474438s ago: executing program 1 (id=3175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xfffffffc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 6.538447543s ago: executing program 8 (id=3236): mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00') read$FUSE(r0, &(0x7f0000005d00)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) 6.334311658s ago: executing program 8 (id=3239): io_uring_enter(0xffffffffffffffff, 0x48c6, 0x94e4, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 5.312359536s ago: executing program 8 (id=3242): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663b2b10a65079aa09519e65997ded71d2c3eaa", 0x70}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a2b6d43311a2fb8c56695d43d5f18c04514aabe53dd091efd0b577c455b636154b11a31ed54df51ca1e3a2e8b6941aeb19878fb1f7aeeb2cd2f15", 0x5e}], 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 5.281285841s ago: executing program 3 (id=3243): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 5.129735268s ago: executing program 3 (id=3245): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.357544755s ago: executing program 7 (id=3250): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac79185c2641b", 0x8, 0x9, 0x0, 0x0, r0}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) clock_nanosleep(0x2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd26, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x24000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) mknod$loop(&(0x7f0000000000)='./cgroup\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0) 4.089525713s ago: executing program 7 (id=3252): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x200, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 4.002406982s ago: executing program 3 (id=3253): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='B:', 0x2}], 0x1}}], 0x1, 0x348640ea77fab084) accept4$unix(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.669736251s ago: executing program 7 (id=3254): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 3.397350686s ago: executing program 7 (id=3255): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0xc, 0x0, 0x0, 0x0, 0x7fff}) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 2.05243278s ago: executing program 7 (id=3256): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='-1', 0x2}, {&(0x7f0000000100)="2df8b4", 0x3}], 0x2, 0x4, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008001d00850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2010000000100004199f8c6aa4a", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/83, 0x53}, {0x0}, {&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000003c0)=""/27, 0x1b}], 0x4}, 0x551c}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001800)=[{&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/126, 0x7e}, {0x0}], 0x3, &(0x7f0000001880)=""/249, 0xf9}, 0x9}, {{&(0x7f0000001980)=@xdp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/182, 0xb6}], 0x1, &(0x7f0000001b00)=""/209, 0xd1}, 0xfffffff8}], 0x3, 0x40000000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket(0x10, 0x803, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r4, @ANYRES64=r4], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 1.513464449s ago: executing program 6 (id=3259): mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.upper\x00') read$FUSE(r0, &(0x7f0000005d00)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) 1.407024499s ago: executing program 3 (id=3260): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x4, 0x2}}, 0x50) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x202) ioctl$FE_SET_FRONTEND(r4, 0x40246f4c, &(0x7f0000000340)={0x30a32c3, 0x1, @ofdm={0x1, 0x18, 0x1b, 0x1a, 0x7, 0x4, 0x2}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r6, r2, 0x0) close(0x3) 1.341511943s ago: executing program 8 (id=3261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x840, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x814, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x1000, 0x2, 0x3, 0xffff, 0x4, 0x9, 0x80000000, 0x1000, 0x10001, 0x8, 0xc09, 0x7, 0xac39, 0x0, 0x0, 0x4, 0x3, 0x401, 0xbf, 0x2, 0xa, 0x100, 0x400, 0xfffffff7, 0x1, 0x6, 0xb9, 0x507, 0x783, 0x7ff, 0x10, 0x2a, 0xc2f2, 0xc, 0x9, 0x4, 0x6, 0xffffff01, 0x8001, 0xfff, 0x56, 0x4, 0x1, 0x7, 0x2, 0x5, 0xd, 0x9, 0x3, 0x10001, 0x0, 0xe4, 0x5, 0x8, 0xffff, 0x3ff, 0xf4, 0x7ff, 0x9, 0xffff, 0x4, 0x4, 0x10, 0xa146, 0x4, 0x400, 0x8, 0x4, 0x5, 0xfffffff9, 0x6, 0x6, 0x5, 0x7, 0x6, 0xfffffffa, 0x9, 0x0, 0x7f, 0xe, 0xa, 0x81, 0x3, 0xfff, 0x4, 0x3, 0x8b92, 0x80, 0x5, 0x80000001, 0x8, 0x3, 0x835, 0xd09, 0x6, 0x401, 0x2, 0x80, 0x0, 0x6, 0x6, 0xb0, 0x6, 0x6, 0xff, 0x5, 0xc67c, 0xf4, 0x8, 0x6, 0x3d, 0x98b6, 0xfffffff9, 0x55, 0xfffffff9, 0x9, 0x4, 0x80000001, 0x80000001, 0x7, 0xfffffffa, 0x26c, 0x2, 0xdc47, 0x46, 0xffffffff, 0x4, 0xfffffffe, 0xb, 0x439, 0x8, 0x3, 0xfffffff7, 0x4, 0x3, 0x9610, 0x3ff, 0x200, 0x6, 0x2, 0xe, 0x1, 0x7, 0xd7a, 0x9, 0x3, 0x5000000, 0x0, 0x3980000, 0x4, 0xd1, 0x8, 0x2, 0x80000001, 0x2, 0xfffffffd, 0x1b8000, 0x20, 0x5, 0x136, 0x0, 0x5, 0x4416fdf0, 0x9, 0xffff, 0x0, 0x6, 0x4, 0x8935, 0x921, 0x8, 0x4, 0x7, 0x2, 0x9, 0x3, 0x4, 0x2d, 0x5, 0x5, 0x2, 0x6, 0x3, 0x0, 0x7, 0x9, 0x2811f65e, 0xba, 0x7f, 0x400, 0x5, 0x3, 0x9, 0x2, 0x3, 0xfff, 0x1, 0x4, 0x3, 0xe, 0xff, 0x8001, 0xc, 0x2, 0xb8f, 0x8, 0x40, 0x3, 0x81, 0xb16d, 0x2, 0x800, 0xa, 0x12c, 0x9, 0x8, 0xe0000, 0xb, 0x1, 0x5, 0xfffffff6, 0x80000001, 0x5, 0xe, 0x2, 0x440, 0x7fffffff, 0xcde, 0xca2e, 0xfffffff6, 0x4a994d55, 0x5, 0x10, 0x400, 0x8ca, 0x400000, 0x0, 0x0, 0x7, 0x200, 0x5, 0x0, 0x8000, 0x0, 0x3, 0xc, 0x4, 0x4, 0x43a, 0x9be, 0x8000, 0x7fff, 0xb22a, 0x7fff, 0x401, 0x18b18d98]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x7, 0x7ff, 0x7f, 0x4080, 0x800, 0x8, 0x3, 0x7, 0x84, 0x0, 0x4, 0xef7, 0x2, 0x9, 0xfffffffb, 0x17, 0x7fffffff, 0xc, 0x5, 0x3, 0x670, 0xfffffff9, 0x6, 0xfffffffd, 0xfff, 0x5, 0x80, 0x10, 0x7, 0x0, 0xb8, 0x1f6, 0x8, 0x400, 0x3, 0x1, 0x477, 0xd, 0x6, 0x9, 0xffff, 0xfffffffe, 0x10000, 0xfff, 0xe, 0x1, 0x8001, 0x101, 0x2, 0x2, 0x5, 0x8, 0x40, 0x766, 0x2f, 0x6, 0x8, 0x80000000, 0x7, 0x800, 0x400, 0x3, 0x8, 0x2, 0x5, 0x0, 0x5, 0x700, 0x703, 0x1, 0x81, 0x7, 0x200, 0x7fffffff, 0x3, 0x7fff, 0x0, 0x9, 0x0, 0x8000, 0xffffffff, 0x9, 0xef5f, 0x0, 0x9, 0x200, 0x8000, 0x5, 0x5, 0x7, 0x1, 0x3, 0xa, 0xfffffff7, 0xee, 0x0, 0x1, 0x0, 0x3, 0x6, 0x9, 0x1ff, 0x9, 0x7ff, 0x1000, 0x14, 0x6, 0x68a, 0x1, 0x401, 0x3, 0x684e, 0x7, 0x3b, 0x9, 0x7, 0x8, 0x10000, 0x80000001, 0xfffffff9, 0x2, 0x1, 0xff, 0x5, 0x3e8, 0x4, 0x400, 0x1000, 0x6, 0x2, 0x7fffffff, 0x3, 0x2, 0x54, 0x3, 0x6, 0x2, 0x31f, 0xcffb, 0xac7, 0x1, 0x9, 0xd268, 0x75, 0x5, 0x4, 0xfffffff8, 0x3, 0x8, 0x769, 0x700, 0xe33, 0xfffffff9, 0x7, 0x6, 0x7, 0x8, 0x8, 0xccfb, 0x400, 0x40004000, 0x8, 0x8509, 0xd31, 0x80000001, 0x6, 0xd9, 0xc, 0x3, 0x9, 0x7ff, 0x3, 0x2, 0xad, 0x3, 0x7, 0xaf08, 0x8001, 0x8, 0x6e3, 0x4, 0x8, 0x8, 0x2, 0xfff, 0x4, 0xffffffff, 0x8, 0x1c, 0x8, 0x2, 0x3, 0x6, 0x8, 0x5, 0x7, 0x4, 0x81, 0xffff, 0xff, 0x2, 0xfffffff9, 0xc4, 0x7, 0x3, 0x9, 0x656457f4, 0x3, 0x5, 0x7, 0x9b, 0x0, 0x81, 0xa425, 0x351b, 0x36, 0xd6, 0x5, 0x9, 0xcf09, 0x1, 0x5, 0xa, 0x4, 0x7, 0x8, 0x1, 0x9, 0x0, 0xe, 0x9, 0x7, 0x10, 0xfffffff4, 0xab58, 0x2, 0x7, 0xddb4, 0x1, 0x1, 0x3, 0x800, 0xffffffff, 0xd27, 0x9, 0x1, 0x8, 0xb, 0x2, 0x10000, 0x8, 0x8, 0xffffffff, 0x1ff, 0x400]}]}}]}, 0x840}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x4004010) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0xe, 0x12, r6, 0x0) read$dsp(r6, &(0x7f00000007c0)=""/237, 0xa5) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) 1.341087061s ago: executing program 6 (id=3262): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.258501698s ago: executing program 6 (id=3263): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x8000002, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1) 1.049822894s ago: executing program 3 (id=3264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x10002e78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000001}) 292.428288ms ago: executing program 3 (id=3265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001100)='iocharset', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x9, 0x800, 0x5, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24044000, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x880, &(0x7f0000ffa000/0x3000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000060c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @remote, 0xa}, 0x1c, &(0x7f0000000340)}}], 0x1, 0x48081) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0xe35f, 0x208, 0x8c9, 0x1ff}, &(0x7f0000000240)=0x10) recvmmsg(r0, 0x0, 0x0, 0x10100, 0x0) 201.050268ms ago: executing program 6 (id=3266): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10e', 0x3) 94.367275ms ago: executing program 8 (id=3267): fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) 93.62092ms ago: executing program 7 (id=3268): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {0xffff, 0x1}, {0x24, 0x8002}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x0, 0x7}, {0x0, 0x5, 0x1, 0x0, 0x8000, 0x9}]}) write$char_usb(r1, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(r2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r5, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(0x0, 0x8002, 0xa2000) r6 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r6, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r4, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 93.234294ms ago: executing program 6 (id=3269): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x3c, 0x0, 0x0, 0xfffffffffffffec8) 3.004795ms ago: executing program 6 (id=3270): r0 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)="ef", 0x1, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40004) keyctl$read(0xb, r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x13, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/19, 0x13) 0s ago: executing program 8 (id=3271): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xcc, 0x2, [@TCA_FLOW_EMATCHES={0xc8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}, "77ae5018f5b05e8be1daf07edc8b5408d13a67efc185afcf80247e9aa4f89e1e0be8b3f16bb7d9843adad91f47cc7215bc01be6e2d5b0a5724ebf2f7ab74b2042db5efe9d0e29b99b7f6e7754a0189fdc6ed128555bf92a7f5d8a71693f8eab2e0bdbfaf76236283763674d42d095ff3df28e47bf570d0a37e10769ab5a40895ee84dde18f99e6473edb7e57a3d02ca0b84c3671c8b2501728314642f1f563ac1a63d285f0163e6811192c"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) kernel console output (not intermixed with test programs): e=1 [ 381.961292][ T29] audit: type=1400 audit(1785808184.729:750): avc: denied { open } for pid=11680 comm="syz.4.2093" path="/404/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 382.593663][T11681] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 382.781904][T11711] netlink: 'syz.0.2106': attribute type 10 has an invalid length. [ 382.783394][T11709] bond1: option mode: unable to set because the bond device is up [ 382.840647][T11711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.853197][ T29] audit: type=1400 audit(1785808185.699:751): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 382.873978][T11711] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 382.913798][ T5611] svc: failed to register nfsdv3 RPC service (errno 111). [ 382.924692][ T5611] svc: failed to register nfsaclv3 RPC service (errno 111). [ 382.932364][ T5611] failed to unregister tcp with rpcbind [ 382.959066][ T5611] svc: failed to register nfsdv3 RPC service (errno 97). [ 382.972459][ T29] audit: type=1400 audit(1785808185.819:752): avc: denied { write } for pid=11720 comm="syz.2.2112" name="functions" dev="configfs" ino=20348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 382.999511][ T5611] svc: failed to register nfsaclv3 RPC service (errno 97). [ 383.015526][ T5611] failed to unregister tcp with rpcbind [ 383.023295][T11721] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 383.028811][ T29] audit: type=1400 audit(1785808185.869:753): avc: denied { write } for pid=11720 comm="syz.2.2112" name="c.1" dev="configfs" ino=21685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.053483][T11721] udc dummy_udc.0: failed to start g1: -19 [ 383.061502][ T29] audit: type=1400 audit(1785808185.869:754): avc: denied { write } for pid=11720 comm="syz.2.2112" name="c.1" dev="configfs" ino=21685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.080366][T11721] UDC core: g1: couldn't find an available UDC or it's busy [ 383.098399][T11726] vfio-pci 0000:00:00.0: probe with driver vfio-pci failed with error -22 [ 383.142821][T11728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.329989][T11742] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 384.016149][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 385.115806][T11815] batadv0: mtu less than device minimum [ 385.124203][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.135586][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.146970][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.158219][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.158628][T11817] netlink: 'syz.2.2148': attribute type 10 has an invalid length. [ 385.169425][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.187886][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.198727][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.209679][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.220508][T11815] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.701440][ T29] audit: type=1400 audit(1785808188.549:755): avc: denied { write } for pid=11847 comm="syz.0.2166" name="cluster" dev="configfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.787831][ T29] audit: type=1400 audit(1785808188.599:756): avc: denied { write } for pid=11847 comm="syz.0.2166" name="node" dev="configfs" ino=35713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 386.187753][T11887] hub 8-0:1.0: USB hub found [ 386.223752][T11887] hub 8-0:1.0: 1 port detected [ 387.293181][ T803] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 387.473314][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 387.498679][ T803] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.540054][ T803] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.564832][ T803] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.585464][ T803] usb 3-1: Product: syz [ 387.594050][ T803] usb 3-1: Manufacturer: syz [ 387.604202][ T803] usb 3-1: SerialNumber: syz [ 387.626941][ T803] usb 3-1: config 0 descriptor?? [ 387.637649][T11926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.652953][ T803] hub 3-1:0.0: bad descriptor, ignoring hub [ 387.661348][T11949] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 387.669183][ T803] hub 3-1:0.0: probe with driver hub failed with error -5 [ 387.678765][T11949] udc dummy_udc.0: failed to start g1: -19 [ 387.691383][T11949] UDC core: g1: couldn't find an available UDC or it's busy [ 388.357204][T11981] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2220'. [ 388.778469][T12005] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 388.786253][T12005] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 388.914635][ T5899] raw-gadget.0 gadget.2: failed to queue suspend event [ 389.004183][T11926] raw-gadget.0 gadget.2: failed to queue resume event [ 389.049827][ T1020] raw-gadget.0 gadget.2: failed to queue suspend event [ 389.083282][ T803] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 389.102084][T12011] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2233'. [ 389.133598][T11926] raw-gadget.0 gadget.2: failed to queue resume event [ 389.167242][ T68] raw-gadget.0 gadget.2: failed to queue suspend event [ 389.198997][T11970] raw-gadget.0 gadget.2: failed to queue disconnect event [ 389.253187][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 389.260504][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 389.273673][ T803] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.279982][T12019] netlink: 'syz.0.2237': attribute type 2 has an invalid length. [ 389.282751][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.294073][ T803] usb 2-1: config 0 descriptor?? [ 389.522473][ T803] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 389.580480][T12034] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2244'. [ 390.755205][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.767828][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.781148][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.789152][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.799781][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.398337][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.405643][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.413390][T12055] bridge_slave_0: entered allmulticast mode [ 391.420779][T12055] bridge_slave_0: entered promiscuous mode [ 391.428845][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.436102][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.443724][T12055] bridge_slave_1: entered allmulticast mode [ 391.451031][T12055] bridge_slave_1: entered promiscuous mode [ 391.481703][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.493604][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.528038][T12055] team0: Port device team_slave_0 added [ 391.538714][T12055] team0: Port device team_slave_1 added [ 391.566746][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.574089][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.600673][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.614375][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.621351][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.651278][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.706513][T12055] hsr_slave_0: entered promiscuous mode [ 391.713018][T12055] hsr_slave_1: entered promiscuous mode [ 391.719505][T12055] debugfs: 'hsr0' already exists in 'hsr' [ 391.726113][T12055] Cannot create hsr debugfs directory [ 391.924775][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 391.924792][ T29] audit: type=1400 audit(1785808194.779:759): avc: denied { name_bind } for pid=12080 comm="syz.0.2256" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 391.976749][T12055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.078392][T12055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.171435][T12055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.256064][T12055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.382439][T12055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.393704][T12055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.398101][ T5746] usb 3-1: USB disconnect, device number 46 [ 392.401488][T12055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.438333][T12055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.452162][T12055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.479837][ T803] usb 2-1: USB disconnect, device number 54 [ 392.492469][T12055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.512463][T12055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.568006][T12055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.874133][ T5623] Bluetooth: hci5: command tx timeout [ 392.938358][ T1020] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.950208][ T1020] netdevsim netdevsim10 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 392.966707][ T1020] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.995527][ T29] audit: type=1400 audit(1785808195.849:760): avc: denied { write } for pid=12111 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 393.054816][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 393.062495][T12055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.110682][T12113] bridge0: port 1(syz_tun) entered disabled state [ 393.128666][T12112] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 393.137103][T12115] gadgetfs: bound to dummy_udc driver [ 393.144679][T12112] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 393.172034][ T5730] kernel write not supported for file /dummy_udc (pid: 5730 comm: kworker/0:4) [ 393.172165][ T29] audit: type=1400 audit(1785808196.019:761): avc: denied { mounton } for pid=12114 comm="syz.4.2268" path="/454/gadget/ep1in-bulk" dev="gadgetfs" ino=38162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=file permissive=1 [ 393.225923][T12113] syz_tun (unregistering): left allmulticast mode [ 393.232511][T12113] syz_tun (unregistering): left promiscuous mode [ 393.239328][T12112] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 393.250228][T12113] bridge0: port 1(syz_tun) entered disabled state [ 393.277973][ T29] audit: type=1400 audit(1785808196.129:762): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 393.299324][T12112] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.314621][ T5709] syz1: Port: 1 Link DOWN [ 393.350585][T12055] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.363689][T12112] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 393.377283][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.384596][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.415586][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.422810][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.109669][ T68] smbdirect: ib_dev[syz1] removed [ 394.397295][T12144] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 394.543543][ T5730] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 394.591430][T12055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.646855][T12055] veth0_vlan: entered promiscuous mode [ 394.673739][T12055] veth1_vlan: entered promiscuous mode [ 394.708419][T12055] veth0_macvtap: entered promiscuous mode [ 394.714638][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 394.727775][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.739919][T12055] veth1_macvtap: entered promiscuous mode [ 394.750871][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.771291][T12055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.778788][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 394.814396][T12055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.821688][ T5730] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 394.844404][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.953129][ T5623] Bluetooth: hci5: command tx timeout [ 395.321149][ T5730] usb 2-1: config 0 descriptor?? [ 395.365275][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.433741][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.488578][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.680224][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.689120][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.705196][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.780446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.789444][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.805430][ T29] audit: type=1400 audit(1785808198.659:763): avc: denied { mounton } for pid=12055 comm="syz-executor" path="/root/syzkaller.sqMa1v/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 395.921483][ T29] audit: type=1400 audit(1785808198.769:764): avc: denied { mounton } for pid=12055 comm="syz-executor" path="/root/syzkaller.sqMa1v/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 396.005441][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.095127][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.155690][ T29] audit: type=1400 audit(1785808198.809:765): avc: denied { mounton } for pid=12055 comm="syz-executor" path="/root/syzkaller.sqMa1v/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 396.258533][ T5730] usbhid 2-1:0.0: can't add hid device: -71 [ 396.280408][ T5730] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 396.290142][ T29] audit: type=1400 audit(1785808199.069:766): avc: denied { mounton } for pid=12055 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 396.325974][ T5730] usb 2-1: USB disconnect, device number 55 [ 396.722241][T12206] netlink: 'syz.4.2301': attribute type 2 has an invalid length. [ 397.033129][ T5623] Bluetooth: hci5: command tx timeout [ 398.343837][T12170] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 398.523784][T12170] usb 5-1: Using ep0 maxpacket: 16 [ 398.613678][T12170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.636543][T12170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.148740][ T5623] Bluetooth: hci5: command tx timeout [ 399.174564][T12170] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.195159][T12170] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.208304][T12170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.222211][T12170] usb 5-1: config 0 descriptor?? [ 399.325395][T12264] netlink: 'syz.0.2322': attribute type 2 has an invalid length. [ 399.468033][T12263] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 399.898626][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.972279][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.119293][T12170] usbhid 5-1:0.0: can't add hid device: -71 [ 400.686715][T12170] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 400.774519][T12170] usb 5-1: USB disconnect, device number 46 [ 400.867555][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 400.912948][T12285] bond1: Unable to set up delay as MII monitoring is disabled [ 400.939732][T12292] hub 8-0:1.0: USB hub found [ 400.962036][T12285] bond1 (unregistering): Released all slaves [ 400.974325][T12292] hub 8-0:1.0: 1 port detected [ 401.482401][T12300] netlink: 'syz.4.2334': attribute type 2 has an invalid length. [ 402.100049][T12313] netlink: 'syz.1.2341': attribute type 2 has an invalid length. [ 402.148144][T12317] net_ratelimit: 11 callbacks suppressed [ 402.148157][T12317] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.323382][ T990] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 402.484739][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 402.491630][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.516386][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.526423][ T990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.540072][ T990] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 402.553737][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.565171][ T990] usb 3-1: config 0 descriptor?? [ 402.702173][T12339] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 402.846205][T12346] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 402.886174][ T29] audit: type=1800 audit(1785808205.739:767): pid=12348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2357" name="cdrom" dev="configfs" ino=39235 res=0 errno=0 [ 403.635202][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.701667][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.723382][ T990] usbhid 3-1:0.0: can't add hid device: -71 [ 403.739652][ T990] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 403.914499][ T990] usb 3-1: USB disconnect, device number 47 [ 404.260365][T12360] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 404.270253][T12360] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 404.302571][ T29] audit: type=1400 audit(1785808207.149:768): avc: denied { set_context_mgr } for pid=12361 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 404.324485][T12362] binder: BINDER_SET_CONTEXT_MGR already set [ 404.332114][T12362] binder: 12361:12362 ioctl 4018620d 0 returned -16 [ 404.614439][T12375] hub 8-0:1.0: USB hub found [ 404.619371][T12375] hub 8-0:1.0: 1 port detected [ 404.893978][T12381] netlink: 'syz.4.2370': attribute type 2 has an invalid length. [ 405.160780][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 405.194203][T12384] bond1: Unable to set up delay as MII monitoring is disabled [ 405.230138][T12384] bond1 (unregistering): Released all slaves [ 406.226554][T12402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 407.125790][T12410] netlink: 'syz.4.2381': attribute type 2 has an invalid length. [ 408.321903][T12430] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 408.332498][T12430] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 408.762053][T12447] hub 8-0:1.0: USB hub found [ 408.767981][T12447] hub 8-0:1.0: 1 port detected [ 408.901876][ T5716] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 409.074898][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 409.088511][ T5716] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 409.102863][ T5716] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.112527][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.125918][ T5716] usb 2-1: Product: syz [ 409.130404][ T5716] usb 2-1: Manufacturer: syz [ 409.138159][ T5716] usb 2-1: SerialNumber: syz [ 409.160475][ T5716] usb 2-1: config 0 descriptor?? [ 409.171959][T12444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.189417][ T5716] hub 2-1:0.0: bad descriptor, ignoring hub [ 409.195792][ T5716] hub 2-1:0.0: probe with driver hub failed with error -5 [ 410.156588][ T68] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.217929][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 410.245257][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.274214][ T134] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.289063][ T29] audit: type=1400 audit(1785808213.139:769): avc: denied { cmd } for pid=12469 comm="iou-wrk-12470" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 410.322934][ T29] audit: type=1400 audit(1785808213.169:770): avc: denied { map } for pid=12469 comm="syz.3.2406" path="/dev/ublkc0" dev="devtmpfs" ino=3417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.363310][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.396858][ T48] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.474171][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.498137][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.573174][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.605549][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.693656][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.717270][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.793895][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.816844][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.893261][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 410.913920][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 410.983150][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.018856][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.093208][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.119711][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.193795][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.214182][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.283225][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.306478][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.383914][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.404136][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.473246][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.494410][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.563200][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.584096][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.663235][T12444] raw-gadget.0 gadget.1: failed to queue resume event [ 411.685731][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 411.711273][T12444] raw-gadget.0 gadget.1: failed to queue disconnect event [ 411.718918][ T5716] usb 2-1: USB disconnect, device number 56 [ 412.073213][ T5716] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 412.238058][ T5716] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 412.258159][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 412.275990][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 412.291521][ T5716] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 412.302726][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.319394][ T5716] usb 2-1: config 0 descriptor?? [ 412.562563][ T5716] usbhid 2-1:0.0: can't add hid device: -71 [ 412.580506][ T5716] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 412.595399][ T5716] usb 2-1: USB disconnect, device number 57 [ 413.200160][ T29] audit: type=1400 audit(1785808216.049:771): avc: denied { sys_module } for pid=12493 comm="syz.1.2416" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 413.222528][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 413.518693][T12507] capability: warning: `syz.4.2421' uses 32-bit capabilities (legacy support in use) [ 413.603400][T12170] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 413.647536][T12515] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2425'. [ 413.696900][T12517] netlink: 'syz.3.2426': attribute type 10 has an invalid length. [ 413.707972][T12517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.718139][T12517] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 413.753196][T12170] usb 2-1: Using ep0 maxpacket: 32 [ 413.761182][T12170] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 413.775977][T12170] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.786387][T12170] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.796850][T12170] usb 2-1: Product: syz [ 413.801129][T12170] usb 2-1: Manufacturer: syz [ 413.806060][T12170] usb 2-1: SerialNumber: syz [ 413.812979][T12170] usb 2-1: config 0 descriptor?? [ 413.819399][T12501] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.828139][T12170] hub 2-1:0.0: bad descriptor, ignoring hub [ 413.836728][T12170] hub 2-1:0.0: probe with driver hub failed with error -5 [ 414.393173][ T5709] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 414.553381][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 414.560030][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.570963][ T5709] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.581261][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.592273][ T5709] usb 4-1: config 0 descriptor?? [ 414.801183][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 414.823152][T12545] socket: no more sockets [ 414.824992][ T5709] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 414.847515][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.864783][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.874280][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.882030][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.890059][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.903140][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 414.966250][ T48] raw-gadget.0 gadget.1: failed to queue suspend event [ 414.998557][T12553] binder: 12551:12553 ioctl c0306201 0 returned -14 [ 415.065918][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 415.095494][ T48] raw-gadget.0 gadget.1: failed to queue suspend event [ 415.184303][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 415.215970][ T68] raw-gadget.0 gadget.1: failed to queue suspend event [ 415.303880][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 415.344894][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 415.413154][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 415.445182][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 415.494830][T12578] netlink: 'syz.4.2449': attribute type 10 has an invalid length. [ 415.510762][T12578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.524105][T12578] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 415.543326][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 415.578876][ T7181] raw-gadget.0 gadget.1: failed to queue suspend event [ 416.202468][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.209728][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.218453][T12546] bridge_slave_0: entered allmulticast mode [ 416.226442][T12546] bridge_slave_0: entered promiscuous mode [ 416.233266][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 416.234643][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.247373][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.254671][T12546] bridge_slave_1: entered allmulticast mode [ 416.261624][T12546] bridge_slave_1: entered promiscuous mode [ 416.268549][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 416.290461][T12546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.301648][T12546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.336544][T12546] team0: Port device team_slave_0 added [ 416.343237][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 416.344370][T12546] team0: Port device team_slave_1 added [ 416.364227][ T5899] raw-gadget.0 gadget.1: failed to queue suspend event [ 416.370917][T12546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.378332][T12546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.404776][T12546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.418328][T12546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.465666][T12501] raw-gadget.0 gadget.1: failed to queue resume event [ 416.465900][T12546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.499622][T12546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.504611][ T1020] raw-gadget.0 gadget.1: failed to queue suspend event [ 416.540093][T12501] raw-gadget.0 gadget.1: failed to queue disconnect event [ 416.566129][ T9] usb 2-1: USB disconnect, device number 58 [ 416.626854][T12588] binder: 12587:12588 ioctl c0306201 0 returned -14 [ 416.632837][T12546] hsr_slave_0: entered promiscuous mode [ 416.640063][T12546] hsr_slave_1: entered promiscuous mode [ 416.669223][T12546] debugfs: 'hsr0' already exists in 'hsr' [ 416.681357][T12546] Cannot create hsr debugfs directory [ 416.761108][T12591] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2453'. [ 416.902411][T12595] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 416.945173][ T68] rpcbind: server 127.0.0.1 not responding, timed out [ 416.953701][ T50] Bluetooth: hci3: command tx timeout [ 417.111321][T12546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 417.133863][T12546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.150819][T12546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.174296][T12546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.187971][ T9] usb 4-1: USB disconnect, device number 7 [ 417.205494][T12546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.238403][T12546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.246823][T12546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.259527][T12546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.401353][ T9] IPVS: starting estimator thread 0... [ 417.457691][T12546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.482818][T12629] netlink: 'syz.3.2465': attribute type 2 has an invalid length. [ 417.503494][T12626] IPVS: using max 51 ests per chain, 122400 per kthread [ 417.513782][T12546] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.536682][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.543836][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.596749][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.602080][ T29] audit: type=1800 audit(1785808220.449:772): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2467" name="UDC" dev="configfs" ino=39915 res=0 errno=0 [ 417.603946][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.709911][T12546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.162235][T12663] netlink: 'syz.4.2477': attribute type 2 has an invalid length. [ 418.349737][ T29] audit: type=1400 audit(1785808221.199:773): avc: denied { append } for pid=12668 comm="syz.1.2479" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 418.429980][T12546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.437403][T12670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.446517][T12670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.452578][T12670] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 418.528315][T12670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.546734][T12670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 418.569442][T12670] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 418.588526][T12670] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 418.617557][T12670] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 418.627753][T12670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.634329][T12670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 418.665483][T12670] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 418.936278][T12546] veth0_vlan: entered promiscuous mode [ 419.012548][T12546] veth1_vlan: entered promiscuous mode [ 419.129413][T12546] veth0_macvtap: entered promiscuous mode [ 419.160027][T12546] veth1_macvtap: entered promiscuous mode [ 419.225269][T12546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.268398][T12546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.369977][ T7181] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.437170][ T134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.488822][ T134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.508915][ T134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.556022][T12692] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff8880538f02f8' [ 419.677236][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.687896][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.880750][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.894207][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.473795][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.481402][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 420.555322][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.561392][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 420.634314][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 420.640738][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 421.845902][T12737] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 421.865065][T12737] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 422.196859][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2510'. [ 422.553456][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 422.713196][ T5623] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.719241][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 422.892185][ T5709] IPVS: starting estimator thread 0... [ 423.034392][T12784] IPVS: using max 53 ests per chain, 127200 per kthread [ 423.529131][T12792] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 423.599755][T12792] udc dummy_udc.0: failed to start g1: -19 [ 423.620113][T12792] UDC core: g1: couldn't find an available UDC or it's busy [ 423.730937][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.752458][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.771592][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.786547][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.822740][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 423.950368][T12800] netlink: 'syz.5.2524': attribute type 10 has an invalid length. [ 424.012909][T12800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.070939][T12800] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 424.538644][T12818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.793229][ T5623] Bluetooth: hci3: command 0x040f tx timeout [ 424.793235][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 425.913138][ T50] Bluetooth: hci6: command tx timeout [ 426.006197][T12839] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 426.021754][T12839] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 426.039326][T12839] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 426.073331][T12839] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 426.681299][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.728334][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.773352][T12797] bridge_slave_0: entered allmulticast mode [ 426.811130][T12797] bridge_slave_0: entered promiscuous mode [ 426.857490][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.878929][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 426.905378][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.939446][T12797] bridge_slave_1: entered allmulticast mode [ 427.003742][T12797] bridge_slave_1: entered promiscuous mode [ 427.177010][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.218511][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.291983][T12797] team0: Port device team_slave_0 added [ 427.317173][T12797] team0: Port device team_slave_1 added [ 427.436448][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.463156][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.497777][ T5730] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 427.546089][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.592882][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.652575][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.699124][ T5730] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 427.721920][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.759957][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.778578][ T5730] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 427.815798][ T5730] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 427.858008][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.993164][ T50] Bluetooth: hci6: command tx timeout [ 428.012691][ T5730] usb 5-1: config 0 descriptor?? [ 428.057067][T12797] hsr_slave_0: entered promiscuous mode [ 428.092401][T12797] hsr_slave_1: entered promiscuous mode [ 428.121762][T12797] debugfs: 'hsr0' already exists in 'hsr' [ 428.146647][T12797] Cannot create hsr debugfs directory [ 428.270691][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 428.290324][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.343274][ T5730] usb 5-1: USB disconnect, device number 47 [ 428.956339][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 429.561277][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2563'. [ 430.073710][ T50] Bluetooth: hci6: command tx timeout [ 430.514682][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2570'. [ 430.565901][ T5730] syz1: Port: 1 Link DOWN [ 430.577900][ T48] smbdirect: ib_dev[syz1] removed [ 430.953493][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 432.153751][ T50] Bluetooth: hci6: command tx timeout [ 432.247958][T12902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.278308][T12797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.374356][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.398836][T12797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.403599][T12962] binder: BINDER_SET_CONTEXT_MGR already set [ 432.412499][T12962] binder: 12961:12962 ioctl 4018620d 0 returned -16 [ 432.428853][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.445499][T12797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 432.543733][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.581386][T12797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 432.678363][T12797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.003302][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.070934][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.096265][ T29] audit: type=1400 audit(1785808235.949:774): avc: denied { map } for pid=12990 comm="syz.1.2590" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 433.154713][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.161878][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.223511][ T29] audit: type=1400 audit(1785808235.969:775): avc: denied { execute } for pid=12990 comm="syz.1.2590" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 433.258199][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.265302][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.228372][T13004] syzkaller0: entered promiscuous mode [ 434.250621][T13004] syzkaller0: entered allmulticast mode [ 434.321523][T13015] binder: BINDER_SET_CONTEXT_MGR already set [ 434.344014][T13015] binder: 13014:13015 ioctl 4018620d 0 returned -16 [ 434.555210][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.565171][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.408862][ T29] audit: type=1400 audit(1785808239.259:776): avc: denied { ioctl } for pid=13042 comm="syz.4.2607" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 437.249468][T13060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.413360][ T803] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 438.564963][ T803] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 438.587800][ T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.603748][ T803] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 438.609766][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.631032][ T803] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 438.641606][ T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.659291][ T803] usb 2-1: config 0 descriptor?? [ 438.886091][ T803] usbhid 2-1:0.0: can't add hid device: -71 [ 438.918341][ T803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 438.970697][ T803] usb 2-1: USB disconnect, device number 59 [ 439.279808][T12797] veth0_vlan: entered promiscuous mode [ 439.322630][T12797] veth1_vlan: entered promiscuous mode [ 439.396078][T12797] veth0_macvtap: entered promiscuous mode [ 439.420236][T12797] veth1_macvtap: entered promiscuous mode [ 439.522886][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.598441][T13092] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 439.599483][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.657761][T13092] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 439.699695][T13092] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 439.721113][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 439.783315][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.795480][T13092] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 439.815946][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.003316][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.071972][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.209464][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.235799][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.321969][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.331704][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.570804][T13124] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 440.792666][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 440.836577][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 441.306970][T13161] siw: device registration error -23 [ 441.760629][T13175] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2657'. [ 442.332642][T13206] netlink: 'syz.1.2670': attribute type 4 has an invalid length. [ 443.486341][T13250] syz.3.2690: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 443.503982][T13250] CPU: 0 UID: 0 PID: 13250 Comm: syz.3.2690 Not tainted syzkaller #0 PREEMPT(full) [ 443.504005][T13250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 443.504015][T13250] Call Trace: [ 443.504022][T13250] [ 443.504028][T13250] dump_stack_lvl+0x100/0x190 [ 443.504056][T13250] warn_alloc.cold+0x94/0xa8 [ 443.504075][T13250] ? __pfx_warn_alloc+0x10/0x10 [ 443.504092][T13250] ? policy_nodemask+0xed/0x4f0 [ 443.504118][T13250] ? alloc_pages_mpol+0x25a/0x540 [ 443.504142][T13250] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 443.504167][T13250] ? __kmalloc_node_noprof+0x357/0x830 [ 443.504188][T13250] ? __get_vm_area_node+0x1a0/0x330 [ 443.504210][T13250] ? __get_vm_area_node+0x208/0x330 [ 443.504238][T13250] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 443.504280][T13250] ? __vcalloc_noprof+0x4d/0x80 [ 443.504306][T13250] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 443.504333][T13250] ? lock_acquire+0x1b9/0x370 [ 443.504359][T13250] ? __vcalloc_noprof+0x4d/0x80 [ 443.504380][T13250] __vmalloc_node_noprof+0xad/0xf0 [ 443.504405][T13250] ? __vcalloc_noprof+0x4d/0x80 [ 443.504427][T13250] __vmalloc_noprof+0xa3/0x120 [ 443.504453][T13250] ? __pfx___vmalloc_noprof+0x10/0x10 [ 443.504481][T13250] ? __pfx___mutex_lock+0x10/0x10 [ 443.504511][T13250] __vcalloc_noprof+0x4d/0x80 [ 443.504530][T13250] kvm_arch_prepare_memory_region+0x35c/0x8d0 [ 443.504562][T13250] kvm_set_memslot+0x139/0x1740 [ 443.504580][T13250] ? kvm_set_memory_region+0xc43/0x15e0 [ 443.504602][T13250] kvm_set_memory_region+0xe78/0x15e0 [ 443.504631][T13250] kvm_vm_ioctl+0x1e00/0x4180 [ 443.504657][T13250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.504686][T13250] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 443.504731][T13250] ? kasan_quarantine_put+0x104/0x240 [ 443.504750][T13250] ? lockdep_hardirqs_on+0x78/0x100 [ 443.504772][T13250] ? find_held_lock+0x2b/0x80 [ 443.504786][T13250] ? tomoyo_path_number_perm+0x28f/0x580 [ 443.504812][T13250] ? tomoyo_path_number_perm+0x28f/0x580 [ 443.504842][T13250] ? tomoyo_path_number_perm+0x188/0x580 [ 443.504870][T13250] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 443.504906][T13250] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.504944][T13250] ? __fget_files+0x215/0x3d0 [ 443.504961][T13250] ? hook_file_ioctl_common+0x140/0x440 [ 443.504991][T13250] ? selinux_file_ioctl+0x13b/0x290 [ 443.505018][T13250] ? selinux_file_ioctl+0xb6/0x290 [ 443.505047][T13250] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 443.505074][T13250] __x64_sys_ioctl+0x18e/0x210 [ 443.505102][T13250] do_syscall_64+0x115/0x870 [ 443.505124][T13250] ? clear_bhb_loop+0x40/0x90 [ 443.505146][T13250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.505164][T13250] RIP: 0033:0x7f0bd299dcab [ 443.505190][T13250] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 443.505207][T13250] RSP: 002b:00007f0bd377ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.505226][T13250] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f0bd299dcab [ 443.505238][T13250] RDX: 00007f0bd377ffc0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 443.505248][T13250] RBP: 00007f0bd2a546a0 R08: 0000200000063000 R09: 0000000000000004 [ 443.505265][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001000 [ 443.505274][T13250] R13: 0000000000000009 R14: 0000000000000000 R15: 0000000000399000 [ 443.505297][T13250] [ 443.505385][T13250] Mem-Info: [ 443.853831][T13250] active_anon:29998 inactive_anon:5 isolated_anon:0 [ 443.853831][T13250] active_file:89 inactive_file:63418 isolated_file:0 [ 443.853831][T13250] unevictable:768 dirty:248 writeback:0 [ 443.853831][T13250] slab_reclaimable:12364 slab_unreclaimable:111887 [ 443.853831][T13250] mapped:44044 shmem:20611 pagetables:1514 [ 443.853831][T13250] sec_pagetables:0 bounce:0 [ 443.853831][T13250] kernel_misc_reclaimable:0 [ 443.853831][T13250] free:1225005 free_pcp:6879 free_cma:0 [ 443.900845][T13250] Node 0 active_anon:119992kB inactive_anon:20kB active_file:356kB inactive_file:253468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176176kB dirty:992kB writeback:0kB shmem:80908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13512kB pagetables:5940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 443.937997][T13250] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 443.981884][T13250] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.013838][T13250] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 444.020807][T13250] Node 0 DMA32 free:940908kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:119892kB inactive_anon:20kB active_file:356kB inactive_file:253468kB unevictable:1536kB writepending:992kB zspages:76kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:27580kB local_pcp:17060kB free_cma:0kB [ 444.056469][T13250] lowmem_reserve[]: 0 0 0 0 0 [ 444.061767][T13250] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.099387][T13250] lowmem_reserve[]: 0 0 0 0 0 [ 444.104226][T13250] Node 1 Normal free:3943752kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.135912][T13250] lowmem_reserve[]: 0 0 0 0 0 [ 444.140654][T13250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 444.165547][T13250] Node 0 DMA32: 215*4kB (UE) 146*8kB (UME) 208*16kB (UME) 768*32kB (UME) 420*64kB (UME) 225*128kB (UME) 119*256kB (UME) 69*512kB (UME) 33*1024kB (ME) 17*2048kB (ME) 176*4096kB (UM) = 940908kB [ 444.262066][T13250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 444.288732][T13250] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 9*16kB (UM) 2*32kB (UM) 4*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943528kB [ 444.308964][T13250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.320694][T13250] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.330383][T13250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.342218][T13250] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.345506][T13260] proc_fill_super: can't allocate /proc/thread-self [ 444.361437][T13250] 81264 total pagecache pages [ 444.367294][T13250] 0 pages in swap cache [ 444.371587][T13250] Free swap = 124976kB [ 444.386772][T13250] Total swap = 124996kB [ 444.391168][T13250] 2097051 pages RAM [ 444.396380][T13250] 0 pages HighMem/MovableOnly [ 444.401339][T13250] 432306 pages reserved [ 444.420866][T13250] 0 pages cma reserved [ 444.507859][T13273] socket: no more sockets [ 444.552441][T13273] socket: no more sockets [ 444.574778][T13273] socket: no more sockets [ 448.126110][T13347] netlink: 'syz.6.2732': attribute type 4 has an invalid length. [ 448.356510][T13355] batman_adv: batadv0: Adding interface: dummy0 [ 448.362867][T13355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.390581][T13355] batman_adv: batadv0: Interface activated: dummy0 [ 448.393566][ T5731] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 448.416703][T13356] batadv0: mtu less than device minimum [ 448.423349][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.434694][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.445570][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.456504][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.467809][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.478820][T13356] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.593224][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 448.621499][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.196870][ T5731] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 449.207205][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.217929][ T5731] usb 2-1: config 0 descriptor?? [ 449.437545][ T5731] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 449.843924][ T5709] usb 2-1: USB disconnect, device number 60 [ 450.771348][T13427] netlink: 'syz.3.2763': attribute type 4 has an invalid length. [ 451.339843][T13454] netlink: 'syz.5.2775': attribute type 4 has an invalid length. [ 452.614052][T13507] netlink: 'syz.6.2799': attribute type 4 has an invalid length. [ 453.609008][ T29] audit: type=1400 audit(1785808256.449:777): avc: denied { create } for pid=13530 comm="syz.1.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 453.694539][ T29] audit: type=1400 audit(1785808256.459:778): avc: denied { bind } for pid=13530 comm="syz.1.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 453.800070][ T29] audit: type=1400 audit(1785808256.499:779): avc: denied { ioctl } for pid=13530 comm="syz.1.2807" path="socket:[46338]" dev="sockfs" ino=46338 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 453.901359][T13542] syz_tun: entered promiscuous mode [ 453.917566][ T29] audit: type=1400 audit(1785808256.499:780): avc: denied { listen } for pid=13530 comm="syz.1.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 453.942413][T13542] macvtap1: entered promiscuous mode [ 454.102183][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 454.264485][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.280854][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 454.312801][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.336990][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.352260][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.362090][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.370458][ T9] usb 6-1: Product: syz [ 454.374985][ T9] usb 6-1: Manufacturer: syz [ 454.379634][ T9] usb 6-1: SerialNumber: syz [ 454.402504][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 454.408611][ T9] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 454.416927][ T9] cdc_mbim 6-1:1.0: bind() failure [ 456.387785][T13572] siw: device registration error -23 [ 456.398824][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2820'. [ 456.643995][ T50] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 456.779535][T13591] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 456.787860][T13591] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 456.818303][ T9] usb 6-1: USB disconnect, device number 2 [ 457.138831][ T50] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 457.306750][T13616] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 457.316035][T13616] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 457.412371][T13625] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0 [ 457.438483][T13624] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 457.455888][T13624] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 457.463296][T13624] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 457.493110][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 457.540649][ T29] audit: type=1400 audit(1785808260.389:781): avc: denied { ioctl } for pid=13630 comm="syz.1.2847" path="socket:[45741]" dev="sockfs" ino=45741 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 457.566465][ T29] audit: type=1400 audit(1785808260.419:782): avc: denied { write } for pid=13630 comm="syz.1.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 457.653145][ T803] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 457.667123][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 457.699780][ T9] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 457.722852][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 457.732338][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.814890][ T803] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 457.828236][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.839732][ T803] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 457.855501][ T803] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 457.865019][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.875467][ T803] usb 6-1: config 0 descriptor?? [ 457.964689][T13612] bond1: Unable to set up delay as MII monitoring is disabled [ 457.975058][T13612] bond1 (unregistering): Released all slaves [ 458.005767][T13646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 458.045041][ T990] usb 4-1: USB disconnect, device number 8 [ 458.089147][ T803] usbhid 6-1:0.0: can't add hid device: -71 [ 458.095917][ T803] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 458.106564][ T803] usb 6-1: USB disconnect, device number 3 [ 458.696511][T13655] net_ratelimit: 13 callbacks suppressed [ 458.696530][T13655] socket: no more sockets [ 458.708574][T13655] IPVS: Error during creation of socket; terminating [ 459.781876][T13668] netlink: 'syz.3.2863': attribute type 4 has an invalid length. [ 460.873407][T13680] overlayfs: failed to resolve './file1/file0': -2 [ 461.404573][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 461.427222][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 461.439797][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 461.448309][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 461.457677][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.714910][ T29] audit: type=1400 audit(1785808265.179:783): avc: denied { read } for pid=13696 comm="syz.3.2871" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 462.862958][ T29] audit: type=1400 audit(1785808265.179:784): avc: denied { open } for pid=13696 comm="syz.3.2871" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 462.955908][ T29] audit: type=1400 audit(1785808265.179:785): avc: denied { ioctl } for pid=13696 comm="syz.3.2871" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 463.591127][ T5623] Bluetooth: hci7: command tx timeout [ 463.902898][T13713] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 463.914973][T13713] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 464.246222][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 464.427750][T13744] overlayfs: failed to resolve './file1/file0': -2 [ 464.955833][T13678] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.968281][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.976516][T13678] bridge_slave_0: entered allmulticast mode [ 464.985174][T13678] bridge_slave_0: entered promiscuous mode [ 464.993750][T13678] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.000984][T13678] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.008763][T13678] bridge_slave_1: entered allmulticast mode [ 465.020551][T13678] bridge_slave_1: entered promiscuous mode [ 465.059769][T13678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.072737][T13678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.131095][T13678] team0: Port device team_slave_0 added [ 465.151396][T13678] team0: Port device team_slave_1 added [ 465.298453][T13678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.309140][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.338495][T13678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.350738][T13751] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 465.378073][T13751] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 465.388886][T13678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.396226][T13678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.490942][T13678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.507481][ T5623] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 465.680327][ T5623] Bluetooth: hci7: command tx timeout [ 465.747812][T13678] hsr_slave_0: entered promiscuous mode [ 465.769510][T13678] hsr_slave_1: entered promiscuous mode [ 465.799221][T13678] debugfs: 'hsr0' already exists in 'hsr' [ 465.821411][T13678] Cannot create hsr debugfs directory [ 466.036199][ T803] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 466.197857][ T803] usb 6-1: Using ep0 maxpacket: 8 [ 466.212940][ T803] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 466.240759][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.288917][ T803] usb 6-1: config 0 has no interface number 0 [ 466.312229][ T803] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 466.359166][ T803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.390133][ T803] usb 6-1: Product: syz [ 466.406121][ T803] usb 6-1: Manufacturer: syz [ 466.425891][ T803] usb 6-1: SerialNumber: syz [ 466.455745][ T803] usb 6-1: config 0 descriptor?? [ 466.482182][ T803] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 466.692035][ T5730] usb 6-1: USB disconnect, device number 4 [ 466.908844][T13678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.949111][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.015049][T13678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.069972][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.090140][T13678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 467.095017][T13772] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 467.103901][T13772] udc dummy_udc.0: failed to start g1: -19 [ 467.125027][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.142256][T13772] UDC core: g1: couldn't find an available UDC or it's busy [ 467.208017][T13678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 467.234524][T13678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.311221][T13747] syz.6.2881 (13747): drop_caches: 2 [ 467.446553][T13678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.502590][T13678] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.800750][ T5623] Bluetooth: hci7: command tx timeout [ 467.930744][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.937857][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.977833][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.984968][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.414072][ T29] audit: type=1400 audit(1785808271.269:786): avc: denied { read } for pid=13794 comm="syz.6.2898" name="trace_pipe" dev="tracefs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 469.836288][ T5623] Bluetooth: hci7: command tx timeout [ 469.909610][T13816] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 469.918907][T13816] udc dummy_udc.0: failed to start g1: -19 [ 469.925731][T13816] UDC core: g1: couldn't find an available UDC or it's busy [ 470.223946][T13764] Set syz1 is full, maxelem 65536 reached [ 470.658324][T13678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.911055][T13855] socket: no more sockets [ 470.954547][T13855] socket: no more sockets [ 471.168665][T13678] veth0_vlan: entered promiscuous mode [ 471.220815][T13678] veth1_vlan: entered promiscuous mode [ 471.352095][T13678] veth0_macvtap: entered promiscuous mode [ 471.418191][T13678] veth1_macvtap: entered promiscuous mode [ 471.505464][T13678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.549114][T13678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.597075][ T5899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.629991][ T5899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.696990][ T1020] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.773116][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.988160][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.011405][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.080407][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.099574][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.229916][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2930'. [ 472.382201][ T29] audit: type=1400 audit(1785808275.229:787): avc: denied { read } for pid=5270 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 472.659379][T13926] loop7: detected capacity change from 0 to 16384 [ 472.723650][ T803] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 472.896890][ T803] usb 7-1: Using ep0 maxpacket: 32 [ 472.914177][ T803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.932225][ T803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.942949][ T803] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 472.952643][ T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.964431][ T803] usb 7-1: config 0 descriptor?? [ 472.973668][ T803] hub 7-1:0.0: USB hub found [ 473.281160][ T803] hub 7-1:0.0: 1 port detected [ 474.314117][ T803] hub 7-1:0.0: activate --> -90 [ 474.502937][T13956] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 474.545550][T13956] udc dummy_udc.0: failed to start g1: -19 [ 474.606778][T13956] UDC core: g1: couldn't find an available UDC or it's busy [ 474.667610][T13959] loop7: detected capacity change from 0 to 16384 [ 474.867213][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 474.902667][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2954'. [ 475.027211][ T29] audit: type=1400 audit(1785808277.879:788): avc: denied { write } for pid=13972 comm="syz.5.2956" name="functions" dev="configfs" ino=20348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.133825][ T803] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 475.443603][ T5709] usb 7-1: USB disconnect, device number 2 [ 475.953927][ T5746] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 476.091894][T14001] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 476.099461][T14001] udc dummy_udc.0: failed to start g1: -19 [ 476.106445][T14001] UDC core: g1: couldn't find an available UDC or it's busy [ 476.115407][ T5746] usb 6-1: Using ep0 maxpacket: 16 [ 476.125845][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.155623][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.187297][ T5746] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.209021][ T5746] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.218660][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.233810][ T990] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 476.433423][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 476.474428][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.635477][ T990] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.664283][ T5746] usb 6-1: config 0 descriptor?? [ 476.689468][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.721456][ T990] usb 2-1: config 0 descriptor?? [ 476.850793][T14013] fuse: Bad value for 'fd' [ 476.987366][ T29] audit: type=1400 audit(1785808279.819:789): avc: denied { write } for pid=14015 comm="syz.3.2970" name="extensions" dev="configfs" ino=47742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.091422][ T990] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 477.284575][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.308079][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.322227][ T5746] usbhid 6-1:0.0: can't add hid device: -71 [ 477.330869][ T5746] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 477.360639][ T5746] usb 6-1: USB disconnect, device number 5 [ 477.373254][ T990] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 477.469345][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 477.521387][ T803] usb 2-1: USB disconnect, device number 61 [ 477.555625][T12170] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 477.573198][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 477.580068][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.592541][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.602872][ T990] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 477.611957][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.623060][ T990] usb 7-1: config 0 descriptor?? [ 477.630741][ T990] hub 7-1:0.0: USB hub found [ 477.713119][T12170] usb 8-1: Using ep0 maxpacket: 32 [ 477.719808][T12170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.731260][T12170] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.741094][T12170] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 477.750228][T12170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.760896][T12170] usb 8-1: config 0 descriptor?? [ 477.768517][T12170] hub 8-1:0.0: USB hub found [ 477.837132][ T990] hub 7-1:0.0: 1 port detected [ 478.014203][T12170] hub 8-1:0.0: 1 port detected [ 478.040337][ T990] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 478.100139][ T990] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 478.137862][ T990] usbhid 7-1:0.0: can't add hid device: -71 [ 478.159389][ T990] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 478.191224][ T5623] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 478.204410][ T990] usb 7-1: USB disconnect, device number 3 [ 478.552742][T14054] loop7: detected capacity change from 0 to 16384 [ 478.624912][T12170] hub 8-1:0.0: activate --> -90 [ 479.299963][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 479.326705][T14072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 479.433140][T12170] hub 8-1:0.0: hub_ext_port_status failed (err = 0) [ 479.640769][ T5746] usb 8-1: USB disconnect, device number 2 [ 479.678654][ T7181] rpcbind: server 127.0.0.1 not responding, timed out [ 479.809957][ T5623] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 480.368289][ T29] audit: type=1400 audit(1785808283.219:790): avc: denied { write } for pid=14082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.221699][ T29] audit: type=1400 audit(1785808284.069:791): avc: denied { write } for pid=14120 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.474247][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'. [ 482.564519][ T990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 482.792727][T14162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.885658][ T990] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 482.932834][ T990] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 482.958888][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.018552][ T990] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 483.295243][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3014'. [ 483.387228][T14155] bond1: Unable to set up delay as MII monitoring is disabled [ 483.448020][T14155] bond1 (unregistering): Released all slaves [ 483.568357][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3023'. [ 483.582181][ T29] audit: type=1400 audit(1785808286.429:792): avc: denied { write } for pid=14139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.905630][ T29] audit: type=1400 audit(1785808286.759:793): avc: denied { write } for pid=14192 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.074984][ T990] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 484.116364][ T990] stv0680 7-1:4.0: STV(e): camera ping failed!! [ 484.151288][ T990] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 484.199245][ T990] stv0680 7-1:4.0: last error: 0, command = 0x0 [ 484.259704][ T990] usb 7-1: USB disconnect, device number 4 [ 484.292566][T14202] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3028'. [ 485.061943][T14207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.341892][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 485.469373][ T29] audit: type=1400 audit(1785808288.319:794): avc: denied { create } for pid=14216 comm="syz.6.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 486.563124][ T990] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 486.773398][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 486.807151][ T990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 486.867545][ T990] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 486.907503][ T990] usb 7-1: can't read configurations, error -71 [ 486.917456][ T29] audit: type=1400 audit(1785808289.759:795): avc: denied { write } for pid=14199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.973172][ T5709] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 487.169190][ T5709] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 487.201593][ T5709] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 487.215173][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.259274][ T5709] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 487.441312][ T29] audit: type=1400 audit(1785808290.289:796): avc: denied { write } for pid=14251 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.516417][T12170] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 487.594163][T14258] overlayfs: overlapping lowerdir path [ 487.623744][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3040'. [ 488.090242][T14243] bond2: Unable to set up delay as MII monitoring is disabled [ 488.120382][T14243] bond2 (unregistering): Released all slaves [ 489.047774][T12170] usb 6-1: Using ep0 maxpacket: 32 [ 489.132592][T12170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.175514][T12170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.196004][T12170] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 489.218892][T12170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.292394][ T5709] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 489.320547][T12170] usb 6-1: config 0 descriptor?? [ 489.324203][ T5709] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 489.333388][ T5709] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 489.341630][ T5709] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 489.358460][ T5709] usb 2-1: USB disconnect, device number 62 [ 489.906250][T12170] hub 6-1:0.0: USB hub found [ 490.118218][T12170] hub 6-1:0.0: 1 port detected [ 490.638363][T14292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.728990][T12170] hub 6-1:0.0: activate --> -90 [ 491.003089][ T803] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 491.034635][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 491.198350][ T803] usb 7-1: Using ep0 maxpacket: 32 [ 491.226396][ T803] usb 7-1: unable to get BOS descriptor or descriptor too short [ 491.352190][ T803] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 491.375274][ T803] usb 7-1: can't read configurations, error -71 [ 491.544156][T12170] hub 6-1:0.0: hub_ext_port_status failed (err = 2) [ 492.071122][T12170] usb 6-1-port1: cannot disable (err = -71) [ 492.085997][ T990] usb 6-1: USB disconnect, device number 6 [ 492.637597][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 493.103134][ T803] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 493.265249][ T803] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 493.304784][T12170] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 493.316291][ T803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 493.330094][ T803] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 493.345968][ T803] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 493.357225][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.369497][ T803] usb 4-1: config 0 descriptor?? [ 493.454060][T12170] usb 2-1: device descriptor read/64, error -71 [ 493.599075][ T803] usbhid 4-1:0.0: can't add hid device: -71 [ 493.629811][ T803] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 493.674679][ T803] usb 4-1: USB disconnect, device number 9 [ 493.704180][T12170] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 493.843185][T12170] usb 2-1: device descriptor read/64, error -71 [ 493.936309][ T5899] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.954677][T12170] usb usb2-port1: attempt power cycle [ 494.147694][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.162305][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.175724][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.186548][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.194324][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.317255][T12170] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 494.330903][ T5899] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.363984][T12170] usb 2-1: device descriptor read/8, error -71 [ 494.546154][ T5899] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.623166][T12170] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 494.653570][T12170] usb 2-1: device descriptor read/8, error -71 [ 494.770039][ T5899] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.784466][T12170] usb usb2-port1: unable to enumerate USB device [ 494.980497][ T29] audit: type=1400 audit(1785808297.829:797): avc: denied { call } for pid=14372 comm="syz.6.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 496.032222][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.039986][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.222043][T14383] syz.7.3085 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 496.298221][T14383] CPU: 0 UID: 0 PID: 14383 Comm: syz.7.3085 Not tainted syzkaller #0 PREEMPT(full) [ 496.298250][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 496.298261][T14383] Call Trace: [ 496.298268][T14383] [ 496.298277][T14383] dump_stack_lvl+0x100/0x190 [ 496.298307][T14383] dump_header+0xfb/0x606 [ 496.298331][T14383] oom_kill_process.cold+0xd/0x330 [ 496.298356][T14383] out_of_memory+0x340/0x14f0 [ 496.298392][T14383] ? __pfx_out_of_memory+0x10/0x10 [ 496.298429][T14383] mem_cgroup_out_of_memory+0xc6/0x130 [ 496.298451][T14383] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 496.298470][T14383] ? find_held_lock+0x2b/0x80 [ 496.298494][T14383] ? do_raw_spin_unlock+0x145/0x1e0 [ 496.298523][T14383] ? _raw_spin_unlock+0x28/0x50 [ 496.298546][T14383] try_charge_memcg+0x6e5/0xdf0 [ 496.298580][T14383] ? __pfx_try_charge_memcg+0x10/0x10 [ 496.298607][T14383] ? find_held_lock+0x2b/0x80 [ 496.298624][T14383] ? rcu_read_unlock+0x17/0x60 [ 496.298650][T14383] ? rcu_read_unlock+0x17/0x60 [ 496.298684][T14383] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 496.298718][T14383] ? kasan_unpoison+0x27/0x60 [ 496.298741][T14383] __kmalloc_noprof+0x644/0x820 [ 496.298764][T14383] ? __register_sysctl_table+0xac/0x1650 [ 496.298794][T14383] __register_sysctl_table+0xac/0x1650 [ 496.298817][T14383] ? __kasan_kmalloc+0xaa/0xb0 [ 496.298844][T14383] ? __pfx___register_sysctl_table+0x10/0x10 [ 496.298866][T14383] ? register_pidns_sysctls+0x48/0x1c0 [ 496.298890][T14383] ? __asan_memcpy+0x3c/0x60 [ 496.298912][T14383] register_pidns_sysctls+0x11d/0x1c0 [ 496.298931][T14383] ? __ns_common_init+0x299/0x4b0 [ 496.298962][T14383] copy_pid_ns+0x680/0x10a0 [ 496.298991][T14383] ? __pfx_copy_pid_ns+0x10/0x10 [ 496.299016][T14383] ? rcu_is_watching+0x12/0xc0 [ 496.299047][T14383] ? __pfx_copy_mnt_ns+0x10/0x10 [ 496.299073][T14383] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 496.299097][T14383] ? create_new_namespaces+0x30/0xac0 [ 496.299128][T14383] create_new_namespaces+0x2aa/0xac0 [ 496.299161][T14383] unshare_nsproxy_namespaces+0xf2/0x220 [ 496.299190][T14383] ksys_unshare+0x438/0xab0 [ 496.299228][T14383] ? __pfx_ksys_unshare+0x10/0x10 [ 496.299266][T14383] __x64_sys_unshare+0x31/0x40 [ 496.299294][T14383] do_syscall_64+0x115/0x870 [ 496.299318][T14383] ? clear_bhb_loop+0x40/0x90 [ 496.299341][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.299360][T14383] RIP: 0033:0x7f074c99e019 [ 496.299377][T14383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.299395][T14383] RSP: 002b:00007f074d8a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 496.299413][T14383] RAX: ffffffffffffffda RBX: 00007f074cc25fa0 RCX: 00007f074c99e019 [ 496.299425][T14383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 496.299436][T14383] RBP: 00007f074ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 496.299447][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.299458][T14383] R13: 00007f074cc26038 R14: 00007f074cc25fa0 R15: 00007ffe07d55958 [ 496.299485][T14383] [ 496.605766][T14383] memory: usage 8kB, limit 8kB, failcnt 21 [ 496.612897][T14383] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 496.620753][T14383] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 496.622255][ T50] Bluetooth: hci3: command tx timeout [ 496.629053][T14383] Memory cgroup stats for /syz7/test: [ 496.638505][T14383] cache 0 [ 496.657165][ T5899] bridge_slave_1: left allmulticast mode [ 496.663258][T14383] rss 0 [ 496.663272][T14383] rss_huge 0 [ 496.663280][T14383] shmem 0 [ 496.663287][T14383] mapped_file 0 [ 496.663294][T14383] dirty 0 [ 496.663302][T14383] writeback 0 [ 496.663308][T14383] workingset_refault_anon 0 [ 496.663316][T14383] workingset_refault_file 0 [ 496.663324][T14383] swap 0 [ 496.663331][T14383] swapcached 0 [ 496.663338][T14383] pgpgin 0 [ 496.663345][T14383] pgpgout 0 [ 496.663352][T14383] pgfault 0 [ 496.663359][T14383] pgmajfault 0 [ 496.663366][T14383] inactive_anon 0 [ 496.663374][T14383] active_anon 0 [ 496.663381][T14383] inactive_file 0 [ 496.663388][T14383] active_file 0 [ 496.663395][T14383] unevictable 0 [ 496.663403][T14383] hierarchical_memory_limit 8192 [ 496.663411][T14383] hierarchical_memsw_limit 9223372036854771712 [ 496.663421][T14383] total_cache 0 [ 496.663428][T14383] total_rss 0 [ 496.663435][T14383] total_rss_huge 0 [ 496.663442][T14383] total_shmem 0 [ 496.663449][T14383] total_mapped_file 0 [ 496.663456][T14383] total_dirty 0 [ 496.663463][T14383] total_writeback 0 [ 496.663471][T14383] total_workingset_refault_anon 0 [ 496.667297][ T5899] bridge_slave_1: left promiscuous mode [ 496.669952][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.672430][T14383] total_workingset_refault_file 0 [ 496.792125][T14383] total_swap 0 [ 496.795628][T14383] total_swapcached 0 [ 496.799577][T14383] total_pgpgin 0 [ 496.803191][T14383] total_pgpgout 0 [ 496.806861][T14383] total_pgfault 0 [ 496.810528][T14383] total_pgmajfault 0 [ 496.814478][T14383] total_inactive_anon 0 [ 496.818670][T14383] total_active_anon 0 [ 496.822683][T14383] total_inactive_file 0 [ 496.831413][T14383] total_active_file 0 [ 496.835680][T14383] total_unevictable 0 [ 496.839730][T14383] anon_cost 0 [ 496.843737][T14383] file_cost 0 [ 496.847075][T14383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.3085,pid=14382,uid=0 [ 496.892628][ T5899] bridge_slave_0: left allmulticast mode [ 496.898661][ T5899] bridge_slave_0: left promiscuous mode [ 496.904694][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.908718][T14383] Memory cgroup out of memory: Killed process 14382 (syz.7.3085) total-vm:102180kB, anon-rss:1416kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 497.903459][ T803] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 498.057855][ T803] usb 7-1: Using ep0 maxpacket: 32 [ 498.075829][ T803] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 498.107702][ T803] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 498.126453][ T803] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 498.148944][ T803] usb 7-1: Product: syz [ 498.167886][ T803] usb 7-1: Manufacturer: syz [ 498.191356][ T803] usb 7-1: SerialNumber: syz [ 498.221058][ T803] usb 7-1: config 0 descriptor?? [ 498.242737][T14389] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 498.252064][ T803] hub 7-1:0.0: bad descriptor, ignoring hub [ 498.267974][ T803] hub 7-1:0.0: probe with driver hub failed with error -5 [ 498.301711][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 498.458296][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.487903][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.510408][ T5899] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 498.522495][ T5899] bond0 (unregistering): Released all slaves [ 498.594227][ T7181] smbdirect: ib_dev[syz1] removed [ 498.713130][ T50] Bluetooth: hci3: command tx timeout [ 499.210935][ T50] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 499.390211][ T29] audit: type=1400 audit(1785808302.239:798): avc: denied { write } for pid=14412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.604930][T12170] usb 7-1: USB disconnect, device number 9 [ 499.651632][ T29] audit: type=1400 audit(1785808302.499:799): avc: denied { write } for pid=14436 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.721070][ T5899] hsr_slave_0: left promiscuous mode [ 499.777112][ T5899] hsr_slave_1: left promiscuous mode [ 499.800338][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.813748][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.822542][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.842145][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.544344][ T5899] veth1_macvtap: left promiscuous mode [ 500.555950][ T5899] veth0_macvtap: left promiscuous mode [ 500.568750][ T5899] veth1_vlan: left promiscuous mode [ 500.582600][ T5899] veth0_vlan: left promiscuous mode [ 500.633144][T12170] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 500.798744][ T50] Bluetooth: hci3: command tx timeout [ 500.821550][T12170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.843894][T12170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.871274][T12170] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 500.881174][T12170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.916069][T12170] usb 4-1: config 0 descriptor?? [ 501.245552][ T5899] team0 (unregistering): Port device team_slave_1 removed [ 501.267068][ T5899] team0 (unregistering): Port device team_slave_0 removed [ 501.372124][T12170] arvo 0003:1E7D:30D4.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 501.482891][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.555263][T12170] arvo 0003:1E7D:30D4.0018: couldn't init struct arvo_device [ 501.595573][T12170] arvo 0003:1E7D:30D4.0018: couldn't install keyboard [ 501.652230][T12170] arvo 0003:1E7D:30D4.0018: probe with driver arvo failed with error -71 [ 501.670371][T12170] usb 4-1: USB disconnect, device number 10 [ 501.837435][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.853623][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.867373][T14344] bridge_slave_0: entered allmulticast mode [ 501.884900][T14344] bridge_slave_0: entered promiscuous mode [ 501.956688][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.965575][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.975363][T14344] bridge_slave_1: entered allmulticast mode [ 501.982974][T14344] bridge_slave_1: entered promiscuous mode [ 502.125101][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.209770][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.301348][ T5899] IPVS: stop unused estimator thread 0... [ 502.387406][ T29] audit: type=1400 audit(1785808305.239:800): avc: denied { write } for pid=14466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.404070][T14344] team0: Port device team_slave_0 added [ 502.452528][T14344] team0: Port device team_slave_1 added [ 502.623167][ T803] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 502.666669][ T29] audit: type=1400 audit(1785808305.519:801): avc: denied { write } for pid=14491 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.791847][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.803949][ T803] usb 8-1: Using ep0 maxpacket: 32 [ 502.830623][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.873157][ T50] Bluetooth: hci3: command tx timeout [ 502.885193][ T803] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 502.920366][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.931560][ T803] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 502.952054][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 502.963141][ T803] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 502.990396][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.006742][ T803] usb 8-1: Product: syz [ 503.009255][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 503.026333][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.052263][ T803] usb 8-1: Manufacturer: syz [ 503.052286][ T803] usb 8-1: SerialNumber: syz [ 503.065997][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.066914][ T803] usb 8-1: config 0 descriptor?? [ 503.131383][T14485] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 503.157834][ T803] hub 8-1:0.0: bad descriptor, ignoring hub [ 503.179055][ T803] hub 8-1:0.0: probe with driver hub failed with error -5 [ 503.228954][T14344] hsr_slave_0: entered promiscuous mode [ 503.266865][T14344] hsr_slave_1: entered promiscuous mode [ 503.288263][T14344] debugfs: 'hsr0' already exists in 'hsr' [ 503.308633][T14344] Cannot create hsr debugfs directory [ 503.857579][T14512] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3120'. [ 503.868681][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'. [ 504.616366][ T29] audit: type=1400 audit(1785808307.469:802): avc: denied { open } for pid=14527 comm="syz.6.3123" path="/dev/ttyr0" dev="devtmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 504.732533][ T7181] rpcbind: RPC call returned error 22 [ 504.879515][ T29] audit: type=1400 audit(1785808307.729:803): avc: denied { write } for pid=14504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.923035][ T24] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 505.093073][ T29] audit: type=1400 audit(1785808307.939:804): avc: denied { write } for pid=14534 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.112694][T14344] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 505.152433][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.205623][T14344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.216899][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.234880][T14344] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 505.267514][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.281864][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.283395][T12171] usb 8-1: USB disconnect, device number 3 [ 505.312449][T14344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.328891][ T24] usb 7-1: Product: syz [ 505.338458][T14344] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 505.348207][ T24] usb 7-1: Manufacturer: syz [ 505.360507][ T24] usb 7-1: SerialNumber: syz [ 505.457228][T14344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.498868][T14540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.529521][ T24] usb 7-1: 0:2 : does not exist [ 505.537406][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 505.559382][T14344] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 505.570659][ T24] usb 7-1: unit 9 not found! [ 505.606284][T14344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.664973][ T24] usb 7-1: 4:0: cannot get min/max values for control 4 (id 4) [ 505.706582][ T24] usb 7-1: 4:0: cannot get min/max values for control 6 (id 4) [ 505.745116][ T24] usb 7-1: 4:0: cannot get min/max values for control 9 (id 4) [ 505.880089][ T24] usb 7-1: USB disconnect, device number 10 [ 505.987220][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.103545][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.149338][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.156545][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.355495][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.362690][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.793799][ T990] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 506.817994][T14575] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3132'. [ 506.862095][T14575] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3132'. [ 507.008210][ T990] usb 8-1: unable to get BOS descriptor or descriptor too short [ 507.048571][ T29] audit: type=1400 audit(1785808309.899:805): avc: denied { write } for pid=14548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.054557][ T990] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.229882][ T990] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 507.291357][ T990] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 507.366816][ T990] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 507.392663][ T29] audit: type=1400 audit(1785808310.239:806): avc: denied { write } for pid=14588 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.498826][ T990] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 507.697217][ T990] usb 8-1: config 1 interface 1 has no altsetting 0 [ 507.745385][ T990] usb 8-1: string descriptor 0 read error: -22 [ 507.769470][ T990] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 508.281351][ T990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.963939][ T29] audit: type=1400 audit(1785808312.209:807): avc: denied { write } for pid=14606 comm="syz.6.3138" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 510.073245][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 510.114331][ T990] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 510.182424][ T990] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 510.416605][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3141'. [ 510.426094][T14615] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3141'. [ 511.176630][ T990] usb 8-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 511.319709][ T990] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 511.438001][ T990] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 511.564217][ T990] usb 8-1: USB disconnect, device number 4 [ 511.710479][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.770688][T14344] veth0_vlan: entered promiscuous mode [ 512.888224][T14344] veth1_vlan: entered promiscuous mode [ 513.048522][T14344] veth0_macvtap: entered promiscuous mode [ 513.108438][T14344] veth1_macvtap: entered promiscuous mode [ 513.190296][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.255162][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.380676][T14653] socket: no more sockets [ 513.455008][ T1020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.500905][ T1020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.603743][ T1020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.639123][ T1020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.797144][T14662] syzkaller0: entered promiscuous mode [ 513.819570][T14662] syzkaller0: entered allmulticast mode [ 519.938443][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.969106][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.565597][T14710] 9pnet_fd: Insufficient options for proto=fd [ 520.787559][ T29] audit: type=1400 audit(1785808323.409:808): avc: denied { create } for pid=14708 comm="syz.3.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 520.895292][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.920766][ T29] audit: type=1400 audit(1785808323.409:809): avc: denied { write } for pid=14708 comm="syz.3.3166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 520.928046][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.333089][ T990] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 522.477646][ T990] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 522.515892][ T990] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 522.592004][T14736] x_tables: duplicate underflow at hook 1 [ 523.670785][ T990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.771039][ T990] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 523.974130][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3171'. [ 524.121014][ T29] audit: type=1400 audit(1785808326.969:810): avc: denied { write } for pid=14728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.361307][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 524.378813][ T5623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 524.390724][ T5623] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 524.400051][ T5623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 524.410755][ T5623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 524.789592][ T29] audit: type=1400 audit(1785808327.639:811): avc: denied { write } for pid=14752 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.881843][ T990] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 524.939210][ T990] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 524.988841][ T990] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 525.046812][ T990] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 525.097361][ T990] usb 8-1: USB disconnect, device number 5 [ 526.474309][ T50] Bluetooth: hci8: command tx timeout [ 526.593352][ T5746] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 526.634748][ T990] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 526.700768][ T29] audit: type=1400 audit(1785808329.549:812): avc: denied { write } for pid=14767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.755137][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 526.783227][ T5746] usb 9-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 526.814765][ T990] usb 8-1: config 1 has an invalid interface number: 13 but max is 0 [ 526.826399][ T990] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.836951][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.860505][ T29] audit: type=1400 audit(1785808329.709:813): avc: denied { write } for pid=14811 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.871275][ T5746] usb 9-1: Product: syz [ 526.894898][ T990] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 526.919958][ T990] usb 8-1: config 1 has no interface number 1 [ 526.961753][ T5746] usb 9-1: Manufacturer: syz [ 526.975856][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 526.980781][ T5746] usb 9-1: SerialNumber: syz [ 527.004477][ T990] usb 8-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 527.039891][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 527.054868][ T990] usb 8-1: config 1 interface 13 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 527.079658][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.095217][ T990] usb 8-1: config 1 interface 13 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 527.110412][ T990] usb 8-1: config 1 interface 13 has no altsetting 0 [ 527.128374][ T24] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 527.136534][ T990] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 527.146115][ T990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.154488][ T990] usb 8-1: Product: syz [ 527.158788][ T990] usb 8-1: Manufacturer: syz [ 527.163732][ T990] usb 8-1: SerialNumber: syz [ 527.174124][ T990] usb-storage 8-1:1.0: USB Mass Storage device detected [ 527.187641][ T990] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 527.201410][ T990] scsi host1: usb-storage 8-1:1.0 [ 527.214059][ T990] usb-storage 8-1:1.13: USB Mass Storage device detected [ 527.229903][ T990] usb-storage 8-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 527.278237][ T5746] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.338458][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3187'. [ 527.369392][ T5746] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 527.382271][ T990] usb 8-1: USB disconnect, device number 6 [ 527.511039][ T5746] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.550056][ T5746] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 527.571083][T14831] fuse: Bad value for 'fd' [ 527.619487][ T5746] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.658855][ T50] Bluetooth: hci8: command tx timeout [ 528.665531][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 528.714618][ T24] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 528.725640][ T24] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 528.733949][ T24] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 528.742880][ T24] usb 4-1: USB disconnect, device number 11 [ 528.831300][ T5746] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 528.910599][ T5746] usb 9-1: USB disconnect, device number 2 [ 529.006042][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.017129][T14843] syzkaller0: entered promiscuous mode [ 529.934393][T14843] syzkaller0: entered allmulticast mode [ 529.950351][T14750] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.959272][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.024585][T14750] bridge_slave_0: entered allmulticast mode [ 530.086319][T14750] bridge_slave_0: entered promiscuous mode [ 530.131352][ T29] audit: type=1400 audit(1785808332.979:814): avc: denied { write } for pid=14825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.344150][ T29] audit: type=1400 audit(1785808333.199:815): avc: denied { write } for pid=14859 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.723091][ T50] Bluetooth: hci8: command tx timeout [ 530.921711][T14869] UDC core: g1: couldn't find an available UDC or it's busy [ 531.139505][T14875] socket: no more sockets [ 531.353548][T14879] loop7: detected capacity change from 0 to 16384 [ 532.797703][ T50] Bluetooth: hci8: command tx timeout [ 532.987176][ T29] audit: type=1400 audit(1785808335.839:816): avc: denied { shutdown } for pid=14886 comm="syz.3.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.328901][T14908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.707268][T14750] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.718598][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.726889][T14750] bridge_slave_1: entered allmulticast mode [ 538.734746][T14750] bridge_slave_1: entered promiscuous mode [ 538.837486][T14750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.892917][T14750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.944969][T14750] team0: Port device team_slave_0 added [ 539.973163][T14750] team0: Port device team_slave_1 added [ 540.062145][T14750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.080154][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.148512][T14750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.227866][T14750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.254647][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.314672][T14750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.479523][T14750] hsr_slave_0: entered promiscuous mode [ 540.505572][T14750] hsr_slave_1: entered promiscuous mode [ 540.522524][ T29] audit: type=1400 audit(1785808343.369:817): avc: denied { write } for pid=14919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.526981][T14750] debugfs: 'hsr0' already exists in 'hsr' [ 540.596724][T14750] Cannot create hsr debugfs directory [ 541.610081][ T29] audit: type=1400 audit(1785808344.459:818): avc: denied { write } for pid=14948 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.204257][ T29] audit: type=1400 audit(1785808345.019:819): avc: denied { write } for pid=14956 comm="syz.3.3220" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 545.500905][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3233'. [ 545.951353][T14750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.002267][T14750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.047762][T14750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 547.073849][T14750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.156851][T14750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.212805][T14750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.234385][T14750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.248509][T14750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.448536][T14750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.497626][T14750] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.534456][T15023] could not allocate digest TFM handle cryptd(hmac(sha1-ce)) [ 547.549123][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.556291][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.588909][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.596081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.631311][ T50] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 547.808297][ T29] audit: type=1326 audit(1785808350.659:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.6.3247" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 547.902336][ T29] audit: type=1326 audit(1785808350.659:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.6.3247" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 548.005605][ T29] audit: type=1326 audit(1785808350.699:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm="syz.6.3247" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 548.141593][ T29] audit: type=1326 audit(1785808350.699:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm=FF exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 548.238914][ T29] audit: type=1326 audit(1785808350.699:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm=FF exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 548.353263][ T29] audit: type=1326 audit(1785808350.709:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm=FF exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 548.412196][ T29] audit: type=1326 audit(1785808350.709:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm=FF exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 549.286071][T15072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.439887][ T29] audit: type=1326 audit(1785808350.709:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15043 comm=FF exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cb9e019 code=0x7ffc0000 [ 550.516380][T15077] netlink: 'syz.6.3257': attribute type 7 has an invalid length. [ 550.542667][T15077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3257'. [ 550.587432][T14750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.728437][T14750] veth0_vlan: entered promiscuous mode [ 550.781935][T14750] veth1_vlan: entered promiscuous mode [ 550.884445][T14750] veth0_macvtap: entered promiscuous mode [ 550.942188][T14750] veth1_macvtap: entered promiscuous mode [ 551.037321][T14750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.108095][T14750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.117427][T15087] fuse: Bad value for 'fd' [ 551.150484][T15096] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 551.193715][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.207138][ T29] audit: type=1400 audit(1785808354.059:828): avc: denied { execute } for pid=15088 comm="syz.8.3261" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 551.313523][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.329188][ T134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.331493][ T29] audit: type=1400 audit(1785808354.179:829): avc: denied { read } for pid=15097 comm="syz.7.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 551.389529][T15099] openvswitch: netlink: Message has 5920 unknown bytes. [ 552.022609][T15099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.157104][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.231636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.251746][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.317234][ T30] INFO: task syz.2.2384:12423 blocked for more than 143 seconds. [ 552.346243][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.354588][ T30] Not tainted syzkaller #0 [ 552.366288][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.375655][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.392343][ T30] task:syz.2.2384 state:D stack:28688 pid:12423 tgid:12420 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 552.423309][ T30] Call Trace: [ 552.436815][ T30] [ 552.441541][ T30] __schedule+0x125c/0x6730 [ 552.446453][ T30] ? do_raw_spin_lock+0x128/0x260 [ 552.451570][ T30] ? __pfx___schedule+0x10/0x10 [ 552.456963][ T30] ? find_held_lock+0x2b/0x80 [ 552.461724][ T30] ? schedule+0x225/0x2c0 [ 552.469165][ T30] schedule+0xdd/0x2c0 [ 552.479523][ T30] schedule_preempt_disabled+0x13/0x30 [ 552.498652][ T30] __mutex_lock+0xccc/0x1bd0 [ 552.503564][ T30] ? write_ports+0xa5/0xcc0 [ 552.508120][ T30] ? nfsctl_transaction_write+0xcd/0x1a0 [ 552.514475][ T30] ? ksys_write+0x12a/0x250 [ 552.519055][ T30] ? do_syscall_64+0x115/0x870 [ 552.524389][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 552.529503][ T30] ? write_ports+0xa5/0xcc0 [ 552.534439][ T30] ? __lock_acquire+0x49f/0x1a40 [ 552.539438][ T30] write_ports+0xa5/0xcc0 [ 552.544147][ T30] ? __pfx_write_ports+0x10/0x10 [ 552.549122][ T30] ? find_held_lock+0x2b/0x80 [ 552.554234][ T30] ? __might_fault+0xc5/0x140 [ 552.558934][ T30] ? __might_fault+0xc5/0x140 [ 552.571321][ T30] ? __pfx_write_ports+0x10/0x10 [ 552.579457][ T30] ? _copy_from_user+0x59/0xd0 [ 552.586818][ T30] ? __pfx_write_ports+0x10/0x10 [ 552.591857][ T30] nfsctl_transaction_write+0x106/0x1a0 [ 552.598031][ T30] vfs_write+0x2aa/0x1050 [ 552.602449][ T30] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 552.608910][ T30] ? __pfx_vfs_write+0x10/0x10 [ 552.614241][ T30] ? __fget_files+0x215/0x3d0 [ 552.618948][ T30] ? __fget_files+0x21f/0x3d0 [ 552.624186][ T30] ksys_write+0x12a/0x250 [ 552.629660][ T30] ? __pfx_ksys_write+0x10/0x10 [ 552.636555][ T30] do_syscall_64+0x115/0x870 [ 552.641243][ T30] ? clear_bhb_loop+0x40/0x90 [ 552.647418][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.653704][ T30] RIP: 0033:0x7f784ff9e019 [ 552.658141][ T30] RSP: 002b:00007f7850ebc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 552.666972][ T30] RAX: ffffffffffffffda RBX: 00007f7850225fa0 RCX: 00007f784ff9e019 [ 552.675230][ T30] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 552.685106][ T30] RBP: 00007f785003500c R08: 0000000000000000 R09: 0000000000000000 [ 552.694564][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.702606][ T30] R13: 00007f7850226038 R14: 00007f7850225fa0 R15: 00007ffd92a54018 [ 552.711017][ T30] [ 552.716243][ T30] [ 552.716243][ T30] Showing all locks held in the system: [ 552.727421][ T30] 1 lock held by khungtaskd/30: [ 552.732311][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 552.746860][ T30] 6 locks held by kworker/1:1/42: [ 552.752001][ T30] #0: ffff888023a9e140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 552.763817][ T30] #1: ffffc90000b27d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 552.775555][ T30] #2: ffff88802b5121d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 552.785164][ T30] #3: ffff88802f83c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b25/0x4a60 [ 552.799668][ T30] #4: ffff88802b3f0d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b4e/0x4a60 [ 552.809646][ T30] #5: ffffffff90055a08 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 552.822205][ T30] 3 locks held by kworker/1:2/990: [ 552.827411][ T30] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 552.837896][ T30] #1: ffffc90004d17d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 552.849991][ T30] #2: ffff88807c9a1250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6310 [ 552.860873][ T30] 2 locks held by getty/5362: [ 552.865646][ T30] #0: ffff8880382220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 552.875677][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 552.883129][ T42] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 552.885944][ T30] 3 locks held by syz.0.2326/12277: [ 552.899674][ T30] #0: ffff888057227eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.910888][ T30] #1: ffff888021f5c450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.920203][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 552.930707][ T30] 3 locks held by syz.2.2384/12423: [ 552.936552][ T30] #0: ffff88807f273eb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.946169][ T30] #1: ffff8880366d6450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.960338][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 552.972936][ T30] 3 locks held by syz.4.2697/13265: [ 552.978519][ T30] #0: ffff88807e82e9b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 552.987985][ T30] #1: ffff88807b158450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 552.997982][ T30] #2: ffffffff8f072880 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x9d/0xba0 [ 553.007609][ T30] 1 lock held by syz-executor/14750: [ 553.012896][ T30] #0: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 553.024125][ T30] [ 553.026482][ T30] ============================================= [ 553.026482][ T30] [ 553.036157][ T30] NMI backtrace for cpu 0 [ 553.036175][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.036196][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.036206][ T30] Call Trace: [ 553.036212][ T30] [ 553.036219][ T30] dump_stack_lvl+0x100/0x190 [ 553.036246][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 553.036269][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.036293][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 553.036314][ T30] sys_info+0x141/0x190 [ 553.036338][ T30] watchdog+0xcb1/0x1030 [ 553.036363][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.036387][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.036408][ T30] ? __kthread_parkme+0x18c/0x230 [ 553.036437][ T30] ? kthread+0x13a/0x450 [ 553.036452][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.036470][ T30] kthread+0x370/0x450 [ 553.036485][ T30] ? __pfx_kthread+0x10/0x10 [ 553.036503][ T30] ret_from_fork+0x72b/0xd50 [ 553.036528][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 553.036554][ T30] ? __switch_to+0x800/0x10f0 [ 553.036570][ T30] ? __pfx_kthread+0x10/0x10 [ 553.036586][ T30] ret_from_fork_asm+0x1a/0x30 [ 553.036621][ T30] [ 553.036636][ T30] Sending NMI from CPU 0 to CPUs 1: [ 553.163491][ C1] NMI backtrace for cpu 1 [ 553.163507][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 553.163524][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.163532][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 553.163556][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 5f 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 553.163570][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 553.163584][ C1] RAX: 000000000186c319 RBX: ffff88801ea82540 RCX: ffffffff8bbb42d5 [ 553.163593][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a8186 RDI: ffffffff8c402680 [ 553.163602][ C1] RBP: ffffed1003d504a8 R08: 0000000000000001 R09: ffffed10170a678d [ 553.163611][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 553.163620][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 553.163629][ C1] FS: 0000000000000000(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 553.163644][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.163653][ C1] CR2: 00007f0bcc000020 CR3: 00000000778e7000 CR4: 00000000003526f0 [ 553.163662][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 553.163670][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 553.163679][ C1] Call Trace: [ 553.163684][ C1] [ 553.163689][ C1] default_idle+0x9/0x10 [ 553.163707][ C1] default_idle_call+0x6c/0xb0 [ 553.163724][ C1] do_idle+0x3a7/0x5b0 [ 553.163744][ C1] ? __pfx_do_idle+0x10/0x10 [ 553.163761][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 553.163783][ C1] cpu_startup_entry+0x4f/0x60 [ 553.163802][ C1] start_secondary+0x21d/0x2d0 [ 553.163820][ C1] ? __pfx_start_secondary+0x10/0x10 [ 553.163839][ C1] common_startup_64+0x13e/0x158 [ 553.163866][ C1] [ 553.354599][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 553.361464][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 553.370560][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 553.380597][ T30] Call Trace: [ 553.383876][ T30] [ 553.386791][ T30] dump_stack_lvl+0x100/0x190 [ 553.391457][ T30] vpanic+0x552/0x970 [ 553.395434][ T30] ? __pfx_vpanic+0x10/0x10 [ 553.399920][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 553.406059][ T30] panic+0xd1/0xe0 [ 553.409766][ T30] ? __pfx_panic+0x10/0x10 [ 553.414166][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 553.420300][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 553.426435][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 553.432567][ T30] ? watchdog.cold+0x1ec/0x234 [ 553.437311][ T30] ? watchdog+0xcc1/0x1030 [ 553.441713][ T30] watchdog.cold+0x1fd/0x234 [ 553.446289][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.452078][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.456739][ T30] ? __kthread_parkme+0x18c/0x230 [ 553.461754][ T30] ? kthread+0x13a/0x450 [ 553.465983][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.470643][ T30] kthread+0x370/0x450 [ 553.474693][ T30] ? __pfx_kthread+0x10/0x10 [ 553.479269][ T30] ret_from_fork+0x72b/0xd50 [ 553.483846][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 553.488945][ T30] ? __switch_to+0x800/0x10f0 [ 553.493604][ T30] ? __pfx_kthread+0x10/0x10 [ 553.498174][ T30] ret_from_fork_asm+0x1a/0x30 [ 553.502954][ T30] [ 553.506171][ T30] Kernel Offset: disabled [ 553.510492][ T30] Rebooting in 86400 seconds..