last executing test programs: 2m40.178116259s ago: executing program 4 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000280)=0xc) get_robust_list(r1, &(0x7f0000000400)=&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)}}, &(0x7f00000004c0)=0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x82, &(0x7f0000000180)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x3}}, {@x25={0x805, {0x2, 0x8, 0x27, "52fdbaea2db19426cb6efb8018bee4c9c3fcbb5f0cb722c48965708888a1de9fcaddb4e561c3764b981bb65c9e66dc23446a9872793bcb02426ed560929df4fd71311a56ce7369e85b8f5687123ae649fba3a3808c7b25501770a67096cdc6677774994a58a6322521"}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 2m38.945661556s ago: executing program 4 (id=1675): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000880)=0x8, 0x6) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000300)='./bus\x00', 0x91) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "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"}, 0x11000}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xe]}, 0x8) close(r8) socket$can_raw(0x1d, 0x3, 0x1) writev(r6, &(0x7f0000000100), 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 2m36.818573106s ago: executing program 4 (id=1687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061111c00000000001e000000000000009500000c00000000c13c7b6b5dd2d0eb4d64132b9fa78c640941d9e0d1800c25bb07647a9a92a3bd85a91c7155bf975ab2be24541fdcd1cb4ccf1b609129899cd3b89629eabb55965de50d29a5faa6a6e3fc85b0cd89d246711f01b74496a3e941746521b1dcde6d1c054250c19fc334880425705a8843e0cffc3835f7f0404cd44dc784ce706a07c89e5cd25d154bf282d975ac3172e6782ebd9fddad7f3b40316f6d0801f5fe40c16b3938"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000040)=0xfffffffe, 0x4) syz_usb_control_io$hid(r5, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x41}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"bcffffff", 0x0, 0x5, 0x1, 0x0, 0x0, '\x00', "00aa071e", "0300", "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75ccffffffff", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000001c0)) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e1bf1cf, 0x8, 0x3, 0x8000, 0x81, "4c1bb5dad047e5bdde79394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0x6, 0x3, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m35.418020324s ago: executing program 4 (id=1689): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m35.224037423s ago: executing program 4 (id=1695): syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) 2m35.208339864s ago: executing program 4 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0xfbc}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x10, 0x7, 0x72, 0x0, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0xd5, [@multicast2, @empty]}, @rr={0x7, 0x3, 0x16}, @rr={0x7, 0x13, 0x4f, [@local, @rand_addr=0x64010101, @empty, @broadcast]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r7, &(0x7f0000000040)=""/38, 0x26) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r8, {}, {0x2}, {0x0, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m20.046312481s ago: executing program 32 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0xfbc}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x3c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x10, 0x7, 0x72, 0x0, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x66, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0xd5, [@multicast2, @empty]}, @rr={0x7, 0x3, 0x16}, @rr={0x7, 0x13, 0x4f, [@local, @rand_addr=0x64010101, @empty, @broadcast]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00') getdents64(r7, &(0x7f0000000040)=""/38, 0x26) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r8, {}, {0x2}, {0x0, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.144050675s ago: executing program 1 (id=2686): setreuid(0xffffffffffffffff, 0xee00) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x1, 0x802, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x5, 0x802, 0x1}) setresuid(0x0, 0x0, 0xffffffffffffffff) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x29, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000300), 0x20000, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x5}}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x8}}, {@stats}], [{@hash}]}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) 8.826841392s ago: executing program 1 (id=2691): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="c4dc0c2d0f6940e069855190832faf14c9498ed3127b5a6f091baca20a704f93bc9d50a174e02e2716bf8ce4a6bc27fbdb5c40420a44"], 0x10}}, 0x0) unshare(0x24020400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002400)=@base={0x1, 0x42, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x401, r5}, 0x38) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x18) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xfff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x40840) 7.074612497s ago: executing program 2 (id=2701): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0) r1 = dup(r0) read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0xb06a9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.017597588s ago: executing program 2 (id=2702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @loopback, 0x2}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1287, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) fstatfs(r8, &(0x7f00000002c0)=""/232) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r8, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 5.438387927s ago: executing program 1 (id=2708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x83}}, './file0\x00'}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f00000002c0)) mount_setattr(r6, &(0x7f0000000680)='./file0\x00', 0x8000, &(0x7f0000000700)={0x6, 0xf8, 0x0, {r7}}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) close(0x3) close(0x4) execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000380)={[&(0x7f00000000c0)='-\'{!.@!\'\x00', &(0x7f0000000180)=']\x00', &(0x7f0000000400)='\x00', &(0x7f0000000340)='\xc3\x16\x00\x00\x00\xed\xff\xff\xff\x00\x00\x00\x00\xcd>-\xeb\x97\v\xe5\x90\xf0x\xce\xe7\x02\xbc\xe1~\x81.\xf5F\xf4\x18\xb8\x83\xa8\xb0/\xab\xbc\xd3\x7f*\xaf\xa70\x95\xa0\x97\x88^\xe9\xa6\xd6\xa2\xefS', &(0x7f00000001c0)='f*\x00', &(0x7f0000000280)='\x16F\x1b\x00', 0x0]}, &(0x7f00000008c0)) listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 4.809331946s ago: executing program 2 (id=2709): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000140), 0x0}, 0x20) 4.299875244s ago: executing program 1 (id=2712): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28980) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080), &(0x7f00000001c0)) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f00002e4000/0x2000)=nil) io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174030c60ca6661756c7420747275737465643a74727573746564"], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_pidfd_open(r0, 0x0) 3.960035811s ago: executing program 2 (id=2713): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000300)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200040001c00364d76a970f0e5d8d41f5e8254f5f2d6db75117389da66cb7499085c0bccb9dfdeca656773e31d042d27053", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x5, 0x7, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x3fc, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x0, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd51, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0xfffff507, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x7f}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xfffffff9, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x17, 0x8, 0x10, 0x4, 0x0, 0x7}, {0x7, 0x3, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x2, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x8}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0x8, 0x3, 0x9, 0x5}, {0x2b1d, 0x9, 0xfffffff2, 0x7c82, 0x7f, 0x6}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x4, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x8}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x7, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffefff9, 0x7, 0x6, 0x2, 0x1ff}, {0x4006, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x9, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0x2}, {0x10000000, 0xbc5, 0x0, 0x6, 0x2}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73b, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0xa69, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x9}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf28}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x3}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x500}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x2, {0x100000001, 0xe99}, 0x1}, 0x1) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r7 = inotify_init1(0x80800) socket$inet6(0xa, 0x3, 0x5) inotify_add_watch(r7, &(0x7f0000000200)='./control\x00', 0x64000ba6) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.136506906s ago: executing program 1 (id=2715): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x83bda3d7330eedd0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40045}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.370872419s ago: executing program 3 (id=2719): syz_io_uring_setup(0x3aa2, &(0x7f0000000000)={0x0, 0x5b9e, 0x8, 0x3, 0x172}, &(0x7f0000000240), &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x1d, 0x0, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x100080, &(0x7f0000000440)=ANY=[]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140005001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.219752228s ago: executing program 3 (id=2720): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2", 0x10}], 0x1}}], 0x1, 0x0) 2.213913704s ago: executing program 5 (id=2721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x1010) 2.196866633s ago: executing program 3 (id=2722): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) wait4(0x0, 0x0, 0x8, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 1.872633391s ago: executing program 3 (id=2724): mount$bpf(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000280), 0x18, &(0x7f0000000100)={[], [{@uid_eq}]}) (async) mount$bpf(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000280), 0x18, &(0x7f0000000100)={[], [{@uid_eq}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip_vti0\x00'}]}, 0x50}}, 0x0) 1.758940194s ago: executing program 3 (id=2725): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a88000000000a010100000000000000000a00000008000240000000010c00044000000000000000030c00044000000000000000031f0006006cdcbf1cfe826d48bf25307caf3c613751de9e05155995167f1ba4000c00044000000000000000020900010073797a3100090000040006000900010073797a31000000000900010073797a30000000002c000000030a010300000000000000000a0000000900030073797a31000000000900010073797a300000000028000000000a010400000000000000000a0000000900010073797a3000000000080002"], 0x104}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1e3, &(0x7f0000000000)={0x0, 0xa978, 0x20000, 0x1, 0x3bd}, &(0x7f0000000180), &(0x7f0000000100)) r3 = io_uring_setup(0x6497, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setreuid(0xee01, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000080)) setns(r6, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x3c8}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) syz_io_uring_setup(0x6ea2, &(0x7f0000000300)={0x0, 0xfffffff, 0x200, 0x2}, &(0x7f0000000200), &(0x7f0000000140)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) 1.167468323s ago: executing program 0 (id=2726): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.144544958s ago: executing program 0 (id=2727): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0xfffffffffffffffe) r0 = accept(0xffffffffffffffff, &(0x7f0000002240)=@phonet, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002440)={@mcast2, 0x0}, &(0x7f0000002480)=0x14) bind$can_j1939(r0, &(0x7f00000024c0)={0x1d, r1, 0x1, {0x2, 0x1, 0x4}, 0xff}, 0x18) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80001840}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) stat(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000025c0)={0x2, &(0x7f0000002580)=[{0xf, 0x1, 0x0, 0x101}, {0xb20, 0x80, 0xe9}]}, 0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) mknod$loop(&(0x7f0000002500)='./file0\x00', 0x6000, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000140}, 0x20000000) 1.053919328s ago: executing program 0 (id=2728): syz_io_uring_setup(0x6be5, &(0x7f0000000340)={0x0, 0x1a29, 0x8, 0x3, 0x178}, 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x7c00, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1120000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) close(0xffffffffffffffff) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x80045104, &(0x7f0000000080)) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f000001b000)={0x28, 0x0, 0x2710}, 0x10) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f000001b080)={'wlan1\x00', @local}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0xbb8}, 0x1, 0x0, 0x0, 0x42800}, 0x4004040) 997.297692ms ago: executing program 5 (id=2729): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080088474803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 897.277005ms ago: executing program 0 (id=2730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000000440)={{0x1, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 894.198786ms ago: executing program 3 (id=2731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000240)={0x3, 0x3}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000c29f004fea3baadd9b78cf47acf51fdaef14b215e95a9e4633321f3e65095bf53c88c3e06e4192c2295890cc31c0de21e594a28c56fe243e92e5"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000200)=0x5, 0x4) syz_io_uring_setup(0xbde, &(0x7f0000000500)={0x0, 0xfc47, 0x40, 0xffffffff, 0xd6}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x10, 0x0, @fd=r0, 0x4, 0x0, 0x5, 0x2, 0x1, {0x0, r4}}) 817.627373ms ago: executing program 5 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c000480280001800b000100"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 721.816946ms ago: executing program 0 (id=2733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r4, 0x0, 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x9058, 0x8, 0x1, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) ioctl$RTC_UIE_OFF(r1, 0x7004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0xa131, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) lseek(r9, 0x20000005, 0x3) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r12, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r13 = socket$can_raw(0x1d, 0x3, 0x1) writev(r13, &(0x7f0000000000), 0x0) userfaultfd(0x80801) setresuid(0xee01, 0xee00, 0x0) 681.471039ms ago: executing program 0 (id=2734): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [{0x20, 'bridge\x00'}, {0x20, '%-{!-@}'}, {0x20, '+/}+}&'}, {0x20, '/dev/nullb0\x00'}, {0x20, '@'}, {0x20, '}@.'}, {0x20, '/dev/kvml'}], 0xa, "32f42a8c349bb991a7dc41d7107368037f6c2fffc996b18543d7dbde36cf3365cbc8aab6cabfe1f65bb8468e49799c3315f8dd4c67afd7b1c5955313e9fc2d4dc5e6348e8462679b3913102bc35bef737736efc2d723c2f0226e8cc45ab11f90e1d0b271ebff311128677ce7b786b80402e4da62313aac8aa3f42d6e838a39bde72441b8a313627c919ac0792127beabea6acd0af26a37880c538229e287f4051edcc1ef441dd88c7db1f46afe23279a56f2f490342b1c365544cc078e7f61a32ce49c15b70d0dd34238f444c20f56"}, 0x10e) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000304fcffffff3f000000a1000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005003c000600000005001800010000008f40aac5737dc1b000b09175970856813b844dec6ae5691d907cf3c9c5cd19509417f3ebab7ac1bb7a3bdb45d24796c44eec3cd303fa15c7059feb2d4eecb84050b7bb5d39a3058510338175f64dfaf0b97a44d41d064c2b2e467df487dd2f704746ad52d0896409505a6abe260fc61f3f96175c69c70408a95edf1d23e687da63"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r5, 0xc01064c1, &(0x7f0000000200)={r6}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r9) open_by_handle_at(r7, &(0x7f0000000240)=ANY=[], 0x140c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xf5}) 670.540452ms ago: executing program 5 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380), 0x40c80, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$comedi(0xffffffffffffff9c, 0x0, 0x22040, 0x0) (async) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) (async) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = dup(0xffffffffffffffff) (async) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x15) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) r6 = userfaultfd(0x80001) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x7, 0x407, 0xff, {{0x23, 0x4, 0x0, 0x20, 0x8c, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@cipso={0x86, 0x6, 0x3}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x7, 0x12, "6a36335067650bd3e4e200000000f403"}, {0x7, 0x9, "f263c4a9986415"}, {0x6, 0xc, "a382e33ef9c30b21d76c"}]}, @timestamp_addr={0x44, 0x2c, 0x1a, 0x1, 0x2, [{@remote, 0x202d}, {@loopback, 0x40000001}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xe8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@loopback, 0x7aa}]}, @ssrr={0x89, 0x17, 0xd7, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000340)=r7) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000066000200000000001800"/27], 0x0, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 260.999087ms ago: executing program 5 (id=2736): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x12) syz_clone(0x800500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$FUSE_STATX(r0, &(0x7f00000028c0)={0x130, 0x0, r1, {0x7, 0x5, 0x0, '\x00', {0x8, 0x80000000, 0x0, 0x101, 0x0, r2, 0x4000, '\x00', 0x1, 0x1, 0x5, 0x7f, {0x3, 0x9}, {0x9, 0xd3}, {0x1, 0x10001}, {0x83, 0x5}, 0xb, 0x0, 0xc0, 0x8}}}, 0x130) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000720000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000480)="0f01c30f2220360f080f00d8ba4200ecba410066b80f00000066ef0f080f01df0f090f00d9", 0x25}], 0x1, 0x49, &(0x7f0000000500), 0x0) socket(0x2a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(0xffffffffffffffff, 0x46bc, 0x3, 0x20, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r8}, 0x10) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x40000, &(0x7f0000002a00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c706f6f746d6f64653d30303030303030303030303030303032303030302c757365725f69643d541b8d332eec06e6054c8288b7153e5e76b80f5436885483ca2df7a8e4d20eebfe727ea73f453be9741061a9c6169190000000887e13b69d500fcc27060000000000000003d5f17a470447dceef14d8070ae655b15ee4fdc05f14eedf513538eca7075453a7272d75035e25d9292d6c09e090e4e219b1d70ad2077da47202116306cf3e69900d82895f06ce566c05c39389872cdfdff12060b64d3c3dd289af1487f8ac0c8a05350336746a974501ec8014bcd92866820eacae84a33fc962eede32f14ee14629fc62e223616f74bd7d8248c1aca06939193866aefd15505e0", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',blksize=0x0000000000000e00,allow_other,max_read=0x0000000000000002,max_read=0x0000000000000002,blksize=0x0000000000000800,blksize=0x0000000000000600,allow_other,subj_type=vcan0\x00,\x00']) 259.797173ms ago: executing program 5 (id=2737): setreuid(0xffffffffffffffff, 0xee00) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x1, 0x802, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x5, 0x802, 0x1}) setresuid(0x0, 0x0, 0xffffffffffffffff) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x29, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000300), 0x20000, &(0x7f0000000400)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x5}}, {@max={'max', 0x3d, 0x3}}, {@stats}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x8}}, {@stats}], [{@hash}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) 134.907316ms ago: executing program 2 (id=2738): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0xfffffffffffffffe) r0 = accept(0xffffffffffffffff, &(0x7f0000002240)=@phonet, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002440)={@mcast2, 0x0}, &(0x7f0000002480)=0x14) bind$can_j1939(r0, &(0x7f00000024c0)={0x1d, r1, 0x1, {0x2, 0x1, 0x4}, 0xff}, 0x18) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80001840}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x24, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) stat(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000025c0)={0x2, &(0x7f0000002580)=[{0xf, 0x1, 0x0, 0x101}, {0xb20, 0x80, 0xe9}]}, 0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) mknod$loop(&(0x7f0000002500)='./file0\x00', 0x6000, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000140}, 0x20000000) 49.38454ms ago: executing program 1 (id=2739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r2 = getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085", @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x1010) 0s ago: executing program 2 (id=2740): setreuid(0xffffffffffffffff, 0xee00) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x1, 0x802, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x5, 0x802, 0x1}) setresuid(0x0, 0x0, 0xffffffffffffffff) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000140003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x29, 0x2, 0x0) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffffb5, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) kernel console output (not intermixed with test programs): sadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1177" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 248.249479][T10013] tipc: Cannot configure node identity twice [ 248.427353][T10023] cgroup2: Unknown parameter 'pids_localeveóÂÙßã' [ 248.561520][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1181'. [ 248.618999][ T30] audit: type=1400 audit(1755440396.060:1105): avc: denied { lock } for pid=10030 comm="syz.4.1182" path="socket:[20607]" dev="sockfs" ino=20607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 248.804828][T10035] overlayfs: failed to resolve './file0': -2 [ 249.053719][ T30] audit: type=1400 audit(1755440396.500:1106): avc: denied { create } for pid=10036 comm="syz.4.1184" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 249.436564][T10047] overlayfs: failed to clone lowerpath [ 249.502369][ T30] audit: type=1326 audit(1755440396.950:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7fc00000 [ 250.015664][T10056] veth1_macvtap: left promiscuous mode [ 250.021202][T10056] macsec0: entered promiscuous mode [ 250.026694][T10056] macsec0: entered allmulticast mode [ 250.038427][T10056] veth1_macvtap: entered promiscuous mode [ 250.044282][T10056] veth1_macvtap: entered allmulticast mode [ 250.050271][T10056] macsec0: left promiscuous mode [ 250.055411][T10056] macsec0: left allmulticast mode [ 250.060480][T10056] veth1_macvtap: left allmulticast mode [ 250.131966][ T30] audit: type=1326 audit(1755440397.571:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10043 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff51992add9 code=0x7fc00000 [ 251.326391][ T30] audit: type=1400 audit(1755440398.761:1109): avc: denied { mount } for pid=10093 comm="syz.1.1203" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 252.495770][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1212'. [ 252.704746][T10125] overlayfs: failed to clone lowerpath [ 253.372461][ T30] audit: type=1400 audit(1755440400.672:1110): avc: denied { create } for pid=10132 comm="syz.2.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 253.458155][T10104] udevd[10104]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 253.468766][ T30] audit: type=1400 audit(1755440400.712:1111): avc: denied { sys_admin } for pid=10132 comm="syz.2.1215" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 253.545483][ T30] audit: type=1400 audit(1755440400.802:1112): avc: denied { bind } for pid=10137 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.706190][T10193] netlink: 'syz.1.1231': attribute type 1 has an invalid length. [ 254.927022][T10193] bond1: entered promiscuous mode [ 254.933585][T10193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.098337][T10194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.110778][T10194] bond1: (slave bond2): making interface the new active one [ 255.118092][T10194] bond2: entered promiscuous mode [ 255.125932][T10194] bond1: (slave bond2): Enslaving as an active interface with an up link [ 255.251041][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.257393][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.828747][ T30] audit: type=1400 audit(1755440403.254:1113): avc: denied { map } for pid=10200 comm="syz.4.1233" path="socket:[20779]" dev="sockfs" ino=20779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.837528][ T30] audit: type=1400 audit(1755440405.275:1114): avc: denied { setopt } for pid=10249 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 257.860757][ T30] audit: type=1400 audit(1755440405.305:1115): avc: denied { getopt } for pid=10249 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.192669][ T30] audit: type=1326 audit(1755440406.635:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.194823][T10291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'. [ 259.501251][ T30] audit: type=1326 audit(1755440406.635:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.525421][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 259.525715][ T30] audit: type=1326 audit(1755440406.635:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.565703][ T30] audit: type=1326 audit(1755440406.635:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.618943][ T30] audit: type=1326 audit(1755440406.635:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.649927][ T30] audit: type=1326 audit(1755440406.635:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.713891][ T30] audit: type=1326 audit(1755440406.635:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10290 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 259.810900][T10301] lo speed is unknown, defaulting to 1000 [ 259.962069][T10305] netlink: 'syz.3.1265': attribute type 11 has an invalid length. [ 259.970550][T10305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 261.114294][T10325] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1271'. [ 261.294894][T10327] fuse: Bad value for 'user_id' [ 261.300722][T10327] fuse: Bad value for 'user_id' [ 261.894837][T10345] overlayfs: missing 'lowerdir' [ 263.115871][T10368] siw: device registration error -23 [ 263.321390][T10383] overlayfs: missing 'lowerdir' [ 264.158624][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 264.158636][ T30] audit: type=1326 audit(1755440411.608:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.0.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x0 [ 265.028644][ T30] audit: type=1326 audit(1755440412.478:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.052327][ T30] audit: type=1326 audit(1755440412.478:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.077447][ T30] audit: type=1326 audit(1755440412.478:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.101969][ T30] audit: type=1326 audit(1755440412.478:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.126822][ T30] audit: type=1326 audit(1755440412.478:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.152688][ T30] audit: type=1326 audit(1755440412.478:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.178826][ T30] audit: type=1326 audit(1755440412.478:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.203182][ T30] audit: type=1326 audit(1755440412.478:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.255079][ T30] audit: type=1326 audit(1755440412.478:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10416 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 265.909985][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 269.358835][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.823199][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 269.823217][ T30] audit: type=1400 audit(1755440417.261:1231): avc: denied { ioctl } for pid=10498 comm="syz.3.1321" path="socket:[21136]" dev="sockfs" ino=21136 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 269.899666][ T30] audit: type=1400 audit(1755440417.341:1232): avc: denied { create } for pid=10501 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.477004][T10519] netlink: 'syz.3.1324': attribute type 3 has an invalid length. [ 271.704402][T10535] overlayfs: missing 'lowerdir' [ 271.740141][T10543] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 33554431, id = 0 [ 271.826508][T10546] 9pnet_fd: Insufficient options for proto=fd [ 272.372455][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1339'. [ 272.383661][ T30] audit: type=1400 audit(1755440419.832:1233): avc: denied { ioctl } for pid=10563 comm="syz.3.1339" path="socket:[22097]" dev="sockfs" ino=22097 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.411779][T10565] siw: device registration error -23 [ 272.766073][T10574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.827546][T10595] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1344'. [ 272.908016][T10600] overlayfs: missing 'lowerdir' [ 273.104999][ T30] audit: type=1400 audit(1755440420.552:1234): avc: denied { write } for pid=10614 comm="syz.3.1352" path="socket:[22120]" dev="sockfs" ino=22120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.122197][T10616] netlink: 'syz.3.1352': attribute type 21 has an invalid length. [ 273.131130][ T30] audit: type=1400 audit(1755440420.552:1235): avc: denied { name_connect } for pid=10602 comm="syz.0.1348" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 273.158878][T10616] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 273.180594][T10616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1352'. [ 273.463287][T10627] bridge2: entered promiscuous mode [ 276.066628][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1365'. [ 276.701142][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 276.711882][T10686] netlink: 'syz.3.1375': attribute type 28 has an invalid length. [ 276.754189][T10686] netlink: 'syz.3.1375': attribute type 3 has an invalid length. [ 276.770986][T10686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1375'. [ 276.820929][T10686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1375'. [ 277.011131][T10706] 9pnet_virtio: no channels available for device 127.0.0.1 [ 278.474231][T10731] tipc: Enabling of bearer rejected, failed to enable media [ 278.521840][ T30] audit: type=1326 audit(1755440425.975:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.548342][ T30] audit: type=1326 audit(1755440425.975:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.573778][ T30] audit: type=1326 audit(1755440425.975:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.612478][ T30] audit: type=1326 audit(1755440425.975:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.664843][ T30] audit: type=1326 audit(1755440425.975:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.703467][ T30] audit: type=1326 audit(1755440425.975:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.742924][ T30] audit: type=1326 audit(1755440425.975:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.773382][ T30] audit: type=1326 audit(1755440425.975:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.809076][T10751] overlayfs: failed to resolve './file1': -2 [ 278.820904][ T30] audit: type=1326 audit(1755440425.975:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.848374][ T30] audit: type=1326 audit(1755440425.975:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10734 comm="syz.4.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f38e418ebe9 code=0x7ffc0000 [ 278.948949][T10755] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1396'. [ 280.222770][T10779] tipc: Enabling of bearer rejected, failed to enable media [ 280.459901][T10787] trusted_key: encrypted_key: keylen parameter is missing [ 281.591035][T10818] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 281.598452][T10818] overlayfs: failed to set xattr on upper [ 281.604206][T10818] overlayfs: ...falling back to redirect_dir=nofollow. [ 281.611857][T10818] overlayfs: ...falling back to index=off. [ 281.617970][T10818] overlayfs: ...falling back to uuid=null. [ 281.729083][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 282.480755][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'. [ 283.371282][T10854] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.389653][T10854] overlayfs: failed to set xattr on upper [ 283.402831][T10854] overlayfs: ...falling back to redirect_dir=nofollow. [ 283.419113][T10854] overlayfs: ...falling back to index=off. [ 283.439293][T10854] overlayfs: ...falling back to uuid=null. [ 284.800836][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 284.817027][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 284.857879][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 284.857894][ T30] audit: type=1400 audit(1755440432.318:1291): avc: denied { accept } for pid=10890 comm="syz.0.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 284.960482][T10893] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 284.995952][T10893] overlayfs: failed to set xattr on upper [ 284.998583][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 285.001688][T10893] overlayfs: ...falling back to redirect_dir=nofollow. [ 285.001696][T10893] overlayfs: ...falling back to index=off. [ 285.001703][T10893] overlayfs: ...falling back to uuid=null. [ 285.030904][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 285.414418][ T30] audit: type=1800 audit(1755440432.868:1292): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1450" name="nullb0" dev="tmpfs" ino=1542 res=0 errno=0 [ 285.476718][T10925] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 285.485562][T10925] overlayfs: failed to set xattr on upper [ 285.491265][T10925] overlayfs: ...falling back to redirect_dir=nofollow. [ 285.499233][T10925] overlayfs: ...falling back to index=off. [ 285.507656][T10925] overlayfs: ...falling back to uuid=null. [ 286.674953][ T30] audit: type=1400 audit(1755440434.129:1293): avc: denied { getopt } for pid=10940 comm="syz.0.1456" lport=40058 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 288.720123][T10971] netlink: 'syz.4.1464': attribute type 7 has an invalid length. [ 289.235596][T10994] tipc: Enabling of bearer rejected, failed to enable media [ 289.307655][T11004] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 289.813671][ T30] audit: type=1400 audit(1755440437.271:1294): avc: denied { getopt } for pid=11024 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.900814][T11033] tipc: Enabling of bearer rejected, failed to enable media [ 290.040033][T11037] overlayfs: failed to clone upperpath [ 290.950583][T11064] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 290.985975][T11064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.010318][T11064] vlan2: entered promiscuous mode [ 291.016989][T11064] bond3: entered promiscuous mode [ 291.022308][T11064] vlan2: entered allmulticast mode [ 291.027619][T11064] bond3: entered allmulticast mode [ 291.088080][ T30] audit: type=1400 audit(1755440438.541:1295): avc: denied { write } for pid=11063 comm="syz.1.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 291.093919][T11064] bond3: (slave gretap1): making interface the new active one [ 291.121865][T11064] gretap1: entered promiscuous mode [ 291.139908][T11064] gretap1: entered allmulticast mode [ 291.149151][T11064] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 292.055640][T11086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1499'. [ 292.079618][T11086] nbd: must specify at least one socket [ 294.410865][ T30] audit: type=1326 audit(1755440441.873:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.464452][ T30] audit: type=1326 audit(1755440441.873:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.495273][T11124] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1510'. [ 294.506974][T11124] nbd: must specify at least one socket [ 294.523474][ T30] audit: type=1326 audit(1755440441.873:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.581563][ T30] audit: type=1326 audit(1755440441.873:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.631313][ T30] audit: type=1326 audit(1755440441.873:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.720396][ T30] audit: type=1326 audit(1755440441.873:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.846015][ T30] audit: type=1326 audit(1755440441.873:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 294.934297][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.937393][ T30] audit: type=1326 audit(1755440441.873:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 295.099158][ T30] audit: type=1326 audit(1755440441.873:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.0.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 296.472515][T11165] trusted_key: encrypted_key: keylen parameter is missing [ 297.178129][ T5169] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 298.829853][T11214] siw: device registration error -23 [ 299.346962][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.577978][T11258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1554'. [ 300.587869][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1554'. [ 300.642487][T11262] netlink: 'syz.0.1555': attribute type 8 has an invalid length. [ 301.672482][T11280] trusted_key: encrypted_key: keylen parameter is missing [ 301.870076][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 301.870093][ T30] audit: type=1400 audit(1755440449.337:1354): avc: denied { accept } for pid=11294 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 302.463955][T11301] @: renamed from vlan0 (while UP) [ 303.444623][T11333] siw: device registration error -23 [ 304.732290][T11372] trusted_key: encrypted_key: keylen parameter is missing [ 305.351981][T11383] overlayfs: missing 'lowerdir' [ 305.558647][T11384] sch_fq: defrate 2 ignored. [ 305.788435][T11391] netlink: 'syz.1.1597': attribute type 10 has an invalid length. [ 305.796462][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1597'. [ 305.805819][T11391] team0: entered promiscuous mode [ 305.837455][T11391] team_slave_0: entered promiscuous mode [ 305.844716][T11391] team_slave_1: entered promiscuous mode [ 305.851698][T11391] bond0: entered promiscuous mode [ 305.856781][T11391] bond_slave_0: entered promiscuous mode [ 305.862570][T11391] bond_slave_1: entered promiscuous mode [ 305.868374][T11391] bridge_slave_1: entered promiscuous mode [ 305.874460][T11391] team0: entered allmulticast mode [ 305.880059][T11391] team_slave_0: entered allmulticast mode [ 305.885977][T11391] team_slave_1: entered allmulticast mode [ 305.892895][T11391] bond0: entered allmulticast mode [ 305.902634][T11391] bond_slave_0: entered allmulticast mode [ 305.909062][T11391] bond_slave_1: entered allmulticast mode [ 305.915915][T11391] bridge_slave_1: entered allmulticast mode [ 305.923380][T11391] bridge0: port 2(team0) entered blocking state [ 305.930534][T11391] bridge0: port 2(team0) entered disabled state [ 305.940365][T11391] bridge0: port 2(team0) entered blocking state [ 305.946887][T11391] bridge0: port 2(team0) entered forwarding state [ 306.109863][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 308.258336][T11472] overlayfs: failed to resolve './file0': -2 [ 308.302510][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.369360][ T30] audit: type=1400 audit(1755440455.840:1355): avc: denied { connect } for pid=11478 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.506127][T11465] Device name cannot be null; rc = [-22] [ 309.231257][T11501] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.243094][T11501] netlink: 'syz.2.1632': attribute type 4 has an invalid length. [ 309.250847][T11501] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1632'. [ 309.569155][T11506] tipc: Enabling of bearer rejected, failed to enable media [ 309.600241][ T30] audit: type=1400 audit(1755440457.050:1356): avc: denied { ioctl } for pid=11503 comm="syz.1.1634" path="socket:[24220]" dev="sockfs" ino=24220 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 311.126857][T11521] trusted_key: encrypted_key: keylen parameter is missing [ 311.562492][ T30] audit: type=1400 audit(1755440459.031:1357): avc: denied { write } for pid=11529 comm="syz.0.1641" path="socket:[24246]" dev="sockfs" ino=24246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 311.562513][T11530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1641'. [ 311.792396][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'. [ 311.821475][T11542] nbd: must specify at least one socket [ 311.865925][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 312.124103][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 312.130199][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 312.174645][T11552] ceph: No mds server is up or the cluster is laggy [ 312.450865][ T5920] libceph: connect (1)[c::]:6789 error -22 [ 312.456812][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 312.603937][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.620027][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.639731][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.654008][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.668193][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.678768][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 312.688589][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1652'. [ 313.279587][T11598] bridge_slave_1: left allmulticast mode [ 313.293893][T11598] bridge_slave_1: left promiscuous mode [ 313.309737][T11598] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.480097][T11598] : left allmulticast mode [ 313.486852][T11598] : left promiscuous mode [ 313.495754][T11598] bridge0: port 1() entered disabled state [ 313.879943][ T30] audit: type=1400 audit(1755440461.353:1358): avc: denied { write } for pid=11607 comm="syz.2.1663" path="socket:[28405]" dev="sockfs" ino=28405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.098973][T11653] overlayfs: failed to resolve './file0': -2 [ 316.785318][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.792233][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.510715][T11719] overlayfs: failed to resolve './file0': -2 [ 319.518931][ T30] audit: type=1400 audit(1755440466.995:1359): avc: denied { ioctl } for pid=11716 comm="syz.0.1691" path="socket:[24480]" dev="sockfs" ino=24480 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.590907][T11722] tipc: Enabling of bearer rejected, failed to enable media [ 319.684080][T11733] lo speed is unknown, defaulting to 1000 [ 319.693836][T11735] sctp: [Deprecated]: syz.1.1698 (pid 11735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.693836][T11735] Use struct sctp_sack_info instead [ 319.702937][T11733] lo speed is unknown, defaulting to 1000 [ 319.756531][T11733] lo speed is unknown, defaulting to 1000 [ 319.848465][T11749] __nla_validate_parse: 44 callbacks suppressed [ 319.848483][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 319.914322][ T30] audit: type=1400 audit(1755440467.266:1360): avc: denied { audit_read } for pid=11746 comm="syz.1.1701" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.940298][T11733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 319.969503][T11733] lo speed is unknown, defaulting to 1000 [ 319.984314][T11733] lo speed is unknown, defaulting to 1000 [ 319.997999][T11733] lo speed is unknown, defaulting to 1000 [ 320.018219][T11733] lo speed is unknown, defaulting to 1000 [ 320.044284][T11733] lo speed is unknown, defaulting to 1000 [ 320.148082][T11757] trusted_key: encrypted_key: insufficient parameters specified [ 321.370254][ T30] audit: type=1326 audit(1755440468.841:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.395050][ T30] audit: type=1326 audit(1755440468.841:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.427552][ T30] audit: type=1326 audit(1755440468.891:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.463622][ T30] audit: type=1326 audit(1755440468.891:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.500274][ T30] audit: type=1326 audit(1755440468.891:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.530256][ T30] audit: type=1326 audit(1755440468.891:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.555587][ T30] audit: type=1326 audit(1755440468.891:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.585240][ T30] audit: type=1326 audit(1755440468.891:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 321.614844][T11784] tipc: Enabling of bearer rejected, failed to enable media [ 322.287057][T11801] overlayfs: failed to resolve './file0': -2 [ 323.311344][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 323.337602][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 323.444655][T11832] overlay: Unknown parameter '/' [ 323.460787][T11832] lo speed is unknown, defaulting to 1000 [ 323.670842][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 323.679796][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 323.702052][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 323.710974][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1729'. [ 323.736207][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.755127][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.768923][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.778835][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.380111][T11885] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1746'. [ 326.216267][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.529914][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 326.529927][ T30] audit: type=1400 audit(1755440987.006:1478): avc: denied { read } for pid=11916 comm="syz.0.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 328.274433][T11943] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 328.283538][T11943] overlayfs: missing 'lowerdir' [ 328.305748][T11943] 9pnet: p9_errstr2errno: server reported unknown error [ 330.374251][ T30] audit: type=1400 audit(1755440990.846:1479): avc: denied { audit_write } for pid=11973 comm="syz.2.1769" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.564354][T12005] No control pipe specified [ 331.600243][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 331.609935][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'. [ 331.716774][ T30] audit: type=1400 audit(1755440992.186:1480): avc: denied { bind } for pid=12011 comm="syz.1.1781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 331.821214][T12016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1782'. [ 333.490875][T12044] trusted_key: encrypted_key: keylen parameter is missing [ 334.185708][T12045] trusted_key: encrypted_key: keylen parameter is missing [ 334.230303][ T30] audit: type=1400 audit(1755440994.706:1481): avc: denied { mounton } for pid=12047 comm="syz.3.1792" path="/file0" dev="rootfs" ino=29951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 334.255173][ T30] audit: type=1400 audit(1755440994.736:1482): avc: denied { associate } for pid=12049 comm="syz.3.1792" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 334.351456][T12053] tipc: Enabling of bearer rejected, failed to enable media [ 334.376087][ T30] audit: type=1326 audit(1755440994.846:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.420616][ T30] audit: type=1326 audit(1755440994.846:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.459708][ T30] audit: type=1326 audit(1755440994.846:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.486764][ T30] audit: type=1326 audit(1755440994.846:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.511812][ T30] audit: type=1326 audit(1755440994.846:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.565158][ T30] audit: type=1326 audit(1755440994.846:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 334.593507][ T30] audit: type=1326 audit(1755440994.846:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.0.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 335.612983][T12083] trusted_key: encrypted_key: keylen parameter is missing [ 336.031874][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.039153][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.047276][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.055079][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.062549][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.153832][T12088] lo speed is unknown, defaulting to 1000 [ 336.388917][T12088] chnl_net:caif_netlink_parms(): no params data found [ 336.460612][T12088] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.467910][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.475055][T12088] bridge_slave_0: entered allmulticast mode [ 336.483034][T12088] bridge_slave_0: entered promiscuous mode [ 336.491797][T12088] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.500377][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.507945][T12088] bridge_slave_1: entered allmulticast mode [ 336.514602][T12088] bridge_slave_1: entered promiscuous mode [ 336.535674][T12088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.587995][T12088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.631969][T12088] team0: Port device team_slave_0 added [ 336.652538][T12088] team0: Port device team_slave_1 added [ 336.757086][T12088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.764095][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.791101][T12088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.802947][T12088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.870167][T12112] siw: device registration error -23 [ 337.120441][T12088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.173474][T12088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.365073][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 337.376047][T12088] hsr_slave_0: entered promiscuous mode [ 337.385379][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 337.385389][ T30] audit: type=1400 audit(1755440997.836:1551): avc: denied { setopt } for pid=12113 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.415535][T12088] hsr_slave_1: entered promiscuous mode [ 338.136915][ T5169] Bluetooth: hci5: command tx timeout [ 338.382158][T12088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.394644][T12088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.405312][T12088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.417024][T12088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.481931][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.540817][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.553066][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.560139][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.578414][T12088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.589586][T12088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.602789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.609839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.730966][T12088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.037419][T12088] veth0_vlan: entered promiscuous mode [ 339.055197][T12088] veth1_vlan: entered promiscuous mode [ 339.075258][T12088] veth0_macvtap: entered promiscuous mode [ 339.090093][T12088] veth1_macvtap: entered promiscuous mode [ 339.114702][T12088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.126565][T12088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.138582][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.148592][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.158337][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.168663][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.213363][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.225502][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.241247][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.249470][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.676622][T12165] trusted_key: encrypted_key: keylen parameter is missing [ 341.037888][ T30] audit: type=1326 audit(1755441001.206:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.038282][ T5169] Bluetooth: hci5: command tx timeout [ 341.095459][ T30] audit: type=1326 audit(1755441001.206:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.121453][ T30] audit: type=1326 audit(1755441001.306:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.146696][ T30] audit: type=1326 audit(1755441001.306:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.202578][ T30] audit: type=1326 audit(1755441001.306:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.264132][ T30] audit: type=1326 audit(1755441001.376:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.429978][ T30] audit: type=1326 audit(1755441001.376:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.437738][T12182] trusted_key: encrypted_key: keyword 'efault' not recognized [ 341.464294][ T30] audit: type=1326 audit(1755441001.376:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 341.495544][ T30] audit: type=1326 audit(1755441001.506:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12170 comm="syz.3.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f53d178ebe9 code=0x7ffc0000 [ 342.102569][T12201] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 342.550651][T12201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1827'. [ 342.560127][T12201] dummy0: entered promiscuous mode [ 342.591298][T12208] overlayfs: failed to clone upperpath [ 342.614104][T12201] bridge0: port 3(dummy0) entered blocking state [ 342.631405][T12201] bridge0: port 3(dummy0) entered disabled state [ 342.659593][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 342.659607][ T30] audit: type=1326 audit(1755441002.556:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 342.702580][T12201] dummy0: entered allmulticast mode [ 342.725466][T12201] bridge0: port 3(dummy0) entered blocking state [ 342.731845][T12201] bridge0: port 3(dummy0) entered forwarding state [ 342.886066][ T30] audit: type=1326 audit(1755441003.126:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 343.204587][ T5169] Bluetooth: hci5: command tx timeout [ 343.380614][ T30] audit: type=1326 audit(1755441003.136:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 343.476260][ T30] audit: type=1326 audit(1755441003.136:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.2.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 343.526559][ T30] audit: type=1326 audit(1755441003.516:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12214 comm="syz.3.1830" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53d178ebe9 code=0x0 [ 343.744893][ T30] audit: type=1400 audit(1755441004.116:1568): avc: denied { read write } for pid=12224 comm="syz.5.1832" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.795677][ T30] audit: type=1400 audit(1755441004.116:1569): avc: denied { open } for pid=12224 comm="syz.5.1832" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 343.933788][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'. [ 344.312460][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1837'. [ 345.257515][ T5169] Bluetooth: hci5: command tx timeout [ 345.702004][T12264] overlayfs: failed to resolve './file0': -2 [ 345.804132][ T30] audit: type=1400 audit(1755441006.276:1570): avc: denied { create } for pid=12266 comm="syz.2.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 345.852306][T12267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1846'. [ 346.371612][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 346.724823][T12316] overlayfs: failed to resolve './file0': -2 [ 346.772825][T12320] overlayfs: failed to resolve './file0': -2 [ 347.384219][ T30] audit: type=1400 audit(1755441007.856:1571): avc: denied { create } for pid=12327 comm="syz.3.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 347.415061][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1853'. [ 347.729476][T12337] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1861'. [ 347.797104][T12338] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1861'. [ 350.543585][ T30] audit: type=1400 audit(1755441011.016:1572): avc: denied { connect } for pid=12383 comm="syz.5.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 351.151928][T12406] trusted_key: encrypted_key: keylen parameter is missing [ 351.506965][T12410] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1884'. [ 351.516886][T12410] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 351.524248][T12410] 0ªî{X¹¦: entered allmulticast mode [ 351.531047][T12410] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 352.185525][T12420] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1887'. [ 352.196596][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 352.207974][ T30] audit: type=1400 audit(1755441012.686:1573): avc: denied { map } for pid=12419 comm="syz.0.1887" path="socket:[30976]" dev="sockfs" ino=30976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 352.233253][ T30] audit: type=1400 audit(1755441012.686:1574): avc: denied { accept } for pid=12419 comm="syz.0.1887" path="socket:[30976]" dev="sockfs" ino=30976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 352.443596][ T30] audit: type=1326 audit(1755441012.916:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.472351][ T30] audit: type=1326 audit(1755441012.916:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.507787][ T30] audit: type=1326 audit(1755441012.916:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.563363][ T30] audit: type=1326 audit(1755441012.916:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.592359][ T30] audit: type=1326 audit(1755441012.916:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.616424][ T30] audit: type=1326 audit(1755441012.916:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.713246][ T30] audit: type=1326 audit(1755441012.916:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.1.1891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 352.784668][T12447] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 354.092069][T12466] serio: Serial port ptm0 [ 354.293220][T12480] fuse: Unknown parameter '¬”1Û4"`–>¸2fd' [ 354.332774][T12481] lo speed is unknown, defaulting to 1000 [ 354.617184][T12490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12490 comm=syz.3.1913 [ 354.633154][T12482] lo speed is unknown, defaulting to 1000 [ 354.874882][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 354.884476][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 355.599609][T12528] lo speed is unknown, defaulting to 1000 [ 356.947842][T12545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.552506][T12564] sctp: [Deprecated]: syz.2.1935 (pid 12564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.552506][T12564] Use struct sctp_sack_info instead [ 357.737860][T12570] PKCS8: Unsupported PKCS#8 version [ 358.286269][T12577] netlink: 'syz.3.1938': attribute type 12 has an invalid length. [ 359.082840][T12592] bridge0: port 3(dummy0) entered disabled state [ 359.089308][T12592] bridge0: port 2(team0) entered disabled state [ 359.095739][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.532045][T12592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.545648][T12592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.309354][ T1004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.323145][ T1004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.351991][ T1004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.361392][ T1004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.925599][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 360.925615][ T30] audit: type=1326 audit(1755441021.391:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 360.994289][ T30] audit: type=1326 audit(1755441021.391:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.052588][ T30] audit: type=1326 audit(1755441021.391:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.190936][ T30] audit: type=1326 audit(1755441021.391:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.251160][ T30] audit: type=1326 audit(1755441021.391:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.325053][ T30] audit: type=1326 audit(1755441021.431:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.443883][ T30] audit: type=1326 audit(1755441021.431:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.491242][ T30] audit: type=1326 audit(1755441021.431:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.593148][ T30] audit: type=1326 audit(1755441021.431:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.687639][ T30] audit: type=1326 audit(1755441021.431:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.2.1958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 361.714668][T12641] netlink: 'syz.0.1960': attribute type 10 has an invalid length. [ 361.746531][T12641] batman_adv: batadv0: Adding interface: team0 [ 361.760181][T12641] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.790810][T12641] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 362.056305][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.911126][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.254844][ T3691] Bluetooth: (null): Invalid header checksum [ 363.263463][ T3691] Bluetooth: (null): Invalid header checksum [ 363.359080][ T3691] Bluetooth: (null): Too short H5 packet [ 363.365026][ T3691] Bluetooth: (null): Invalid header checksum [ 363.475396][ T7215] Bluetooth: (null): Invalid header checksum [ 363.536271][ T5920] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 363.578466][ T7215] Bluetooth: (null): Invalid header checksum [ 363.687321][ T1004] Bluetooth: (null): Invalid header checksum [ 363.694502][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short [ 363.703888][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.714706][ T5920] usb 6-1: config 0 has no interfaces? [ 363.722862][ T5920] usb 6-1: string descriptor 0 read error: -22 [ 363.729379][ T5920] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.739321][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.755374][ T5920] usb 6-1: config 0 descriptor?? [ 363.797519][ T7215] Bluetooth: (null): Invalid header checksum [ 363.917705][ T12] Bluetooth: (null): Invalid header checksum [ 364.089088][ T3691] Bluetooth: (null): Invalid header checksum [ 364.124077][T12705] infiniband syz1: set active [ 364.129186][T12705] infiniband syz1: added syz_tun [ 364.159384][T12705] RDS/IB: syz1: added [ 364.166746][T12705] smc: adding ib device syz1 with port count 1 [ 364.172953][T12705] smc: ib device syz1 port 1 has pnetid [ 364.243952][ T3691] Bluetooth: (null): Invalid header checksum [ 364.349563][ T3691] Bluetooth: (null): Invalid header checksum [ 364.357834][ T3691] Bluetooth: (null): Invalid header checksum [ 364.379846][T12680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1955'. [ 364.430669][T12680] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1955'. [ 364.466714][ T7215] Bluetooth: (null): Invalid header checksum [ 364.576374][ T7215] Bluetooth: (null): Invalid header checksum [ 364.707037][ T12] Bluetooth: (null): Invalid header checksum [ 364.807215][ T7215] Bluetooth: (null): Invalid header checksum [ 364.938223][ T3691] Bluetooth: (null): Invalid header checksum [ 365.392189][ T7215] Bluetooth: (null): Invalid header checksum [ 365.403393][ T7215] Bluetooth: (null): Invalid header checksum [ 365.415799][ T7215] Bluetooth: (null): Invalid header checksum [ 365.428482][ T7215] Bluetooth: (null): Invalid header checksum [ 365.501851][T12607] usb 6-1: USB disconnect, device number 2 [ 365.506700][ T7215] Bluetooth: (null): Invalid header checksum [ 365.950856][T12741] siw: device registration error -23 [ 367.489419][T12754] futex_wake_op: syz.5.1987 tries to shift op by 32; fix this program [ 367.843233][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 367.843250][ T30] audit: type=1400 audit(1755441028.311:1703): avc: denied { listen } for pid=12764 comm="syz.5.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.988930][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2000'. [ 368.002473][T12770] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2000'. [ 368.173567][T12779] netlink: 'syz.1.2004': attribute type 20 has an invalid length. [ 368.187534][T12779] dvmrp17: entered allmulticast mode [ 368.804095][ T30] audit: type=1326 audit(1755441029.271:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.831436][ T30] audit: type=1326 audit(1755441029.271:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.855624][ T30] audit: type=1326 audit(1755441029.311:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.883896][ T30] audit: type=1326 audit(1755441029.311:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.892913][T12803] netlink: 'syz.2.2012': attribute type 10 has an invalid length. [ 368.915324][ T30] audit: type=1326 audit(1755441029.311:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.940936][T12803] veth0_vlan: left promiscuous mode [ 368.947639][ T30] audit: type=1326 audit(1755441029.311:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.972135][ T30] audit: type=1326 audit(1755441029.311:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 368.998002][ T30] audit: type=1326 audit(1755441029.311:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 369.024094][ T30] audit: type=1326 audit(1755441029.311:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.1.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20caf8ebe9 code=0x7ffc0000 [ 369.048411][T12803] veth0_vlan: entered promiscuous mode [ 369.057399][T12803] team0: Device veth0_vlan failed to register rx_handler [ 369.145573][T12808] lo speed is unknown, defaulting to 1000 [ 369.478043][T12823] overlayfs: failed to clone upperpath [ 369.641484][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2021'. [ 369.797026][T12834] siw: device registration error -23 [ 370.575016][T12851] tipc: Enabling of bearer rejected, failed to enable media [ 370.742242][T12861] netlink: 296 bytes leftover after parsing attributes in process `syz.5.2027'. [ 371.104278][T12864] evm: overlay not supported [ 372.449600][T12887] /dev/nullb0: Can't lookup blockdev [ 373.850780][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2059'. [ 374.306243][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 374.381695][T12958] bond0: left promiscuous mode [ 374.388264][T12958] bond_slave_0: left promiscuous mode [ 374.393759][T12958] bond_slave_1: left promiscuous mode [ 374.399671][T12958] bridge_slave_1: left promiscuous mode [ 374.405354][T12958] bond0: left allmulticast mode [ 374.411122][T12958] bond_slave_0: left allmulticast mode [ 374.417111][T12958] bond_slave_1: left allmulticast mode [ 374.422566][T12958] bridge_slave_1: left allmulticast mode [ 374.429117][T12958] team0: Port device bond0 removed [ 374.434725][T12958] bridge0: port 2(team0) entered disabled state [ 374.442279][T12958] dummy0: left allmulticast mode [ 374.447783][T12958] bridge0: port 3(dummy0) entered disabled state [ 374.455086][T12958] bridge_slave_0: left allmulticast mode [ 374.461241][T12958] bridge_slave_0: left promiscuous mode [ 374.466988][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.474433][ T9] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 374.485730][ T9] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 374.494975][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.504131][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.580954][T12958] bond0: (slave bridge_slave_1): Releasing backup interface [ 374.593245][T12958] bond0: (slave bond_slave_0): Releasing backup interface [ 374.602370][T12958] bond0: (slave bond_slave_1): Releasing backup interface [ 374.612363][T12958] team_slave_0: left promiscuous mode [ 374.623250][T12958] team_slave_0: left allmulticast mode [ 374.634380][T12958] team0: Port device team_slave_0 removed [ 374.640709][T12958] team_slave_1: left promiscuous mode [ 374.647636][T12958] team_slave_1: left allmulticast mode [ 375.051105][T12969] siw: device registration error -23 [ 375.325128][T12958] team0: Port device team_slave_1 removed [ 375.344918][T12958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.373472][T12958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.382094][T12958] bond1: (slave bond2): Releasing backup interface [ 375.389218][T12958] bond2: left promiscuous mode [ 375.394795][T12958] bond3: (slave gretap1): Releasing active interface [ 375.402304][T12958] gretap1: left promiscuous mode [ 375.407930][T12958] gretap1: left allmulticast mode [ 375.501349][T12980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 375.621160][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 375.621176][ T30] audit: type=1326 audit(1755441036.091:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.653260][ T30] audit: type=1326 audit(1755441036.091:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.679916][ T30] audit: type=1326 audit(1755441036.161:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.704525][ T30] audit: type=1326 audit(1755441036.161:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.740436][ T30] audit: type=1326 audit(1755441036.161:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.853971][T12990] vlan0: entered promiscuous mode [ 375.882989][ T30] audit: type=1326 audit(1755441036.321:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.908705][ T30] audit: type=1326 audit(1755441036.341:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.933642][ T30] audit: type=1326 audit(1755441036.341:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.958336][ T30] audit: type=1326 audit(1755441036.341:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 375.982985][ T30] audit: type=1326 audit(1755441036.351:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz.0.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 376.983606][ T5920] usb 6-1: USB disconnect, device number 3 [ 377.173995][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 378.072488][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.079120][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.295218][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'. [ 378.336724][ T48] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 378.496708][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 378.504616][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.514035][ T48] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 378.522769][ T48] usb 6-1: can't read configurations, error -61 [ 378.633166][T13065] veth0_to_team: entered promiscuous mode [ 378.639072][T13065] veth0_to_team: entered allmulticast mode [ 378.798907][ T48] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 379.072198][T13076] overlayfs: missing 'lowerdir' [ 379.216910][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 379.554475][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 379.565818][ T48] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 379.575477][ T48] usb 6-1: can't read configurations, error -61 [ 379.582639][ T48] usb usb6-port1: attempt power cycle [ 380.586738][ T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 380.659623][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 380.659639][ T30] audit: type=1400 audit(1755441041.131:1798): avc: denied { ioctl } for pid=13113 comm="syz.5.2116" path="socket:[32995]" dev="sockfs" ino=32995 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 380.753547][ T30] audit: type=1400 audit(1755441041.221:1799): avc: denied { name_bind } for pid=13121 comm="syz.1.2119" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 380.817434][ T48] usb 6-1: device not accepting address 6, error -71 [ 380.852700][T13124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2120'. [ 381.734715][T13154] siw: device registration error -23 [ 382.077590][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2134'. [ 382.119374][T13168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2135'. [ 382.203883][T13171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2136'. [ 382.212865][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 382.222622][T13171] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 382.233150][T13171] trusted_key: syz.0.2136 sent an empty control message without MSG_MORE. [ 382.284127][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 382.293981][T13176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2138'. [ 382.414681][ T30] audit: type=1400 audit(1755441042.881:1800): avc: denied { append } for pid=13178 comm="syz.5.2139" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 382.426670][T13179] FAULT_INJECTION: forcing a failure. [ 382.426670][T13179] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 382.452645][T13179] CPU: 1 UID: 0 PID: 13179 Comm: syz.5.2139 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 382.452671][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.452685][T13179] Call Trace: [ 382.452691][T13179] [ 382.452697][T13179] dump_stack_lvl+0x16c/0x1f0 [ 382.452720][T13179] should_fail_ex+0x512/0x640 [ 382.452741][T13179] should_fail_alloc_page+0xe7/0x130 [ 382.452763][T13179] prepare_alloc_pages+0x3c2/0x610 [ 382.452785][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.452808][T13179] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 382.452832][T13179] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 382.452855][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.452875][T13179] ? lock_acquire+0x2cd/0x350 [ 382.452901][T13179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 382.452921][T13179] ? policy_nodemask+0xea/0x4e0 [ 382.452941][T13179] alloc_pages_mpol+0x1fb/0x550 [ 382.452961][T13179] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 382.452979][T13179] ? lock_release+0x201/0x2f0 [ 382.453006][T13179] folio_alloc_mpol_noprof+0x36/0x2f0 [ 382.453029][T13179] vma_alloc_folio_noprof+0xed/0x1e0 [ 382.453050][T13179] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 382.453073][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.453095][T13179] do_pte_missing+0x2230/0x3ba0 [ 382.453123][T13179] __handle_mm_fault+0x152a/0x2a50 [ 382.453156][T13179] ? __pfx___handle_mm_fault+0x10/0x10 [ 382.453182][T13179] ? __pte_offset_map_lock+0x174/0x310 [ 382.453207][T13179] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 382.453232][T13179] handle_mm_fault+0x589/0xd10 [ 382.453259][T13179] __get_user_pages+0x551/0x34a0 [ 382.453283][T13179] ? down_read_killable+0x220/0x4b0 [ 382.453302][T13179] ? bpf_ksym_find+0x127/0x1c0 [ 382.453322][T13179] ? __pfx___get_user_pages+0x10/0x10 [ 382.453343][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.453362][T13179] ? unwind_next_frame+0x3f4/0x20a0 [ 382.453381][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.453401][T13179] __gup_longterm_locked+0xa92/0x17e0 [ 382.453423][T13179] ? is_bpf_text_address+0x8a/0x1a0 [ 382.453443][T13179] ? __pfx___gup_longterm_locked+0x10/0x10 [ 382.453464][T13179] ? lock_acquire+0x2cd/0x350 [ 382.453485][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.453503][T13179] ? gup_fast_fallback+0x6fa/0x23f0 [ 382.453520][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.453537][T13179] ? sanity_check_pinned_pages+0x23/0x11d0 [ 382.453557][T13179] gup_fast_fallback+0xf78/0x23f0 [ 382.453581][T13179] ? __pfx_gup_fast_fallback+0x10/0x10 [ 382.453599][T13179] ? is_bpf_text_address+0x94/0x1a0 [ 382.453613][T13179] ? kernel_text_address+0x8d/0x100 [ 382.453628][T13179] ? __kernel_text_address+0xd/0x40 [ 382.453643][T13179] ? unwind_get_return_address+0x59/0xa0 [ 382.453658][T13179] ? arch_stack_walk+0xa6/0x100 [ 382.453674][T13179] ? do_raw_spin_lock+0x12c/0x2b0 [ 382.453690][T13179] pin_user_pages_fast+0xa7/0xf0 [ 382.453708][T13179] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 382.453728][T13179] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 382.453746][T13179] iov_iter_extract_pages+0x3a2/0x1ed0 [ 382.453765][T13179] ? __blkdev_direct_IO_simple+0x691/0x850 [ 382.453788][T13179] ? kasan_save_stack+0x42/0x60 [ 382.453801][T13179] ? kasan_save_stack+0x33/0x60 [ 382.453813][T13179] ? kasan_save_track+0x14/0x30 [ 382.453826][T13179] ? __kasan_kmalloc+0xaa/0xb0 [ 382.453837][T13179] ? __kmalloc_noprof+0x223/0x510 [ 382.453850][T13179] ? __blkdev_direct_IO_simple+0x691/0x850 [ 382.453871][T13179] ? blkdev_direct_IO+0xc36/0x1fe0 [ 382.453891][T13179] ? blkdev_read_iter+0x289/0x500 [ 382.453904][T13179] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 382.453921][T13179] ? __x64_sys_preadv2+0xef/0x160 [ 382.453936][T13179] ? do_syscall_64+0xcd/0x4c0 [ 382.453950][T13179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.453970][T13179] bio_iov_iter_get_pages+0x384/0x10d0 [ 382.453987][T13179] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 382.454009][T13179] ? lock_release+0x201/0x2f0 [ 382.454031][T13179] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 382.454052][T13179] __blkdev_direct_IO_simple+0x38e/0x850 [ 382.454076][T13179] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 382.454097][T13179] ? avc_has_perm_noaudit+0x149/0x3b0 [ 382.454113][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.454132][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.454153][T13179] ? lock_release+0x201/0x2f0 [ 382.454172][T13179] ? bpf_ksym_find+0x127/0x1c0 [ 382.454189][T13179] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.454208][T13179] ? iov_iter_is_aligned+0xf2/0x5a0 [ 382.454223][T13179] ? iov_iter_npages+0xf0/0x5a0 [ 382.454239][T13179] blkdev_direct_IO+0xc36/0x1fe0 [ 382.454260][T13179] ? arch_stack_walk+0xa6/0x100 [ 382.454278][T13179] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 382.454300][T13179] ? _kstrtoull+0x145/0x200 [ 382.454312][T13179] ? __pfx__kstrtoull+0x10/0x10 [ 382.454325][T13179] blkdev_read_iter+0x289/0x500 [ 382.454339][T13179] do_iter_readv_writev+0x740/0x9e0 [ 382.454362][T13179] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 382.454383][T13179] ? __import_iovec+0x1dd/0x650 [ 382.454403][T13179] ? avc_policy_seqno+0x9/0x20 [ 382.454419][T13179] ? selinux_file_permission+0x126/0x660 [ 382.454443][T13179] ? bpf_lsm_file_permission+0x9/0x10 [ 382.454465][T13179] ? security_file_permission+0x71/0x210 [ 382.454490][T13179] ? rw_verify_area+0xcf/0x6c0 [ 382.454516][T13179] vfs_readv+0x4cb/0x8b0 [ 382.454532][T13179] ? proc_fail_nth_write+0x9f/0x220 [ 382.454552][T13179] ? __pfx_vfs_readv+0x10/0x10 [ 382.454566][T13179] ? ksys_write+0x12a/0x250 [ 382.454581][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.454601][T13179] ? lock_release+0x201/0x2f0 [ 382.454627][T13179] ? rcu_is_watching+0x12/0xc0 [ 382.454650][T13179] ? __fget_files+0x20e/0x3c0 [ 382.454667][T13179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 382.454689][T13179] ? do_preadv+0x1a6/0x270 [ 382.454704][T13179] do_preadv+0x1a6/0x270 [ 382.454718][T13179] ? __pfx_do_preadv+0x10/0x10 [ 382.454733][T13179] ? ksys_write+0x1ac/0x250 [ 382.454750][T13179] ? __pfx_ksys_write+0x10/0x10 [ 382.454769][T13179] __x64_sys_preadv2+0xef/0x160 [ 382.454789][T13179] do_syscall_64+0xcd/0x4c0 [ 382.454808][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.454825][T13179] RIP: 0033:0x7fb57698ebe9 [ 382.454839][T13179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.454856][T13179] RSP: 002b:00007fb57779c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 382.454874][T13179] RAX: ffffffffffffffda RBX: 00007fb576bb5fa0 RCX: 00007fb57698ebe9 [ 382.454885][T13179] RDX: 0000000000000005 RSI: 0000200000000080 RDI: 0000000000000003 [ 382.454895][T13179] RBP: 00007fb57779c090 R08: 0000000000000000 R09: 000000000000001f [ 382.454905][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.454914][T13179] R13: 00007fb576bb6038 R14: 00007fb576bb5fa0 R15: 00007fff9f4cd728 [ 382.454931][T13179] [ 383.319189][T13192] : renamed from bridge_slave_0 (while UP) [ 383.374643][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 383.500130][ T30] audit: type=1326 audit(1755441043.971:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 383.604083][ T30] audit: type=1326 audit(1755441043.971:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 383.627989][ T30] audit: type=1326 audit(1755441044.001:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 383.943993][ T30] audit: type=1326 audit(1755441044.001:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 383.968049][ T30] audit: type=1326 audit(1755441044.001:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 383.995012][ T30] audit: type=1326 audit(1755441044.001:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 384.027591][ T30] audit: type=1326 audit(1755441044.001:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13203 comm="syz.0.2151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 384.472579][T13221] netlink: 'syz.1.2153': attribute type 10 has an invalid length. [ 384.482697][T13221] team0: Device hsr_slave_0 failed to register rx_handler [ 385.864661][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 385.864671][ T30] audit: type=1400 audit(1755441046.331:1862): avc: denied { accept } for pid=13250 comm="syz.2.2161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 385.894506][T13257] veth0_to_team: entered promiscuous mode [ 385.901560][T13257] veth0_to_team: entered allmulticast mode [ 386.970413][T13267] siw: device registration error -23 [ 387.554829][ T30] audit: type=1400 audit(1755441048.021:1863): avc: denied { write } for pid=13276 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 387.575738][ T5218] udevd[5218]: worker [13275] terminated by signal 33 (Unknown signal 33) [ 388.643983][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'. [ 389.660597][ T5927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 389.868635][T13306] tipc: Enabling of bearer rejected, failed to enable media [ 389.908684][ T5927] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.921284][ T5927] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.937816][ T5927] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.949313][ T5927] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 389.960644][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.970944][T13291] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 390.542439][ T30] audit: type=1400 audit(1755441051.001:1864): avc: denied { read } for pid=13307 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 390.583935][T13317] netlink: 'syz.0.2179': attribute type 4 has an invalid length. [ 390.629470][ T8520] lo speed is unknown, defaulting to 1000 [ 390.671721][ T8520] 3yz0: Port: 1 Link DOWN [ 390.920488][T13329] No source specified [ 391.651556][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.660542][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.669352][ T5927] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 391.677345][ T5927] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input6 [ 391.689974][ T5927] usb 6-1: USB disconnect, device number 8 [ 391.695806][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 393.424436][T13372] netlink: 'syz.3.2195': attribute type 12 has an invalid length. [ 393.544651][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 393.955639][T13382] netlink: 'syz.2.2199': attribute type 3 has an invalid length. [ 393.963492][T13382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2199'. [ 394.605541][ T30] audit: type=1107 audit(1755441055.071:1865): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='I' [ 395.428460][T13407] overlayfs: failed to clone upperpath [ 395.470093][T13409] tipc: Enabling of bearer rejected, failed to enable media [ 395.621368][T13425] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 396.726216][ T8544] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 396.777069][T13449] 9pnet_fd: Insufficient options for proto=fd [ 396.896539][ T8544] usb 6-1: Using ep0 maxpacket: 16 [ 396.935518][ T8544] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.958008][ T8544] usb 6-1: config 0 interface 0 has no altsetting 0 [ 397.015474][ T8544] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 397.036917][ T8544] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.128006][ T8544] usb 6-1: config 0 descriptor?? [ 397.510099][T13465] netdevsim netdevsim2: Direct firmware load for . [ 397.510099][T13465] failed with error -2 [ 397.521195][T13465] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 397.521195][T13465] [ 397.533240][ T30] audit: type=1400 audit(1755441057.991:1866): avc: denied { firmware_load } for pid=13456 comm="syz.2.2222" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 397.818415][T13477] trusted_key: encrypted_key: keylen parameter is missing [ 398.705513][T13487] tipc: Started in network mode [ 398.711680][T13487] tipc: Node identity ac141413, cluster identity 4711 [ 398.718687][T13487] tipc: New replicast peer: 10.1.1.2 [ 398.724008][T13487] tipc: Enabled bearer , priority 10 [ 399.201740][T13502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.282453][T13508] 9pnet_fd: Insufficient options for proto=fd [ 399.545021][T13513] trusted_key: encrypted_key: keylen parameter is missing [ 400.076028][ T9] tipc: Node number set to 2886997011 [ 400.320238][ T8544] usbhid 6-1:0.0: can't add hid device: -71 [ 400.331907][ T8544] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 400.360150][ T8544] usb 6-1: USB disconnect, device number 9 [ 400.492433][T13535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.959774][T13549] netlink: zone id is out of range [ 400.965328][T13549] netlink: zone id is out of range [ 400.971236][T13549] netlink: zone id is out of range [ 400.978784][T13549] netlink: zone id is out of range [ 400.984396][T13549] netlink: zone id is out of range [ 400.989651][T13549] netlink: zone id is out of range [ 400.995062][T13549] netlink: zone id is out of range [ 401.000373][T13549] netlink: zone id is out of range [ 401.889285][T13559] trusted_key: encrypted_key: keylen parameter is missing [ 402.492089][T13574] tipc: Enabling of bearer rejected, failed to enable media [ 403.049995][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 403.226546][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 403.233082][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 403.242596][ T9] usb 6-1: config 0 has no interface number 0 [ 403.250326][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 403.258510][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 403.267558][ T9] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 403.275876][ T9] usb 6-1: Product: syz [ 403.280072][ T9] usb 6-1: Manufacturer: syz [ 403.284673][ T9] usb 6-1: SerialNumber: syz [ 403.290134][ T9] usb 6-1: config 0 descriptor?? [ 403.790638][T13617] trusted_key: encrypted_key: keylen parameter is missing [ 404.006677][ T5850] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 404.097031][ T5169] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 405.344542][ T9] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 405.372617][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 405.402323][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 405.422047][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 406.054290][ T30] audit: type=1400 audit(1755441066.521:1867): avc: denied { write } for pid=13674 comm="syz.0.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 406.454925][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'. [ 406.646748][T13683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 409.265175][T13725] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[13725] [ 409.755839][ T48] usb 6-1: USB disconnect, device number 10 [ 411.370522][T13788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.998564][T13794] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 412.042025][ T30] audit: type=1400 audit(1755441072.511:1868): avc: denied { connect } for pid=13795 comm="syz.5.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 412.090400][ T30] audit: type=1400 audit(1755441072.561:1869): avc: denied { ioctl } for pid=13795 comm="syz.5.2328" path="socket:[35105]" dev="sockfs" ino=35105 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 412.595099][T13814] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 412.605252][ T30] audit: type=1400 audit(1755441073.081:1870): avc: denied { relabelto } for pid=13808 comm="syz.2.2333" name="465" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 412.666643][ T30] audit: type=1400 audit(1755441073.081:1871): avc: denied { associate } for pid=13808 comm="syz.2.2333" name="465" dev="tmpfs" ino=2499 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 413.067665][T13820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2336'. [ 413.081720][T13820] tipc: Started in network mode [ 413.087104][T13820] tipc: Node identity 7, cluster identity 4711 [ 413.093393][T13820] tipc: Node number set to 7 [ 413.691555][ T30] audit: type=1400 audit(1755441074.161:1872): avc: denied { getopt } for pid=13828 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 413.758151][ T30] audit: type=1400 audit(1755441074.231:1873): avc: denied { remove_name } for pid=5851 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 413.795046][ T30] audit: type=1400 audit(1755441074.261:1874): avc: denied { rmdir } for pid=5851 comm="syz-executor" name="465" dev="tmpfs" ino=2499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 413.826872][T13834] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 413.827193][ T30] audit: type=1400 audit(1755441074.291:1875): avc: denied { write } for pid=13833 comm="syz.2.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.871543][T13824] team0: No ports can be present during mode change [ 413.895736][T13824] netlink: 'syz.5.2338': attribute type 10 has an invalid length. [ 413.908487][T13824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.917985][T13824] team0: Port device bond0 added [ 413.920375][T13834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2341'. [ 413.982889][T13834] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2341'. [ 414.018108][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2338'. [ 414.113052][T13824] team0 (unregistering): Port device team_slave_0 removed [ 414.122311][T13824] team0 (unregistering): Port device team_slave_1 removed [ 414.458838][T13824] team0 (unregistering): Port device bond0 removed [ 415.174520][ T30] audit: type=1400 audit(1755441075.641:1876): avc: denied { name_bind } for pid=13859 comm="syz.1.2348" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 415.213095][T13860] net_ratelimit: 21 callbacks suppressed [ 415.213122][T13860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.229943][ T30] audit: type=1400 audit(1755441075.671:1877): avc: denied { node_bind } for pid=13859 comm="syz.1.2348" saddr=fe88::102 src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 415.301237][T13863] netlink: 'syz.1.2349': attribute type 1 has an invalid length. [ 415.341777][T13862] veth3: entered promiscuous mode [ 415.353722][T13863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 416.383398][ T48] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 416.537847][ T48] usb 6-1: not running at top speed; connect to a high speed hub [ 416.546892][ T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.557392][ T48] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 416.567097][ T48] usb 6-1: config 1 has no interface number 1 [ 416.573190][ T48] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 416.587966][ T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.597315][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.605284][ T48] usb 6-1: Product: syz [ 416.611056][ T48] usb 6-1: Manufacturer: syz [ 416.615634][ T48] usb 6-1: SerialNumber: syz [ 416.947376][T13904] overlayfs: failed to clone upperpath [ 416.958117][T13904] netlink: 'syz.0.2364': attribute type 10 has an invalid length. [ 416.970594][T13904] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 416.980568][T13904] team0: Failed to send options change via netlink (err -105) [ 416.988788][T13904] team0: Port device netdevsim0 added [ 416.995626][ T3691] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 417.719979][ T30] audit: type=1400 audit(1755441078.191:1878): avc: denied { module_request } for pid=13924 comm="syz.3.2370" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 418.722313][T13951] veth5: entered promiscuous mode [ 419.883809][ T48] usb 6-1: USB disconnect, device number 11 [ 420.907178][T13986] trusted_key: encrypted_key: keylen parameter is missing [ 421.032576][T13993] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1001 sclass=netlink_xfrm_socket pid=13993 comm=syz.2.2391 [ 421.376904][ T30] audit: type=1800 audit(1755441081.771:1879): pid=14014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2394" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 421.455337][ T1004] smc: removing ib device syz1 [ 421.515612][ T5927] syz1: Port: 1 Link DOWN [ 422.721140][T14031] IPVS: Unknown mcast interface: pim6reg [ 422.729009][T14031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.799253][ T30] audit: type=1400 audit(1755441083.271:1880): avc: denied { watch } for pid=14039 comm="syz.3.2407" path="/534/file0" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 422.829377][ T30] audit: type=1400 audit(1755441083.271:1881): avc: denied { watch_sb } for pid=14039 comm="syz.3.2407" path="/534/file0" dev="tmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 423.866010][T14050] netlink: 'syz.1.2411': attribute type 1 has an invalid length. [ 423.885139][T14050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.920041][T14050] bond5: (slave geneve3): making interface the new active one [ 423.928118][T14050] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 423.937013][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.960644][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.983027][T14071] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2416'. [ 423.992395][ T48] libceph: connect (1)[c::]:6789 error -101 [ 424.014191][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.027250][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 424.036778][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.066934][ T48] libceph: connect (1)[c::]:6789 error -101 [ 424.072915][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 424.307526][ T48] libceph: connect (1)[c::]:6789 error -101 [ 424.314118][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 424.387439][ T8520] libceph: connect (1)[c::]:6789 error -101 [ 424.480520][ T8520] libceph: mon0 (1)[c::]:6789 connect error [ 424.783752][T14067] ceph: No mds server is up or the cluster is laggy [ 424.790974][T14073] ceph: No mds server is up or the cluster is laggy [ 425.178160][ T30] audit: type=1326 audit(1755441085.651:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 425.736593][ T30] audit: type=1326 audit(1755441085.651:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 425.846823][ T92] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 425.850219][ T30] audit: type=1326 audit(1755441085.731:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 425.883324][ T30] audit: type=1326 audit(1755441085.731:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 426.012381][ T30] audit: type=1326 audit(1755441085.731:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 426.066219][ T30] audit: type=1326 audit(1755441085.741:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 426.118232][ T92] usb 6-1: config 0 interface 0 has no altsetting 0 [ 426.121185][ T30] audit: type=1326 audit(1755441085.741:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 426.125093][ T92] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 426.165055][ T30] audit: type=1326 audit(1755441085.741:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14099 comm="syz.2.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37dd38ebe9 code=0x7ffc0000 [ 426.226390][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.247611][ T92] usb 6-1: config 0 descriptor?? [ 426.808779][ T92] (null): keene_cmd_main failed (-110) [ 426.861912][ T92] video4linux radio48: keene_cmd_main failed (-32) [ 426.887860][ T92] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 427.895652][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 427.895667][ T30] audit: type=1326 audit(1755441088.361:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 427.969191][ T30] audit: type=1326 audit(1755441088.431:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.047464][T14165] macsec1: entered promiscuous mode [ 428.052886][T14165] bridge0: entered promiscuous mode [ 428.101949][ T30] audit: type=1326 audit(1755441088.481:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.208370][ T30] audit: type=1326 audit(1755441088.481:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.239972][ T30] audit: type=1326 audit(1755441088.481:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.278736][ T30] audit: type=1326 audit(1755441088.631:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.326183][ T30] audit: type=1400 audit(1755441088.661:1975): avc: denied { getopt } for pid=14156 comm="syz.1.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 428.350290][ T30] audit: type=1326 audit(1755441088.711:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.373849][ T30] audit: type=1326 audit(1755441088.711:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.397346][ T30] audit: type=1326 audit(1755441088.711:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14104 comm="syz.5.2423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57698ebe9 code=0x7ffc0000 [ 428.875359][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2450'. [ 429.537300][ T5927] usb 6-1: USB disconnect, device number 12 [ 430.423240][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 430.515859][T14232] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 430.538185][T14232] bond1: entered promiscuous mode [ 430.543301][T14232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.552828][T14232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14232 comm=syz.0.2466 [ 434.376242][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.766517][ T48] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 434.970058][ T48] usb 6-1: Using ep0 maxpacket: 32 [ 434.977187][ T48] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 434.985647][ T48] usb 6-1: config 0 has no interface number 0 [ 434.992303][ T48] usb 6-1: config 0 interface 12 has no altsetting 0 [ 435.001143][ T48] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 435.010879][ T48] usb 6-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 435.019950][ T48] usb 6-1: Product: syz [ 435.025625][ T48] usb 6-1: Manufacturer: syz [ 435.030929][ T48] usb 6-1: SerialNumber: syz [ 435.045377][ T48] usb 6-1: config 0 descriptor?? [ 435.082703][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 435.082719][ T30] audit: type=1326 audit(1755441095.551:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.113770][ T30] audit: type=1326 audit(1755441095.551:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.137792][ T30] audit: type=1326 audit(1755441095.551:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.162373][ T30] audit: type=1326 audit(1755441095.551:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.192585][ T30] audit: type=1326 audit(1755441095.551:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.217306][ T30] audit: type=1326 audit(1755441095.551:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.240787][ T30] audit: type=1326 audit(1755441095.551:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.268090][ T30] audit: type=1326 audit(1755441095.551:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.333151][ T30] audit: type=1326 audit(1755441095.551:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.357968][ T30] audit: type=1326 audit(1755441095.551:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.0.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 435.387324][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 437.077218][ T5169] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 437.099801][ T48] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 437.109170][ T48] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 437.121827][ T48] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 437.130073][ T48] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 437.168224][T14345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1048 sclass=netlink_route_socket pid=14345 comm=syz.3.2499 [ 439.335940][ T5927] usb 6-1: USB disconnect, device number 13 [ 439.497836][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.504124][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.646611][T14400] No source specified [ 439.867243][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2518'. [ 439.889816][T14404] netlink: 'syz.2.2518': attribute type 7 has an invalid length. [ 439.907484][T14404] netlink: 'syz.2.2518': attribute type 8 has an invalid length. [ 439.980805][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 440.846756][ T48] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 440.913145][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 441.062118][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 441.110783][ T48] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.121142][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.130462][ T48] usb 6-1: Product: syz [ 441.134829][ T48] usb 6-1: Manufacturer: syz [ 441.140372][ T48] usb 6-1: SerialNumber: syz [ 441.147765][ T48] usb 6-1: config 0 descriptor?? [ 441.158868][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 441.158880][ T30] audit: type=1400 audit(1755441101.631:2107): avc: denied { setopt } for pid=14433 comm="syz.2.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.198905][T14436] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.404624][ T48] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.788169][T14473] trusted_key: encrypted_key: keylen parameter is missing [ 443.079467][T14419] Illegal XDP return value 4294967274 on prog (id 500) dev N/A, expect packet loss! [ 443.334525][T14477] trusted_key: encrypted_key: insufficient parameters specified [ 444.379540][ T48] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 444.557656][ T5927] usb 6-1: USB disconnect, device number 14 [ 444.598837][T14501] bridge1: entered promiscuous mode [ 445.349247][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 446.063522][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 446.496728][T14563] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2571'. [ 446.509289][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 446.519359][ T5927] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 446.527934][ T5927] usb 6-1: config 0 has no interface number 0 [ 446.534203][ T5927] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.547430][ T5927] usb 6-1: config 0 interface 85 has no altsetting 0 [ 446.555500][ T5927] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 446.564902][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.573040][ T5927] usb 6-1: Product: syz [ 446.577235][ T5927] usb 6-1: Manufacturer: syz [ 446.581820][ T5927] usb 6-1: SerialNumber: syz [ 446.587492][ T5927] usb 6-1: config 0 descriptor?? [ 447.288071][ T5927] appletouch 6-1:0.85: Geyser mode initialized. [ 447.296036][ T5927] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input7 [ 449.674859][ T48] usb 6-1: USB disconnect, device number 15 [ 449.689804][ T48] appletouch 6-1:0.85: input: appletouch disconnected [ 449.750661][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2593'. [ 449.760880][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2593'. [ 450.216894][T14642] trusted_key: encrypted_key: keylen parameter is missing [ 451.533054][T14672] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2605'. [ 453.691309][T14710] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 456.635006][ T30] audit: type=1400 audit(1755441117.101:2108): avc: denied { search } for pid=14755 comm="syz.5.2631" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 456.658102][ T30] audit: type=1400 audit(1755441117.101:2109): avc: denied { append } for pid=14755 comm="syz.5.2631" name="event3" dev="devtmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 457.438548][T14776] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 457.517596][T14776] bridge1: entered allmulticast mode [ 459.109911][T14812] 9pnet_fd: Insufficient options for proto=fd [ 461.200960][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2663'. [ 461.295345][T14867] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2664'. [ 462.209024][ T30] audit: type=1400 audit(1755441122.681:2110): avc: denied { name_bind } for pid=14884 comm="syz.2.2670" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 462.300177][T14887] overlayfs: failed to clone upperpath [ 462.631549][T14896] 9pnet_fd: Insufficient options for proto=fd [ 463.053899][T14912] openvswitch: netlink: IP tunnel dst address not specified [ 463.147686][T14911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.333075][ T30] audit: type=1400 audit(1755441123.801:2111): avc: denied { create } for pid=14908 comm="syz.2.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 463.718788][T14922] trusted_key: encrypted_key: keylen parameter is missing [ 465.060338][T14956] veth0_to_team: entered promiscuous mode [ 465.066249][T14956] veth0_to_team: entered allmulticast mode [ 466.306201][ T48] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 466.395240][T14346] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 466.406863][T14346] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 466.414885][T14346] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 466.424129][T14346] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 466.466806][T14346] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.510001][T14976] lo speed is unknown, defaulting to 1000 [ 466.516836][ T48] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 466.549140][ T48] usb 6-1: config 0 has no interface number 0 [ 466.556950][ T48] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 466.567381][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.575415][ T48] usb 6-1: Product: syz [ 466.580324][ T48] usb 6-1: Manufacturer: syz [ 466.584978][ T48] usb 6-1: SerialNumber: syz [ 466.592866][ T48] usb 6-1: config 0 descriptor?? [ 466.660823][T14976] chnl_net:caif_netlink_parms(): no params data found [ 466.748537][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.755797][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.763733][T14976] bridge_slave_0: entered allmulticast mode [ 466.771566][T14976] bridge_slave_0: entered promiscuous mode [ 466.780198][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.788194][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.795307][T14976] bridge_slave_1: entered allmulticast mode [ 466.803635][T14976] bridge_slave_1: entered promiscuous mode [ 466.858282][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.870909][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.903907][T14976] team0: Port device team_slave_0 added [ 466.912645][T14976] team0: Port device team_slave_1 added [ 466.935899][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.944038][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.971067][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.983690][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.991309][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.018142][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.047094][T14976] hsr_slave_0: entered promiscuous mode [ 467.053504][T14976] hsr_slave_1: entered promiscuous mode [ 467.059612][T14976] debugfs: 'hsr0' already exists in 'hsr' [ 467.073856][T14976] Cannot create hsr debugfs directory [ 467.182491][T14993] trusted_key: encrypted_key: keylen parameter is missing [ 467.730588][T14976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.765026][T14976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.827764][T14976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.840357][T14976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.861586][T15002] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 467.879551][T15002] bond1: entered promiscuous mode [ 467.884838][T15002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.909941][T15002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.921412][T15002] bond1: (slave bond2): making interface the new active one [ 467.930275][T15002] bond2: entered promiscuous mode [ 467.935760][T15002] bond1: (slave bond2): Enslaving as an active interface with an up link [ 467.953755][T14976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.964847][T14976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.003865][ T30] audit: type=1400 audit(1755441128.471:2112): avc: denied { getopt } for pid=15001 comm="syz.2.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 468.077650][ T48] usb 6-1: Firmware version (0.0) predates our first public release. [ 468.085745][ T48] usb 6-1: Please update to version 0.2 or newer [ 468.095083][T14976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.149912][T14976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.215421][T14976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.224054][T14976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.233062][T14976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.241143][T14976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.275693][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.289062][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.300161][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.307250][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.319677][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.326785][ T7216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.419625][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.442795][T14976] veth0_vlan: entered promiscuous mode [ 468.450867][T14976] veth1_vlan: entered promiscuous mode [ 468.467695][T14976] veth0_macvtap: entered promiscuous mode [ 468.474976][T14976] veth1_macvtap: entered promiscuous mode [ 468.487368][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.499404][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.509825][ T3691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.519294][ T3691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.529728][ T3691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.538908][ T3691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.546298][ T5850] Bluetooth: hci6: command tx timeout [ 468.574028][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.585741][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.600472][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.609403][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.349827][ T5927] usb 6-1: USB disconnect, device number 16 [ 470.616325][ T5850] Bluetooth: hci6: command tx timeout [ 470.948203][T15062] trusted_key: encrypted_key: keylen parameter is missing [ 471.319857][T15065] sctp: [Deprecated]: syz.2.2713 (pid 15065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.319857][T15065] Use struct sctp_sack_info instead [ 472.179355][T15090] netlink: 'syz.3.2716': attribute type 10 has an invalid length. [ 472.187379][T15090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2716'. [ 472.451788][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 472.552011][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2719'. [ 472.663343][ T30] audit: type=1400 audit(1755441133.131:2113): avc: denied { create } for pid=15103 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.682815][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.698615][ T5850] Bluetooth: hci6: command tx timeout [ 472.717496][ T30] audit: type=1400 audit(1755441133.161:2114): avc: denied { setopt } for pid=15103 comm="syz.3.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 472.981853][ T30] audit: type=1400 audit(1755441133.451:2115): avc: denied { mounton } for pid=15111 comm="syz.3.2724" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 473.719183][ T30] audit: type=1326 audit(1755441134.191:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.760707][ T30] audit: type=1326 audit(1755441134.191:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.789713][ T30] audit: type=1326 audit(1755441134.221:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.815401][ T30] audit: type=1326 audit(1755441134.221:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.842566][ T30] audit: type=1326 audit(1755441134.221:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.871140][ T30] audit: type=1326 audit(1755441134.221:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.895605][T15129] netlink: 'syz.0.2728': attribute type 5 has an invalid length. [ 473.914702][ T30] audit: type=1326 audit(1755441134.221:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.959482][ T30] audit: type=1326 audit(1755441134.221:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.977555][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2732'. [ 473.994773][ T30] audit: type=1326 audit(1755441134.221:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 473.995717][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2732'. [ 474.018164][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.020670][ T30] audit: type=1326 audit(1755441134.221:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15126 comm="syz.0.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51998ebe9 code=0x7ffc0000 [ 474.512856][T15148] bridge2: entered promiscuous mode [ 474.776716][ T5850] Bluetooth: hci6: command tx timeout [ 474.844007][T15157] veth0_to_team: entered promiscuous mode [ 474.850393][T15157] veth0_to_team: entered allmulticast mode [ 475.115231][T15169] veth0_to_team: entered promiscuous mode [ 475.122085][T15169] veth0_to_team: entered allmulticast mode [ 475.343140][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 475.356343][ T31] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 475.372701][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 475.408195][ T31] task:kworker/u8:2 state:D stack:22744 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 475.532036][ T31] Workqueue: netns cleanup_net [ 475.545417][ T31] Call Trace: [ 475.554576][ T31] [ 475.559866][ T31] __schedule+0x1190/0x5de0 [ 475.566681][ T31] ? stack_trace_save+0x8e/0xc0 [ 475.572604][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 475.588037][ T31] ? arch_stack_walk+0x94/0x100 [ 475.592906][ T31] ? __pfx___schedule+0x10/0x10 [ 475.619687][ T31] ? process_one_work+0x9cc/0x1b70 [ 475.636808][ T31] ? worker_thread+0x6c8/0xf10 [ 475.641584][ T31] ? kthread+0x3c5/0x780 [ 475.646884][ T31] ? ret_from_fork+0x5d7/0x6f0 [ 475.676717][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 475.686427][ T31] ? schedule+0x2d7/0x3a0 [ 475.690756][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.695496][ T31] ? lock_release+0x201/0x2f0 [ 475.706783][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 475.716423][ T31] schedule+0xe7/0x3a0 [ 475.720474][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.736443][ T31] __mutex_lock+0x82a/0x10b0 [ 475.741043][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 475.756113][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.761144][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.767744][ T31] ? xa_erase+0x2f/0x40 [ 475.771896][ T31] ? rdma_dev_change_netns+0x30/0x320 [ 475.777839][ T31] rdma_dev_change_netns+0x30/0x320 [ 475.783041][ T31] rdma_dev_exit_net+0x2dd/0x590 [ 475.788573][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 475.794031][ T31] ? __pfx___might_resched+0x10/0x10 [ 475.799912][ T31] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 475.805625][ T31] ? mutex_is_locked+0x17/0x60 [ 475.810987][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 475.817058][ T31] ops_undo_list+0x2eb/0xab0 [ 475.821649][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 475.827798][ T31] ? cleanup_net+0x334/0x890 [ 475.832388][ T31] ? lock_release+0x201/0x2f0 [ 475.838339][ T31] ? idr_destroy+0x62/0x2e0 [ 475.842854][ T31] cleanup_net+0x408/0x890 [ 475.848094][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 475.853031][ T31] ? lock_acquire+0x2cd/0x350 [ 475.858361][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.863120][ T31] process_one_work+0x9cc/0x1b70 [ 475.868656][ T31] ? __pfx_batadv_nc_worker+0x10/0x10 [ 475.874030][ T31] ? __pfx_process_one_work+0x10/0x10 [ 475.880000][ T31] ? assign_work+0x1a0/0x250 [ 475.884585][ T31] worker_thread+0x6c8/0xf10 [ 475.889801][ T31] ? __pfx_worker_thread+0x10/0x10 [ 475.894909][ T31] kthread+0x3c5/0x780 [ 475.899684][ T31] ? __pfx_kthread+0x10/0x10 [ 475.904267][ T31] ? rcu_is_watching+0x12/0xc0 [ 475.909342][ T31] ? __pfx_kthread+0x10/0x10 [ 475.913914][ T31] ret_from_fork+0x5d7/0x6f0 [ 475.918809][ T31] ? __pfx_kthread+0x10/0x10 [ 475.923391][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.928670][ T31] [ 475.931825][ T31] INFO: task syz.4.1697:11737 blocked for more than 143 seconds. [ 475.939973][ T31] Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 [ 475.947699][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.956687][ T31] task:syz.4.1697 state:D stack:24248 pid:11737 tgid:11732 ppid:5846 task_flags:0x400140 flags:0x00004004 [ 475.968653][ T31] Call Trace: [ 475.971922][ T31] [ 475.974835][ T31] __schedule+0x1190/0x5de0 [ 475.979381][ T31] ? rdma_nl_rcv_msg+0x387/0x6e0 [ 475.984302][ T31] ? rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 475.990882][ T31] ? netlink_unicast+0x5aa/0x870 [ 475.995791][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 476.000723][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 476.005649][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.011722][ T31] ? __pfx___schedule+0x10/0x10 [ 476.016595][ T31] ? schedule+0x2d7/0x3a0 [ 476.020923][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.025661][ T31] ? lock_release+0x201/0x2f0 [ 476.030543][ T31] schedule+0xe7/0x3a0 [ 476.034602][ T31] schedule_timeout+0x257/0x290 [ 476.039447][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 476.044795][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.049562][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.054470][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.059296][ T31] __wait_for_common+0x2fc/0x4e0 [ 476.064229][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 476.069598][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 476.075037][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 476.080232][ T31] disable_device+0x16f/0x280 [ 476.084885][ T31] ? __pfx_disable_device+0x10/0x10 [ 476.090093][ T31] __ib_unregister_device+0x2b4/0x480 [ 476.095439][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 476.101327][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 476.107033][ T31] nldev_dellink+0x21f/0x320 [ 476.111595][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 476.116703][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 476.121905][ T31] ? cap_capable+0xb3/0x250 [ 476.126407][ T31] ? bpf_lsm_capable+0x9/0x10 [ 476.131360][ T31] ? security_capable+0x7e/0x260 [ 476.136328][ T31] ? ns_capable+0xd7/0x110 [ 476.140739][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 476.145846][ T31] rdma_nl_rcv_msg+0x387/0x6e0 [ 476.150634][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 476.156124][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 476.162531][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 476.169459][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.174201][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 476.179478][ T31] ? selinux_netlink_send+0x578/0x830 [ 476.184830][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 476.189584][ T31] netlink_unicast+0x5aa/0x870 [ 476.194331][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 476.199669][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 476.204418][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.209706][ T31] ____sys_sendmsg+0xa95/0xc70 [ 476.214449][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 476.219918][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.225181][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 476.230461][ T31] ___sys_sendmsg+0x134/0x1d0 [ 476.235302][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.240590][ T31] ? futex_private_hash_put+0x11c/0x300 [ 476.246162][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.250941][ T31] __sys_sendmsg+0x16d/0x220 [ 476.255511][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.260879][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 476.265833][ T31] do_syscall_64+0xcd/0x4c0 [ 476.270360][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.276265][ T31] RIP: 0033:0x7f38e418ebe9 [ 476.280665][ T31] RSP: 002b:00007f38e4f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.289091][ T31] RAX: ffffffffffffffda RBX: 00007f38e43b6090 RCX: 00007f38e418ebe9 [ 476.297145][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 476.305161][ T31] RBP: 00007f38e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 476.313157][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.321133][ T31] R13: 00007f38e43b6128 R14: 00007f38e43b6090 R15: 00007ffc7c9cfb38 [ 476.329101][ T31] [ 476.332132][ T31] INFO: lockdep is turned off. [ 476.436099][ T31] NMI backtrace for cpu 0 [ 476.436117][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 476.436139][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.436150][ T31] Call Trace: [ 476.436155][ T31] [ 476.436162][ T31] dump_stack_lvl+0x116/0x1f0 [ 476.436184][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 476.436206][ T31] ? watchdog+0xd17/0x1260 [ 476.436225][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.436252][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 476.436276][ T31] watchdog+0xf0e/0x1260 [ 476.436296][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.436314][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.436331][ T31] ? __kthread_parkme+0x19e/0x250 [ 476.436356][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.436374][ T31] kthread+0x3c5/0x780 [ 476.436390][ T31] ? __pfx_kthread+0x10/0x10 [ 476.436407][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.436428][ T31] ? __pfx_kthread+0x10/0x10 [ 476.436444][ T31] ret_from_fork+0x5d7/0x6f0 [ 476.436460][ T31] ? __pfx_kthread+0x10/0x10 [ 476.436475][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.436501][ T31] [ 476.436507][ T31] Sending NMI from CPU 0 to CPUs 1: [ 476.559411][ C1] NMI backtrace for cpu 1 [ 476.559425][ C1] CPU: 1 UID: 0 PID: 7215 Comm: kworker/u8:10 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 476.559442][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.559450][ C1] Workqueue: 0x0 (bond5) [ 476.559468][ C1] RIP: 0010:debug_object_deactivate+0x1a0/0x3a0 [ 476.559490][ C1] Code: 80 3c 28 00 0f 85 85 01 00 00 48 8b 1b 48 85 db 0f 84 08 01 00 00 48 8d 7b 18 41 83 c4 01 48 89 f8 48 c1 e8 03 42 80 3c 28 00 <0f> 85 43 01 00 00 4c 3b 73 18 75 c2 48 b8 00 00 00 00 00 fc ff df [ 476.559502][ C1] RSP: 0018:ffffc900104e7b70 EFLAGS: 00000046 [ 476.559512][ C1] RAX: 1ffff1100e63358b RBX: ffff88807319ac40 RCX: 0000000000000006 [ 476.559521][ C1] RDX: ffffffff9afe00c0 RSI: 0000000000000004 RDI: ffff88807319ac58 [ 476.559529][ C1] RBP: ffffc900104e7c50 R08: 0000000000000001 R09: fffff5200209cf5c [ 476.559537][ C1] R10: 0000000000000003 R11: ffffffff9b0a0000 R12: 0000000000000003 [ 476.559545][ C1] R13: dffffc0000000000 R14: ffff888047715238 R15: 1ffff9200209cf70 [ 476.559553][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 476.559567][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.559575][ C1] CR2: 000055aa9d6e0b48 CR3: 000000000e380000 CR4: 00000000003526f0 [ 476.559584][ C1] Call Trace: [ 476.559588][ C1] [ 476.559594][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 476.559613][ C1] ? pwq_dec_nr_in_flight+0xc9/0xed0 [ 476.559627][ C1] ? __pfx___might_resched+0x10/0x10 [ 476.559645][ C1] process_one_work+0x25a/0x1b70 [ 476.559661][ C1] ? __pfx_bond_alb_monitor+0x10/0x10 [ 476.559678][ C1] ? __pfx_process_one_work+0x10/0x10 [ 476.559694][ C1] ? assign_work+0x1a0/0x250 [ 476.559707][ C1] worker_thread+0x6c8/0xf10 [ 476.559723][ C1] ? __pfx_worker_thread+0x10/0x10 [ 476.559736][ C1] kthread+0x3c5/0x780 [ 476.559747][ C1] ? __pfx_kthread+0x10/0x10 [ 476.559758][ C1] ? ret_from_fork+0x25/0x6f0 [ 476.559770][ C1] ? rcu_is_watching+0x12/0xc0 [ 476.559786][ C1] ? rcu_is_watching+0x12/0xc0 [ 476.559800][ C1] ? __pfx_kthread+0x10/0x10 [ 476.559812][ C1] ret_from_fork+0x5d7/0x6f0 [ 476.559823][ C1] ? __pfx_kthread+0x10/0x10 [ 476.559834][ C1] ret_from_fork_asm+0x1a/0x30 [ 476.559853][ C1] [ 476.560506][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 476.789274][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) [ 476.801054][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.811081][ T31] Call Trace: [ 476.814332][ T31] [ 476.817235][ T31] dump_stack_lvl+0x3d/0x1f0 [ 476.821801][ T31] vpanic+0x6e8/0x7a0 [ 476.825761][ T31] ? __pfx_vpanic+0x10/0x10 [ 476.830241][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 476.836115][ T31] panic+0xca/0xd0 [ 476.839828][ T31] ? __pfx_panic+0x10/0x10 [ 476.844220][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 476.849591][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 476.855720][ T31] ? watchdog+0xd78/0x1260 [ 476.860117][ T31] ? watchdog+0xd6b/0x1260 [ 476.864514][ T31] watchdog+0xd89/0x1260 [ 476.868727][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.873374][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 476.878544][ T31] ? __kthread_parkme+0x19e/0x250 [ 476.883543][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.888200][ T31] kthread+0x3c5/0x780 [ 476.892249][ T31] ? __pfx_kthread+0x10/0x10 [ 476.896809][ T31] ? rcu_is_watching+0x12/0xc0 [ 476.901545][ T31] ? __pfx_kthread+0x10/0x10 [ 476.906107][ T31] ret_from_fork+0x5d7/0x6f0 [ 476.910678][ T31] ? __pfx_kthread+0x10/0x10 [ 476.915250][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.919989][ T31] [ 476.923185][ T31] Kernel Offset: disabled [ 476.927492][ T31] Rebooting in 86400 seconds..