last executing test programs: 11m30.954468853s ago: executing program 3 (id=1719): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000380)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) bind$can_raw(r0, 0x0, 0x0) 11m30.843849875s ago: executing program 3 (id=1722): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) 11m29.903781142s ago: executing program 3 (id=1724): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) eventfd(0x1) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, 0x0, 0x0) 11m27.90594736s ago: executing program 3 (id=1729): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11m27.659080914s ago: executing program 3 (id=1736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="04002abd7000fbdbdf254400000008000300", @ANYRES32, @ANYBLOB="0c009900ff0300002a0000002000240082029809920b608c2c01041206891f0936a495ea30020516045482ec0800a000c94f0000050019010b0000000500190106000000050018013c000000080026003c1400000800a1000800000008000c00a43cfc1e80005a807c00008014000300070007004000c0ff800080000e001007510002001b271a1010141229451250122d273021163e2f425744051c2818322052094da429151d3c2e3748294d0722132d3c28cd101e043137483549233119344c0b10394b033a292c2c2d30291e10112e000000080002000449289b27f9bf99de6c46604398c3eb0e1005000700010000000a00180003030303030300000400bf001c00238008001500d900000805000f005a00000008001a00030000000800220128030000080027000100000008002600251700000800a1000100000024005a8020000180140028007f003f00030002000100000100007eda05000400010000000400cc00"], 0x174}, 0x1, 0x0, 0x0, 0x800}, 0x20000100) 11m26.329321397s ago: executing program 3 (id=1741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11m25.255718641s ago: executing program 32 (id=1741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 11m23.715016894s ago: executing program 1 (id=1756): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x20) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 11m23.229670443s ago: executing program 1 (id=1757): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20045815}, 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xac, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0xc, 0x60, 0x16, 0x3, 0x18, 0x3, 0x4, 0x24, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x16, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x18, 0x4, 0x24, 0x30, 0x12]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) 11m23.122856702s ago: executing program 1 (id=1758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 11m23.059904874s ago: executing program 1 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020004000000244000008000000000000000010002c89642f800b0e79b1883d4f3b1031c5b241ea0479f848b237207984d4b532e8cf797623f15597c2dc175238bdbecd350c51c4e8c929886da4f6e691d872ad699d598907ffc362e4872ed53899449b47fbe365539aa590dcff1fcd7b4781236f7401c60255b4887ab93c9411f86adf241688501485cfb1ce6023616bf01dacf6bf444e4a89d2a09f206c62e834af852fdbbc410", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11m22.124945828s ago: executing program 1 (id=1763): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) ioctl$KDMKTONE(r0, 0x4b30, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x2ab, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) 11m21.142589719s ago: executing program 1 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x33, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f1"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa8}}, 0x0) 11m20.99335439s ago: executing program 33 (id=1767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x33, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8cc158fa18f1"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xa8}}, 0x0) 10m38.985557714s ago: executing program 4 (id=1934): socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1b) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0xfff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r2, 0x0, 0x0) writev(r2, &(0x7f00000000c0), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000280), 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtaction={0x94, 0x30, 0x48b, 0x0, 0x0, {}, [{0x80, 0x1, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0xe4}, @multicast2, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x2, 0x6}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x94}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = dup(r4) bind$bt_l2cap(r5, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r5, 0x0) 10m36.407205844s ago: executing program 4 (id=1940): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m33.30172874s ago: executing program 4 (id=1952): socket(0x11, 0x800000003, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES16, @ANYRESDEC=r0], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c0010800400100004000880080002"], 0x30}}, 0x0) 10m32.074014517s ago: executing program 4 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="020004000000244000008000000000000000010002c89642f800b0e79b1883d4f3b1031c5b241ea0479f848b237207984d4b532e8cf797623f15597c2dc175238bdbecd350c51c4e8c929886da4f6e691d872ad699d598907ffc362e4872ed53899449b47fbe365539aa590dcff1fcd7b4781236f7401c60255b4887ab93c9411f86adf241688501485cfb1ce6023616bf01dacf6bf444e4a89d2a09f206c62e834af852fdbbc410", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 10m30.187790241s ago: executing program 4 (id=1961): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251100000008001500c000", @ANYRES32=0x0, @ANYBLOB="1054afd7b6ce0c18a23552ffcdc806f56a2d67f7c4eaaeacf6180ab827de30b65721010ff36c1f0dc41c769324e9f4b86cae9e64a1b1d10755d6398b9532eb4217b33e648d1509dc4a684b1900c680f4c837d719d6abfb5e7944c90ec303593a436433ec23659f7b41781bb8de4180a48022e81d647b8b5cc658f3421d4900a499b946881230976f4e5a295b192bb987d430c03219a15ec83e80bf1c40fb9a225e1469fbf970d8c0641663fc615027108713d3853ba5d7a765d17769403a4f9b4963ca0da09cfeb4a0bcdf800a2e34c1df74cc769d5f6719d3711f555c08f2257a95c152e6443b1f42ddeb9e9eff57d40c158ee64db2edcbb0505c85"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x6031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x8, 0x5, 0x3) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x20) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) 10m26.177556762s ago: executing program 4 (id=1972): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x440, 0x5b8, 0x2f8, 0x440, 0x440, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0xf64}, 0xfe79) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@empty=0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) 10m25.502156867s ago: executing program 34 (id=1972): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x440, 0x5b8, 0x2f8, 0x440, 0x440, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0xf64}, 0xfe79) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@empty=0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) 9m44.932464932s ago: executing program 5 (id=2113): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x2, 0x733, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffc, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x4, 0x0, 0x1}}, 0x2e) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) ioprio_set$pid(0x1, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 9m44.16756417s ago: executing program 0 (id=2118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0x1}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) 9m42.15588683s ago: executing program 0 (id=2124): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001", @ANYRES64=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m41.98100024s ago: executing program 5 (id=2127): sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x2, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m40.970450323s ago: executing program 5 (id=2130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m40.830334573s ago: executing program 5 (id=2133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 9m39.897450591s ago: executing program 5 (id=2134): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4, 0x204501) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x20, 0x3}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0}) 9m39.541670712s ago: executing program 5 (id=2137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = gettid() acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 9m39.172772042s ago: executing program 35 (id=2137): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = gettid() acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 9m38.960383681s ago: executing program 0 (id=2141): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e8, 0x440, 0x5b8, 0x2f8, 0x440, 0x440, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x5b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0xf64}, 0xfe79) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@empty=0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404000d}, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) 9m37.921802885s ago: executing program 0 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 9m36.838185315s ago: executing program 0 (id=2153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10000) ioctl$KDMKTONE(r3, 0x4b30, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x2ab, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x298, 0x258, 0x258, 0x298, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xff], [], 'wlan1\x00', '\x00', {}, {}, 0x11, 0x10}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x80, 0xff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [], [], 'lo\x00', 'erspan0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3c8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100f6e200000000000009000000"], 0x14}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c58b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) 9m36.503152295s ago: executing program 0 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) connect$inet6(r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000)=0xe3, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 9m36.350157939s ago: executing program 36 (id=2154): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) connect$inet6(r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000000)=0xe3, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 22.151104886s ago: executing program 7 (id=4936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24044094) 21.342716507s ago: executing program 7 (id=4943): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)={0x5178, 0x1, [{0x1, 0x1}]}) 21.171058664s ago: executing program 7 (id=4946): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 20.920745252s ago: executing program 7 (id=4953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24044094) 20.686382347s ago: executing program 7 (id=4957): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x1000) 20.511462804s ago: executing program 7 (id=4960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 9.051548456s ago: executing program 2 (id=5028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24044094) 7.034110565s ago: executing program 9 (id=5035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) clock_settime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') 6.891382502s ago: executing program 9 (id=5038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 6.701742674s ago: executing program 9 (id=5040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 5.9492289s ago: executing program 2 (id=5042): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0xfffffffffffffffe, {}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x2400c840}, 0x48010) 5.827495552s ago: executing program 2 (id=5044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2.859863643s ago: executing program 8 (id=5055): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24044094) 402.757794ms ago: executing program 2 (id=5067): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x18) 332.499168ms ago: executing program 8 (id=5068): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2000000, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 305.936379ms ago: executing program 9 (id=5069): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x7}, 0x0) 215.249438ms ago: executing program 8 (id=5070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0xd, 0x0, 0x0, 0xa, 0x1}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0xf9, [{0x4, 0x4}, {0x10, 0x5, 0x1}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x17, 0x3}, @fwd={0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0xd, 0x5}, {0x1, 0x5}, {0x4}]}, @union={0x9, 0x6, 0x0, 0x5, 0x1, 0xffffffff, [{0x9, 0x5, 0x9}, {0xe, 0x3, 0x4}, {0x4, 0x4, 0xfffffff1}, {0xe, 0x1, 0x1}, {0x5, 0x3, 0x31e7}, {0xe, 0x2, 0x2}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000440)=""/116, 0xf8, 0x74, 0x1, 0x402, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r2}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e1f, 0x80010003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xf, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x21600, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x43, 0x10000, 0x8, 0x6, 0xa8, 0x3, 0x8, 0x4}}}}]}, 0x58}}, 0x20000000) 210.521232ms ago: executing program 6 (id=5071): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 155.473926ms ago: executing program 2 (id=5072): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, 0x1412, 0x1, 0x2, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}}, 0x80) 130.703112ms ago: executing program 9 (id=5073): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 34.256973ms ago: executing program 9 (id=5074): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x514da, 0x101, 0x8000000, 0x3, 0xfffffffe, 0x200001, 0x0, 0x7cce8c743ee810da}) 0s ago: executing program 2 (id=5075): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESOCT], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000680)='$\x00\xe1s\r\xa7\xda\x15\xe9\x0e\xb6\x80\xdb\xab\x15}\xdd\xc5\xe1\xfb\f\xd3bo\x81\xef\xad&\xf7\xd4\xf8\xb8|s\x16\xd1\xfb\xfd\xc2@\x18l\xfe(,\xb6)\x84\xc0\xc0^5e\xcc\xe0\xdf`Z;\x1a\x94\xbf\xe6\x12\x1d>\x1e\xd1+\\>\xcf\xb0\x95\xf0c\xea\xbfO#\xc6\xef\x80\fi\xb9\xb5E\x85\xb2S\xc3%Q\xb7\x1eo=\xc8;\x8a\x1a\x7f=k$]?\xe4\x91^', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 rejected, failed to enable media [ 797.530467][T16843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.705807][T16843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.764759][ T5857] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 797.852032][T16843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.909784][ T5857] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 797.963013][T16843] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.981527][ T5857] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 798.007149][ T5857] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 798.030855][T16843] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.039212][ T5857] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 798.059495][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.098925][T16861] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 798.116113][T16843] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.127175][ T5857] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 798.156527][T16843] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.335341][ T5920] usb 3-1: USB disconnect, device number 79 [ 798.759705][ T5857] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 798.844730][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 798.844746][ T30] audit: type=1326 audit(1742697511.397:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16871 comm="syz.7.3753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7fc00000 [ 798.912352][ T5857] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.925598][ T5857] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.934959][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.946017][ T5857] usb 7-1: Product: syz [ 798.958349][ T5857] usb 7-1: Manufacturer: syz [ 798.973033][ T5857] usb 7-1: SerialNumber: syz [ 799.297649][ T30] audit: type=1326 audit(1742697511.847:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.303728][T16893] syz.2.3759 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 799.430712][ T30] audit: type=1326 audit(1742697511.847:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.499763][ T30] audit: type=1326 audit(1742697511.857:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.590904][ T30] audit: type=1326 audit(1742697511.857:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.657558][ T30] audit: type=1326 audit(1742697511.857:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.743152][ T30] audit: type=1326 audit(1742697511.857:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.865943][ T30] audit: type=1326 audit(1742697511.857:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.931737][ T30] audit: type=1326 audit(1742697511.857:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 799.992740][ T30] audit: type=1326 audit(1742697511.857:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16892 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 800.016845][ T5857] cdc_ncm 7-1:1.0: failed to get mac address [ 800.224208][ T5857] cdc_ncm 7-1:1.0: bind() failure [ 800.232752][ T5857] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 800.261335][ T5857] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 800.291317][ T5857] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 800.313057][ T5857] usb 7-1: USB disconnect, device number 39 [ 802.560027][T16952] tipc: Enabling of bearer rejected, failed to enable media [ 803.056095][T16960] tipc: Started in network mode [ 803.064797][T16960] tipc: Node identity 5e5c54aa8e82, cluster identity 4711 [ 803.072496][T16960] tipc: Enabled bearer , priority 0 [ 803.082848][T16963] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3787'. [ 803.200341][T16960] tipc: Disabling bearer [ 804.075847][T16975] usb usb1: usbfs: process 16975 (syz.9.3793) did not claim interface 0 before use [ 804.276485][ T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 804.444672][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 804.465805][ T9] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 804.496183][ T9] usb 3-1: config 0 has no interface number 0 [ 804.738610][ T9] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 804.750477][ T9] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 804.761825][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 804.772046][ T9] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 804.785634][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 804.798212][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 804.808279][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.816413][ T9] usb 3-1: Product: syz [ 804.820707][ T9] usb 3-1: Manufacturer: syz [ 804.825312][ T9] usb 3-1: SerialNumber: syz [ 804.831758][ T9] usb 3-1: config 0 descriptor?? [ 804.837332][T16973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 805.230583][ T9] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 805.435386][ T9] etas_es58x 3-1:0.219: could not retrieve the product info string [ 805.478179][ T9] usb 3-1: USB disconnect, device number 80 [ 805.488674][ T9] etas_es58x 3-1:0.219: Disconnecting syz syz [ 805.543944][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 805.543962][ T30] audit: type=1400 audit(1742697518.097:1043): avc: denied { compute_member } for pid=17005 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 806.892895][T17026] overlayfs: missing 'lowerdir' [ 807.219501][ T30] audit: type=1400 audit(1742697519.767:1044): avc: denied { load_policy } for pid=17028 comm="syz.7.3813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 807.244358][T17030] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 807.345366][T17030] SELinux: failed to load policy [ 807.529778][ T972] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 807.984422][ T972] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.024841][ T972] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 808.143865][ T972] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 808.252922][ T972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.334568][ T972] usb 10-1: Product: syz [ 808.375564][ T972] usb 10-1: Manufacturer: syz [ 808.390749][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.501135][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.556009][ T972] usb 10-1: SerialNumber: syz [ 808.706960][ T972] usb 10-1: config 0 descriptor?? [ 809.089993][ T972] usb 10-1: USB disconnect, device number 27 [ 810.811556][ T30] audit: type=1400 audit(1742697523.357:1045): avc: denied { bind } for pid=17088 comm="syz.6.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 812.009391][T17117] netlink: 'syz.2.3846': attribute type 2 has an invalid length. [ 812.236599][ T30] audit: type=1326 audit(1742697524.787:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.6.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 812.338493][ T30] audit: type=1326 audit(1742697524.787:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.6.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 812.489804][ T30] audit: type=1326 audit(1742697524.837:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.6.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 812.520351][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3849'. [ 812.578725][ T30] audit: type=1326 audit(1742697524.837:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.6.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 813.030060][ T5865] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 813.209333][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 813.586015][ T5865] usb 3-1: no configurations [ 813.604510][ T5865] usb 3-1: can't read configurations, error -22 [ 813.781578][ T5865] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 814.000335][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 814.008448][ T5865] usb 3-1: no configurations [ 814.133318][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3864'. [ 814.155876][T17170] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3864'. [ 814.176038][ T5865] usb 3-1: can't read configurations, error -22 [ 814.190302][ T5865] usb usb3-port1: attempt power cycle [ 814.708080][ T5865] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 814.772468][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 815.268346][ T5865] usb 3-1: no configurations [ 815.274777][ T5865] usb 3-1: can't read configurations, error -22 [ 815.440937][ T5865] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 815.460234][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 815.466523][ T5865] usb 3-1: no configurations [ 815.473044][T17194] vlan3: entered allmulticast mode [ 815.475926][ T5865] usb 3-1: can't read configurations, error -22 [ 815.485805][ T5865] usb usb3-port1: unable to enumerate USB device [ 815.494569][T17194] bond0: entered allmulticast mode [ 815.509801][T17194] bond_slave_0: entered allmulticast mode [ 815.525852][T17194] bond_slave_1: entered allmulticast mode [ 815.560674][T17194] bond0: left allmulticast mode [ 815.568564][T17201] overlayfs: missing 'lowerdir' [ 815.580101][T17194] bond_slave_0: left allmulticast mode [ 815.604499][T17194] bond_slave_1: left allmulticast mode [ 816.124612][ T30] audit: type=1326 audit(1742697528.677:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 816.250660][ T30] audit: type=1326 audit(1742697528.677:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 816.304406][ T30] audit: type=1326 audit(1742697528.717:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 816.339151][ T30] audit: type=1326 audit(1742697528.717:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 816.461650][T17223] xt_hashlimit: max too large, truncated to 1048576 [ 817.239307][ T30] audit: type=1326 audit(1742697528.717:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.268258][ T30] audit: type=1326 audit(1742697528.717:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.292753][ T30] audit: type=1326 audit(1742697528.717:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.316711][ T30] audit: type=1326 audit(1742697528.717:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.341684][ T30] audit: type=1326 audit(1742697528.717:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.417365][ T30] audit: type=1326 audit(1742697528.727:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17213 comm="syz.6.3879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 817.502340][T17234] overlayfs: missing 'lowerdir' [ 818.079760][ T975] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 818.152918][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 818.199210][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 818.240315][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 818.247515][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.268772][ T975] usb 3-1: config 0 has no interfaces? [ 818.277357][ T975] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 818.303656][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.312897][ T975] usb 3-1: Product: syz [ 818.318068][ T975] usb 3-1: Manufacturer: syz [ 818.323800][ T975] usb 3-1: SerialNumber: syz [ 818.338083][ T975] usb 3-1: config 0 descriptor?? [ 819.677290][T17281] netlink: 'syz.6.3906': attribute type 10 has an invalid length. [ 819.685288][T17281] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3906'. [ 819.707439][T17281] team0: Port device geneve0 added [ 819.779290][T17283] CUSE: unknown device info "ÿ" [ 819.784541][T17283] CUSE: zero length info key specified [ 821.194564][ T5865] usb 3-1: USB disconnect, device number 85 [ 821.438327][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 821.438344][ T30] audit: type=1326 audit(1742697533.987:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.519833][ T30] audit: type=1326 audit(1742697533.987:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.590630][ T30] audit: type=1326 audit(1742697533.987:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.646317][ T30] audit: type=1326 audit(1742697533.987:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.651555][T17327] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 821.696881][ T30] audit: type=1326 audit(1742697533.987:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.731492][ T30] audit: type=1326 audit(1742697534.027:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.757414][ T30] audit: type=1326 audit(1742697534.027:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.760226][ T975] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 821.788265][ T30] audit: type=1326 audit(1742697534.027:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.813931][ T30] audit: type=1326 audit(1742697534.037:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.843521][ T30] audit: type=1326 audit(1742697534.037:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17310 comm="syz.7.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 821.883708][T17334] overlayfs: missing 'lowerdir' [ 822.009898][ T975] usb 7-1: Using ep0 maxpacket: 16 [ 822.024884][ T975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.036657][ T975] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 822.068938][ T975] usb 7-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 822.694392][ T975] usb 7-1: config 1 interface 0 has no altsetting 0 [ 822.713352][ T975] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 822.739676][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.861538][ T975] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 823.705313][T17358] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 824.866769][ T972] usb 7-1: USB disconnect, device number 40 [ 825.284607][T17381] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 825.320704][T17381] SELinux: failed to load policy [ 825.453569][T17390] program syz.2.3948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.183566][T17407] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3955'. [ 826.339833][ T26] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 826.536716][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 826.551922][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.579775][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 826.599969][ T26] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 826.625633][ T26] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 826.636895][ T26] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.656952][ T26] usb 3-1: config 1 interface 0 has no altsetting 0 [ 827.089122][ T26] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 827.267085][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.309451][ T26] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 827.520664][T17431] tipc: Enabled bearer , priority 0 [ 827.542128][T17430] tipc: Disabling bearer [ 827.948939][T17440] pim6reg: entered allmulticast mode [ 827.994402][T17440] pim6reg: left allmulticast mode [ 829.160767][ T5857] usb 3-1: USB disconnect, device number 86 [ 830.164052][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 830.164066][ T30] audit: type=1326 audit(1742697542.717:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17466 comm="syz.2.3977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x0 [ 830.413448][ T30] audit: type=1400 audit(1742697542.957:1120): avc: denied { wake_alarm } for pid=17481 comm="syz.9.3983" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 830.492286][ T5865] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 830.507911][ T5865] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 830.516557][ T5865] hid-generic 0000:0004:0000.0010: unknown main item tag 0x0 [ 830.536764][ T5865] hid-generic 0000:0004:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 830.863628][T17495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3986'. [ 831.861297][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3988'. [ 831.980634][ T30] audit: type=1400 audit(1742697544.537:1121): avc: denied { read } for pid=17505 comm="syz.6.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 832.464250][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3995'. [ 832.493601][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3995'. [ 832.504382][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3995'. [ 833.050596][T17525] 9pnet_virtio: no channels available for device 127.0.0.1 [ 833.060276][T17525] xt_ecn: cannot match TCP bits for non-tcp packets [ 833.749267][T17533] netlink: 'syz.9.3998': attribute type 2 has an invalid length. [ 834.625071][T17540] SELinux: Context Ü is not valid (left unmapped). [ 834.835327][ T30] audit: type=1400 audit(1742697547.387:1122): avc: denied { ioctl } for pid=17547 comm="syz.8.4004" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 836.279799][ T26] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 836.446365][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 836.512750][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.692615][ T26] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 837.515391][ T26] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 837.526638][ T26] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 837.564007][ T26] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.578053][ T26] usb 3-1: config 1 interface 0 has no altsetting 0 [ 837.585145][ T26] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 837.599541][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.615840][ T26] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 838.081208][T17595] netlink: 'syz.8.4020': attribute type 10 has an invalid length. [ 838.089254][T17595] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4020'. [ 838.156268][T17596] CUSE: unknown device info "ÿ" [ 838.161665][T17596] CUSE: zero length info key specified [ 838.942472][ T9] usb 3-1: USB disconnect, device number 87 [ 839.126276][ T30] audit: type=1326 audit(1742697551.677:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.151545][ T30] audit: type=1326 audit(1742697551.677:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.203760][ T30] audit: type=1326 audit(1742697551.677:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.303470][ T30] audit: type=1326 audit(1742697551.677:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.468616][ T30] audit: type=1326 audit(1742697551.677:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.492182][ T30] audit: type=1326 audit(1742697551.687:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.516776][ T30] audit: type=1326 audit(1742697551.687:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.540614][ T30] audit: type=1326 audit(1742697551.687:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.609692][ T30] audit: type=1326 audit(1742697551.687:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.670866][ T30] audit: type=1326 audit(1742697551.697:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17609 comm="syz.6.4025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 839.875367][T17639] xt_hashlimit: max too large, truncated to 1048576 [ 840.300295][ T972] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 840.463695][ T972] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.515810][ T972] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 840.527284][ T972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.544046][ T972] usb 10-1: config 0 descriptor?? [ 841.224641][T17685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 841.232482][T17685] IPv6: NLM_F_CREATE should be set when creating new route [ 841.239751][T17685] IPv6: NLM_F_CREATE should be set when creating new route [ 841.853982][T17693] bridge0: entered promiscuous mode [ 841.859555][T17693] macvlan2: entered promiscuous mode [ 841.866948][T17693] bridge0: port 1(macvlan2) entered blocking state [ 841.874845][T17693] bridge0: port 1(macvlan2) entered disabled state [ 841.883170][T17693] macvlan2: entered allmulticast mode [ 841.888614][T17693] bridge0: entered allmulticast mode [ 841.895751][T17693] macvlan2: left allmulticast mode [ 841.901091][T17693] bridge0: left allmulticast mode [ 841.908153][T17693] bridge0: left promiscuous mode [ 842.177176][T17714] netlink: 'syz.6.4049': attribute type 10 has an invalid length. [ 842.185175][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4049'. [ 842.319155][T17717] CUSE: unknown device info "ÿ" [ 842.324468][T17717] CUSE: zero length info key specified [ 843.473421][ T9] usb 10-1: USB disconnect, device number 28 [ 843.574566][T17733] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 843.592039][T17733] SELinux: failed to load policy [ 843.842310][T17751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.021264][ T975] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 844.042273][T17760] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 844.180286][ T975] usb 10-1: Using ep0 maxpacket: 16 [ 844.188329][ T975] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 844.198248][ T975] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 844.208594][ T975] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 844.218939][ T975] usb 10-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.234213][ T975] usb 10-1: config 1 interface 0 has no altsetting 0 [ 844.243687][ T975] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 844.255395][ T975] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.270194][ T975] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 846.758720][T17817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 846.799904][ T5865] usb 10-1: USB disconnect, device number 29 [ 847.251279][T17846] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 847.261505][T17846] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 847.587440][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4111'. [ 847.735027][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4111'. [ 848.847542][T17886] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 848.857061][T17886] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 848.869228][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 848.869244][ T30] audit: type=1400 audit(1742697561.417:1139): avc: denied { view } for pid=17880 comm="syz.6.4115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 849.289152][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4122'. [ 850.177992][T17911] program syz.7.4126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.142338][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4137'. [ 851.156044][T17937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4137'. [ 851.398374][T17941] 9pnet_fd: Insufficient options for proto=fd [ 851.605220][ T30] audit: type=1326 audit(1742697564.157:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.666001][ T30] audit: type=1326 audit(1742697564.157:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.690978][ T30] audit: type=1326 audit(1742697564.157:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.741032][ T30] audit: type=1326 audit(1742697564.157:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.766181][ T30] audit: type=1326 audit(1742697564.157:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.805473][ T30] audit: type=1326 audit(1742697564.157:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.843608][ T30] audit: type=1326 audit(1742697564.157:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.894652][ T30] audit: type=1326 audit(1742697564.157:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 851.926028][ T30] audit: type=1326 audit(1742697564.157:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17946 comm="syz.6.4142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 854.452520][T17981] 9pnet_virtio: no channels available for device 127.0.0.1 [ 854.470412][T17981] xt_ecn: cannot match TCP bits for non-tcp packets [ 860.908261][T18030] gtp0: entered promiscuous mode [ 862.605033][T18072] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.4183'. [ 863.819523][T18107] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.4195'. [ 867.486319][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 867.486338][ T30] audit: type=1326 audit(1742697580.017:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18129 comm="syz.2.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7fc00000 [ 867.630446][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4203'. [ 867.724758][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4203'. [ 867.747471][ T30] audit: type=1400 audit(1742697580.297:1158): avc: denied { ioctl } for pid=18135 comm="syz.7.4204" path="socket:[82697]" dev="sockfs" ino=82697 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 868.369969][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4208'. [ 869.265902][T18165] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4216'. [ 869.855717][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.862330][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.700306][T18196] bridge0: entered promiscuous mode [ 871.706274][T18196] macvlan2: entered promiscuous mode [ 871.756711][T18196] bridge0: port 1(macvlan2) entered blocking state [ 871.764380][T18196] bridge0: port 1(macvlan2) entered disabled state [ 871.777758][T18196] macvlan2: entered allmulticast mode [ 871.783550][T18196] bridge0: entered allmulticast mode [ 871.989415][T18196] macvlan2: left allmulticast mode [ 871.995012][T18196] bridge0: left allmulticast mode [ 872.006394][T18196] bridge0: left promiscuous mode [ 872.009704][ T26] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 872.201190][ T30] audit: type=1326 audit(1742697584.757:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.234876][ T30] audit: type=1326 audit(1742697584.757:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.243604][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.274834][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.276596][ T30] audit: type=1326 audit(1742697584.777:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.317789][ T26] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 872.324003][ T30] audit: type=1326 audit(1742697584.777:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.350613][ T30] audit: type=1326 audit(1742697584.777:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.356059][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.374900][ T30] audit: type=1326 audit(1742697584.787:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.415656][ T26] usb 3-1: config 0 descriptor?? [ 872.428507][ T30] audit: type=1326 audit(1742697584.787:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.452296][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.458945][ T30] audit: type=1326 audit(1742697584.787:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.482963][T17282] Bluetooth: hci5: command 0xfc11 tx timeout [ 872.490226][ T9133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 872.503902][ T30] audit: type=1326 audit(1742697584.787:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.538508][ T30] audit: type=1326 audit(1742697584.787:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.588896][ T30] audit: type=1326 audit(1742697584.787:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.612912][ T30] audit: type=1326 audit(1742697584.787:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.636565][ C1] vkms_vblank_simulate: vblank timer overrun [ 872.643797][ T30] audit: type=1326 audit(1742697584.787:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.689024][ T30] audit: type=1326 audit(1742697584.787:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.720462][ T30] audit: type=1326 audit(1742697584.787:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.927350][ T30] audit: type=1326 audit(1742697584.787:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 872.978290][ T30] audit: type=1326 audit(1742697584.787:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 873.001879][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.050650][ T26] usbhid 3-1:0.0: can't add hid device: -32 [ 873.056710][ T26] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 873.074902][ T30] audit: type=1326 audit(1742697584.787:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18207 comm="syz.8.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f151a98d169 code=0x7ffc0000 [ 873.106097][ T26] usb 3-1: USB disconnect, device number 88 [ 873.340981][T18243] 9pnet_fd: Insufficient options for proto=fd [ 873.689575][T18255] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4252'. [ 874.225014][T18266] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4255'. [ 876.485788][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4273'. [ 877.090684][T18325] 9pnet_fd: Insufficient options for proto=fd [ 877.562176][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 877.562191][ T30] audit: type=1326 audit(1742697590.117:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 877.633749][ T30] audit: type=1326 audit(1742697590.147:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 877.736476][ T30] audit: type=1326 audit(1742697590.147:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 877.760533][ T30] audit: type=1326 audit(1742697590.167:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 877.836788][ T30] audit: type=1326 audit(1742697590.167:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 877.860738][T18350] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4287'. [ 877.873498][ T30] audit: type=1326 audit(1742697590.167:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f28415bfa25 code=0x7ffc0000 [ 877.897860][ T30] audit: type=1326 audit(1742697590.287:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 878.190232][T18358] 9pnet_fd: Insufficient options for proto=fd [ 878.212029][ T30] audit: type=1326 audit(1742697590.347:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 878.300073][ T30] audit: type=1326 audit(1742697590.377:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2841529359 code=0x7ffc0000 [ 878.363547][ T30] audit: type=1326 audit(1742697590.427:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18335 comm="syz.2.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7ffc0000 [ 878.655795][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4295'. [ 878.751679][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4295'. [ 878.797824][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4295'. [ 878.951685][T18382] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4299'. [ 882.686120][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4331'. [ 882.695123][T18468] openvswitch: netlink: Flow actions attr not present in new flow. [ 882.773796][T16795] Bluetooth: hci5: Frame reassembly failed (-84) [ 883.313087][T18473] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4335'. [ 883.322449][T18473] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4335'. [ 884.471240][T17282] Bluetooth: hci5: command 0xfc11 tx timeout [ 884.477951][ T9133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 886.710327][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4356'. [ 886.795103][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4356'. [ 886.939883][ T5865] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 887.997414][ T5865] usb 7-1: Using ep0 maxpacket: 8 [ 888.013508][ T5865] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.030975][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.536796][ T5865] usb 7-1: Product: syz [ 888.541912][ T5865] usb 7-1: Manufacturer: syz [ 888.546574][ T5865] usb 7-1: SerialNumber: syz [ 888.553389][ T5865] usb 7-1: config 0 descriptor?? [ 888.773862][ T5865] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 888.795640][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 888.795655][ T30] audit: type=1326 audit(1742697601.347:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.827170][ T30] audit: type=1326 audit(1742697601.387:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.852996][ T30] audit: type=1326 audit(1742697601.407:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.906020][ T30] audit: type=1326 audit(1742697601.407:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.935482][ T30] audit: type=1326 audit(1742697601.437:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.962995][ T30] audit: type=1326 audit(1742697601.437:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 888.993377][ T30] audit: type=1326 audit(1742697601.437:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 889.020007][ T30] audit: type=1326 audit(1742697601.437:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 889.044056][ T5865] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 889.056468][ T30] audit: type=1326 audit(1742697601.437:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 889.081574][ T30] audit: type=1326 audit(1742697601.437:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18564 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 889.556852][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4376'. [ 889.567527][T18579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 889.578218][T18579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 890.128258][T17282] Bluetooth: hci5: command 0xfc11 tx timeout [ 890.134920][ T9133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 890.735645][ T5865] usb 7-1: USB disconnect, device number 41 [ 890.839909][T18589] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 891.256877][T18602] pim6reg: entered allmulticast mode [ 891.365033][T18602] pim6reg: left allmulticast mode [ 891.396406][T18614] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4390'. [ 892.418148][T18632] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4394'. [ 893.750960][T17282] Bluetooth: hci5: command 0xfc11 tx timeout [ 893.757353][ T9133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 893.935774][T18657] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 894.008724][T18663] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 894.035291][T18662] IPVS: stopping master sync thread 18663 ... [ 894.820942][T18677] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 895.981801][T15929] Bluetooth: hci5: Frame reassembly failed (-84) [ 896.002898][T18601] Set syz1 is full, maxelem 65536 reached [ 896.696609][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 896.696640][ T30] audit: type=1326 audit(1742697609.247:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 896.729941][ T30] audit: type=1326 audit(1742697609.247:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 896.754821][ T30] audit: type=1326 audit(1742697609.287:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 896.790699][ T30] audit: type=1326 audit(1742697609.287:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 896.886367][ T30] audit: type=1326 audit(1742697609.287:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 897.099738][ T30] audit: type=1326 audit(1742697609.287:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 897.149395][ T30] audit: type=1326 audit(1742697609.677:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 897.236819][ T30] audit: type=1326 audit(1742697609.677:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 897.321237][ T30] audit: type=1326 audit(1742697609.677:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a8b8d169 code=0x7ffc0000 [ 897.637470][T18723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18723 comm=syz.2.4426 [ 897.655373][T18723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18723 comm=syz.2.4426 [ 897.668700][T18723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18723 comm=syz.2.4426 [ 897.991060][T17282] Bluetooth: hci5: command 0xfc11 tx timeout [ 897.991157][ T9133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 898.471617][T18735] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.564954][T18735] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.716073][ T30] audit: type=1400 audit(1742697611.267:1218): avc: denied { connect } for pid=18741 comm="syz.6.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 898.879949][T18735] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.982755][T18735] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.002125][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4437'. [ 899.027375][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4437'. [ 899.098739][T18735] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.113599][T18735] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.132581][T18735] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.144410][T18735] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.250930][T18753] fuse: Bad value for 'fd' [ 901.384593][T18782] netlink: 'syz.9.4452': attribute type 3 has an invalid length. [ 901.426429][T18782] netlink: 'syz.9.4452': attribute type 3 has an invalid length. [ 901.457135][T18782] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4452'. [ 901.479688][T18784] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 901.486830][T18784] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 901.508088][T18784] vhci_hcd vhci_hcd.0: Device attached [ 901.696897][T18785] vhci_hcd: connection closed [ 901.718634][ T206] vhci_hcd: stop threads [ 901.740315][ T206] vhci_hcd: release socket [ 901.757328][ T206] vhci_hcd: disconnect device [ 901.764473][ T5857] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 901.814420][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4461'. [ 903.379381][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 903.379397][ T30] audit: type=1400 audit(1742697615.927:1220): avc: denied { ioctl } for pid=18836 comm="syz.7.4475" path="socket:[86193]" dev="sockfs" ino=86193 ioctlcmd=0x8911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 903.508547][T18845] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4478'. [ 903.579931][T18849] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 903.593103][T18849] SELinux: failed to load policy [ 904.113463][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'. [ 904.151934][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'. [ 904.177620][T18868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4487'. [ 904.201662][ T30] audit: type=1400 audit(1742697616.747:1221): avc: denied { mount } for pid=18872 comm="syz.8.4490" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 904.243428][ T30] audit: type=1400 audit(1742697616.787:1222): avc: denied { search } for pid=18872 comm="syz.8.4490" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 904.269854][ T30] audit: type=1400 audit(1742697616.827:1223): avc: denied { write } for pid=18872 comm="syz.8.4490" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 904.296422][ T30] audit: type=1400 audit(1742697616.827:1224): avc: denied { add_name } for pid=18872 comm="syz.8.4490" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 904.319157][ T30] audit: type=1400 audit(1742697616.827:1225): avc: denied { create } for pid=18872 comm="syz.8.4490" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 906.899740][ T5857] vhci_hcd: vhci_device speed not set [ 906.957553][T18941] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 907.102466][T18949] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4520'. [ 907.272655][T18958] fuse: Invalid rootmode [ 907.700384][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4523'. [ 907.733347][ T30] audit: type=1326 audit(1742697620.227:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18936 comm="syz.7.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7fc00000 [ 907.951013][ T30] audit: type=1326 audit(1742697620.227:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18936 comm="syz.7.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb28518d169 code=0x7fc00000 [ 908.549140][T18985] tmpfs: Bad value for 'mpol' [ 908.623787][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4532'. [ 908.692966][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4538'. [ 908.736240][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4538'. [ 908.935215][T19004] fuse: Bad value for 'rootmode' [ 909.076257][T19006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4539'. [ 909.531654][ T30] audit: type=1326 audit(1742697622.037:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.2.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284158d169 code=0x7fc00000 [ 909.637806][ T30] audit: type=1326 audit(1742697622.037:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz.2.4536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f284158d169 code=0x7fc00000 [ 912.027691][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4550'. [ 912.105001][T19033] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4551'. [ 912.247116][T19037] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4552'. [ 912.284526][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4553'. [ 912.329265][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4553'. [ 912.340131][T19043] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4555'. [ 912.542761][T19055] fuse: Bad value for 'rootmode' [ 914.074785][T19070] netlink: 58 bytes leftover after parsing attributes in process `syz.6.4567'. [ 914.540751][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4575'. [ 914.550965][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4576'. [ 914.581671][T19093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4578'. [ 914.906876][ T30] audit: type=1326 audit(1742697627.457:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 914.942774][ T30] audit: type=1326 audit(1742697627.487:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.009695][ T30] audit: type=1326 audit(1742697627.487:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.058741][ T30] audit: type=1326 audit(1742697627.487:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.250929][ T30] audit: type=1326 audit(1742697627.487:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.274980][ T30] audit: type=1326 audit(1742697627.487:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.299077][ T30] audit: type=1326 audit(1742697627.487:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.349752][ T30] audit: type=1326 audit(1742697627.487:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.726111][ T30] audit: type=1326 audit(1742697627.487:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 915.954653][ T30] audit: type=1326 audit(1742697627.487:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19106 comm="syz.7.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 916.010026][T19112] syz.2.4585 (19112) used greatest stack depth: 20752 bytes left [ 916.036066][T19128] 9pnet_fd: Insufficient options for proto=fd [ 916.603740][T19166] sch_tbf: burst 2 is lower than device bond0 mtu (1514) ! [ 917.649724][T19204] __nla_validate_parse: 9 callbacks suppressed [ 917.649741][T19204] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4625'. [ 917.825370][T19213] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 918.188699][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4637'. [ 918.266895][T17282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 918.278601][T17282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 918.287712][T17282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 918.295429][T17282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 918.307890][T17282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 918.315947][T17282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 918.345845][T10626] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.368496][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4637'. [ 918.499886][ T5863] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 918.514471][T10626] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.631552][T10626] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.663944][ T5863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.685072][ T5863] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.697594][ T5863] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 918.747940][ T5863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.766417][T10626] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.798422][ T5863] usb 10-1: config 0 descriptor?? [ 919.656514][T10626] team0: Port device geneve0 removed [ 919.763861][T10626] bond0 (unregistering): Released all slaves [ 919.778558][T19270] ip6gretap0: entered promiscuous mode [ 919.793535][T19270] ip6gretap0: entered allmulticast mode [ 919.804398][T19231] chnl_net:caif_netlink_parms(): no params data found [ 920.366087][ T5863] uclogic 0003:256C:006D.0011: failed retrieving string descriptor #200: -71 [ 920.378400][ T5863] uclogic 0003:256C:006D.0011: failed retrieving pen parameters: -71 [ 920.386819][ T5863] uclogic 0003:256C:006D.0011: failed probing pen v2 parameters: -71 [ 920.395384][ T5863] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 920.400683][ T9133] Bluetooth: hci0: command tx timeout [ 920.410529][ T5863] uclogic 0003:256C:006D.0011: probe with driver uclogic failed with error -71 [ 920.427028][ T5863] usb 10-1: USB disconnect, device number 30 [ 920.457105][T19231] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.474960][T19231] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.489883][T19231] bridge_slave_0: entered allmulticast mode [ 920.535187][T19231] bridge_slave_0: entered promiscuous mode [ 920.560987][T19231] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.614734][T19231] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.634324][T19231] bridge_slave_1: entered allmulticast mode [ 920.652189][T19231] bridge_slave_1: entered promiscuous mode [ 920.665641][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 920.665656][ T30] audit: type=1326 audit(1742697633.217:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.713920][T19231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.718226][ T30] audit: type=1326 audit(1742697633.217:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.751424][T19231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.754423][ T30] audit: type=1326 audit(1742697633.247:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.807055][ T30] audit: type=1326 audit(1742697633.247:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.825311][T19231] team0: Port device team_slave_0 added [ 920.844896][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4660'. [ 920.852857][T19231] team0: Port device team_slave_1 added [ 920.863066][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4660'. [ 920.875105][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4660'. [ 920.895069][ T30] audit: type=1326 audit(1742697633.247:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.919524][ T30] audit: type=1326 audit(1742697633.247:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 920.978089][T19231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.984501][ T30] audit: type=1326 audit(1742697633.247:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 921.036880][T19231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.078009][T19231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.099268][T19231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.124071][T19303] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4666'. [ 921.142372][T19231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.156855][ T30] audit: type=1326 audit(1742697633.247:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 921.168765][T19231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.257141][T19307] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4668'. [ 921.282095][ T30] audit: type=1326 audit(1742697633.247:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 921.335232][ T30] audit: type=1326 audit(1742697633.247:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19283 comm="syz.7.4658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28518d169 code=0x7ffc0000 [ 921.337990][T19309] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4669'. [ 921.383570][T19309] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4669'. [ 921.400552][T19231] hsr_slave_0: entered promiscuous mode [ 921.410659][T19231] hsr_slave_1: entered promiscuous mode [ 921.416737][T19231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.429712][T19231] Cannot create hsr debugfs directory [ 922.055973][T10626] : left promiscuous mode [ 922.236937][T10626] tipc: Left network mode [ 922.465419][T19231] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 922.481189][ T9133] Bluetooth: hci0: command tx timeout [ 922.647061][T19231] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 922.856374][T19231] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 922.873937][T19382] __nla_validate_parse: 6 callbacks suppressed [ 922.873953][T19382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4703'. [ 922.958456][T19231] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 923.066303][T19392] syzkaller1: entered promiscuous mode [ 923.072541][T19392] syzkaller1: entered allmulticast mode [ 923.220591][T19400] netlink: 156 bytes leftover after parsing attributes in process `syz.8.4711'. [ 923.237983][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4711'. [ 923.370930][T19231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.415863][T10626] mac80211_hwsim hwsim25 wlan1: left promiscuous mode [ 923.529020][T19231] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.797580][T16795] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.804777][T16795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.887933][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.895071][T15687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.174403][T19428] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4720'. [ 924.189896][T10626] hsr_slave_0: left promiscuous mode [ 924.195753][T10626] hsr_slave_1: left promiscuous mode [ 924.207834][T10626] veth1_macvtap: left promiscuous mode [ 924.214425][T10626] veth0_macvtap: left promiscuous mode [ 924.220345][T10626] veth1_vlan: left promiscuous mode [ 924.225659][T10626] veth0_vlan: left promiscuous mode [ 924.549936][ T9133] Bluetooth: hci0: command tx timeout [ 925.172140][T19429] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4719'. [ 925.257233][T19231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 925.275125][T19231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.482018][T19459] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 925.653861][T19231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.861976][T19475] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4737'. [ 926.137249][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 926.137264][ T30] audit: type=1326 audit(1742697638.687:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.137304][ T30] audit: type=1326 audit(1742697638.687:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.139812][ T30] audit: type=1326 audit(1742697638.687:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.139866][ T30] audit: type=1326 audit(1742697638.687:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.139909][ T30] audit: type=1326 audit(1742697638.687:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.139955][ T30] audit: type=1326 audit(1742697638.687:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19483 comm="syz.9.4739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 926.165835][T19231] veth0_vlan: entered promiscuous mode [ 926.181277][T19231] veth1_vlan: entered promiscuous mode [ 926.231807][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.249806][ T30] audit: type=1400 audit(1742697638.787:1321): avc: denied { getopt } for pid=19483 comm="syz.9.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 926.310508][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.322992][ T30] audit: type=1400 audit(1742697638.877:1322): avc: denied { read write } for pid=14787 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 926.329858][ T30] audit: type=1400 audit(1742697638.877:1323): avc: denied { open } for pid=14787 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 926.329914][ T30] audit: type=1400 audit(1742697638.877:1324): avc: denied { ioctl } for pid=14787 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 926.431910][T19231] veth0_macvtap: entered promiscuous mode [ 926.435660][T19231] veth1_macvtap: entered promiscuous mode [ 926.477867][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.477888][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.477898][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.477911][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.477921][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.477934][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.478758][T19231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.483900][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.483921][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.483931][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.483943][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.483954][T19231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.483966][T19231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.484689][T19231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.501799][T19231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.501833][T19231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.501857][T19231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.501882][T19231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.636435][ T9133] Bluetooth: hci0: command tx timeout [ 926.696896][T19494] fuse: Unknown parameter '0x0000000000000004' [ 926.709925][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.709941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.779685][T10626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.779704][T10626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.248317][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.329850][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.378039][T19507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4746'. [ 927.479430][T19508] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4747'. [ 927.479466][T19508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4747'. [ 927.791033][T19521] fuse: Unknown parameter '0x0000000000000004' [ 927.910972][T19525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19525 comm=syz.9.4754 [ 928.344310][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4758'. [ 929.219424][T19553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19553 comm=syz.9.4766 [ 930.144361][T19563] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4771'. [ 930.154579][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4771'. [ 930.668292][T19579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4776'. [ 931.340176][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.354881][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.941746][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 931.941760][ T30] audit: type=1326 audit(1742697644.497:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.009690][ T30] audit: type=1326 audit(1742697644.537:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.095951][ T30] audit: type=1326 audit(1742697644.557:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.179677][ T30] audit: type=1326 audit(1742697644.557:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.220534][ T30] audit: type=1326 audit(1742697644.557:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.253503][T19609] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.397533][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4793'. [ 932.414663][ T30] audit: type=1326 audit(1742697644.597:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.439029][ T30] audit: type=1326 audit(1742697644.597:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.463291][ T30] audit: type=1326 audit(1742697644.597:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.6.4784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 932.486956][ T30] audit: type=1400 audit(1742697644.597:1413): avc: denied { read } for pid=19603 comm="syz.8.4787" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 932.601687][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4793'. [ 932.614697][T19609] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.940626][T19609] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.949754][ T30] audit: type=1400 audit(1742697644.597:1414): avc: denied { open } for pid=19603 comm="syz.8.4787" path="/dev/usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 933.206044][T19609] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.787206][T19651] netlink: 'syz.9.4802': attribute type 3 has an invalid length. [ 934.795468][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4802'. [ 934.913801][T19609] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.966822][T19609] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.035565][T19609] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.111846][T19609] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.226690][T19664] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4806'. [ 936.633245][T19687] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4817'. [ 936.884190][T19703] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4825'. [ 936.938795][T19707] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4827'. [ 936.959267][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4827'. [ 937.700497][T19710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.805720][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 937.805753][ T30] audit: type=1400 audit(1742697650.357:1476): avc: denied { write } for pid=19716 comm="syz.7.4830" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.524549][T19710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.709231][T19729] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4834'. [ 938.741155][T19731] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4835'. [ 938.772249][T19710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.805163][T19731] batadv1: entered allmulticast mode [ 938.902876][T19710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.069537][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4840'. [ 939.111626][T19741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4840'. [ 939.225290][T19710] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.319786][T19710] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.052822][T19710] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.126039][T19710] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 940.161370][T19751] __nla_validate_parse: 1 callbacks suppressed [ 940.161391][T19751] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4844'. [ 940.253696][ T30] audit: type=1400 audit(1742697652.807:1477): avc: denied { read write } for pid=19752 comm="syz.7.4845" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 940.288639][ T30] audit: type=1400 audit(1742697652.827:1478): avc: denied { open } for pid=19752 comm="syz.7.4845" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 940.350775][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 940.361892][ T30] audit: type=1400 audit(1742697652.847:1479): avc: denied { create } for pid=19753 comm="syz.8.4846" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 940.401881][ T30] audit: type=1400 audit(1742697652.887:1480): avc: denied { mounton } for pid=19753 comm="syz.8.4846" path="/567/file0" dev="tmpfs" ino=2953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 940.428729][ T30] audit: type=1400 audit(1742697652.887:1481): avc: denied { mount } for pid=19753 comm="syz.8.4846" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 940.447835][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4849'. [ 940.451116][ T30] audit: type=1400 audit(1742697652.957:1482): avc: denied { unmount } for pid=11790 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 940.507460][T19761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 940.518624][T19761] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 940.520937][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4847'. [ 940.571139][ T30] audit: type=1400 audit(1742697653.127:1483): avc: denied { unlink } for pid=11790 comm="syz-executor" name="file0" dev="tmpfs" ino=2953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 940.618169][ T30] audit: type=1400 audit(1742697653.167:1484): avc: denied { create } for pid=19766 comm="syz.6.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 940.653645][ T30] audit: type=1400 audit(1742697653.187:1485): avc: denied { ioctl } for pid=19766 comm="syz.6.4852" path="socket:[90136]" dev="sockfs" ino=90136 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 942.136666][T19796] netem: change failed [ 942.684076][T19797] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.881737][T19797] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.481842][T19797] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.648745][T19797] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.649136][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 943.649148][ T30] audit: type=1400 audit(1742697656.197:1490): avc: denied { append } for pid=19833 comm="syz.6.4873" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 943.692535][T19834] usb usb1: usbfs: process 19834 (syz.6.4873) did not claim interface 0 before use [ 943.701775][T19832] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4872'. [ 943.798359][T19797] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.808143][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4874'. [ 943.825517][T19797] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.837810][T19841] veth2: entered allmulticast mode [ 943.853523][T19797] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.882408][T19797] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.063680][ T30] audit: type=1400 audit(1742697656.617:1491): avc: denied { write } for pid=19845 comm="syz.8.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 944.944114][ T30] audit: type=1400 audit(1742697657.497:1492): avc: denied { unmount } for pid=19231 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 945.549408][ T30] audit: type=1400 audit(1742697657.617:1493): avc: denied { remount } for pid=19861 comm="syz.7.4884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 945.624878][T19866] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 945.624878][T19866] program syz.2.4886 not setting count and/or reply_len properly [ 945.649331][ T30] audit: type=1400 audit(1742697658.177:1494): avc: denied { write } for pid=19865 comm="syz.2.4886" name="sg0" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 945.729010][T19870] 9pnet: Could not find request transport: fd0x0000000000000004 [ 945.753601][ T30] audit: type=1400 audit(1742697658.267:1495): avc: denied { bind } for pid=19859 comm="syz.9.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 945.777815][ T30] audit: type=1400 audit(1742697658.267:1496): avc: denied { listen } for pid=19859 comm="syz.9.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 945.896685][ T30] audit: type=1400 audit(1742697658.447:1497): avc: denied { create } for pid=19875 comm="syz.6.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 945.928775][ T30] audit: type=1400 audit(1742697658.447:1498): avc: denied { write } for pid=19875 comm="syz.6.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 945.978056][ T30] audit: type=1400 audit(1742697658.527:1499): avc: denied { read } for pid=19877 comm="syz.8.4891" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 946.164593][T19885] IPVS: stopping master sync thread 19887 ... [ 946.174118][T19887] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 946.208390][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4893'. [ 946.228422][T19884] hsr_slave_0: left promiscuous mode [ 946.253821][T19884] hsr_slave_1: left promiscuous mode [ 946.261122][T19896] usb usb5: usbfs: process 19896 (syz.6.4893) did not claim interface 0 before use [ 946.278906][T19896] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20000 [ 947.057153][T19911] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4899'. [ 947.123655][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'. [ 947.140702][T19913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 947.174657][T19913] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 947.567546][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4904'. [ 948.044264][T19933] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4908'. [ 948.054411][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4908'. [ 948.078643][T19929] netlink: 'syz.7.4905': attribute type 2 has an invalid length. [ 948.470220][T19937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4906'. [ 948.861332][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4916'. [ 949.038497][T19967] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4922'. [ 949.069795][T19967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4922'. [ 949.871204][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 949.871220][ T30] audit: type=1400 audit(1742697662.417:1524): avc: denied { setopt } for pid=19986 comm="syz.7.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 949.923298][ T30] audit: type=1400 audit(1742697662.417:1525): avc: denied { ioctl } for pid=19986 comm="syz.7.4929" path="socket:[91206]" dev="sockfs" ino=91206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 949.997538][ T30] audit: type=1400 audit(1742697662.507:1526): avc: denied { bind } for pid=19986 comm="syz.7.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 950.038828][ T30] audit: type=1400 audit(1742697662.517:1527): avc: denied { write } for pid=19986 comm="syz.7.4929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 951.146857][ T30] audit: type=1400 audit(1742697663.697:1528): avc: denied { unmount } for pid=14787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 951.185710][T20028] usb usb1: usbfs: process 20028 (syz.7.4943) did not claim interface 0 before use [ 951.229176][ T26] IPVS: starting estimator thread 0... [ 951.337003][ T30] audit: type=1400 audit(1742697663.887:1529): avc: denied { bind } for pid=20039 comm="syz.2.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 951.357182][T20034] IPVS: using max 25 ests per chain, 60000 per kthread [ 951.399668][ T30] audit: type=1400 audit(1742697663.887:1530): avc: denied { name_bind } for pid=20039 comm="syz.2.4947" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 951.440274][ T30] audit: type=1400 audit(1742697663.887:1531): avc: denied { node_bind } for pid=20039 comm="syz.2.4947" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 951.495669][ T30] audit: type=1400 audit(1742697663.917:1532): avc: denied { listen } for pid=20039 comm="syz.2.4947" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 951.546354][ T30] audit: type=1400 audit(1742697663.917:1533): avc: denied { connect } for pid=20039 comm="syz.2.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 951.981320][ T5857] IPVS: starting estimator thread 0... [ 951.983891][T20070] __nla_validate_parse: 4 callbacks suppressed [ 951.983905][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4960'. [ 952.048958][T20070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 952.080326][T20072] IPVS: using max 29 ests per chain, 69600 per kthread [ 952.084147][T20070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 952.162854][T20078] netlink: 'syz.9.4964': attribute type 3 has an invalid length. [ 953.205365][ T5865] IPVS: starting estimator thread 0... [ 953.369716][T20099] IPVS: using max 26 ests per chain, 62400 per kthread [ 953.534027][T17282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 953.546286][T17282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 953.554626][T17282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.563089][T17282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.593697][T17282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 953.603462][T17282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 954.852354][ T36] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.903244][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 954.903260][ T30] audit: type=1400 audit(1742697667.447:1542): avc: denied { name_connect } for pid=20122 comm="syz.2.4981" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 954.940401][T20123] sctp: [Deprecated]: syz.2.4981 (pid 20123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 954.940401][T20123] Use struct sctp_sack_info instead [ 954.966632][T20125] usb usb1: usbfs: process 20125 (syz.8.4983) did not claim interface 0 before use [ 955.007157][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4982'. [ 955.009634][ T30] audit: type=1400 audit(1742697667.497:1543): avc: denied { listen } for pid=20122 comm="syz.2.4981" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.073702][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4982'. [ 955.087177][ T30] audit: type=1400 audit(1742697667.497:1544): avc: denied { accept } for pid=20122 comm="syz.2.4981" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.140300][ T30] audit: type=1400 audit(1742697667.497:1545): avc: denied { getopt } for pid=20122 comm="syz.2.4981" lport=57891 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 955.195613][ T36] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.323366][ T36] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.751449][T17282] Bluetooth: hci2: command tx timeout [ 956.320104][ T36] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.419506][ T30] audit: type=1400 audit(1742697668.967:1546): avc: denied { ioctl } for pid=20145 comm="syz.9.4989" path="socket:[91038]" dev="sockfs" ino=91038 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 956.478734][T20106] chnl_net:caif_netlink_parms(): no params data found [ 957.043418][T20106] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.069541][T20106] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.117270][T20106] bridge_slave_0: entered allmulticast mode [ 957.155154][T20106] bridge_slave_0: entered promiscuous mode [ 957.191355][T20106] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.199995][T20106] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.208015][T20106] bridge_slave_1: entered allmulticast mode [ 957.227291][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4992'. [ 957.243066][T20106] bridge_slave_1: entered promiscuous mode [ 957.268911][ T36] bridge_slave_1: left allmulticast mode [ 957.285706][ T36] bridge_slave_1: left promiscuous mode [ 957.297233][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.327340][ T36] bridge_slave_0: left allmulticast mode [ 957.333173][ T36] bridge_slave_0: left promiscuous mode [ 957.350572][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.604272][ T30] audit: type=1326 audit(1742697670.157:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.9.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 957.638098][T20168] netlink: 'syz.9.4994': attribute type 1 has an invalid length. [ 957.682265][ T30] audit: type=1326 audit(1742697670.157:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.9.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 957.740647][ T30] audit: type=1326 audit(1742697670.157:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.9.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 957.832589][T17282] Bluetooth: hci2: command tx timeout [ 957.882697][ T30] audit: type=1326 audit(1742697670.157:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.9.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 958.233932][ T30] audit: type=1326 audit(1742697670.157:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.9.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f048eb8d169 code=0x7ffc0000 [ 958.748120][T20186] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5003'. [ 958.772848][ T36] team0: Port device geneve0 removed [ 959.001650][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.014678][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.024276][ T36] bond0 (unregistering): Released all slaves [ 959.048771][T20106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.092871][T20106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.128091][T20106] team0: Port device team_slave_0 added [ 959.142053][T20106] team0: Port device team_slave_1 added [ 959.198183][T20106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.215583][T20106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.296043][T20106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.341237][T20106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.348454][T20106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.380162][T20106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.417547][T20106] hsr_slave_0: entered promiscuous mode [ 959.424966][T20106] hsr_slave_1: entered promiscuous mode [ 959.431986][T20106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.440185][T20106] Cannot create hsr debugfs directory [ 959.909807][T17282] Bluetooth: hci2: command tx timeout [ 959.986641][T20106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 960.011856][T20106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 960.060439][T20106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 960.092176][T20106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 960.281189][T20106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.541107][T20106] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.659800][ T36] : left promiscuous mode [ 960.788703][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.795864][T11399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.928250][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.935427][T11399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.381600][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 961.381616][ T30] audit: type=1326 audit(1742697673.937:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 961.591608][ T30] audit: type=1326 audit(1742697673.967:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 961.615631][ T30] audit: type=1326 audit(1742697673.967:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 961.639786][ T30] audit: type=1326 audit(1742697673.967:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 961.688656][ T30] audit: type=1326 audit(1742697673.967:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 961.998960][T17282] Bluetooth: hci2: command tx timeout [ 962.157571][ T36] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 962.169914][ T30] audit: type=1326 audit(1742697673.967:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 962.237874][ T30] audit: type=1326 audit(1742697673.977:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 962.299043][ T30] audit: type=1326 audit(1742697673.977:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 962.376042][T20106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.383069][ T30] audit: type=1326 audit(1742697673.977:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 962.670450][ T30] audit: type=1326 audit(1742697673.977:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20226 comm="syz.6.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 963.121904][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5024'. [ 963.198565][T20250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 963.277999][ T36] hsr_slave_0: left promiscuous mode [ 963.283837][T20250] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 963.334517][ T36] hsr_slave_1: left promiscuous mode [ 963.352758][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.369049][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.405308][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.425237][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.455052][ T36] veth1_macvtap: left promiscuous mode [ 963.462076][ T36] veth0_macvtap: left promiscuous mode [ 963.603719][ T36] veth1_vlan: left promiscuous mode [ 963.609418][ T36] veth0_vlan: left promiscuous mode [ 965.720987][T20292] netlink: 'syz.6.5039': attribute type 2 has an invalid length. [ 965.842794][ T36] team0 (unregistering): Port device team_slave_1 removed [ 965.882302][ T36] team0 (unregistering): Port device team_slave_0 removed [ 966.334197][T20300] tipc: Started in network mode [ 966.349660][T20300] tipc: Node identity ae7e699bcdbd, cluster identity 4711 [ 966.358102][T20300] tipc: Enabled bearer , priority 0 [ 966.391515][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 966.391529][ T30] audit: type=1400 audit(1742697678.947:1624): avc: denied { ioctl } for pid=20304 comm="syz.6.5041" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 966.460022][T20293] tipc: Resetting bearer [ 967.459754][ T5865] tipc: Node number set to 1673750939 [ 967.516001][ T30] audit: type=1326 audit(1742697680.067:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.549782][ T30] audit: type=1326 audit(1742697680.067:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.589812][ T30] audit: type=1326 audit(1742697680.067:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.613655][ T30] audit: type=1326 audit(1742697680.067:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.639457][ T30] audit: type=1326 audit(1742697680.067:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.664956][ T30] audit: type=1326 audit(1742697680.067:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.695275][ T30] audit: type=1326 audit(1742697680.067:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.852002][ T30] audit: type=1326 audit(1742697680.067:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 967.876007][ T30] audit: type=1326 audit(1742697680.067:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20319 comm="syz.6.5047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 969.424385][T20337] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5053'. [ 969.652519][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5051'. [ 970.692071][T20353] netlink: '+}[@': attribute type 1 has an invalid length. [ 971.968802][T20293] tipc: Disabling bearer [ 972.046636][T20106] veth0_vlan: entered promiscuous mode [ 972.075419][T20106] veth1_vlan: entered promiscuous mode [ 972.137963][T20106] veth0_macvtap: entered promiscuous mode [ 972.163157][T20106] veth1_macvtap: entered promiscuous mode [ 972.216229][T20106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.249740][T20106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.266414][T20106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.285505][T20106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.305717][T20106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.316300][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 972.316313][ T30] audit: type=1326 audit(1742697684.867:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 972.356971][T20106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.382134][T20106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.391500][ T30] audit: type=1326 audit(1742697684.867:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 972.417714][T20106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.429137][T20106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.439063][ T30] audit: type=1326 audit(1742697684.867:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20381 comm="syz.6.5071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6a18d169 code=0x7ffc0000 [ 972.462600][T20106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.473084][T20106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.429527][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1077.436521][ C0] rcu: 1-...!: (1 GPs behind) idle=f19c/1/0x4000000000000000 softirq=86645/86646 fqs=0 [ 1077.447551][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11828/1:b..l [ 1077.455553][ C0] rcu: (detected by 0, t=10502 jiffies, g=89153, q=307 ncpus=2) [ 1077.463265][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1077.463289][ C1] NMI backtrace for cpu 1 [ 1077.463298][ C1] CPU: 1 UID: 0 PID: 14787 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 1077.463314][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1077.463322][ C1] RIP: 0010:kasan_check_range+0x46/0x1a0 [ 1077.463343][ C1] Code: 82 c6 00 00 00 48 b8 ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df <4d> 89 d1 48 c1 ed 03 49 c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d [ 1077.463355][ C1] RSP: 0018:ffffc90000a28c28 EFLAGS: 00000083 [ 1077.463365][ C1] RAX: dffffc0000000000 RBX: ffffffff9aa9d420 RCX: ffffffff81972ccd [ 1077.463374][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a28c70 [ 1077.463382][ C1] RBP: ffffc90000a28c70 R08: 0000000000000001 R09: fffffbfff3553a84 [ 1077.463391][ C1] R10: ffffc90000a28c73 R11: 0000000000000009 R12: ffffffff9aa9d428 [ 1077.463399][ C1] R13: ffffffff9aa9d430 R14: 1ffff920001451a4 R15: ffffffff9aa9d418 [ 1077.463408][ C1] FS: 0000555591cd7500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1077.463422][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1077.463431][ C1] CR2: 00007f28422d56c0 CR3: 0000000070276000 CR4: 00000000003526f0 [ 1077.463439][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1077.463447][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1077.463455][ C1] Call Trace: [ 1077.463460][ C1] [ 1077.463466][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1077.463483][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1077.463500][ C1] ? nmi_handle+0x1ac/0x5d0 [ 1077.463519][ C1] ? kasan_check_range+0x46/0x1a0 [ 1077.463535][ C1] ? default_do_nmi+0x6a/0x160 [ 1077.463549][ C1] ? exc_nmi+0x170/0x1e0 [ 1077.463561][ C1] ? end_repeat_nmi+0xf/0x53 [ 1077.463581][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1077.463595][ C1] ? kasan_check_range+0x46/0x1a0 [ 1077.463611][ C1] ? kasan_check_range+0x46/0x1a0 [ 1077.463627][ C1] ? kasan_check_range+0x46/0x1a0 [ 1077.463643][ C1] [ 1077.463647][ C1] [ 1077.463652][ C1] do_raw_spin_lock+0x12d/0x2c0 [ 1077.463664][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1077.463677][ C1] ? lock_acquire+0x2f/0xb0 [ 1077.463693][ C1] ? debug_object_activate+0x149/0x4a0 [ 1077.463711][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 1077.463726][ C1] ? debug_object_activate+0x149/0x4a0 [ 1077.463741][ C1] debug_object_activate+0x149/0x4a0 [ 1077.463755][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 1077.463773][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1077.463790][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 1077.463802][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1077.463815][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1077.463828][ C1] enqueue_hrtimer+0x25/0x3c0 [ 1077.463842][ C1] __hrtimer_run_queues+0x903/0xae0 [ 1077.463858][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1077.463870][ C1] ? read_tsc+0x9/0x20 [ 1077.463886][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1077.463903][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1077.463924][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1077.463940][ C1] [ 1077.463944][ C1] [ 1077.463949][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1077.463966][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 1077.463984][ C1] Code: b8 ff ff ff ff 65 0f c1 05 70 ca 6b 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 1077.463996][ C1] RSP: 0018:ffffc9000cacf548 EFLAGS: 00000206 [ 1077.464005][ C1] RAX: 0000000000000046 RBX: 1ffff92001959eaa RCX: 000000008641981b [ 1077.464013][ C1] RDX: 0000000000000001 RSI: ffffffff8b6cff80 RDI: ffffffff8bd36a20 [ 1077.464022][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd8d98 [ 1077.464030][ C1] R10: ffffffff96ec6cc7 R11: 0000000000000007 R12: 0000000000000000 [ 1077.464038][ C1] R13: ffffffff8e1bd140 R14: 0000000000000000 R15: 0000000000000000 [ 1077.464052][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1077.464069][ C1] ? rcu_is_watching+0x12/0xc0 [ 1077.464087][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1077.464101][ C1] ? find_held_lock+0x2d/0x110 [ 1077.464114][ C1] ? page_ext_get+0x34/0x310 [ 1077.464127][ C1] ? lock_acquire+0x2f/0xb0 [ 1077.464143][ C1] ? page_ext_get+0x34/0x310 [ 1077.464156][ C1] page_ext_get+0x3a/0x310 [ 1077.464168][ C1] ? page_ext_get+0x34/0x310 [ 1077.464180][ C1] page_table_check_set.part.0+0x36/0x550 [ 1077.464194][ C1] ? page_table_check_set+0x109/0x4c0 [ 1077.464208][ C1] page_table_check_set+0x275/0x4c0 [ 1077.464222][ C1] __page_table_check_ptes_set+0x2d0/0x3e0 [ 1077.464236][ C1] ? vm_normal_page+0x13c/0x2b0 [ 1077.464254][ C1] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1077.464268][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1077.464280][ C1] ? copy_page_range+0xd09/0x55e0 [ 1077.464300][ C1] copy_page_range+0x2068/0x55e0 [ 1077.464328][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1077.464345][ C1] ? find_held_lock+0x2d/0x110 [ 1077.464360][ C1] ? __pfx_lock_release+0x10/0x10 [ 1077.464376][ C1] ? lock_acquire+0x2f/0xb0 [ 1077.464392][ C1] ? copy_process+0x7c12/0x8c50 [ 1077.464406][ C1] ? down_write+0x14e/0x200 [ 1077.464425][ C1] ? up_write+0x1b2/0x520 [ 1077.464444][ C1] copy_process+0x7ccb/0x8c50 [ 1077.464456][ C1] ? wp_page_reuse+0x287/0x900 [ 1077.464478][ C1] ? __pfx_copy_process+0x10/0x10 [ 1077.464490][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1077.464514][ C1] kernel_clone+0xfd/0x960 [ 1077.464526][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1077.464542][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1077.464557][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 1077.464574][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 1077.464594][ C1] __do_sys_clone+0xcf/0x120 [ 1077.464606][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1077.464624][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 1077.464643][ C1] do_syscall_64+0xcd/0x250 [ 1077.464661][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.464678][ C1] RIP: 0033:0x7f28415839d3 [ 1077.464690][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 1077.464702][ C1] RSP: 002b:00007ffeead19758 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1077.464714][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f28415839d3 [ 1077.464722][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1077.464731][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1077.464738][ C1] R10: 0000555591cd77d0 R11: 0000000000000246 R12: 0000000000000000 [ 1077.464747][ C1] R13: 00000000000927c0 R14: 00000000000ed5f7 R15: 00007ffeead198f0 [ 1077.464760][ C1] [ 1077.465284][ C0] task:syz-executor state:R running task stack:23568 pid:11828 tgid:11828 ppid:11824 task_flags:0x400140 flags:0x00000000 [ 1078.135318][ C0] Call Trace: [ 1078.138613][ C0] [ 1078.141551][ C0] __schedule+0xf43/0x5890 [ 1078.145977][ C0] ? hlock_class+0x4e/0x130 [ 1078.150484][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1078.155682][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1078.160451][ C0] ? __pfx___schedule+0x10/0x10 [ 1078.165297][ C0] ? find_held_lock+0x2d/0x110 [ 1078.170069][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1078.175441][ C0] preempt_schedule_common+0x44/0xc0 [ 1078.180727][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1078.185943][ C0] _raw_spin_unlock+0x3e/0x50 [ 1078.190617][ C0] copy_page_range+0x1dee/0x55e0 [ 1078.195603][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1078.200910][ C0] ? find_held_lock+0x2d/0x110 [ 1078.205690][ C0] ? __pfx_lock_release+0x10/0x10 [ 1078.210718][ C0] ? lock_acquire+0x2f/0xb0 [ 1078.215219][ C0] ? copy_process+0x7c12/0x8c50 [ 1078.220067][ C0] ? down_write+0x14e/0x200 [ 1078.224574][ C0] ? up_write+0x1b2/0x520 [ 1078.228910][ C0] copy_process+0x7ccb/0x8c50 [ 1078.233578][ C0] ? wp_page_reuse+0x287/0x900 [ 1078.238359][ C0] ? __pfx_copy_process+0x10/0x10 [ 1078.243375][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1078.248162][ C0] kernel_clone+0xfd/0x960 [ 1078.252571][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1078.257770][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1078.262796][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1078.268173][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 1078.273464][ C0] __do_sys_clone+0xcf/0x120 [ 1078.278047][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1078.283262][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 1078.288551][ C0] do_syscall_64+0xcd/0x250 [ 1078.293056][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.298947][ C0] RIP: 0033:0x7f048eb839d3 [ 1078.303354][ C0] RSP: 002b:00007ffe42a52f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1078.311765][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f048eb839d3 [ 1078.319733][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1078.327696][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1078.335661][ C0] R10: 00005555660d27d0 R11: 0000000000000246 R12: 0000000000000000 [ 1078.343623][ C0] R13: 00000000000927c0 R14: 00000000000ed61d R15: 00007ffe42a53120 [ 1078.351600][ C0] [ 1078.354614][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g89153 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1078.365802][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1078.375762][ C0] rcu: RCU grace-period kthread stack dump: [ 1078.381638][ C0] task:rcu_preempt state:R running task stack:27552 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1078.395126][ C0] Call Trace: [ 1078.398397][ C0] [ 1078.401324][ C0] __schedule+0xf43/0x5890 [ 1078.405738][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1078.410945][ C0] ? __pfx___schedule+0x10/0x10 [ 1078.415795][ C0] ? schedule+0x298/0x350 [ 1078.420127][ C0] ? __pfx_lock_release+0x10/0x10 [ 1078.425157][ C0] ? lock_acquire+0x2f/0xb0 [ 1078.429655][ C0] ? schedule+0x1fd/0x350 [ 1078.433984][ C0] schedule+0xe7/0x350 [ 1078.438051][ C0] schedule_timeout+0x124/0x280 [ 1078.442899][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1078.449031][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1078.454346][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1078.460163][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1078.465630][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1078.470402][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1078.475688][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1078.480369][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1078.485578][ C0] rcu_gp_kthread+0x271/0x380 [ 1078.490263][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1078.495466][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1078.500666][ C0] ? __kthread_parkme+0x148/0x220 [ 1078.505688][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1078.510905][ C0] kthread+0x3af/0x750 [ 1078.514972][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.519563][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.524151][ C0] ret_from_fork+0x45/0x80 [ 1078.528567][ C0] ? __pfx_kthread+0x10/0x10 [ 1078.533155][ C0] ret_from_fork_asm+0x1a/0x30 [ 1078.537930][ C0] [ 1078.540940][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1078.547254][ C0] CPU: 0 UID: 0 PID: 20381 Comm: syz.6.5071 Not tainted 6.14.0-rc7-syzkaller-00202-g183601b78a9b #0 [ 1078.558011][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1078.568059][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1078.574139][ C0] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 c4 e8 49 7e 65 8b 05 c5 e8 49 7e a9 00 01 [ 1078.593744][ C0] RSP: 0018:ffffc9000beafa40 EFLAGS: 00000202 [ 1078.599817][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade1ea [ 1078.607783][ C0] RDX: ffff888070ee8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1078.615770][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1078.623734][ C0] R10: 0000000000000001 R11: 0000000000000005 R12: ffffed10170e8951 [ 1078.631699][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 1078.639661][ C0] FS: 000055555f028500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1078.648589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.655169][ C0] CR2: 000000110c32117a CR3: 0000000065f7e000 CR4: 00000000003526f0 [ 1078.663139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1078.671103][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1078.679070][ C0] Call Trace: [ 1078.682343][ C0] [ 1078.685181][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1078.691509][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1078.696720][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1078.702199][ C0] ? timekeeping_advance+0x72e/0xa90 [ 1078.707483][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1078.713111][ C0] ? __asan_memcpy+0x3c/0x60 [ 1078.717702][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 1078.722992][ C0] ? rcu_is_watching+0x12/0xc0 [ 1078.727764][ C0] ? update_process_times+0x178/0x2d0 [ 1078.733140][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1078.738860][ C0] ? update_wall_time+0x1c/0x40 [ 1078.743713][ C0] ? tick_nohz_handler+0x376/0x530 [ 1078.748825][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1078.754278][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1078.759650][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1078.765362][ C0] ? read_tsc+0x9/0x20 [ 1078.769435][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1078.774577][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1078.780735][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1078.786538][ C0] [ 1078.789462][ C0] [ 1078.792386][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1078.798547][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 1078.804614][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1078.810691][ C0] smp_call_function_many_cond+0x4c4/0x12c0 [ 1078.816591][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1078.821612][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1078.826721][ C0] text_poke_bp_batch+0x22b/0x760 [ 1078.831744][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1078.836773][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1078.842320][ C0] ? text_poke_queue+0xef/0x180 [ 1078.847171][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1078.853416][ C0] text_poke_finish+0x30/0x40 [ 1078.858087][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1078.864064][ C0] jump_label_update+0x1d7/0x400 [ 1078.869005][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 1078.874986][ C0] static_key_disable+0x1a/0x20 [ 1078.879837][ C0] tracepoint_probe_unregister+0x4fd/0xd70 [ 1078.885648][ C0] ? bpf_link_free+0x95/0x390 [ 1078.890328][ C0] ? __pfx_lock_release+0x10/0x10 [ 1078.895353][ C0] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 1078.901711][ C0] ? __pfx_bpf_link_release+0x10/0x10 [ 1078.907094][ C0] bpf_raw_tp_link_release+0x35/0x70 [ 1078.912387][ C0] bpf_link_free+0xe9/0x390 [ 1078.916916][ C0] bpf_link_release+0x5d/0x80 [ 1078.921641][ C0] __fput+0x3ff/0xb70 [ 1078.925639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1078.930845][ C0] task_work_run+0x14e/0x250 [ 1078.935441][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1078.940565][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 1078.946303][ C0] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1078.951940][ C0] do_syscall_64+0xda/0x250 [ 1078.956454][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.962349][ C0] RIP: 0033:0x7f6f6a18d169 [ 1078.966759][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.986366][ C0] RSP: 002b:00007ffcfc6617a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1078.994803][ C0] RAX: 0000000000000000 RBX: 00000000000ed5f4 RCX: 00007f6f6a18d169 [ 1079.002792][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1079.010764][ C0] RBP: 00007f6f6a3a7ba0 R08: 0000000000000001 R09: 00000006fc661a9f [ 1079.018730][ C0] R10: 00007f6f6a000000 R11: 0000000000000246 R12: 00007f6f6a3a5fac [ 1079.026697][ C0] R13: 00007f6f6a3a5fa0 R14: ffffffffffffffff R15: 00007ffcfc6618c0 [ 1079.034679][ C0]