last executing test programs: 18.870793244s ago: executing program 0 (id=129): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 15.983294501s ago: executing program 2 (id=139): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0x82}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '/dev/ttyprintk\x00'}, {0x20, 'blkio.bfq.io_merged_recursive\x00'}, {0x20, 'veth0_vlan\x00'}, {0x20, '#! '}, {0x20, 'eth0\x00#\x13\xae\x8efQ\x01\xban\xc1\xbdn\x90k\xda\xd8\xef\x00u\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x04\x00\x11\x1a{@!2\xb6!\xae\xf79+\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04\x17\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xea{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|'}, {0x20, '^^$$[#j'}, {0x20, '(%)%#%-+./\xc1\n(,'}, {0x20, '/dev/ttyprintk\x00'}, {0x20, '!(]'}]}, 0x1d5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f00000007c0)='eth0\x00#\x13\xae\x8efQ\x01\xban\xc1\xbdn\x90k\xda\xd8\xef\x00u\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6yL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x04\x00\x11\x1a{@!2\xb6!\xae\xf79+\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemO\x00\x00\x00\x00\x00\x00\x00\x03\x01\xbe\xeb\xbb\x91\x11[\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04\x17\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xea{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\xae|\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x80, 0x0, 0x0) r3 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0xf541, 0x10100, 0x3}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000380)={@hyper, 0x5}) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x0, 0xa5e1, 0x0, 0x1000}, 0x0, &(0x7f0000004640)={0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x12) socket$nl_generic(0x10, 0x3, 0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000140)={'ipvlan0\x00', 0x4000258}) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x189001, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000001340)={0x6, 0x21, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000400)={r9}) 15.224719751s ago: executing program 2 (id=141): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000100)='stat\x00') r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) syz_fuse_handle_req(r3, &(0x7f00000005c0)="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", 0x2000, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.946113529s ago: executing program 3 (id=143): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x7) 14.898499817s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) inotify_init() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x10, 0x6, 0x6d8, 0x3f8, 0x3f8, 0x300, 0x0, 0x0, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @mcast1]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r3, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0xfd, @tick=0x4d04, {}, {0x0, 0x5}, @raw32={[0x0, 0x0, 0x7]}}], 0x1c) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f00000000c0)=0x400) 12.930701651s ago: executing program 3 (id=146): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x40041) 12.929409518s ago: executing program 0 (id=147): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = socket(0xa, 0x1, 0x0) close(r2) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 12.803743908s ago: executing program 2 (id=148): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000019580)=""/102393, &(0x7f0000000040)=0x18ff9) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') fchdir(r5) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r7, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) 12.754607234s ago: executing program 0 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)="4efa9051ad3f1c3c5dabc6461eeb1bb746476a1580262bdf05102c4aa55110a90e9140852a51b7c0049be19ae906096709aedb690c2837f012751e65b2b21795f6a259fac653b8e5496a0a22380f4334c1955b0cd405da63c1356855e9411955e8cb11446d4cceff39df74ca0643db5ce4986b5f1f0fc9875d88ce8a7762", &(0x7f00000002c0)="5914401e21c1631197b6f210df2d32258256a2871f153cb16221921f1286bbd22d8d8cce270954d4dc4ca71c", 0x8000007, r0}, 0x38) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000400000009000000000000000000000c00000000de0000000000000e0000000000000000000600800000000000"], 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair(0x15, 0x1, 0x31, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0xffffffffffff80a6, 0x22001) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000580)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_create(0xfffffff8) r7 = socket(0x2, 0x801, 0x100) setsockopt$rose(r7, 0x104, 0x1, &(0x7f0000000380)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f0000000e40)=ANY=[@ANYRES8=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000040518942519153dcc4f466c8a700850083000000bf09000000000000550901000000000095000000182000000000000000200180000000000000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90) 12.651567546s ago: executing program 3 (id=150): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12.308873715s ago: executing program 0 (id=152): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xfffffffe}, @void, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x0) (fail_nth: 2) 12.2428844s ago: executing program 1 (id=153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) socket$inet(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 11.206634822s ago: executing program 4 (id=154): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804200000086dd602e843500140600fe80000000000000ff07000000000000fe8000000000000000000000000000aa000000003b69ab3098406d37159fe9b29de41935cb99ee0270b8580153d9387de1749238b04dcee284bd93cb96006142b036bec7ce07be8b2d9dcc922d0beeb18d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000e7ff00000000000000000000181100000e1bfb45e2c0258b7ed4479297d69b30c2604c7f607e6cf353df7e43122d885ffb45380200000000000000305f991e15c24b6cb9106eb862a2d1c5314767033e645dd44e981d825aedae96100345e474e3ce5e82aa819eab1750c11ee2c178743e82ec3a12e0f7a22f4bcda446371457a759ce2be0f4e5de9685222145d2a374735ca05bab0a8677ccb53859", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 11.163410877s ago: executing program 0 (id=155): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) landlock_create_ruleset(&(0x7f0000000440)={0x2}, 0x10, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000000180)=[{}, {}, {}, {}], 0x16, 0x7ff6) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) recvmmsg(r2, &(0x7f0000000340), 0x0, 0x40002041, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40043d14, &(0x7f0000000000)) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300c713d530e3ffcec67cb7f06b90", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b700000000000400b800"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 10.620348733s ago: executing program 1 (id=157): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x7) 9.028582706s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) inotify_init() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x10, 0x6, 0x6d8, 0x3f8, 0x3f8, 0x300, 0x0, 0x0, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @mcast1]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) write$sndseq(r3, &(0x7f0000000140)=[{0x23, 0x0, 0x0, 0xfd, @tick=0x4d04, {}, {0x0, 0x5}, @raw32={[0x0, 0x0, 0x7]}}], 0x1c) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f00000000c0)=0x400) 8.495716777s ago: executing program 4 (id=159): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 8.44552062s ago: executing program 3 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000003a0000000000000000000000032000000c00018006000000894f0000"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r7, 0x5609, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="a65b000010000000a7a0000000000000010400002c83"]) ioctl$TCFLSH(r1, 0x8910, 0x20001114) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) 8.415352388s ago: executing program 2 (id=161): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) sendfile(r2, r3, &(0x7f0000000000), 0x11) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0xffffffffffffffff, @prog_id=0xffffffffffffffff}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000070000006a0a90ff0000000027000000000010009500000000000000181000008639369f554288e121e7e1479594bd86279600e9d86b86badb115d770e9f9373d833487e40631725e39078674dbf4d5c4778d646d325e315751450f0256f7dab30be2630a78d6bc01c55b75ffbead8448a5be71b71e422c0", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x95, &(0x7f0000000180)=""/149}, 0x90) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f00000003c0)=""/224) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x1000) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000500)=""/143, 0x8f}], 0x1, 0x9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 8.152398808s ago: executing program 4 (id=162): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000080), 0x4) (fail_nth: 1) 7.583955072s ago: executing program 1 (id=163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)="4efa9051ad3f1c3c5dabc6461eeb1bb746476a1580262bdf05102c4aa55110a90e9140852a51b7c0049be19ae906096709aedb690c2837f012751e65b2b21795f6a259fac653b8e5496a0a22380f4334c1955b0cd405da63c1356855e9411955e8cb11446d4cceff39df74ca0643db5ce4986b5f1f0fc9875d88ce8a7762", &(0x7f00000002c0)="5914401e21c1631197b6f210df2d32258256a2871f153cb16221921f1286bbd22d8d8cce270954d4dc4ca71c", 0x8000007, r0}, 0x38) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000400000009000000000000000000000c00000000de0000000000000e0000000000000000000600800000000000"], 0x0, 0x3d}, 0x20) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socketpair(0x15, 0x1, 0x31, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0xffffffffffff80a6, 0x22001) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000580)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_create(0xfffffff8) r7 = socket(0x2, 0x801, 0x100) setsockopt$rose(r7, 0x104, 0x1, &(0x7f0000000380)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f0000000e40)=ANY=[@ANYRES8=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000040518942519153dcc4f466c8a700850083000000bf09000000000000550901000000000095000000182000000000000000200180000000000000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=0x1, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90) 7.175594313s ago: executing program 3 (id=164): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000002c0)=""/108, 0x6c}], 0x2, 0x0, 0xffffffffffffff0a}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = epoll_create1(0x0) r7 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000040)={0x20000006}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x1c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4004000000008f361114800000000004600feff000000009500000098311b798320e193d725"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcc, &(0x7f0000000500)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000009500"/24], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.735458407s ago: executing program 4 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}]}, 0x28}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.540126431s ago: executing program 0 (id=166): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.315825058s ago: executing program 4 (id=167): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000010000000800", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x7) 4.196563111s ago: executing program 1 (id=168): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f7443aa3482be787c62756966795f70656572735f636f756e74000000000000000000000000000005000300030000"], 0x58}, 0x1, 0xf000}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x7) 344.043786ms ago: executing program 1 (id=169): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00\x00\a\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6bf0400000000000040", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000008c0)={"8a2596dd", 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000081", "643aa6bf", "69c7c4a9", "f7bf0700", ["87b700", "275f27336422fe2a553ae850", "5d6fd1214703bf778b51fce0", "4973dce60c23eb4573635a16"]}) 223.219308ms ago: executing program 4 (id=170): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x40) syz_emit_ethernet(0xe80, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa01804200000086dd602e843500140600fe80000000000000ff07000000000000fe8000000000000000000000000000aa000000003b69ab3098406d37159fe9b29de41935cb99ee0270b8580153d9387de1749238b04dcee284bd93cb96006142b036bec7ce07be8b2d9dcc922d0beeb18d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5800000090780000"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000e7ff00000000000000000000181100000e1bfb45e2c0258b7ed4479297d69b30c2604c7f607e6cf353df7e43122d885ffb45380200000000000000305f991e15c24b6cb9106eb862a2d1c5314767033e645dd44e981d825aedae96100345e474e3ce5e82aa819eab1750c11ee2c178743e82ec3a12e0f7a22f4bcda446371457a759ce2be0f4e5de9685222145d2a374735ca05bab0a8677ccb53859", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) open(0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xffffffd7}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000002100)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x8) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 0s ago: executing program 2 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)={0x450, 0x3f3, 0x4, 0x70bd2c, 0x25dfdbfb, {0x6, 0x1, 0x0, [0x200, 0x1, 0x1, 0x8, 0xe, 0x1, 0x1, 0x7d0d, 0x3, 0x5, 0x7, 0x0, 0x3, 0xb, 0x7, 0x3, 0x0, 0x8, 0x0, 0x4, 0x0, 0x7e0, 0x10000, 0x0, 0x800, 0x7fffffff, 0xcac, 0x0, 0x8, 0x1038, 0x1ff, 0xfffffffc, 0x6, 0xdfa0, 0x1, 0x9, 0x7, 0x2, 0x5, 0xc, 0x0, 0x0, 0x0, 0x6, 0xc, 0x62, 0x9f2, 0x10, 0x0, 0x5, 0xe, 0x5, 0x0, 0x8, 0x1, 0x2, 0x2, 0x4, 0x8144, 0x9, 0x339, 0x0, 0x0, 0x5], [0x7, 0x5, 0x1, 0x0, 0xde2, 0x7, 0x0, 0x6, 0x3, 0x7, 0x8f, 0xfffffff6, 0x9b8, 0x4, 0x53, 0x2, 0x9, 0x2, 0x80000001, 0x4b4, 0xbdad, 0x200, 0x0, 0x0, 0x0, 0x8000, 0xace4, 0xd594, 0x8, 0x5, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x2, 0x7, 0x9, 0x6, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0x5, 0x2, 0x6, 0x0, 0x0, 0x787, 0x3, 0x3, 0xfff, 0x5, 0x0, 0x300000, 0x200, 0x7, 0x2, 0xfffe, 0x0, 0x0, 0x9, 0xed9], [0x9, 0xfffffeff, 0x3, 0x1, 0x0, 0x4, 0xfffffff7, 0x0, 0x5, 0x0, 0xfffffffa, 0x401, 0x0, 0xd32, 0x0, 0x1, 0x9, 0x7, 0x3, 0xb, 0x1b9, 0x3, 0x2, 0x7f, 0x8, 0x6, 0x1, 0x3, 0x1, 0x2c8, 0x4, 0x15fd, 0x5, 0x8, 0x4c7, 0x5, 0xb1, 0x3, 0xca, 0x400, 0x7, 0xcc, 0x0, 0x1, 0x0, 0x8, 0x1, 0x3e6f9426, 0x6, 0x1, 0x409, 0x954d, 0x9a, 0x401, 0xffffff1a, 0x5, 0x5, 0xe134, 0x5, 0x96fe, 0x101, 0x77, 0x6, 0x3ca], [0xa, 0x8, 0xff1, 0x7fff, 0x2, 0x2, 0x6, 0x4, 0x2, 0x7fffffff, 0x3ff, 0x40, 0x30b4, 0x7, 0x1, 0x1, 0xfffffffd, 0xf, 0xe2e, 0x63b, 0x6f, 0xd1d, 0x9, 0x5, 0x1, 0x0, 0x7, 0x0, 0x4, 0x3, 0xfffffff9, 0x1, 0x9, 0x4, 0x5117, 0x1, 0x5e74810d, 0x1000, 0xffffff01, 0x5, 0x9, 0x101, 0xffffff80, 0x200, 0x0, 0x6, 0x5, 0x9, 0x9, 0x50, 0x1, 0x5, 0x4, 0x0, 0x5, 0x1, 0x9, 0xf6, 0xfffffffc, 0xdc, 0x0, 0x80, 0xfffffffa, 0x5], 0x2e, ['!}\x00', '/dev/uhid\x00', '@],:\x00', '-{/\x00', '[*\\[\x00', '/dev/uhid\x00', '$]}%*[]\x00', '\x00']}, ["", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40150}, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d022a705f9e93"], 0x17) r5 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300c713d530e3ffcec67cb7f06b90", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b700000000000400b800"], 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): syzkaller login: [ 60.441766][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 60.441785][ T29] audit: type=1400 audit(1721577873.607:78): avc: denied { transition } for pid=4945 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.470048][ T29] audit: type=1400 audit(1721577873.607:79): avc: denied { noatsecure } for pid=4945 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.489395][ T29] audit: type=1400 audit(1721577873.627:80): avc: denied { write } for pid=4945 comm="sh" path="pipe:[3405]" dev="pipefs" ino=3405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 60.514208][ T29] audit: type=1400 audit(1721577873.627:81): avc: denied { rlimitinh } for pid=4945 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.533259][ T29] audit: type=1400 audit(1721577873.627:82): avc: denied { siginh } for pid=4945 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.851438][ T29] audit: type=1400 audit(1721577874.017:83): avc: denied { read } for pid=4528 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.609837][ T29] audit: type=1400 audit(1721577875.777:84): avc: denied { append } for pid=4528 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.632167][ T29] audit: type=1400 audit(1721577875.777:85): avc: denied { open } for pid=4528 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.654719][ T29] audit: type=1400 audit(1721577875.777:86): avc: denied { getattr } for pid=4528 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.1.65' (ED25519) to the list of known hosts. [ 72.181575][ T29] audit: type=1400 audit(1721577885.347:87): avc: denied { mounton } for pid=5083 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 72.190915][ T5083] cgroup: Unknown subsys name 'net' [ 72.204402][ T29] audit: type=1400 audit(1721577885.347:88): avc: denied { mount } for pid=5083 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.231892][ T29] audit: type=1400 audit(1721577885.387:89): avc: denied { unmount } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 72.356013][ T5083] cgroup: Unknown subsys name 'rlimit' [ 72.514593][ T29] audit: type=1400 audit(1721577885.677:90): avc: denied { setattr } for pid=5083 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.537957][ T29] audit: type=1400 audit(1721577885.687:91): avc: denied { create } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.575663][ T29] audit: type=1400 audit(1721577885.687:92): avc: denied { write } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.596533][ T29] audit: type=1400 audit(1721577885.687:93): avc: denied { read } for pid=5083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.618629][ T29] audit: type=1400 audit(1721577885.707:94): avc: denied { mounton } for pid=5083 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 72.644790][ T29] audit: type=1400 audit(1721577885.717:95): avc: denied { mount } for pid=5083 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 72.668177][ T29] audit: type=1400 audit(1721577885.737:96): avc: denied { read } for pid=4760 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 72.701467][ T5086] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 74.064452][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.872781][ C1] eth0: bad gso: type: 1, size: 1408 [ 75.879034][ C1] eth0: bad gso: type: 1, size: 1408 [ 76.475478][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.476484][ T5110] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.483986][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.491897][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.499971][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.514240][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.516405][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.523421][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.530708][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.544361][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.550154][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.558763][ T5111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.560891][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.567827][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.573962][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.581071][ T5111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.594467][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.596044][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.610425][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.610433][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.612116][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.619068][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.626248][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.632869][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.639993][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.660014][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.663055][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.675184][ T5112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.675509][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.695442][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.208323][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 77.208341][ T29] audit: type=1400 audit(1721577890.377:112): avc: denied { module_request } for pid=5095 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 77.329046][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 77.609439][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 77.643050][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.651895][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.659533][ T5095] bridge_slave_0: entered allmulticast mode [ 77.667774][ T5095] bridge_slave_0: entered promiscuous mode [ 77.682421][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.690171][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.697532][ T5095] bridge_slave_1: entered allmulticast mode [ 77.704626][ T5095] bridge_slave_1: entered promiscuous mode [ 77.717955][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 77.757991][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 77.857088][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.870933][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 77.924850][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.014973][ T5095] team0: Port device team_slave_0 added [ 78.057403][ T5095] team0: Port device team_slave_1 added [ 78.220068][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.227402][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.234605][ T5096] bridge_slave_0: entered allmulticast mode [ 78.246073][ T5096] bridge_slave_0: entered promiscuous mode [ 78.259692][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.266754][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.293014][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.307464][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.314460][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.340674][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.352020][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.359258][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.366912][ T5104] bridge_slave_0: entered allmulticast mode [ 78.373963][ T5104] bridge_slave_0: entered promiscuous mode [ 78.382148][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.390173][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.398137][ T5093] bridge_slave_0: entered allmulticast mode [ 78.405221][ T5093] bridge_slave_0: entered promiscuous mode [ 78.414428][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.421718][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.429167][ T5096] bridge_slave_1: entered allmulticast mode [ 78.437409][ T5096] bridge_slave_1: entered promiscuous mode [ 78.472791][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.480398][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.488001][ T5104] bridge_slave_1: entered allmulticast mode [ 78.496263][ T5104] bridge_slave_1: entered promiscuous mode [ 78.503114][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.510646][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.518177][ T5093] bridge_slave_1: entered allmulticast mode [ 78.525619][ T5093] bridge_slave_1: entered promiscuous mode [ 78.576793][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.584018][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.591898][ T5094] bridge_slave_0: entered allmulticast mode [ 78.600433][ T5094] bridge_slave_0: entered promiscuous mode [ 78.664332][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.687653][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.694854][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.702212][ T5094] bridge_slave_1: entered allmulticast mode [ 78.709817][ T5094] bridge_slave_1: entered promiscuous mode [ 78.716366][ T5114] Bluetooth: hci3: command tx timeout [ 78.716638][ T54] Bluetooth: hci1: command tx timeout [ 78.741987][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.756131][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.768132][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.782973][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.794285][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.795476][ T54] Bluetooth: hci2: command tx timeout [ 78.803701][ T5114] Bluetooth: hci0: command tx timeout [ 78.809051][ T5105] Bluetooth: hci4: command tx timeout [ 78.911756][ T5095] hsr_slave_0: entered promiscuous mode [ 78.918896][ T5095] hsr_slave_1: entered promiscuous mode [ 78.931779][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.945425][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.984456][ T5093] team0: Port device team_slave_0 added [ 78.995494][ T5093] team0: Port device team_slave_1 added [ 79.038067][ T5104] team0: Port device team_slave_0 added [ 79.050611][ T5096] team0: Port device team_slave_0 added [ 79.104266][ T5104] team0: Port device team_slave_1 added [ 79.113594][ T5096] team0: Port device team_slave_1 added [ 79.146410][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.153390][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.179652][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.193194][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.200589][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.227239][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.243384][ T5094] team0: Port device team_slave_0 added [ 79.280986][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.288138][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.314902][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.351184][ T5094] team0: Port device team_slave_1 added [ 79.373554][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.380787][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.407100][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.460434][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.467583][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.493930][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.552154][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.560041][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.585982][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.653647][ T5093] hsr_slave_0: entered promiscuous mode [ 79.660889][ T5093] hsr_slave_1: entered promiscuous mode [ 79.668780][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.676817][ T5093] Cannot create hsr debugfs directory [ 79.692562][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.699619][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.726451][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.740170][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.747282][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.773624][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.826540][ T5096] hsr_slave_0: entered promiscuous mode [ 79.834390][ T5096] hsr_slave_1: entered promiscuous mode [ 79.841872][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.849558][ T5096] Cannot create hsr debugfs directory [ 80.011586][ T5094] hsr_slave_0: entered promiscuous mode [ 80.021417][ T5094] hsr_slave_1: entered promiscuous mode [ 80.027920][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.037610][ T5094] Cannot create hsr debugfs directory [ 80.070009][ T5104] hsr_slave_0: entered promiscuous mode [ 80.077197][ T5104] hsr_slave_1: entered promiscuous mode [ 80.083410][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.091313][ T5104] Cannot create hsr debugfs directory [ 80.548299][ T5095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.566198][ T5095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.583981][ T5095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.604404][ T5095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.770991][ T5093] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.795880][ T54] Bluetooth: hci3: command tx timeout [ 80.808250][ T54] Bluetooth: hci1: command tx timeout [ 80.811995][ T5093] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.848680][ T5093] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.875766][ T54] Bluetooth: hci0: command tx timeout [ 80.881952][ T5093] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.889197][ T54] Bluetooth: hci2: command tx timeout [ 80.889248][ T54] Bluetooth: hci4: command tx timeout [ 80.950010][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.976213][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.006098][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.017759][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.188510][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.208346][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.222165][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.234395][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.270521][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.281185][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.374362][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.382227][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.443374][ T5104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.461275][ T5104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.474080][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.481444][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.519510][ T5104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.530507][ T5104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.760436][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.795014][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.872514][ T29] audit: type=1400 audit(1721577895.037:113): avc: denied { sys_module } for pid=5095 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.889738][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.963152][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.981981][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.989867][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.053862][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.061158][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.081438][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.088798][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.100735][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.107934][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.223228][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.262007][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.369008][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.391018][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.445202][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.452493][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.553591][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.560940][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.617477][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.778768][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.786051][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.850966][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.858276][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.875662][ T5105] Bluetooth: hci1: command tx timeout [ 82.881137][ T5105] Bluetooth: hci3: command tx timeout [ 82.960527][ T54] Bluetooth: hci4: command tx timeout [ 82.967710][ T5105] Bluetooth: hci2: command tx timeout [ 82.973164][ T5105] Bluetooth: hci0: command tx timeout [ 83.214054][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.264382][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.410753][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.625591][ T5093] veth0_vlan: entered promiscuous mode [ 83.701583][ T5093] veth1_vlan: entered promiscuous mode [ 83.723947][ T5095] veth0_vlan: entered promiscuous mode [ 83.791619][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.807242][ T5095] veth1_vlan: entered promiscuous mode [ 83.823112][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.871293][ T5096] veth0_vlan: entered promiscuous mode [ 83.902792][ T5096] veth1_vlan: entered promiscuous mode [ 83.936028][ T5093] veth0_macvtap: entered promiscuous mode [ 84.023500][ T5093] veth1_macvtap: entered promiscuous mode [ 84.046690][ T5095] veth0_macvtap: entered promiscuous mode [ 84.078308][ T5095] veth1_macvtap: entered promiscuous mode [ 84.102284][ T5104] veth0_vlan: entered promiscuous mode [ 84.139233][ T5094] veth0_vlan: entered promiscuous mode [ 84.153107][ T5096] veth0_macvtap: entered promiscuous mode [ 84.169873][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.191067][ T5104] veth1_vlan: entered promiscuous mode [ 84.208200][ T5096] veth1_macvtap: entered promiscuous mode [ 84.220260][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.229001][ T5094] veth1_vlan: entered promiscuous mode [ 84.269859][ T5093] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.281520][ T5093] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.291531][ T5093] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300395][ T5093] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.320450][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.332709][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344994][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.384428][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.396719][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.409747][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.422822][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.434388][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.444507][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.455450][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.484446][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.506081][ T5095] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.514849][ T5095] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.524855][ T5095] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.534216][ T5095] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.590342][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.601449][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.611529][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.622002][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.633297][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.651591][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.662056][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.670946][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.680183][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708142][ T5094] veth0_macvtap: entered promiscuous mode [ 84.759602][ T5094] veth1_macvtap: entered promiscuous mode [ 84.839368][ T5104] veth0_macvtap: entered promiscuous mode [ 84.870346][ T5104] veth1_macvtap: entered promiscuous mode [ 84.947090][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.957887][ T5105] Bluetooth: hci3: command tx timeout [ 84.957920][ T54] Bluetooth: hci1: command tx timeout [ 84.963396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.979852][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.994354][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.012081][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.022804][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.032910][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.043966][ T54] Bluetooth: hci0: command tx timeout [ 85.044020][ T54] Bluetooth: hci4: command tx timeout [ 85.044061][ T54] Bluetooth: hci2: command tx timeout [ 85.060753][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.072362][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.103784][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.114691][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.131983][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.142533][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.152660][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.163130][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.172990][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.183509][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.195983][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.203808][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.215194][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.225026][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.241444][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.251392][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.261870][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.273217][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.319276][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.328126][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.339221][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.350915][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372783][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.383513][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.393500][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.404240][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.414217][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.424866][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.434831][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.447833][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.459381][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.476748][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.484610][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529660][ T2863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.532536][ T5104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.547704][ T2863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.552115][ T5104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.565079][ T5104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.574586][ T5104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652574][ T29] audit: type=1400 audit(1721577898.817:114): avc: denied { mounton } for pid=5093 comm="syz-executor" path="/root/syzkaller.oDQTjj/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 85.680031][ T29] audit: type=1400 audit(1721577898.817:115): avc: denied { mount } for pid=5093 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.702908][ T29] audit: type=1400 audit(1721577898.817:116): avc: denied { mounton } for pid=5093 comm="syz-executor" path="/root/syzkaller.oDQTjj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.740288][ T29] audit: type=1400 audit(1721577898.817:117): avc: denied { mount } for pid=5093 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.812442][ T29] audit: type=1400 audit(1721577898.817:118): avc: denied { unmount } for pid=5093 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.837386][ T29] audit: type=1400 audit(1721577898.847:119): avc: denied { mounton } for pid=5093 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 85.870086][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.878535][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.885368][ T29] audit: type=1400 audit(1721577898.847:120): avc: denied { mount } for pid=5093 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.979980][ T2797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.998801][ T29] audit: type=1400 audit(1721577899.167:121): avc: denied { read write } for pid=5093 comm="syz-executor" name="loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.012806][ T2797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.081002][ T29] audit: type=1400 audit(1721577899.197:122): avc: denied { open } for pid=5093 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.179526][ T29] audit: type=1400 audit(1721577899.197:123): avc: denied { ioctl } for pid=5093 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 86.232230][ T2797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.243364][ T2797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.271509][ T2863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.300543][ T2863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.450989][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.489224][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.582795][ T2797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.582824][ T2797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.048175][ T5204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.069377][ T5204] FAULT_INJECTION: forcing a failure. [ 87.069377][ T5204] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.082607][ T5204] CPU: 1 PID: 5204 Comm: syz.2.3 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 87.092092][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 87.102182][ T5204] Call Trace: [ 87.105479][ T5204] [ 87.108422][ T5204] dump_stack_lvl+0x16c/0x1f0 [ 87.113135][ T5204] should_fail_ex+0x497/0x5b0 [ 87.117851][ T5204] _copy_from_user+0x30/0xf0 [ 87.122477][ T5204] move_addr_to_kernel+0x68/0x160 [ 87.127533][ T5204] __copy_msghdr+0x386/0x470 [ 87.132150][ T5204] copy_msghdr_from_user+0xc2/0x160 [ 87.137378][ T5204] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 87.143211][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 87.148439][ T5204] ? __pfx___lock_acquire+0x10/0x10 [ 87.153660][ T5204] ___sys_sendmsg+0xff/0x1e0 [ 87.158280][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.163521][ T5204] ? __fget_light+0x173/0x210 [ 87.168232][ T5204] __sys_sendmmsg+0x1a1/0x450 [ 87.172939][ T5204] ? __pfx___sys_sendmmsg+0x10/0x10 [ 87.178177][ T5204] __x64_sys_sendmmsg+0x9c/0x100 [ 87.183149][ T5204] do_syscall_64+0xcd/0x250 [ 87.187707][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.193631][ T5204] RIP: 0033:0x7fc1e9775b59 [ 87.198068][ T5204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.217702][ T5204] RSP: 002b:00007fc1e91ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.226141][ T5204] RAX: ffffffffffffffda RBX: 00007fc1e9906110 RCX: 00007fc1e9775b59 [ 87.234128][ T5204] RDX: 0000000000000002 RSI: 0000000020000a00 RDI: 0000000000000005 [ 87.242116][ T5204] RBP: 00007fc1e91ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.250106][ T5204] R10: 0000000008008801 R11: 0000000000000246 R12: 0000000000000001 [ 87.258096][ T5204] R13: 000000000000006e R14: 00007fc1e9906110 R15: 00007ffe533d7688 [ 87.266094][ T5204] [ 87.471415][ T46] cfg80211: failed to load regulatory.db [ 87.577317][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.660864][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.713644][ T5206] cgroup: No subsys list or none specified [ 88.108179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.356548][ T5217] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 88.437256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.595672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 89.122494][ T5225] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 89.349771][ T5225] batman_adv: batadv0: Adding interface: team0 [ 89.356600][ T5225] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.382027][ T5225] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 89.393271][ T5226] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 89.401213][ T5226] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'. [ 89.410216][ T5226] team0: entered promiscuous mode [ 89.419448][ T5226] team_slave_0: entered promiscuous mode [ 89.426092][ T5226] team_slave_1: entered promiscuous mode [ 89.456878][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.464433][ T5226] batman_adv: batadv0: Interface activated: team0 [ 89.471128][ T5226] batman_adv: batadv0: Interface deactivated: team0 [ 89.477999][ T5226] batman_adv: batadv0: Removing interface: team0 [ 89.724872][ T5226] bridge0: port 3(team0) entered blocking state [ 89.767658][ T5226] bridge0: port 3(team0) entered disabled state [ 89.784545][ T5226] team0: entered allmulticast mode [ 89.804137][ T5226] team_slave_0: entered allmulticast mode [ 89.861858][ T5226] team_slave_1: entered allmulticast mode [ 89.904619][ T5226] bridge0: port 3(team0) entered blocking state [ 89.911381][ T5226] bridge0: port 3(team0) entered forwarding state [ 89.925993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.942125][ T5254] can0: slcan on ptm0. [ 91.363545][ T5249] Zero length message leads to an empty skb [ 91.426508][ C1] eth0: bad gso: type: 1, size: 1408 [ 91.513758][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 91.513778][ T29] audit: type=1400 audit(1721577904.677:187): avc: denied { write } for pid=5240 comm="syz.1.14" name="fib_trie" dev="proc" ino=4026533419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.629130][ T5248] can0 (unregistered): slcan off ptm0. [ 91.749380][ T29] audit: type=1400 audit(1721577904.737:188): avc: denied { block_suspend } for pid=5239 comm="syz.3.13" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.770521][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.854144][ T29] audit: type=1400 audit(1721577904.867:189): avc: denied { ioctl } for pid=5258 comm="syz.4.16" path="socket:[7234]" dev="sockfs" ino=7234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.911295][ T5243] sctp: failed to load transform for md5: -2 [ 92.084806][ T29] audit: type=1400 audit(1721577904.947:190): avc: denied { view } for pid=5239 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 92.264185][ T29] audit: type=1400 audit(1721577905.167:191): avc: denied { accept } for pid=5258 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.286111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.295923][ T29] audit: type=1400 audit(1721577905.217:192): avc: denied { read } for pid=5258 comm="syz.4.16" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.363803][ T5269] mmap: syz.0.17 (5269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.505258][ T29] audit: type=1400 audit(1721577905.217:193): avc: denied { open } for pid=5258 comm="syz.4.16" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.626534][ T29] audit: type=1400 audit(1721577905.357:194): avc: denied { create } for pid=5262 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.717777][ T29] audit: type=1400 audit(1721577905.527:195): avc: denied { map } for pid=5262 comm="syz.0.17" path="socket:[6141]" dev="sockfs" ino=6141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.741446][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.835443][ T29] audit: type=1400 audit(1721577905.937:196): avc: denied { setopt } for pid=5258 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.102975][ T5273] cgroup: No subsys list or none specified [ 93.115923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.306530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.409712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.613132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.755564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.828367][ T5315] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.393891][ C1] eth0: bad gso: type: 1, size: 1408 [ 95.942831][ T5329] can0: slcan on ptm0. [ 96.646212][ T5322] can0 (unregistered): slcan off ptm0. [ 96.783590][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 96.783610][ T29] audit: type=1400 audit(1721577909.947:212): avc: denied { create } for pid=5325 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.885659][ T29] audit: type=1400 audit(1721577911.027:213): avc: denied { create } for pid=5344 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.955857][ T29] audit: type=1400 audit(1721577911.077:214): avc: denied { write } for pid=5344 comm="syz.4.32" path="socket:[7348]" dev="sockfs" ino=7348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.047184][ T29] audit: type=1400 audit(1721577911.157:215): avc: denied { read } for pid=5344 comm="syz.4.32" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.107582][ T5346] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.132798][ T5352] capability: warning: `syz.0.33' uses deprecated v2 capabilities in a way that may be insecure [ 98.166292][ T29] audit: type=1400 audit(1721577911.167:216): avc: denied { open } for pid=5344 comm="syz.4.32" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.332259][ T29] audit: type=1400 audit(1721577911.177:217): avc: denied { create } for pid=5347 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.566608][ T29] audit: type=1400 audit(1721577911.197:218): avc: denied { setopt } for pid=5347 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.435084][ T29] audit: type=1400 audit(1721577911.207:219): avc: denied { ioctl } for pid=5344 comm="syz.4.32" path="/dev/dri/card0" dev="devtmpfs" ino=629 ioctlcmd=0x6406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 99.565349][ T29] audit: type=1400 audit(1721577911.237:220): avc: denied { read } for pid=5344 comm="syz.4.32" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 99.901355][ T29] audit: type=1400 audit(1721577911.237:221): avc: denied { open } for pid=5344 comm="syz.4.32" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.010494][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.175439][ T5374] FAULT_INJECTION: forcing a failure. [ 100.175439][ T5374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.194718][ T5374] CPU: 1 PID: 5374 Comm: syz.0.38 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 100.204308][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 100.214357][ T5374] Call Trace: [ 100.217628][ T5374] [ 100.220545][ T5374] dump_stack_lvl+0x16c/0x1f0 [ 100.225225][ T5374] should_fail_ex+0x497/0x5b0 [ 100.229899][ T5374] copy_fpstate_to_sigframe+0x812/0xaa0 [ 100.235446][ T5374] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 100.241515][ T5374] get_sigframe+0x455/0x930 [ 100.246018][ T5374] ? __pfx_get_sigframe+0x10/0x10 [ 100.251035][ T5374] ? preempt_schedule_thunk+0x1a/0x30 [ 100.256402][ T5374] ? siginfo_layout+0x177/0x290 [ 100.261250][ T5374] x64_setup_rt_frame+0x129/0xce0 [ 100.266276][ T5374] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 100.271830][ T5374] ? __fget_light+0x173/0x210 [ 100.276526][ T5374] ? fput+0x32/0x390 [ 100.280449][ T5374] arch_do_signal_or_restart+0x5e6/0x7e0 [ 100.286088][ T5374] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 100.292241][ T5374] syscall_exit_to_user_mode+0x150/0x2a0 [ 100.297877][ T5374] do_syscall_64+0xda/0x250 [ 100.302382][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.308271][ T5374] RIP: 0033:0x7f1b0b175b57 [ 100.312674][ T5374] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 100.332278][ T5374] RSP: 002b:00007f1b0bfc6048 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 100.340684][ T5374] RAX: 000000000000002f RBX: 00007f1b0b306038 RCX: 00007f1b0b175b59 [ 100.348647][ T5374] RDX: 0000000000000002 RSI: 0000000020000140 RDI: 0000000000000004 [ 100.356609][ T5374] RBP: 00007f1b0bfc60a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.364583][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.372554][ T5374] R13: 000000000000006e R14: 00007f1b0b306038 R15: 00007ffce5b77658 [ 100.380528][ T5374] [ 100.383680][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.634944][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 101.455547][ T5389] can0: slcan on ptm0. [ 102.216387][ T5378] can0 (unregistered): slcan off ptm0. [ 102.321221][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 102.321245][ T29] audit: type=1400 audit(1721577915.477:223): avc: denied { write } for pid=5383 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 102.394951][ T29] audit: type=1400 audit(1721577915.557:224): avc: denied { getopt } for pid=5383 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.691769][ C1] eth0: bad gso: type: 1, size: 1408 [ 102.701237][ T29] audit: type=1400 audit(1721577915.867:225): avc: denied { mount } for pid=5391 comm="syz.3.43" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.860720][ T29] audit: type=1400 audit(1721577916.017:226): avc: denied { read write } for pid=5396 comm="syz.0.44" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 103.417800][ T29] audit: type=1400 audit(1721577916.027:227): avc: denied { open } for pid=5396 comm="syz.0.44" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.950569][ T5399] 9pnet_fd: Insufficient options for proto=fd [ 106.119596][ T29] audit: type=1400 audit(1721577919.247:228): avc: denied { ioctl } for pid=5396 comm="syz.0.44" path="/dev/video7" dev="devtmpfs" ino=867 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 106.277323][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.788826][ T5431] can0: slcan on ptm0. [ 107.442726][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 107.739200][ T5428] can0 (unregistered): slcan off ptm0. [ 107.919227][ T5435] can0: slcan on ptm1. [ 108.846107][ T5432] can0 (unregistered): slcan off ptm1. [ 108.965392][ T29] audit: type=1400 audit(1721577922.127:229): avc: denied { unmount } for pid=5104 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.985312][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.219246][ T5445] FAULT_INJECTION: forcing a failure. [ 109.219246][ T5445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.243179][ T5445] CPU: 0 PID: 5445 Comm: syz.0.58 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 109.252880][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.262958][ T5445] Call Trace: [ 109.266262][ T5445] [ 109.269222][ T5445] dump_stack_lvl+0x16c/0x1f0 [ 109.273951][ T5445] should_fail_ex+0x497/0x5b0 [ 109.278678][ T5445] _copy_to_user+0x30/0xc0 [ 109.283139][ T5445] simple_read_from_buffer+0xd0/0x160 [ 109.288551][ T5445] proc_fail_nth_read+0x1b0/0x290 [ 109.293578][ T5445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.299124][ T5445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.304671][ T5445] vfs_read+0x1d4/0xbd0 [ 109.308829][ T5445] ? __fdget_pos+0xeb/0x180 [ 109.313338][ T5445] ? __pfx_vfs_read+0x10/0x10 [ 109.318012][ T5445] ? __pfx___mutex_lock+0x10/0x10 [ 109.323033][ T5445] ? __fget_files+0x256/0x400 [ 109.327709][ T5445] ksys_read+0x12f/0x260 [ 109.331972][ T5445] ? __pfx_ksys_read+0x10/0x10 [ 109.336752][ T5445] do_syscall_64+0xcd/0x250 [ 109.341307][ T5445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.347246][ T5445] RIP: 0033:0x7f1b0b17463c [ 109.351692][ T5445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 109.371338][ T5445] RSP: 002b:00007f1b0bfe7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.379797][ T5445] RAX: ffffffffffffffda RBX: 00007f1b0b305f60 RCX: 00007f1b0b17463c [ 109.387798][ T5445] RDX: 000000000000000f RSI: 00007f1b0bfe70b0 RDI: 0000000000000003 [ 109.395772][ T5445] RBP: 00007f1b0bfe70a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.403741][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.411719][ T5445] R13: 000000000000000b R14: 00007f1b0b305f60 R15: 00007ffce5b77658 [ 109.419725][ T5445] [ 109.629919][ T5454] Invalid logical block size (65535) [ 109.901999][ T29] audit: type=1400 audit(1721577923.067:230): avc: denied { write } for pid=5453 comm="syz.4.61" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.003406][ T29] audit: type=1400 audit(1721577923.087:231): avc: denied { map } for pid=5453 comm="syz.4.61" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.071500][ T29] audit: type=1400 audit(1721577923.087:232): avc: denied { execute } for pid=5453 comm="syz.4.61" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.110750][ C1] eth0: bad gso: type: 1, size: 1408 [ 110.213974][ T29] audit: type=1400 audit(1721577923.357:233): avc: denied { ioctl } for pid=5453 comm="syz.4.61" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 110.238239][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.644472][ T5472] can0: slcan on ptm0. [ 111.406113][ T5467] can0 (unregistered): slcan off ptm0. [ 111.678309][ T29] audit: type=1400 audit(1721577924.847:234): avc: denied { bind } for pid=5475 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.808565][ T29] audit: type=1400 audit(1721577924.917:235): avc: denied { map } for pid=5475 comm="syz.3.67" path="/dev/video6" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 111.904529][ T29] audit: type=1400 audit(1721577924.917:236): avc: denied { execute } for pid=5475 comm="syz.3.67" path="/dev/video6" dev="devtmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.059880][ T29] audit: type=1400 audit(1721577925.217:237): avc: denied { write } for pid=5469 comm="syz.2.66" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 112.297865][ T5483] netlink: 256 bytes leftover after parsing attributes in process `syz.0.62'. [ 112.310270][ T29] audit: type=1400 audit(1721577925.477:238): avc: denied { open } for pid=5460 comm="syz.0.62" path="/dev/ptyq4" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 112.932436][ T5486] 9pnet_fd: Insufficient options for proto=fd [ 114.781087][ T5508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.76'. [ 115.342517][ T5517] can0: slcan on ptm0. [ 116.166575][ T5511] can0 (unregistered): slcan off ptm0. [ 116.464811][ T5523] FAULT_INJECTION: forcing a failure. [ 116.464811][ T5523] name failslab, interval 1, probability 0, space 0, times 1 [ 116.489289][ T5527] FAULT_INJECTION: forcing a failure. [ 116.489289][ T5527] name failslab, interval 1, probability 0, space 0, times 1 [ 116.515274][ T5523] CPU: 0 PID: 5523 Comm: syz.4.79 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 116.524858][ T5523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 116.534930][ T5523] Call Trace: [ 116.538222][ T5523] [ 116.541159][ T5523] dump_stack_lvl+0x16c/0x1f0 [ 116.545862][ T5523] should_fail_ex+0x497/0x5b0 [ 116.550567][ T5523] should_failslab+0x9/0x20 [ 116.555099][ T5523] __kmalloc_noprof+0xcb/0x400 [ 116.559888][ T5523] ? d_absolute_path+0x137/0x1b0 [ 116.564849][ T5523] tomoyo_encode2+0x100/0x3e0 [ 116.569557][ T5523] tomoyo_encode+0x29/0x50 [ 116.574000][ T5523] tomoyo_realpath_from_path+0x19d/0x720 [ 116.579658][ T5523] tomoyo_path_number_perm+0x245/0x590 [ 116.585136][ T5523] ? tomoyo_path_number_perm+0x232/0x590 [ 116.590786][ T5523] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.596793][ T5523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.602794][ T5523] ? __fget_files+0x256/0x400 [ 116.607487][ T5523] security_file_ioctl+0x75/0xc0 [ 116.612453][ T5523] __x64_sys_ioctl+0xbb/0x220 [ 116.617147][ T5523] do_syscall_64+0xcd/0x250 [ 116.621674][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.627587][ T5523] RIP: 0033:0x7fed01d75b59 [ 116.632014][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.651640][ T5523] RSP: 002b:00007fed02a93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.660073][ T5523] RAX: ffffffffffffffda RBX: 00007fed01f05f60 RCX: 00007fed01d75b59 [ 116.668056][ T5523] RDX: 00000000200000c0 RSI: 00000000404c534a RDI: 0000000000000003 [ 116.676039][ T5523] RBP: 00007fed02a930a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.684019][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.692001][ T5523] R13: 000000000000000b R14: 00007fed01f05f60 R15: 00007ffc420e6778 [ 116.700000][ T5523] [ 116.704600][ T5527] CPU: 0 PID: 5527 Comm: syz.0.80 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 116.714191][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 116.724273][ T5527] Call Trace: [ 116.727549][ T5527] [ 116.730468][ T5527] dump_stack_lvl+0x16c/0x1f0 [ 116.735154][ T5527] should_fail_ex+0x497/0x5b0 [ 116.739851][ T5527] should_failslab+0x9/0x20 [ 116.744349][ T5527] kmem_cache_alloc_node_noprof+0x71/0x310 [ 116.750153][ T5527] ? __alloc_skb+0x2b1/0x380 [ 116.754746][ T5527] __alloc_skb+0x2b1/0x380 [ 116.759179][ T5527] ? __pfx___alloc_skb+0x10/0x10 [ 116.764108][ T5527] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 116.770098][ T5527] netlink_alloc_large_skb+0x69/0x130 [ 116.775483][ T5527] netlink_sendmsg+0x689/0xd70 [ 116.780245][ T5527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.785527][ T5527] ? __import_iovec+0x1fd/0x6e0 [ 116.790380][ T5527] ____sys_sendmsg+0xab5/0xc90 [ 116.795149][ T5527] ? copy_msghdr_from_user+0x10b/0x160 [ 116.800622][ T5527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.805900][ T5527] ? find_held_lock+0x2d/0x110 [ 116.810661][ T5527] ? __pfx___lock_acquire+0x10/0x10 [ 116.815852][ T5527] ___sys_sendmsg+0x135/0x1e0 [ 116.820524][ T5527] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.825720][ T5527] ? ksys_write+0x21c/0x260 [ 116.830220][ T5527] ? __fget_light+0x173/0x210 [ 116.834888][ T5527] __sys_sendmsg+0x117/0x1f0 [ 116.839476][ T5527] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.844588][ T5527] do_syscall_64+0xcd/0x250 [ 116.849110][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.855001][ T5527] RIP: 0033:0x7f1b0b175b59 [ 116.859414][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.879030][ T5527] RSP: 002b:00007f1b0bfe7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.887456][ T5527] RAX: ffffffffffffffda RBX: 00007f1b0b305f60 RCX: 00007f1b0b175b59 [ 116.895427][ T5527] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 116.903391][ T5527] RBP: 00007f1b0bfe70a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.911362][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.919333][ T5527] R13: 000000000000000b R14: 00007f1b0b305f60 R15: 00007ffce5b77658 [ 116.927388][ T5527] [ 117.075960][ T5523] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.145212][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 117.145232][ T29] audit: type=1400 audit(1721577930.307:245): avc: denied { create } for pid=5528 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.253251][ T29] audit: type=1400 audit(1721577930.387:246): avc: denied { nlmsg_read } for pid=5528 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.653497][ T29] audit: type=1400 audit(1721577930.817:247): avc: denied { create } for pid=5543 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 117.755481][ T29] audit: type=1400 audit(1721577930.857:248): avc: denied { bind } for pid=5543 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 117.778115][ T5545] netlink: 'syz.0.87': attribute type 3 has an invalid length. [ 117.871569][ T29] audit: type=1326 audit(1721577931.037:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5534 comm="syz.1.84" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb2a575b59 code=0x0 [ 117.981464][ T29] audit: type=1400 audit(1721577931.147:250): avc: denied { execute } for pid=5543 comm="syz.0.87" path="/15/cpuacct.usage_sys" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.037175][ T29] audit: type=1400 audit(1721577931.197:251): avc: denied { create } for pid=5528 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.306169][ T29] audit: type=1400 audit(1721577931.467:252): avc: denied { name_bind } for pid=5528 comm="syz.3.81" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 118.588435][ T29] audit: type=1400 audit(1721577931.757:253): avc: denied { bind } for pid=5563 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.786285][ T5565] can0: slcan on ptm0. [ 119.077370][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'. [ 119.411224][ T29] audit: type=1400 audit(1721577932.487:254): avc: denied { write } for pid=5563 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.515440][ T5557] can0 (unregistered): slcan off ptm0. [ 120.993578][ T5581] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 121.150979][ T5581] batman_adv: batadv0: Adding interface: team0 [ 121.160786][ T5581] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.185978][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.192232][ T5581] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 121.228994][ T5583] netlink: 'syz.3.98': attribute type 10 has an invalid length. [ 121.236895][ T5583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.98'. [ 121.245910][ T5583] team0: entered promiscuous mode [ 121.251084][ T5583] team_slave_0: entered promiscuous mode [ 121.257478][ T5583] team_slave_1: entered promiscuous mode [ 121.273289][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.284011][ T5583] batman_adv: batadv0: Interface activated: team0 [ 121.290684][ T5583] batman_adv: batadv0: Interface deactivated: team0 [ 121.297511][ T5583] batman_adv: batadv0: Removing interface: team0 [ 121.344896][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 121.563150][ T5583] bridge0: port 3(team0) entered blocking state [ 121.578057][ T5583] bridge0: port 3(team0) entered disabled state [ 121.584711][ T5583] team0: entered allmulticast mode [ 121.590001][ T5583] team_slave_0: entered allmulticast mode [ 121.595885][ T5583] team_slave_1: entered allmulticast mode [ 121.608547][ T5583] bridge0: port 3(team0) entered blocking state [ 121.615086][ T5583] bridge0: port 3(team0) entered forwarding state [ 122.198201][ T5593] netlink: 'syz.1.99': attribute type 10 has an invalid length. [ 122.250450][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 122.250469][ T29] audit: type=1400 audit(1721577935.417:257): avc: denied { unmount } for pid=5096 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 122.463324][ T5599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 122.727629][ T5593] batman_adv: batadv0: Adding interface: team0 [ 122.734064][ T5593] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.867338][ T29] audit: type=1400 audit(1721577936.037:258): avc: denied { read } for pid=5589 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.908889][ T5593] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.938623][ T5591] netlink: 'syz.1.99': attribute type 10 has an invalid length. [ 122.964193][ T5591] netlink: 2 bytes leftover after parsing attributes in process `syz.1.99'. [ 122.984581][ T5591] team0: entered promiscuous mode [ 123.006049][ T5591] team_slave_0: entered promiscuous mode [ 123.043199][ T5591] team_slave_1: entered promiscuous mode [ 123.072086][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.093741][ T5591] batman_adv: batadv0: Interface activated: team0 [ 123.125340][ T5591] batman_adv: batadv0: Interface deactivated: team0 [ 123.131976][ T5591] batman_adv: batadv0: Removing interface: team0 [ 123.172734][ T5591] bridge0: port 3(team0) entered blocking state [ 123.183045][ T930] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.225665][ T5591] bridge0: port 3(team0) entered disabled state [ 123.232070][ T5591] team0: entered allmulticast mode [ 123.269771][ T5591] team_slave_0: entered allmulticast mode [ 123.285355][ T5591] team_slave_1: entered allmulticast mode [ 123.316791][ T5591] bridge0: port 3(team0) entered blocking state [ 123.323201][ T5591] bridge0: port 3(team0) entered forwarding state [ 123.416434][ T930] usb 3-1: device descriptor read/64, error -71 [ 123.824663][ T930] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.019991][ T930] usb 3-1: device descriptor read/64, error -71 [ 124.218361][ T930] usb usb3-port1: attempt power cycle [ 124.241231][ T29] audit: type=1400 audit(1721577937.397:259): avc: denied { ioctl } for pid=5613 comm="syz.0.106" path="socket:[8020]" dev="sockfs" ino=8020 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.410549][ T29] audit: type=1400 audit(1721577937.577:260): avc: denied { create } for pid=5613 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 124.705357][ T930] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.758754][ T930] usb 3-1: device descriptor read/8, error -71 [ 124.775162][ T29] audit: type=1400 audit(1721577937.907:261): avc: denied { getopt } for pid=5605 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.695246][ T930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.905513][ T930] usb 3-1: device descriptor read/8, error -71 [ 126.065629][ T930] usb usb3-port1: unable to enumerate USB device [ 126.266080][ T5630] FAULT_INJECTION: forcing a failure. [ 126.266080][ T5630] name failslab, interval 1, probability 0, space 0, times 0 [ 126.320393][ T5630] CPU: 0 PID: 5630 Comm: syz.4.112 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 126.330074][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.340163][ T5630] Call Trace: [ 126.343459][ T5630] [ 126.346384][ T5630] dump_stack_lvl+0x16c/0x1f0 [ 126.351078][ T5630] should_fail_ex+0x497/0x5b0 [ 126.355765][ T5630] should_failslab+0x9/0x20 [ 126.360263][ T5630] __kmalloc_cache_node_noprof+0x6e/0x350 [ 126.365991][ T5630] ? __get_vm_area_node+0xe1/0x2d0 [ 126.371122][ T5630] __get_vm_area_node+0xe1/0x2d0 [ 126.376054][ T5630] __vmalloc_node_range_noprof+0x276/0x1520 [ 126.381948][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.387490][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.393027][ T5630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.399361][ T5630] ? __pfx___lock_acquire+0x10/0x10 [ 126.404591][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.410155][ T5630] __vmalloc_noprof+0x6d/0x90 [ 126.414829][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.420368][ T5630] bpf_prog_alloc_no_stats+0x58/0x440 [ 126.425740][ T5630] bpf_prog_alloc+0x3b/0x240 [ 126.430325][ T5630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 126.436217][ T5630] bpf_prog_load+0x1b32/0x2660 [ 126.440977][ T5630] ? __pfx_bpf_prog_load+0x10/0x10 [ 126.446080][ T5630] ? avc_has_perm+0x11b/0x1c0 [ 126.450754][ T5630] ? selinux_bpf+0xde/0x130 [ 126.455249][ T5630] ? security_bpf+0x8c/0xc0 [ 126.459749][ T5630] __sys_bpf+0x8e9/0x4a20 [ 126.464073][ T5630] ? ksys_write+0x21c/0x260 [ 126.468572][ T5630] ? reacquire_held_locks+0x3e0/0x4c0 [ 126.473936][ T5630] ? __pfx___sys_bpf+0x10/0x10 [ 126.478713][ T5630] ? vfs_write+0x14d/0x1140 [ 126.483218][ T5630] ? __mutex_unlock_slowpath+0x164/0x650 [ 126.488876][ T5630] ? fput+0x32/0x390 [ 126.492770][ T5630] ? ksys_write+0x1ab/0x260 [ 126.497265][ T5630] ? __pfx_ksys_write+0x10/0x10 [ 126.502115][ T5630] __x64_sys_bpf+0x78/0xc0 [ 126.506531][ T5630] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.511722][ T5630] do_syscall_64+0xcd/0x250 [ 126.516228][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.522117][ T5630] RIP: 0033:0x7fed01d75b59 [ 126.526531][ T5630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.546133][ T5630] RSP: 002b:00007fed02a93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.554545][ T5630] RAX: ffffffffffffffda RBX: 00007fed01f05f60 RCX: 00007fed01d75b59 [ 126.562510][ T5630] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 126.570479][ T5630] RBP: 00007fed02a930a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.578442][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.586413][ T5630] R13: 000000000000000b R14: 00007fed01f05f60 R15: 00007ffc420e6778 [ 126.594386][ T5630] [ 126.675373][ T29] audit: type=1400 audit(1721577939.827:262): avc: denied { read } for pid=5631 comm="syz.0.113" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.719958][ T5632] ======================================================= [ 126.719958][ T5632] WARNING: The mand mount option has been deprecated and [ 126.719958][ T5632] and is ignored by this kernel. Remove the mand [ 126.719958][ T5632] option from the mount to silence this warning. [ 126.719958][ T5632] ======================================================= [ 126.768153][ T29] audit: type=1400 audit(1721577939.827:263): avc: denied { open } for pid=5631 comm="syz.0.113" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.824117][ T5630] syz.4.112: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 126.881843][ T29] audit: type=1400 audit(1721577939.877:264): avc: denied { ioctl } for pid=5631 comm="syz.0.113" path="/dev/usbmon0" dev="devtmpfs" ino=705 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.905245][ T5630] CPU: 1 PID: 5630 Comm: syz.4.112 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 126.916514][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.926563][ T5630] Call Trace: [ 126.929832][ T5630] [ 126.932750][ T5630] dump_stack_lvl+0x16c/0x1f0 [ 126.937423][ T5630] warn_alloc+0x24d/0x3a0 [ 126.941744][ T5630] ? __pfx_warn_alloc+0x10/0x10 [ 126.946584][ T5630] ? should_fail_ex+0x2de/0x5b0 [ 126.951429][ T5630] ? trace_kmalloc+0x2d/0xe0 [ 126.956024][ T5630] ? __kasan_kmalloc+0x8a/0xb0 [ 126.960811][ T5630] ? __get_vm_area_node+0x1bc/0x2d0 [ 126.966003][ T5630] __vmalloc_node_range_noprof+0xc1e/0x1520 [ 126.971891][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.977432][ T5630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.983749][ T5630] ? __pfx___lock_acquire+0x10/0x10 [ 126.988939][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 126.994498][ T5630] __vmalloc_noprof+0x6d/0x90 [ 126.999210][ T5630] ? bpf_prog_alloc_no_stats+0x58/0x440 [ 127.004758][ T5630] bpf_prog_alloc_no_stats+0x58/0x440 [ 127.010129][ T5630] bpf_prog_alloc+0x3b/0x240 [ 127.014712][ T5630] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 127.020599][ T5630] bpf_prog_load+0x1b32/0x2660 [ 127.025361][ T5630] ? __pfx_bpf_prog_load+0x10/0x10 [ 127.030470][ T5630] ? avc_has_perm+0x11b/0x1c0 [ 127.035150][ T5630] ? selinux_bpf+0xde/0x130 [ 127.039646][ T5630] ? security_bpf+0x8c/0xc0 [ 127.044143][ T5630] __sys_bpf+0x8e9/0x4a20 [ 127.048465][ T5630] ? ksys_write+0x21c/0x260 [ 127.052959][ T5630] ? reacquire_held_locks+0x3e0/0x4c0 [ 127.058325][ T5630] ? __pfx___sys_bpf+0x10/0x10 [ 127.063081][ T5630] ? vfs_write+0x14d/0x1140 [ 127.067573][ T5630] ? __mutex_unlock_slowpath+0x164/0x650 [ 127.073201][ T5630] ? fput+0x32/0x390 [ 127.077092][ T5630] ? ksys_write+0x1ab/0x260 [ 127.081583][ T5630] ? __pfx_ksys_write+0x10/0x10 [ 127.086423][ T5630] __x64_sys_bpf+0x78/0xc0 [ 127.090834][ T5630] ? lockdep_hardirqs_on+0x7c/0x110 [ 127.096027][ T5630] do_syscall_64+0xcd/0x250 [ 127.100533][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.106434][ T5630] RIP: 0033:0x7fed01d75b59 [ 127.110855][ T5630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.130457][ T5630] RSP: 002b:00007fed02a93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.138862][ T5630] RAX: ffffffffffffffda RBX: 00007fed01f05f60 RCX: 00007fed01d75b59 [ 127.146823][ T5630] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 127.154780][ T5630] RBP: 00007fed02a930a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.162742][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.170705][ T5630] R13: 000000000000000b R14: 00007fed01f05f60 R15: 00007ffc420e6778 [ 127.178667][ T5630] [ 127.181735][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.315256][ T5630] Mem-Info: [ 127.318427][ T5630] active_anon:7193 inactive_anon:0 isolated_anon:0 [ 127.318427][ T5630] active_file:1926 inactive_file:38395 isolated_file:0 [ 127.318427][ T5630] unevictable:768 dirty:532 writeback:0 [ 127.318427][ T5630] slab_reclaimable:9659 slab_unreclaimable:96318 [ 127.318427][ T5630] mapped:17226 shmem:4132 pagetables:703 [ 127.318427][ T5630] sec_pagetables:0 bounce:0 [ 127.318427][ T5630] kernel_misc_reclaimable:0 [ 127.318427][ T5630] free:1406815 free_pcp:209 free_cma:0 [ 127.348228][ T29] audit: type=1400 audit(1721577939.887:265): avc: denied { remount } for pid=5631 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.383267][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.453619][ T5630] Node 0 active_anon:28772kB inactive_anon:0kB active_file:7704kB inactive_file:153504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69004kB dirty:2124kB writeback:0kB shmem:14992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:2912kB sec_pagetables:0kB all_unreclaimable? no [ 127.472593][ T29] audit: type=1400 audit(1721577939.947:266): avc: denied { sqpoll } for pid=5637 comm="syz.3.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.551886][ T5630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.615011][ T5630] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.701468][ T5630] lowmem_reserve[]: 0 2565 2567 0 0 [ 127.709934][ T5630] Node 0 DMA32 free:1656360kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:27516kB inactive_anon:0kB active_file:7772kB inactive_file:151684kB unevictable:1536kB writepending:2192kB present:3129332kB managed:2654632kB mlocked:0kB bounce:0kB free_pcp:1924kB local_pcp:80kB free_cma:0kB [ 127.740152][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.828668][ T5630] lowmem_reserve[]: 0 0 1 0 0 [ 127.841881][ T5630] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 127.869479][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.969554][ T5630] lowmem_reserve[]: 0 0 0 0 0 [ 127.983687][ T5630] Node 1 Normal free:3958472kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB [ 128.024753][ T5630] lowmem_reserve[]: 0 0 0 0 0 [ 128.029686][ T5630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 128.042862][ T5630] Node 0 DMA32: 432*4kB (UM) 818*8kB (UME) 410*16kB (UME) 108*32kB (UME) 90*64kB (UME) 41*128kB (UME) 21*256kB (UME) 8*512kB (ME) 2*1024kB (M) 1*2048kB (M) 391*4096kB (UM) = 1644400kB [ 128.061493][ T5630] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 128.075808][ T5630] Node 1 Normal: 4*4kB (U) 7*8kB (UM) 7*16kB (UM) 4*32kB (UM) 3*64kB (U) 4*128kB (U) 3*256kB (UM) 4*512kB (UM) 4*1024kB (U) 3*2048kB (UM) 963*4096kB (M) = 3958520kB [ 128.095195][ T5630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.106365][ T5630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.115830][ T5630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.128003][ T5630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.137446][ T5630] 41643 total pagecache pages [ 128.142232][ T5630] 0 pages in swap cache [ 128.146511][ T5630] Free swap = 124996kB [ 128.150716][ T5630] Total swap = 124996kB [ 128.155384][ T5630] 2097051 pages RAM [ 128.160402][ T5630] 0 pages HighMem/MovableOnly [ 128.165914][ T5630] 401799 pages reserved [ 128.171339][ T5630] 0 pages cma reserved [ 129.946936][ T29] audit: type=1400 audit(1721577943.117:267): avc: denied { shutdown } for pid=5660 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.110425][ T29] audit: type=1400 audit(1721577943.277:268): avc: denied { relabelfrom } for pid=5660 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.197694][ T29] audit: type=1400 audit(1721577943.277:269): avc: denied { relabelto } for pid=5660 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 130.318055][ T29] audit: type=1400 audit(1721577943.297:270): avc: denied { ioctl } for pid=5660 comm="syz.1.121" path="socket:[8969]" dev="sockfs" ino=8969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.438226][ T29] audit: type=1326 audit(1721577943.357:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5660 comm="syz.1.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb2a575b59 code=0x0 [ 130.535849][ T29] audit: type=1400 audit(1721577943.527:272): avc: denied { read } for pid=5660 comm="syz.1.121" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.582655][ T5662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.655266][ T29] audit: type=1400 audit(1721577943.527:273): avc: denied { open } for pid=5660 comm="syz.1.121" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.766749][ T29] audit: type=1400 audit(1721577943.737:274): avc: denied { ioctl } for pid=5657 comm="syz.4.120" path="socket:[8966]" dev="sockfs" ino=8966 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.110275][ T5686] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 132.138473][ T5686] batman_adv: batadv0: Adding interface: team0 [ 132.144737][ T5686] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.169927][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.179300][ T5686] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.191657][ T5687] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 132.200645][ T5687] netlink: 2 bytes leftover after parsing attributes in process `syz.2.125'. [ 132.209927][ T5687] team0: entered promiscuous mode [ 132.215397][ T5687] team_slave_0: entered promiscuous mode [ 132.225465][ T5687] team_slave_1: entered promiscuous mode [ 132.249649][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 132.274050][ T5687] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.282336][ T5687] batman_adv: batadv0: Interface activated: team0 [ 132.289530][ T5687] batman_adv: batadv0: Interface deactivated: team0 [ 132.296366][ T5687] batman_adv: batadv0: Removing interface: team0 [ 132.390260][ T5686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.125'. [ 132.537116][ T5687] bridge0: port 3(team0) entered blocking state [ 132.547862][ T5687] bridge0: port 3(team0) entered disabled state [ 132.554611][ T5687] team0: entered allmulticast mode [ 132.561498][ T5687] team_slave_0: entered allmulticast mode [ 132.567439][ T5687] team_slave_1: entered allmulticast mode [ 132.578793][ T5687] bridge0: port 3(team0) entered blocking state [ 132.585961][ T5687] bridge0: port 3(team0) entered forwarding state [ 133.613831][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.630425][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.660960][ T5706] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 133.686642][ T5703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.129'. [ 135.496111][ T5718] bridge0: port 3(team0) entered disabled state [ 135.503198][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.512805][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.502579][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.803403][ T29] audit: type=1400 audit(1721577949.967:275): avc: denied { mounton } for pid=5733 comm="syz.2.141" path="/proc/109/task" dev="proc" ino=9091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 138.417255][ T5745] netlink: 256 bytes leftover after parsing attributes in process `syz.3.143'. [ 139.262225][ T5755] bridge0: port 3(team0) entered disabled state [ 139.268950][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.276611][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.251228][ T5768] FAULT_INJECTION: forcing a failure. [ 140.251228][ T5768] name failslab, interval 1, probability 0, space 0, times 0 [ 140.289651][ T5768] CPU: 0 PID: 5768 Comm: syz.0.152 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 140.299328][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 140.309386][ T5768] Call Trace: [ 140.312664][ T5768] [ 140.315587][ T5768] dump_stack_lvl+0x16c/0x1f0 [ 140.320267][ T5768] should_fail_ex+0x497/0x5b0 [ 140.324948][ T5768] should_failslab+0x9/0x20 [ 140.329448][ T5768] kmem_cache_alloc_node_noprof+0x71/0x310 [ 140.335266][ T5768] ? __alloc_skb+0x2b1/0x380 [ 140.339894][ T5768] __alloc_skb+0x2b1/0x380 [ 140.344344][ T5768] ? __pfx___alloc_skb+0x10/0x10 [ 140.349291][ T5768] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 140.355294][ T5768] netlink_alloc_large_skb+0x69/0x130 [ 140.360714][ T5768] netlink_sendmsg+0x689/0xd70 [ 140.365502][ T5768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.370786][ T5768] ? __import_iovec+0x1fd/0x6e0 [ 140.375641][ T5768] ____sys_sendmsg+0xab5/0xc90 [ 140.380399][ T5768] ? copy_msghdr_from_user+0x10b/0x160 [ 140.385868][ T5768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.391184][ T5768] ? find_held_lock+0x2d/0x110 [ 140.395996][ T5768] ? __pfx___lock_acquire+0x10/0x10 [ 140.401233][ T5768] ___sys_sendmsg+0x135/0x1e0 [ 140.405953][ T5768] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.411196][ T5768] ? ksys_write+0x21c/0x260 [ 140.415703][ T5768] ? __fget_light+0x173/0x210 [ 140.420377][ T5768] __sys_sendmsg+0x117/0x1f0 [ 140.424968][ T5768] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.430091][ T5768] do_syscall_64+0xcd/0x250 [ 140.434601][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.440495][ T5768] RIP: 0033:0x7f1b0b175b59 [ 140.444899][ T5768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.464510][ T5768] RSP: 002b:00007f1b0bfe7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.473013][ T5768] RAX: ffffffffffffffda RBX: 00007f1b0b305f60 RCX: 00007f1b0b175b59 [ 140.480989][ T5768] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 140.488963][ T5768] RBP: 00007f1b0bfe70a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.496936][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.504908][ T5768] R13: 000000000000000b R14: 00007f1b0b305f60 R15: 00007ffce5b77658 [ 140.512899][ T5768] [ 140.706948][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.892018][ T5780] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 140.992661][ T5780] bridge0: port 3(team0) entered disabled state [ 141.219538][ T5780] team0: left allmulticast mode [ 141.224760][ T5780] team_slave_0: left allmulticast mode [ 141.233099][ T5780] team_slave_1: left allmulticast mode [ 141.240247][ T5780] team0: left promiscuous mode [ 141.245217][ T5780] team_slave_0: left promiscuous mode [ 141.251196][ T5780] team_slave_1: left promiscuous mode [ 141.257535][ T5780] bridge0: port 3(team0) entered disabled state [ 141.475303][ T5780] batman_adv: batadv0: Adding interface: team0 [ 141.481860][ T5780] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.523135][ T5780] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 141.564160][ T5782] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 141.576685][ T5782] netlink: 2 bytes leftover after parsing attributes in process `syz.3.156'. [ 141.585942][ T5782] team0: entered promiscuous mode [ 141.591108][ T5782] team_slave_0: entered promiscuous mode [ 141.597537][ T5782] team_slave_1: entered promiscuous mode [ 141.607601][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.615015][ T5782] batman_adv: batadv0: Interface activated: team0 [ 141.621850][ T5782] batman_adv: batadv0: Interface deactivated: team0 [ 141.628727][ T5782] batman_adv: batadv0: Removing interface: team0 [ 141.728342][ T5787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.156'. [ 142.709095][ T5782] bridge0: port 3(team0) entered blocking state [ 142.792831][ T5782] bridge0: port 3(team0) entered disabled state [ 142.837099][ T5782] team0: entered allmulticast mode [ 142.842233][ T5782] team_slave_0: entered allmulticast mode [ 142.892883][ T5782] team_slave_1: entered allmulticast mode [ 142.941968][ T5782] bridge0: port 3(team0) entered blocking state [ 142.948540][ T5782] bridge0: port 3(team0) entered forwarding state [ 143.173164][ T5793] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 144.691481][ T29] audit: type=1400 audit(1721577957.857:276): avc: denied { create } for pid=5803 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.710805][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.824246][ T29] audit: type=1400 audit(1721577957.937:277): avc: denied { setopt } for pid=5803 comm="syz.4.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 147.130661][ T5811] bridge0: port 3(team0) entered disabled state [ 147.138005][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.147096][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.839520][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 151.852130][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 151.860531][ C1] CPU: 1 PID: 5837 Comm: syz.4.170 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 151.870148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 151.880191][ C1] RIP: 0010:__xsk_map_flush+0x4c/0x310 [ 151.885652][ C1] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 cd 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 1e 48 8d ab e8 fa ff ff 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 9b 02 00 00 48 8b 03 49 39 de 4c 8d a8 e8 fa ff [ 151.905268][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00010246 [ 151.911377][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff88d6709f [ 151.919372][ C1] RDX: 0000000000000000 RSI: ffffffff8acd9246 RDI: ffffc900031efa78 [ 151.927351][ C1] RBP: fffffffffffffae9 R08: 0000000000000005 R09: 0000000000000000 [ 151.935321][ C1] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000000 [ 151.943295][ C1] R13: ffff8880227446c8 R14: ffffc900031efa78 R15: ffffc900031efa78 [ 151.951271][ C1] FS: 00007fed02a936c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 151.960212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.966805][ C1] CR2: 0000000020001000 CR3: 000000007c26a000 CR4: 00000000003506f0 [ 151.974783][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.982763][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.990743][ C1] Call Trace: [ 151.994027][ C1] [ 151.996869][ C1] ? show_regs+0x8c/0xa0 [ 152.001129][ C1] ? die_addr+0x4f/0xd0 [ 152.005294][ C1] ? exc_general_protection+0x155/0x230 [ 152.010855][ C1] ? asm_exc_general_protection+0x26/0x30 [ 152.016600][ C1] ? xdp_do_check_flushed+0x28f/0x4e0 [ 152.022011][ C1] ? __xsk_map_flush+0x16/0x310 [ 152.026879][ C1] ? __xsk_map_flush+0x4c/0x310 [ 152.031739][ C1] xdp_do_check_flushed+0x175/0x4e0 [ 152.036954][ C1] __napi_poll.constprop.0+0xd1/0x550 [ 152.042335][ C1] net_rx_action+0xa92/0x1010 [ 152.047039][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 152.052158][ C1] ? lock_acquire+0x1b1/0x560 [ 152.056840][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 152.062051][ C1] ? sched_clock+0x38/0x60 [ 152.066478][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 152.071353][ C1] handle_softirqs+0x216/0x8f0 [ 152.076132][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 152.081429][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 152.086732][ C1] ? tun_get_user+0x1d81/0x3c30 [ 152.091606][ C1] do_softirq+0xb2/0xf0 [ 152.095782][ C1] [ 152.098712][ C1] [ 152.101639][ C1] __local_bh_enable_ip+0x100/0x120 [ 152.106854][ C1] ? tun_get_user+0x1d81/0x3c30 [ 152.111724][ C1] tun_get_user+0x1d9b/0x3c30 [ 152.116424][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 152.121460][ C1] ? find_held_lock+0x2d/0x110 [ 152.126315][ C1] ? __pfx_lock_release+0x10/0x10 [ 152.131354][ C1] tun_chr_write_iter+0xe8/0x210 [ 152.136295][ C1] vfs_write+0x6b6/0x1140 [ 152.140636][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 152.146184][ C1] ? __pfx_vfs_write+0x10/0x10 [ 152.150956][ C1] ? do_futex+0x123/0x350 [ 152.155292][ C1] ? __fget_files+0x256/0x400 [ 152.159979][ C1] ? __fget_light+0x173/0x210 [ 152.164665][ C1] ksys_write+0x12f/0x260 [ 152.169000][ C1] ? __pfx_ksys_write+0x10/0x10 [ 152.173858][ C1] do_syscall_64+0xcd/0x250 [ 152.178378][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.184284][ C1] RIP: 0033:0x7fed01d746df [ 152.188705][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 152.208325][ C1] RSP: 002b:00007fed02a93010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.216748][ C1] RAX: ffffffffffffffda RBX: 00007fed01f05f60 RCX: 00007fed01d746df [ 152.224725][ C1] RDX: 0000000000000e80 RSI: 0000000020000400 RDI: 00000000000000c8 [ 152.232703][ C1] RBP: 00007fed01de4e5d R08: 0000000000000000 R09: 0000000000000000 [ 152.240679][ C1] R10: 0000000000000e80 R11: 0000000000000293 R12: 0000000000000000 [ 152.248655][ C1] R13: 000000000000000b R14: 00007fed01f05f60 R15: 00007ffc420e6778 [ 152.256632][ C1] [ 152.259647][ C1] Modules linked in: [ 152.263693][ C1] ---[ end trace 0000000000000000 ]--- [ 152.269185][ C1] RIP: 0010:__xsk_map_flush+0x4c/0x310 [ 152.274640][ C1] Code: df 48 c1 ea 03 80 3c 02 00 0f 85 cd 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 1e 48 8d ab e8 fa ff ff 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 9b 02 00 00 48 8b 03 49 39 de 4c 8d a8 e8 fa ff [ 152.294273][ C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00010246 [ 152.300353][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff88d6709f [ 152.308337][ C1] RDX: 0000000000000000 RSI: ffffffff8acd9246 RDI: ffffc900031efa78 [ 152.316313][ C1] RBP: fffffffffffffae9 R08: 0000000000000005 R09: 0000000000000000 [ 152.324269][ C1] R10: 0000000000000010 R11: 0000000000000000 R12: 0000000000000000 [ 152.332249][ C1] R13: ffff8880227446c8 R14: ffffc900031efa78 R15: ffffc900031efa78 [ 152.340231][ C1] FS: 00007fed02a936c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 152.349220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.355813][ C1] CR2: 0000000020001000 CR3: 000000007c26a000 CR4: 00000000003506f0 [ 152.363772][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.371752][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.379739][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 152.387134][ C1] Kernel Offset: disabled [ 152.391548][ C1] Rebooting in 86400 seconds..