last executing test programs: 11m11.204975363s ago: executing program 1 (id=166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000540)={0x0, 0x12, 0x4, "15d54350"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m9.294958891s ago: executing program 1 (id=180): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x5) 11m9.164750403s ago: executing program 1 (id=183): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 11m8.604744419s ago: executing program 1 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) 11m8.378493935s ago: executing program 1 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2}) 11m7.956349588s ago: executing program 1 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000005c0)={{0x5000, 0x10000, 0x6, 0x1, 0x1, 0x20, 0x5, 0x0, 0x7, 0x80, 0xba, 0x2}, {0xdddd1000, 0x2, 0xe, 0x2, 0x7, 0x1, 0x7, 0xff, 0xfa, 0x4, 0x0, 0x3}, {0x2, 0x0, 0x4, 0x6, 0x1, 0x4, 0xb7, 0x6, 0x80, 0x8d, 0xf1, 0x4}, {0x1000, 0x6000, 0x10, 0x7, 0x2, 0xf, 0x3, 0xfd, 0x0, 0x7f, 0xb4, 0xc}, {0xdddd1000, 0x0, 0xd, 0xfc, 0xf, 0x81, 0x5, 0x0, 0xa3, 0x9, 0x6, 0xf7}, {0xdddd0000, 0xffff1000, 0xd, 0x3, 0x7, 0x2, 0x4, 0xfe, 0x8, 0x7, 0x5, 0x1}, {0x6000, 0x4000, 0x0, 0x0, 0x7f, 0x4, 0x7, 0x2, 0x8, 0x9, 0x1, 0x5}, {0xd000, 0x5000, 0xb, 0x81, 0x7f, 0x3, 0x6, 0xa, 0x7, 0x20, 0x3, 0x3}, {0x5000, 0xe}, {0x80a0000, 0xfff7}, 0x40000022, 0x0, 0xeeee8000, 0x100, 0xd, 0x1001, 0x1, 0x1, [0x9, 0x2, 0x355d, 0x200000000000000]}) 11m7.741223095s ago: executing program 32 (id=186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000005c0)={{0x5000, 0x10000, 0x6, 0x1, 0x1, 0x20, 0x5, 0x0, 0x7, 0x80, 0xba, 0x2}, {0xdddd1000, 0x2, 0xe, 0x2, 0x7, 0x1, 0x7, 0xff, 0xfa, 0x4, 0x0, 0x3}, {0x2, 0x0, 0x4, 0x6, 0x1, 0x4, 0xb7, 0x6, 0x80, 0x8d, 0xf1, 0x4}, {0x1000, 0x6000, 0x10, 0x7, 0x2, 0xf, 0x3, 0xfd, 0x0, 0x7f, 0xb4, 0xc}, {0xdddd1000, 0x0, 0xd, 0xfc, 0xf, 0x81, 0x5, 0x0, 0xa3, 0x9, 0x6, 0xf7}, {0xdddd0000, 0xffff1000, 0xd, 0x3, 0x7, 0x2, 0x4, 0xfe, 0x8, 0x7, 0x5, 0x1}, {0x6000, 0x4000, 0x0, 0x0, 0x7f, 0x4, 0x7, 0x2, 0x8, 0x9, 0x1, 0x5}, {0xd000, 0x5000, 0xb, 0x81, 0x7f, 0x3, 0x6, 0xa, 0x7, 0x20, 0x3, 0x3}, {0x5000, 0xe}, {0x80a0000, 0xfff7}, 0x40000022, 0x0, 0xeeee8000, 0x100, 0xd, 0x1001, 0x1, 0x1, [0x9, 0x2, 0x355d, 0x200000000000000]}) 2m47.412682257s ago: executing program 0 (id=1750): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 2m45.269311804s ago: executing program 0 (id=1755): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 2m43.001008708s ago: executing program 0 (id=1760): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 2m39.254514845s ago: executing program 0 (id=1768): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) 2m38.184803563s ago: executing program 0 (id=1773): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 2m36.960633909s ago: executing program 0 (id=1776): syz_open_dev$hidraw(0x0, 0x1, 0x14a042) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) bind$netlink(r3, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x82c, 0x2, [@TCA_U32_POLICE={0x80c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x80081, 0xe6, 0x5, 0x10, 0x4, 0x4, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a0, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0x6, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x101, 0x1, 0x9, 0x800, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x2, 0xfffffffe, 0x6, 0x4, 0x7ea, 0x8, 0x80, 0x72, 0x3, 0x9, 0xc9, 0xa66, 0x7177, 0x0, 0x7, 0x4, 0x1, 0x5215, 0x9, 0x40, 0x1, 0x0, 0x0, 0xf11, 0x2e77, 0x9, 0x800, 0x0, 0x2, 0x9, 0x9, 0xd9, 0x4, 0x100, 0x3, 0x5, 0xab1, 0x1, 0x0, 0x5, 0xfffffffe, 0x0, 0x1, 0x4, 0x1, 0x7473, 0x7, 0x6, 0x3, 0x101, 0x3, 0x3, 0x7, 0x7ff, 0x6, 0x7, 0x2, 0x9, 0x0, 0x8, 0x81, 0x5, 0x4, 0x9, 0xf4c7, 0x6, 0xd7, 0x100, 0xa00000, 0xe, 0x6, 0x1c2, 0x0, 0x10, 0xd, 0x8000, 0x1, 0x0, 0x3, 0x2, 0x5, 0x2, 0x9, 0x1c, 0x8, 0x9, 0x401, 0x5b4, 0x6, 0x3, 0x5, 0x10000, 0x4, 0x6, 0x9, 0x80, 0x5, 0x0, 0x0, 0xffffffff, 0x5, 0x2, 0x5f707ca1, 0x1, 0x3ad1, 0x7fff, 0x5, 0x10001000, 0x86e, 0x5, 0x93, 0x0, 0x7, 0x5, 0xfffffffe, 0xa451, 0x4, 0x0, 0x3, 0x2, 0x1, 0x7, 0x5, 0x81, 0x1, 0xa00, 0x173a, 0x931, 0x2, 0x4, 0xffffff20, 0x0, 0xd912, 0x4, 0x5, 0x3, 0x1d9c, 0xa, 0xfffffff8, 0x1000, 0x1, 0x7f, 0x7, 0x1, 0x0, 0x88, 0x7, 0x7fffffff, 0x6ce3, 0x4, 0xfffffffa, 0x1, 0xe9, 0x7, 0x5, 0x1, 0x4, 0x8001, 0x53ff, 0x8, 0x7ff, 0x9, 0x1, 0xe8b, 0x3, 0x21, 0x3, 0x1, 0x7, 0xbf5d, 0xa, 0x6, 0x800, 0x4543de6c, 0x5, 0x6, 0x7fff, 0xffffff25, 0x9, 0x3, 0x9, 0x7, 0x5, 0xc90e, 0xb65, 0x3, 0x1000, 0x40, 0x7f, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x9, 0xffff525f, 0x3, 0xfff, 0x8, 0x59, 0x59d6, 0xf4da, 0x8, 0x3, 0x6, 0x4a0, 0x6, 0xffff8000, 0x5, 0x2, 0x800, 0x9, 0x0, 0x81, 0x6d5e, 0x3, 0xa876, 0x8a9e, 0x0, 0x7, 0xe, 0x9, 0x8000, 0x401, 0x7, 0xfffffff7, 0xb, 0x8, 0x3, 0x0, 0x9, 0x2, 0x6, 0x7, 0x80000000, 0x6, 0x4, 0x67eb, 0x4, 0x1, 0xfffffffb, 0x3, 0xd56, 0x7e, 0x3, 0x5, 0x5]}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00"/12, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) 2m21.731735266s ago: executing program 33 (id=1776): syz_open_dev$hidraw(0x0, 0x1, 0x14a042) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) bind$netlink(r3, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x82c, 0x2, [@TCA_U32_POLICE={0x80c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x80081, 0xe6, 0x5, 0x10, 0x4, 0x4, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xffffffff, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7fff, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7566, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0xc9, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a0, 0x1ff, 0xff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0x6, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x5, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x442, 0x1000, 0x1, 0x7, 0x8, 0x8, 0x9, 0x8000, 0x51c, 0x7, 0x3, 0x5, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x101, 0x1, 0x9, 0x800, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x2, 0xfffffffe, 0x6, 0x4, 0x7ea, 0x8, 0x80, 0x72, 0x3, 0x9, 0xc9, 0xa66, 0x7177, 0x0, 0x7, 0x4, 0x1, 0x5215, 0x9, 0x40, 0x1, 0x0, 0x0, 0xf11, 0x2e77, 0x9, 0x800, 0x0, 0x2, 0x9, 0x9, 0xd9, 0x4, 0x100, 0x3, 0x5, 0xab1, 0x1, 0x0, 0x5, 0xfffffffe, 0x0, 0x1, 0x4, 0x1, 0x7473, 0x7, 0x6, 0x3, 0x101, 0x3, 0x3, 0x7, 0x7ff, 0x6, 0x7, 0x2, 0x9, 0x0, 0x8, 0x81, 0x5, 0x4, 0x9, 0xf4c7, 0x6, 0xd7, 0x100, 0xa00000, 0xe, 0x6, 0x1c2, 0x0, 0x10, 0xd, 0x8000, 0x1, 0x0, 0x3, 0x2, 0x5, 0x2, 0x9, 0x1c, 0x8, 0x9, 0x401, 0x5b4, 0x6, 0x3, 0x5, 0x10000, 0x4, 0x6, 0x9, 0x80, 0x5, 0x0, 0x0, 0xffffffff, 0x5, 0x2, 0x5f707ca1, 0x1, 0x3ad1, 0x7fff, 0x5, 0x10001000, 0x86e, 0x5, 0x93, 0x0, 0x7, 0x5, 0xfffffffe, 0xa451, 0x4, 0x0, 0x3, 0x2, 0x1, 0x7, 0x5, 0x81, 0x1, 0xa00, 0x173a, 0x931, 0x2, 0x4, 0xffffff20, 0x0, 0xd912, 0x4, 0x5, 0x3, 0x1d9c, 0xa, 0xfffffff8, 0x1000, 0x1, 0x7f, 0x7, 0x1, 0x0, 0x88, 0x7, 0x7fffffff, 0x6ce3, 0x4, 0xfffffffa, 0x1, 0xe9, 0x7, 0x5, 0x1, 0x4, 0x8001, 0x53ff, 0x8, 0x7ff, 0x9, 0x1, 0xe8b, 0x3, 0x21, 0x3, 0x1, 0x7, 0xbf5d, 0xa, 0x6, 0x800, 0x4543de6c, 0x5, 0x6, 0x7fff, 0xffffff25, 0x9, 0x3, 0x9, 0x7, 0x5, 0xc90e, 0xb65, 0x3, 0x1000, 0x40, 0x7f, 0x3ff, 0x0, 0x7fffffff, 0x2, 0x9, 0xffff525f, 0x3, 0xfff, 0x8, 0x59, 0x59d6, 0xf4da, 0x8, 0x3, 0x6, 0x4a0, 0x6, 0xffff8000, 0x5, 0x2, 0x800, 0x9, 0x0, 0x81, 0x6d5e, 0x3, 0xa876, 0x8a9e, 0x0, 0x7, 0xe, 0x9, 0x8000, 0x401, 0x7, 0xfffffff7, 0xb, 0x8, 0x3, 0x0, 0x9, 0x2, 0x6, 0x7, 0x80000000, 0x6, 0x4, 0x67eb, 0x4, 0x1, 0xfffffffb, 0x3, 0xd56, 0x7e, 0x3, 0x5, 0x5]}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1f00"/12, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0xa) 23.29264767s ago: executing program 6 (id=2045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) recvmmsg$unix(r7, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001dc0)}}], 0x3, 0x400000a0, 0x0) socket$igmp(0x2, 0x3, 0x2) 21.154871308s ago: executing program 4 (id=2050): socket(0x2, 0x80805, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r7, &(0x7f0000007480)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000001240)=""/70, 0x46}], 0x5}, 0x7}, {{&(0x7f00000013c0)=@generic, 0x80, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000001580)=""/50, 0x32}, 0x3ff}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/45, 0x2d}, {&(0x7f0000002600)=""/45, 0x2d}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000046c0)=""/32, 0x20}], 0x8, &(0x7f0000004780)=""/191, 0xbf}, 0xfff}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000048c0)=""/239, 0xef}], 0x1, &(0x7f0000004ac0)=""/192, 0xc0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000006e80)}, 0x7fff}, {{&(0x7f0000006f40)=@ax25={{0x3, @rose}, [@default, @null, @bcast, @null, @null, @default, @remote, @netrom]}, 0x80, &(0x7f00000073c0)=[{0x0}, {&(0x7f0000007080)=""/99, 0x63}, {0x0}, {&(0x7f0000007180)=""/206, 0xce}, {&(0x7f0000007280)=""/59, 0x3b}, {&(0x7f00000072c0)=""/247, 0xf7}], 0x6, &(0x7f0000007440)=""/53, 0x35}, 0x3}], 0x6, 0x40000040, 0x0) 19.325194865s ago: executing program 4 (id=2052): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[], 0xf0}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x250}, 0x1, 0x0, 0x0, 0x204000c}, 0x4004800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 16.939657358s ago: executing program 6 (id=2056): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 16.845043767s ago: executing program 4 (id=2057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300098c000010850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000600000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000190c0)='tlb_flush\x00'}, 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r7, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) 16.577692488s ago: executing program 2 (id=2059): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) capset(&(0x7f0000000440)={0x20080522}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 15.580917004s ago: executing program 2 (id=2060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$igmp(0x2, 0x3, 0x2) 13.317626573s ago: executing program 4 (id=2062): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="000e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c1371d3e37024801", 0x27}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)={0x0, 0x0}) capset(&(0x7f0000000440)={0x20080522, r7}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 13.249424828s ago: executing program 6 (id=2064): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) close(0x4) syz_open_dev$vcsn(0x0, 0x6c90, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) bpf$MAP_CREATE(0x11c, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) 13.239164548s ago: executing program 2 (id=2065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0xb, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300098c000010850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000600000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000190c0)='tlb_flush\x00'}, 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r6, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) 11.907230476s ago: executing program 4 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$igmp(0x2, 0x3, 0x2) 8.860555382s ago: executing program 2 (id=2070): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[], 0xf0}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x250}, 0x1, 0x0, 0x0, 0x204000c}, 0x4004800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 8.702006337s ago: executing program 5 (id=2071): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fe"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xbfc, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) 7.894989793s ago: executing program 3 (id=2072): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 7.778095389s ago: executing program 6 (id=2073): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 7.669707307s ago: executing program 5 (id=2074): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 6.470914684s ago: executing program 6 (id=2075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$igmp(0x2, 0x3, 0x2) 6.457135115s ago: executing program 5 (id=2076): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 6.369866323s ago: executing program 3 (id=2077): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0}], 0x2) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000040)) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0xfffff000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 5.690549656s ago: executing program 2 (id=2078): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) getpgid(0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000900000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300098c000010850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000019080)={0xc0000000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000040000000600000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000100000000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000190c0)='tlb_flush\x00'}, 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r6, 0x0, &(0x7f00008e2000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) 5.136143027s ago: executing program 5 (id=2079): socket(0x2, 0x80805, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r7, &(0x7f0000007480)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000001240)=""/70, 0x46}], 0x5}, 0x7}, {{&(0x7f00000013c0)=@generic, 0x80, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000001580)=""/50, 0x32}, 0x3ff}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/45, 0x2d}, {&(0x7f0000002600)=""/45, 0x2d}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000046c0)=""/32, 0x20}], 0x8, &(0x7f0000004780)=""/191, 0xbf}, 0xfff}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000048c0)=""/239, 0xef}], 0x1, &(0x7f0000004ac0)=""/192, 0xc0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000006e80)}, 0x7fff}, {{&(0x7f0000006f40)=@ax25={{0x3, @rose}, [@default, @null, @bcast, @null, @null, @default, @remote, @netrom]}, 0x80, &(0x7f00000073c0)=[{0x0}, {&(0x7f0000007080)=""/99, 0x63}, {0x0}, {&(0x7f0000007180)=""/206, 0xce}, {&(0x7f0000007280)=""/59, 0x3b}, {&(0x7f00000072c0)=""/247, 0xf7}], 0x6, &(0x7f0000007440)=""/53, 0x35}, 0x3}], 0x6, 0x40000040, 0x0) 5.033863629s ago: executing program 3 (id=2080): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="000e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c1371d3e370248018000f0", 0x2a}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)={0x0, 0x0}) capset(&(0x7f0000000440)={0x20080522, r7}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 3.489364691s ago: executing program 5 (id=2081): mkdir(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000055ee9750f7d89f7933f3f179f388aa000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900020073797a320000000014000380040000800c0000800800034000000002140000001100010000000000000000000700000abb1e44ccf4f86d0f64bb18536e1f9cd6ec41a5f40ecdcbe7219e5d89b0beea9e296b0692a0bc544b8a677153b9c27d1d588a2ab9db80b8e7f983ea259d058e83c2f49c57d870e0e0387fc8aaa0036dd2d5bbdb81510da75b4ad01bb33f46b66eb6e7e9a7292b9a33981c9934a434f28186521b24392d28"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000170000000a50000000060a0904000000000000000002000000240004802000018007000100637400001400028008000140000000090800024000000017090001007379000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@userxattr}, {@metacopy_on}]}) 3.369464886s ago: executing program 3 (id=2082): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[], 0xf0}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x250}, 0x1, 0x0, 0x0, 0x204000c}, 0x4004800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 2.184279405s ago: executing program 5 (id=2083): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[], 0xf0}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x250}, 0x1, 0x0, 0x0, 0x204000c}, 0x4004800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 1.840956805s ago: executing program 3 (id=2084): socket(0x2, 0x80805, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r7, &(0x7f0000007480)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/86, 0x56}, {&(0x7f0000001200)=""/60, 0x3c}, {&(0x7f0000001240)=""/70, 0x46}], 0x5}, 0x7}, {{&(0x7f00000013c0)=@generic, 0x80, &(0x7f0000001540)=[{0x0}], 0x1, &(0x7f0000001580)=""/50, 0x32}, 0x3ff}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/45, 0x2d}, {&(0x7f0000002600)=""/45, 0x2d}, {&(0x7f0000002640)=""/21, 0x15}, {&(0x7f0000002680)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000046c0)=""/32, 0x20}], 0x8, &(0x7f0000004780)=""/191, 0xbf}, 0xfff}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000048c0)=""/239, 0xef}], 0x1, &(0x7f0000004ac0)=""/192, 0xc0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000006e80)}, 0x7fff}, {{&(0x7f0000006f40)=@ax25={{0x3, @rose}, [@default, @null, @bcast, @null, @null, @default, @remote, @netrom]}, 0x80, &(0x7f00000073c0)=[{0x0}, {&(0x7f0000007080)=""/99, 0x63}, {0x0}, {&(0x7f0000007180)=""/206, 0xce}, {&(0x7f0000007280)=""/59, 0x3b}, {&(0x7f00000072c0)=""/247, 0xf7}], 0x6, &(0x7f0000007440)=""/53, 0x35}, 0x3}], 0x6, 0x40000040, 0x0) 914.299598ms ago: executing program 3 (id=2085): mkdir(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000440)=""/176, 0xb0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000055ee9750f7d89f7933f3f179f388aa000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900020073797a320000000014000380040000800c0000800800034000000002140000001100010000000000000000000700000abb1e44ccf4f86d0f64bb18536e1f9cd6ec41a5f40ecdcbe7219e5d89b0beea9e296b0692a0bc544b8a677153b9c27d1d588a2ab9db80b8e7f983ea259d058e83c2f49c57d870e0e0387fc8aaa0036dd2d5bbdb81510da75b4ad01bb33f46b66eb6e7e9a7292b9a33981c9934a434f28186521b24392d28"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000170000000a50000000060a0904000000000000000002000000240004802000018007000100637400001400028008000140000000090800024000000017090001007379000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0) 116.050618ms ago: executing program 2 (id=2086): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000340)={0x569, 0x1000, 0x49c35, 0x2, 0x6d}) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f80)=ANY=[], 0xf0}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0xffff0000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073"], 0x250}, 0x1, 0x0, 0x0, 0x204000c}, 0x4004800) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 68.223051ms ago: executing program 6 (id=2087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="000e020032000b07d25a806f8c6394f90424fc602f00", 0x16}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x117, 0x0, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000340)={0x0, 0x0}) capset(&(0x7f0000000440)={0x20080522, r7}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 0s ago: executing program 4 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): _r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 457.931104][ T8190] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.340320][T13066] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1437'. [ 458.580745][T13071] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1438'. [ 459.393326][ T30] audit: type=1400 audit(1762662439.682:1653): avc: denied { append } for pid=13077 comm="syz.0.1442" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 459.416732][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.805544][T13083] overlayfs: failed to resolve './file1': -2 [ 459.851703][ T30] audit: type=1400 audit(1762662439.752:1654): avc: denied { map } for pid=13077 comm="syz.0.1442" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 460.265722][ T30] audit: type=1400 audit(1762662439.752:1655): avc: denied { execute } for pid=13077 comm="syz.0.1442" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 460.623271][ T30] audit: type=1400 audit(1762662439.782:1656): avc: denied { remount } for pid=13074 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 460.781068][T13094] trusted_key: syz.0.1444 sent an empty control message without MSG_MORE. [ 462.423203][T13100] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 462.423203][T13100] program syz.5.1447 not setting count and/or reply_len properly [ 462.856319][T13110] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 463.686181][T13110] IPVS: Scheduler module ip_vs_ not found [ 464.452286][ T30] audit: type=1400 audit(1762662444.662:1657): avc: denied { write } for pid=13116 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.603735][ T30] audit: type=1326 audit(1762662444.882:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 464.641737][ T6747] Bluetooth: hci5: Frame reassembly failed (-84) [ 464.711184][ T30] audit: type=1326 audit(1762662444.882:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 464.744249][ T30] audit: type=1326 audit(1762662444.882:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 464.822989][ T30] audit: type=1326 audit(1762662444.882:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 464.980718][ T30] audit: type=1326 audit(1762662444.882:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 465.460375][ T30] audit: type=1326 audit(1762662444.882:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 465.517912][ T30] audit: type=1326 audit(1762662444.892:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 465.832877][ T30] audit: type=1326 audit(1762662444.892:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 465.897369][T13145] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 465.931332][ T6314] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 466.362469][ T30] audit: type=1326 audit(1762662444.892:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 466.413108][ T6314] usb 3-1: device descriptor read/64, error -71 [ 466.670554][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 466.670666][ T6314] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 466.676995][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 466.998795][ T6314] usb 3-1: device descriptor read/64, error -71 [ 467.160883][ T6314] usb usb3-port1: attempt power cycle [ 467.720797][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 330 seconds [ 467.731740][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 330 seconds [ 467.742951][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 330 seconds [ 467.754041][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 330 seconds [ 467.790566][ T6314] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 468.270148][ T8199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 468.286170][ T8199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 468.794849][ T8199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 468.841709][ T8199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 469.099779][T13206] xt_connbytes: Forcing CT accounting to be enabled [ 469.106994][T13206] set match dimension is over the limit! [ 469.624318][T13214] netlink: 'syz.5.1463': attribute type 4 has an invalid length. [ 470.138283][ T6314] usb 3-1: device descriptor read/8, error -71 [ 471.550070][ T8948] Bluetooth: hci5: Frame reassembly failed (-84) [ 471.646126][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 471.646140][ T30] audit: type=1326 audit(1762662451.802:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 471.943754][ T30] audit: type=1326 audit(1762662451.802:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 471.967110][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.041695][ T30] audit: type=1326 audit(1762662451.802:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 472.065161][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.300494][ T30] audit: type=1326 audit(1762662451.802:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 472.880578][ T30] audit: type=1326 audit(1762662451.802:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 472.970680][ T30] audit: type=1326 audit(1762662451.802:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 472.999621][ T30] audit: type=1326 audit(1762662451.802:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 473.430972][ T6293] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 473.570499][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 473.573685][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 473.577136][ T30] audit: type=1326 audit(1762662451.802:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 473.609705][ T30] audit: type=1326 audit(1762662451.802:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 473.641665][ T30] audit: type=1326 audit(1762662451.802:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 473.664997][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.810928][ T6293] usb 3-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 473.829588][ T6293] usb 3-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 473.859645][ T6293] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 473.881195][ T6293] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 473.900824][ T6293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.958974][ T6293] usb 3-1: Product: syz [ 473.968042][ T6293] usb 3-1: Manufacturer: syz [ 473.975910][ T6293] usb 3-1: SerialNumber: syz [ 474.328000][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 474.468360][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 475.612268][ T6293] usb 3-1: USB disconnect, device number 23 [ 475.703929][T13296] netlink: 'syz.0.1473': attribute type 21 has an invalid length. [ 475.732640][T13296] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1473'. [ 475.753953][T13296] netlink: 'syz.0.1473': attribute type 5 has an invalid length. [ 475.770972][T13296] netlink: 'syz.0.1473': attribute type 6 has an invalid length. [ 475.780507][T13296] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1473'. [ 476.039552][T13310] netlink: 'syz.4.1476': attribute type 1 has an invalid length. [ 476.149286][T13312] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1475'. [ 476.373464][T13315] fuse: Unknown parameter 'fd0x0000000000000005' [ 476.552063][ T6314] libceph: connect (1)[c::]:6789 error -101 [ 476.572093][ T6314] libceph: mon0 (1)[c::]:6789 connect error [ 476.649279][T13315] ceph: No mds server is up or the cluster is laggy [ 476.970655][ T6314] libceph: connect (1)[c::]:6789 error -101 [ 476.976667][ T6314] libceph: mon0 (1)[c::]:6789 connect error [ 477.108979][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 477.108996][ T30] audit: type=1326 audit(1762662457.342:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 477.840479][ T30] audit: type=1326 audit(1762662457.342:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 477.864270][ T30] audit: type=1326 audit(1762662457.342:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 477.923491][ T30] audit: type=1326 audit(1762662457.342:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 478.010677][ T30] audit: type=1326 audit(1762662457.342:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 478.034396][ T30] audit: type=1326 audit(1762662457.342:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 478.180225][ T30] audit: type=1326 audit(1762662457.342:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 478.372933][T13329] openvswitch: netlink: Duplicate key (type 1). [ 478.816800][T13332] Cannot find set identified by id 0 to match [ 478.896953][ T30] audit: type=1326 audit(1762662457.342:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 478.947797][ T30] audit: type=1326 audit(1762662457.342:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 479.024203][ T30] audit: type=1326 audit(1762662457.342:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13320 comm="syz.4.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 479.954608][T13348] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 480.044691][T13348] netlink: 'syz.5.1483': attribute type 2 has an invalid length. [ 480.252195][T13348] : entered promiscuous mode [ 480.437139][ T3452] Bluetooth: hci5: Frame reassembly failed (-84) [ 480.444840][ T3452] Bluetooth: hci5: Frame reassembly failed (-84) [ 480.574708][ T56] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 120 seconds [ 480.585523][ T56] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 120 seconds [ 480.596692][ T56] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 120 seconds [ 480.608405][ T56] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 120 seconds [ 481.520699][T12443] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 481.710379][T12443] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 482.246260][T12443] usb 4-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 482.272697][T12443] usb 4-1: config 0 has no interface number 0 [ 482.335559][T12443] usb 4-1: config 0 interface 117 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.404000][T12443] usb 4-1: config 0 interface 117 has no altsetting 0 [ 482.481652][T12443] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=e7.12 [ 482.494898][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 482.600488][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 482.610461][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.657140][ T30] audit: type=1400 audit(1762662462.796:1794): avc: denied { read } for pid=13372 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 482.875119][ T30] audit: type=1400 audit(1762662462.876:1795): avc: denied { mount } for pid=13372 comm="syz.5.1490" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 482.879037][T12443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.114215][T12443] usb 4-1: Product: syz [ 483.139389][T12443] usb 4-1: Manufacturer: syz [ 483.211567][T12443] usb 4-1: SerialNumber: syz [ 484.255412][T12443] usb 4-1: config 0 descriptor?? [ 484.321685][T12443] usb 4-1: can't set config #0, error -71 [ 484.441396][T12443] usb 4-1: USB disconnect, device number 23 [ 484.607439][T13391] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1493'. [ 485.888228][T13406] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 487.479219][ T30] audit: type=1400 audit(1762662467.756:1796): avc: denied { read } for pid=13414 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 487.632353][T13422] netlink: 'syz.3.1500': attribute type 4 has an invalid length. [ 487.820556][ T30] audit: type=1400 audit(1762662468.116:1797): avc: denied { read write } for pid=13417 comm="syz.5.1499" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 488.171580][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 488.180616][T13430] openvswitch: netlink: Flow key attr not present in new flow. [ 488.456175][ T30] audit: type=1400 audit(1762662468.116:1798): avc: denied { open } for pid=13417 comm="syz.5.1499" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 488.747382][ T30] audit: type=1326 audit(1762662468.196:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 488.770879][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.056684][ T30] audit: type=1326 audit(1762662468.196:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.081568][ T30] audit: type=1326 audit(1762662468.196:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.105022][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.200580][T13440] ubi0: attaching mtd0 [ 489.220853][T13440] ubi0: scanning is finished [ 489.225867][T13440] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 489.420876][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.501898][ T30] audit: type=1326 audit(1762662468.196:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.501946][ T30] audit: type=1326 audit(1762662468.196:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.501984][ T30] audit: type=1326 audit(1762662468.206:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.502023][ T30] audit: type=1326 audit(1762662468.206:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 489.502065][ T30] audit: type=1326 audit(1762662468.206:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13414 comm="syz.4.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 490.018922][T13440] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 491.718183][T13470] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1509'. [ 492.595848][T13482] mkiss: ax0: crc mode is auto. [ 494.582556][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 494.582571][ T30] audit: type=1400 audit(1762662474.876:1836): avc: denied { listen } for pid=13498 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 494.651777][ T30] audit: type=1400 audit(1762662474.886:1837): avc: denied { accept } for pid=13498 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 494.967172][T10375] Bluetooth: hci4: command 0x0406 tx timeout [ 495.659692][T13508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 495.666317][T13508] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 495.849732][T13519] netlink: 'syz.4.1518': attribute type 4 has an invalid length. [ 496.092159][T13508] vhci_hcd vhci_hcd.0: Device attached [ 496.410876][ T6314] usb 38-1: SetAddress Request (6) to port 0 [ 496.416929][ T6314] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 497.656676][T13536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1522'. [ 497.836653][ T30] audit: type=1400 audit(1762662478.076:1838): avc: denied { validate_trans } for pid=13533 comm="syz.5.1521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 497.880450][ T30] audit: type=1400 audit(1762662478.106:1839): avc: denied { connect } for pid=13533 comm="syz.5.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 497.885655][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 360 seconds [ 497.918112][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 360 seconds [ 497.936648][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 360 seconds [ 497.948645][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 360 seconds [ 498.880571][ T30] audit: type=1400 audit(1762662478.776:1840): avc: denied { getopt } for pid=13538 comm="syz.4.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 499.067554][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1524'. [ 499.279479][T13509] vhci_hcd: connection reset by peer [ 499.310238][ T12] vhci_hcd: stop threads [ 499.314809][ T12] vhci_hcd: release socket [ 499.321271][ T12] vhci_hcd: disconnect device [ 499.510455][ T30] audit: type=1400 audit(1762662479.806:1841): avc: denied { read } for pid=13550 comm="syz.2.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 500.580481][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 500.717224][T13560] netlink: 'syz.5.1526': attribute type 4 has an invalid length. [ 500.931137][ T30] audit: type=1400 audit(1762662481.016:1842): avc: denied { create } for pid=13548 comm="syz.5.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 500.982068][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 500.994882][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.004255][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 501.011128][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 501.020733][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.042547][ T10] usb 4-1: config 0 descriptor?? [ 501.070362][T13553] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.098364][T13564] fuse: Bad value for 'fd' [ 501.233453][ T30] audit: type=1400 audit(1762662481.406:1843): avc: denied { mount } for pid=13561 comm="syz.5.1529" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 502.043238][ T6314] usb 38-1: device descriptor read/8, error -110 [ 502.582217][ T5943] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 502.590919][ T6314] usb usb38-port1: attempt power cycle [ 502.634831][ T30] audit: type=1400 audit(1762662482.936:1844): avc: denied { unmount } for pid=6599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 502.750503][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 502.762359][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.038613][T13579] overlayfs: missing 'lowerdir' [ 503.065253][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 503.095592][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 503.116198][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.126387][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 503.132416][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 503.301500][ T10] usb 4-1: USB disconnect, device number 24 [ 503.317518][ T5943] usb 3-1: config 0 descriptor?? [ 503.392523][ T6314] usb usb38-port1: unable to enumerate USB device [ 503.481914][ T5943] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 504.805819][T13598] libceph: resolve '4.' (ret=-3): failed [ 505.333691][ T30] audit: type=1400 audit(1762662485.346:1845): avc: denied { append } for pid=13601 comm="syz.3.1538" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 505.357405][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.369299][ T30] audit: type=1400 audit(1762662485.476:1846): avc: denied { getopt } for pid=13601 comm="syz.3.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 505.775691][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1539'. [ 505.785839][T13613] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1539'. [ 506.842091][ T30] audit: type=1400 audit(1762662487.106:1847): avc: denied { create } for pid=13612 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 506.868615][ T30] audit: type=1400 audit(1762662487.106:1848): avc: denied { ioctl } for pid=13612 comm="syz.3.1540" path="socket:[33730]" dev="sockfs" ino=33730 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 508.049740][T13630] can0: slcan on ttyS3. [ 508.111154][T13630] can0 (unregistered): slcan off ttyS3. [ 508.581976][T13636] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1544'. [ 508.810662][T12443] usb 3-1: USB disconnect, device number 24 [ 510.592031][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 150 seconds [ 510.602923][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 150 seconds [ 510.623058][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 150 seconds [ 511.077944][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 150 seconds [ 511.565558][T13671] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 513.433780][ T30] audit: type=1400 audit(1762662493.706:1849): avc: denied { bind } for pid=13683 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 513.987293][T13690] fuse: Bad value for 'fd' [ 514.896573][T13706] ALSA: mixer_oss: invalid OSS volume 'PHONEXÛ0ØIN' [ 515.256656][ T30] audit: type=1400 audit(1762662495.556:1850): avc: denied { mounton } for pid=13695 comm="syz.5.1556" path="/293/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 515.821334][T13711] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 517.350477][T12443] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 517.746561][T12443] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 518.312719][T12443] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.364902][T12443] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 518.452587][T12443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.503154][ T30] audit: type=1326 audit(1762662498.806:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 518.546629][T12443] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 518.569972][T12443] usb 6-1: invalid MIDI out EP 0 [ 518.608016][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 519.159263][ T30] audit: type=1326 audit(1762662498.826:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 519.465988][ T30] audit: type=1326 audit(1762662498.826:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 519.490532][ T30] audit: type=1326 audit(1762662498.826:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 519.562036][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.629744][T13746] batman_adv: batadv0: Adding interface: gretap2 [ 519.636509][T13746] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.661880][T13746] batman_adv: batadv0: Interface activated: gretap2 [ 519.723795][T12443] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 519.990495][ T30] audit: type=1326 audit(1762662498.826:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 520.072902][T12443] usb 6-1: USB disconnect, device number 13 [ 520.074896][ T30] audit: type=1326 audit(1762662498.836:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 520.693307][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 520.699741][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 520.726595][ T30] audit: type=1326 audit(1762662498.836:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 520.752854][ T30] audit: type=1326 audit(1762662498.836:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 520.777182][ T30] audit: type=1326 audit(1762662498.836:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc4bf8e17f code=0x7ffc0000 [ 520.800773][ T30] audit: type=1326 audit(1762662498.836:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13735 comm="syz.0.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 521.692785][ T8948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.937572][T13768] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 522.554260][T13775] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 523.054895][ T8210] Bluetooth: hci5: Frame reassembly failed (-84) [ 524.109619][T13792] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 524.341160][T13750] binder: 13749:13750 ioctl c0306201 200000000540 returned -22 [ 524.852362][ T5943] IPVS: starting estimator thread 0... [ 525.056198][T13800] IPVS: using max 79 ests per chain, 189600 per kthread [ 525.150576][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 525.160565][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 526.614673][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 526.735585][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 526.806278][T13822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 526.824376][T13823] overlayfs: failed to resolve './bus': -2 [ 527.250555][ T5943] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 527.401010][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 527.408445][ T5943] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 527.532242][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.593353][ T5943] pvrusb2: Hardware description: Terratec Grabster AV400 [ 527.627252][ T5943] pvrusb2: ********** [ 527.631587][ T5943] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 527.642069][ T5943] pvrusb2: Important functionality might not be entirely working. [ 527.649865][ T5943] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 527.741418][T13827] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 527.757550][ T5943] pvrusb2: ********** [ 527.957976][ T5943] usb 3-1: USB disconnect, device number 25 [ 527.966833][ T5943] pvrusb2: Device being rendered inoperable [ 528.178326][T13835] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 528.286514][T13837] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 528.519379][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 390 seconds [ 528.540535][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 390 seconds [ 528.562673][T13842] ptrace attach of "./syz-executor exec"[6599] was attempted by "./syz-executor exec"[13842] [ 528.632724][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 390 seconds [ 528.662999][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 390 seconds [ 528.717063][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 528.717078][ T30] audit: type=1400 audit(1762662508.996:1901): avc: denied { connect } for pid=13838 comm="syz.5.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 529.056757][ T30] audit: type=1400 audit(1762662509.006:1902): avc: denied { shutdown } for pid=13838 comm="syz.5.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 530.368634][T13853] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 530.384459][ T30] audit: type=1400 audit(1762662509.796:1903): avc: denied { rename } for pid=13846 comm="syz.4.1588" name="file0" dev="tmpfs" ino=1670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 531.120563][T13860] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 531.493463][T13865] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 531.671004][T13867] macvlan2: entered promiscuous mode [ 531.690666][T13867] macvlan2: entered allmulticast mode [ 531.764723][T13867] bond1: entered promiscuous mode [ 531.770762][T13867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.172124][T13867] bond1: left promiscuous mode [ 532.765675][T13872] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 532.925589][T13880] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 533.195277][T13882] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 533.466076][T13894] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 534.510747][ T5943] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 534.541596][T13899] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 534.638858][T13898] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 534.750757][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 534.758328][ T5943] usb 6-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 534.775174][ T5943] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 534.947697][ T5943] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 534.960655][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.096003][ T5943] usb 6-1: config 0 descriptor?? [ 535.337730][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.346363][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.496929][T13914] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 536.363387][T13925] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 536.966423][ T6293] usb 6-1: USB disconnect, device number 14 [ 537.071504][T13934] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1604'. [ 537.109809][T13932] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 537.381371][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'. [ 537.390710][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 539.157787][T13955] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 539.639527][T10375] Bluetooth: hci5: sending frame failed (-49) [ 539.669517][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 539.711940][T13968] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 539.916019][ T6293] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 539.927673][T13969] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 540.200855][ T6293] usb 6-1: device descriptor read/all, error -71 [ 540.277688][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 540.294517][ T30] audit: type=1326 audit(1762662520.556:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 540.332168][ T30] audit: type=1326 audit(1762662520.556:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 540.507379][T13978] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 540.673061][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 180 seconds [ 540.680510][ T30] audit: type=1326 audit(1762662520.556:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 540.709628][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 180 seconds [ 540.721006][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 180 seconds [ 540.912350][ T30] audit: type=1326 audit(1762662520.556:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 541.078503][ T30] audit: type=1326 audit(1762662520.556:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 541.127986][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 180 seconds [ 541.370520][ T30] audit: type=1326 audit(1762662520.556:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 541.397089][ T30] audit: type=1326 audit(1762662520.556:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 541.431179][ T30] audit: type=1326 audit(1762662520.556:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 542.292294][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 542.340791][ T30] audit: type=1326 audit(1762662520.556:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 542.524131][ T8208] Bluetooth: hci5: Frame reassembly failed (-84) [ 542.571484][ T30] audit: type=1326 audit(1762662520.556:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 543.454877][T14014] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 543.581438][T14020] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 543.750152][T14023] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 543.987826][T14027] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 544.592024][T10375] Bluetooth: hci5: command 0x1003 tx timeout [ 544.599548][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 545.170466][T14045] mkiss: ax0: crc mode is auto. [ 545.199964][T14045] binder: 14036:14045 ioctl 4018620d 0 returned -22 [ 545.215266][T14045] binder: 14036:14045 ioctl c0306201 0 returned -14 [ 545.541798][T14050] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 546.110525][T14052] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 546.189569][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 546.189579][ T30] audit: type=1326 audit(1762662526.486:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 546.276106][ T30] audit: type=1326 audit(1762662526.566:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 546.336559][ T8210] Bluetooth: hci5: Frame reassembly failed (-84) [ 546.364151][ T30] audit: type=1326 audit(1762662526.576:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 546.391505][ T30] audit: type=1326 audit(1762662526.576:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 546.392889][T14058] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 546.423826][T14058] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 546.566388][ T30] audit: type=1326 audit(1762662526.606:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 546.668956][ T30] audit: type=1326 audit(1762662526.616:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 547.043876][ T30] audit: type=1326 audit(1762662526.616:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 547.418176][ T30] audit: type=1326 audit(1762662526.626:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 548.019957][ T30] audit: type=1326 audit(1762662526.626:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 548.045939][ T30] audit: type=1326 audit(1762662526.626:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14064 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 548.350528][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 548.617821][T14099] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 549.687977][ T8210] Bluetooth: hci5: Frame reassembly failed (-84) [ 550.763578][T14130] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 551.910593][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 551.913043][T10375] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 554.605861][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 554.605877][ T30] audit: type=1326 audit(1762662534.876:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14157 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 555.148437][ T30] audit: type=1326 audit(1762662534.886:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14157 comm="syz.3.1638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 555.271342][T14175] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 555.483678][ T30] audit: type=1326 audit(1762662535.786:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 555.532327][ T30] audit: type=1326 audit(1762662535.786:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 555.824292][ T30] audit: type=1326 audit(1762662535.786:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 555.890934][T14186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1641'. [ 555.938523][ T30] audit: type=1326 audit(1762662535.786:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 555.988648][T14185] syzkaller0: entered promiscuous mode [ 556.035235][ T30] audit: type=1326 audit(1762662535.786:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 556.690725][ T30] audit: type=1326 audit(1762662535.786:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 556.725962][ T30] audit: type=1326 audit(1762662535.976:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 557.037845][ T30] audit: type=1326 audit(1762662535.976:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 558.609109][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 420 seconds [ 558.974909][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 420 seconds [ 558.985993][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 420 seconds [ 558.997012][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 420 seconds [ 559.229137][T14236] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 561.826251][T14220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.842292][T14228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.880956][T14243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.952545][T14251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.319153][T14279] sp0: Synchronizing with TNC [ 562.462845][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.166686][T14314] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 566.617242][T14325] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 567.902783][T14328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 568.007163][T14332] sp0: Synchronizing with TNC [ 569.281938][T14356] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 570.801787][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 210 seconds [ 570.812738][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 210 seconds [ 570.823907][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 210 seconds [ 570.835553][T14377] sp0: Synchronizing with TNC [ 571.120542][T14378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 571.140549][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 210 seconds [ 571.699199][T14381] Falling back ldisc for ptm1. [ 573.336387][T14400] sp0: Synchronizing with TNC [ 573.576285][T14401] sp1: Synchronizing with TNC [ 574.190902][T14409] sp1: Synchronizing with TNC [ 575.608294][T14423] sp0: Synchronizing with TNC [ 575.634474][T14425] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 576.099734][T14435] sp0: Synchronizing with TNC [ 576.828913][T14436] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 577.657147][T14447] sp0: Synchronizing with TNC [ 578.042223][T14452] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 579.814274][T14472] sp0: Synchronizing with TNC [ 580.162590][T14479] sp1: Synchronizing with TNC [ 581.329901][T14494] sp0: Synchronizing with TNC [ 581.844454][T14499] sp1: Synchronizing with TNC [ 582.200690][T14506] sp0: Synchronizing with TNC [ 582.357057][ T30] audit: type=1326 audit(1762662562.596:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.131045][ T30] audit: type=1326 audit(1762662562.596:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.223763][T14511] sp0: Synchronizing with TNC [ 583.287038][ T30] audit: type=1326 audit(1762662562.596:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.438120][ T30] audit: type=1326 audit(1762662562.596:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.462890][ T30] audit: type=1326 audit(1762662562.596:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.521350][ T30] audit: type=1326 audit(1762662562.596:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 583.901017][ T30] audit: type=1326 audit(1762662562.606:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 584.141658][ T30] audit: type=1326 audit(1762662562.606:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 584.430709][ T30] audit: type=1326 audit(1762662562.606:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 584.622027][ T30] audit: type=1326 audit(1762662562.606:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14503 comm="syz.5.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 585.009014][T14523] Falling back ldisc for ptm0. [ 585.809358][T14538] sp0: Synchronizing with TNC [ 586.866173][T14555] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 588.788374][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 450 seconds [ 588.980984][T14578] sp0: Synchronizing with TNC [ 589.040834][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 450 seconds [ 589.051854][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 450 seconds [ 589.062806][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 450 seconds [ 589.546864][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 589.546878][ T30] audit: type=1326 audit(1762662569.836:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 590.060673][ T30] audit: type=1326 audit(1762662569.836:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 590.410497][ T30] audit: type=1326 audit(1762662569.836:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 590.499493][ T30] audit: type=1326 audit(1762662569.836:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 590.580535][ T30] audit: type=1326 audit(1762662569.836:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.040443][ T30] audit: type=1326 audit(1762662569.836:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.158866][ T30] audit: type=1326 audit(1762662569.836:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.258056][T14594] sp0: Synchronizing with TNC [ 591.294750][ T30] audit: type=1326 audit(1762662569.836:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.439574][ T30] audit: type=1326 audit(1762662569.836:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.462934][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.469489][ T30] audit: type=1326 audit(1762662569.836:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14580 comm="syz.2.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 591.492944][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.509968][T14601] sp1: Synchronizing with TNC [ 592.096077][T14606] sp2: Synchronizing with TNC [ 592.432028][T14614] sp3: Synchronizing with TNC [ 593.408601][ T8208] Bluetooth: hci5: Frame reassembly failed (-84) [ 593.907328][T14626] sp0: Synchronizing with TNC [ 594.167165][T14633] sp1: Synchronizing with TNC [ 595.470477][T10375] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 595.481094][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 595.873630][T14648] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 596.276605][T14649] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 596.350936][T14650] sp0: Synchronizing with TNC [ 596.591820][T14656] sp1: Synchronizing with TNC [ 597.565101][T14667] sp0: Synchronizing with TNC [ 598.689190][T14680] sp0: Synchronizing with TNC [ 599.675997][T14682] sp1: Synchronizing with TNC [ 599.709223][T14692] sp0: Synchronizing with TNC [ 600.982497][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 240 seconds [ 600.993363][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 240 seconds [ 601.004782][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 240 seconds [ 601.356450][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 240 seconds [ 602.681228][T14721] Falling back ldisc for ptm1. [ 602.725393][T14722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 603.557461][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 603.557475][ T30] audit: type=1326 audit(1762662583.846:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 603.722522][T14737] sp0: Synchronizing with TNC [ 604.073234][T14744] sp1: Synchronizing with TNC [ 604.085944][ T30] audit: type=1326 audit(1762662583.846:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.261706][ T30] audit: type=1326 audit(1762662583.846:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.311001][ T30] audit: type=1326 audit(1762662583.846:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.334776][ T30] audit: type=1326 audit(1762662583.846:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.368586][ T30] audit: type=1326 audit(1762662583.846:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.469306][ T30] audit: type=1326 audit(1762662583.846:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 604.566530][ T30] audit: type=1326 audit(1762662583.846:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 605.037570][ T30] audit: type=1326 audit(1762662583.846:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 605.145734][ T30] audit: type=1326 audit(1762662583.846:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14728 comm="syz.2.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 606.397860][T14765] bridge0: left promiscuous mode [ 606.511621][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 607.190539][T14772] sp0: Synchronizing with TNC [ 607.450048][T14777] sp0: Synchronizing with TNC [ 608.198733][T14795] bridge_slave_1: left allmulticast mode [ 608.205357][T14795] bridge_slave_1: left promiscuous mode [ 608.217462][T14795] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.263037][T14795] bridge_slave_0: left allmulticast mode [ 608.269495][T14795] bridge_slave_0: left promiscuous mode [ 608.278643][T14795] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.621896][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 609.383522][T14801] sp0: Synchronizing with TNC [ 609.449382][T14805] sp1: Synchronizing with TNC [ 610.800695][T14820] sp0: Synchronizing with TNC [ 610.898580][T14822] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 610.940287][T14821] sp1: Synchronizing with TNC [ 614.386739][T14854] sp0: Synchronizing with TNC [ 614.655578][T14859] sp1: Synchronizing with TNC [ 615.864869][T14869] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1771'. [ 615.990960][T14874] sp0: Synchronizing with TNC [ 616.003607][T14876] sp1: Synchronizing with TNC [ 616.119661][T14879] sp2: Synchronizing with TNC [ 616.671485][T14891] sp0: Synchronizing with TNC [ 616.974482][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 616.974493][ T30] audit: type=1326 audit(1762662597.276:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.059512][T14897] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 617.363017][ T30] audit: type=1326 audit(1762662597.276:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.376307][T14905] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 617.456135][ T30] audit: type=1326 audit(1762662597.276:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.507051][ T30] audit: type=1326 audit(1762662597.276:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.736044][ T30] audit: type=1326 audit(1762662597.316:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.900670][ T30] audit: type=1326 audit(1762662597.316:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 617.999329][ T30] audit: type=1326 audit(1762662597.316:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 618.136375][ T30] audit: type=1326 audit(1762662597.316:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 618.161869][ T30] audit: type=1326 audit(1762662597.316:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 618.192466][ T30] audit: type=1326 audit(1762662597.316:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.0.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc4bf8f6c9 code=0x7ffc0000 [ 618.581756][T14916] sp0: Synchronizing with TNC [ 619.481201][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 480 seconds [ 619.494260][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 480 seconds [ 619.505282][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 480 seconds [ 619.521974][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 480 seconds [ 619.664694][T14924] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 619.755349][ T3452] Bluetooth: hci5: Frame reassembly failed (-84) [ 620.136573][T14942] sp0: Synchronizing with TNC [ 620.227535][T14944] sp1: Synchronizing with TNC [ 621.231723][T14950] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 621.326913][T14953] sp0: Synchronizing with TNC [ 621.671356][T14959] sp1: Synchronizing with TNC [ 621.801563][ T5818] Bluetooth: hci5: command 0x1003 tx timeout [ 621.807921][T10375] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 622.486018][T14970] sp0: Synchronizing with TNC [ 622.577440][T14965] sp1: Synchronizing with TNC [ 623.893280][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.459152][T15000] sp0: Synchronizing with TNC [ 625.867050][T15009] sp0: Synchronizing with TNC [ 626.067892][T15012] sp1: Synchronizing with TNC [ 626.507956][T15017] sp2: Synchronizing with TNC [ 627.283497][T15029] sp0: Synchronizing with TNC [ 629.585996][T15051] sp0: Synchronizing with TNC [ 630.147634][T15066] sp0: Synchronizing with TNC [ 630.693755][T15077] sp1: Synchronizing with TNC [ 631.570524][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 270 seconds [ 631.581264][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 270 seconds [ 631.592363][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 270 seconds [ 631.603430][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 270 seconds [ 631.843063][T15087] sp0: Synchronizing with TNC [ 631.938457][T15089] sp1: Synchronizing with TNC [ 634.060604][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.087091][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.096315][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.106427][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.136348][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.148391][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 634.148405][ T30] audit: type=1400 audit(1762662614.446:2414): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 634.633129][T15121] sp0: Synchronizing with TNC [ 635.826792][T15141] sp0: Synchronizing with TNC [ 635.845005][T15110] chnl_net:caif_netlink_parms(): no params data found [ 636.225407][ T5818] Bluetooth: hci5: command tx timeout [ 636.772677][T15110] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.880810][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.950820][T15110] bridge_slave_0: entered allmulticast mode [ 637.089634][T15110] bridge_slave_0: entered promiscuous mode [ 637.117287][T15110] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.129378][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.212732][T15110] bridge_slave_1: entered allmulticast mode [ 637.235504][T15110] bridge_slave_1: entered promiscuous mode [ 637.410545][T15148] sp0: Synchronizing with TNC [ 637.656464][T15160] sp1: Synchronizing with TNC [ 637.747410][T15163] sp2: Synchronizing with TNC [ 637.773951][T15110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.874041][T15110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.361175][ T5818] Bluetooth: hci5: command tx timeout [ 638.422284][T15110] team0: Port device team_slave_0 added [ 638.432339][T15110] team0: Port device team_slave_1 added [ 638.865473][T15174] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 638.923445][T15110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.953318][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.040195][T15110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.066334][T15110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.120619][T15110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.349237][T15110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.973732][T15178] sp0: Synchronizing with TNC [ 639.991092][T15183] sp0: Synchronizing with TNC [ 640.147790][T15110] hsr_slave_0: entered promiscuous mode [ 640.177582][T15110] hsr_slave_1: entered promiscuous mode [ 640.184678][T15110] debugfs: 'hsr0' already exists in 'hsr' [ 640.195740][T15110] Cannot create hsr debugfs directory [ 640.542260][ T5818] Bluetooth: hci5: command tx timeout [ 640.899726][T15195] sp0: Synchronizing with TNC [ 641.101164][T15203] sp0: Synchronizing with TNC [ 641.302392][T15208] sp0: Synchronizing with TNC [ 642.788500][ T5818] Bluetooth: hci5: command tx timeout [ 642.906271][T15110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.223131][T15235] sp0: Synchronizing with TNC [ 643.260548][T15110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.307621][T15110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.342226][T15110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.488707][T15246] sp0: Synchronizing with TNC [ 644.035563][T15250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1837'. [ 644.347556][T15249] syzkaller0: entered promiscuous mode [ 645.251427][T15261] Falling back ldisc for ptm2. [ 645.287865][T15257] Falling back ldisc for ptm1. [ 645.442469][ T30] audit: type=1326 audit(1762662625.726:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.471771][ T30] audit: type=1326 audit(1762662625.726:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.501856][ T30] audit: type=1326 audit(1762662625.726:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.539056][ T30] audit: type=1326 audit(1762662625.726:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.609200][ T30] audit: type=1326 audit(1762662625.726:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.903584][ T30] audit: type=1326 audit(1762662625.726:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 645.928412][ T30] audit: type=1326 audit(1762662625.726:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 646.351288][ T30] audit: type=1326 audit(1762662625.726:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 646.380399][ T30] audit: type=1326 audit(1762662625.726:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 646.413240][ T30] audit: type=1326 audit(1762662625.726:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15266 comm="syz.3.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 646.638604][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 647.507745][T15110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.538718][T15110] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.573817][T15110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.584584][T15110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.672175][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.679314][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.055137][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.062818][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.269907][T15295] sp0: Synchronizing with TNC [ 648.537684][T15110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.672196][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 648.971041][T15310] sp1: Synchronizing with TNC [ 649.576757][T15110] veth0_vlan: entered promiscuous mode [ 649.594416][T15110] veth1_vlan: entered promiscuous mode [ 649.892661][T15110] veth0_macvtap: entered promiscuous mode [ 649.925864][T15110] veth1_macvtap: entered promiscuous mode [ 649.959439][T15110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.001548][T15110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.036701][ T3452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.045757][ T3452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.080678][ T3452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.089566][ T3452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.117399][T15321] sp0: Synchronizing with TNC [ 650.129816][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 510 seconds [ 650.141069][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 510 seconds [ 650.152101][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 510 seconds [ 650.163288][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 510 seconds [ 650.304373][T15324] sp1: Synchronizing with TNC [ 650.612465][ T8208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.620570][ T8208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.716613][ T8203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.726461][ T8203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.772893][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 650.772903][ T30] audit: type=1400 audit(1762662631.076:2454): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/root/syzkaller.DnYX5R/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 650.950430][T15331] sp2: Synchronizing with TNC [ 651.027724][ T30] audit: type=1400 audit(1762662631.116:2455): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/root/syzkaller.DnYX5R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 651.102169][ T30] audit: type=1400 audit(1762662631.116:2456): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/root/syzkaller.DnYX5R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 651.137375][ T30] audit: type=1400 audit(1762662631.286:2457): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 651.161085][ T30] audit: type=1400 audit(1762662631.286:2458): avc: denied { mount } for pid=15110 comm="syz-executor" name="/" dev="gadgetfs" ino=7511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 651.268821][ T30] audit: type=1400 audit(1762662631.286:2459): avc: denied { mounton } for pid=15110 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 651.346373][T15337] sp0: Synchronizing with TNC [ 651.464504][T15339] sp1: Synchronizing with TNC [ 652.398690][ T8208] Bluetooth: hci6: Frame reassembly failed (-84) [ 652.405135][ T30] audit: type=1326 audit(1762662632.676:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 652.809418][ T30] audit: type=1326 audit(1762662632.686:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 652.911761][ T30] audit: type=1326 audit(1762662632.686:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 652.976386][T15354] tipc: Enabling of bearer rejected, already enabled [ 653.017455][ T30] audit: type=1326 audit(1762662632.686:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.4.1853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 653.172411][T15356] sp0: Synchronizing with TNC [ 653.481005][T15363] sp1: Synchronizing with TNC [ 653.690717][T15365] sp2: Synchronizing with TNC [ 654.471786][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 654.478131][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 654.873573][T15372] sp0: Synchronizing with TNC [ 655.820663][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 655.820678][ T30] audit: type=1326 audit(1762662636.106:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 655.906386][ T8203] Bluetooth: hci6: Frame reassembly failed (-84) [ 656.051071][ T8948] Bluetooth: hci7: Frame reassembly failed (-84) [ 656.061648][ T30] audit: type=1326 audit(1762662636.106:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 656.145968][ T30] audit: type=1326 audit(1762662636.226:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 656.222770][ T30] audit: type=1326 audit(1762662636.226:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 656.371475][ T30] audit: type=1326 audit(1762662636.226:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15375 comm="syz.4.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9d9cd8f6c9 code=0x7ffc0000 [ 656.607321][ T30] audit: type=1326 audit(1762662636.306:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 656.666419][ T30] audit: type=1326 audit(1762662636.306:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 656.738042][ T30] audit: type=1326 audit(1762662636.306:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 656.857007][ T30] audit: type=1326 audit(1762662636.306:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 657.140497][ T30] audit: type=1326 audit(1762662636.306:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15379 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 657.870727][ T5138] Bluetooth: hci6: command 0x1003 tx timeout [ 657.898487][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 658.020914][T15410] sp0: Synchronizing with TNC [ 658.131608][ T5818] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 659.188506][T15425] sp0: Synchronizing with TNC [ 659.637226][T15429] sp1: Synchronizing with TNC [ 660.135076][T15433] sp0: Synchronizing with TNC [ 660.833457][T15440] overlayfs: failed to resolve './file1': -2 [ 661.217849][T15442] tipc: Started in network mode [ 661.236484][T15442] tipc: Node identity ac14140f, cluster identity 4711 [ 661.253402][T15442] tipc: New replicast peer: 255.255.255.255 [ 661.282600][T15442] tipc: Enabled bearer , priority 10 [ 661.494030][T15452] sp0: Synchronizing with TNC [ 661.631332][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 300 seconds [ 661.642155][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 300 seconds [ 661.654013][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 300 seconds [ 661.665226][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 300 seconds [ 661.684316][T15457] sp1: Synchronizing with TNC [ 662.371757][ T5943] tipc: Node number set to 2886997007 [ 663.109686][T15465] sp0: Synchronizing with TNC [ 663.574208][T15473] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.581842][T15473] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.820111][ T8208] Bluetooth: hci6: Frame reassembly failed (-84) [ 663.936365][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 663.936382][ T30] audit: type=1326 audit(1762662644.076:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 664.012096][ T30] audit: type=1326 audit(1762662644.076:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 664.418135][ T30] audit: type=1326 audit(1762662644.076:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 664.880549][ T30] audit: type=1326 audit(1762662644.076:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 664.999963][ T30] audit: type=1326 audit(1762662644.076:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 665.119620][T15487] syzkaller0: entered promiscuous mode [ 665.259872][ T30] audit: type=1326 audit(1762662644.076:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 665.450944][ T30] audit: type=1326 audit(1762662644.076:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 665.743044][ T30] audit: type=1326 audit(1762662644.076:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 665.872193][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 665.936017][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 665.963216][ T30] audit: type=1326 audit(1762662644.076:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 666.027122][ T30] audit: type=1326 audit(1762662644.076:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.5.1881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 666.575976][ T8210] Bluetooth: hci6: Frame reassembly failed (-84) [ 666.590634][T15499] Falling back ldisc for ptm0. [ 668.221232][T12443] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 668.382250][T12443] usb 5-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 668.396593][T12443] usb 5-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 668.407397][T12443] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 668.462429][T12443] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 668.471614][T12443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.479578][T12443] usb 5-1: Product: syz [ 668.488488][T12443] usb 5-1: Manufacturer: syz [ 668.493186][T12443] usb 5-1: SerialNumber: syz [ 668.590998][ T5818] Bluetooth: hci6: command 0x1003 tx timeout [ 668.591051][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 669.582767][T15525] Falling back ldisc for ptm0. [ 669.588151][T15519] bridge_slave_1: left allmulticast mode [ 669.602097][T15519] bridge_slave_1: left promiscuous mode [ 669.612039][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.656534][T15519] bridge_slave_0: left allmulticast mode [ 669.718880][T15519] bridge_slave_0: left promiscuous mode [ 670.631198][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.704376][ T5943] usb 5-1: USB disconnect, device number 18 [ 672.405361][T15545] sp0: Synchronizing with TNC [ 673.567856][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 673.577959][ T30] audit: type=1326 audit(1762662653.846:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 673.618481][ T8203] Bluetooth: hci6: Frame reassembly failed (-84) [ 673.635037][T15564] sp0: Synchronizing with TNC [ 673.681251][ T30] audit: type=1326 audit(1762662653.856:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.099062][ T30] audit: type=1326 audit(1762662653.856:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.356578][T15569] sp1: Synchronizing with TNC [ 674.394761][ T30] audit: type=1326 audit(1762662653.856:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.418137][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.521197][ T30] audit: type=1326 audit(1762662653.856:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.552775][ T30] audit: type=1326 audit(1762662653.856:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.620569][ T30] audit: type=1326 audit(1762662653.856:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.651390][ T30] audit: type=1326 audit(1762662653.856:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.677353][ T30] audit: type=1326 audit(1762662653.856:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.700793][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.742423][ T30] audit: type=1326 audit(1762662653.856:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15554 comm="syz.5.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 674.765794][ C0] vkms_vblank_simulate: vblank timer overrun [ 674.997412][ T8210] Bluetooth: hci7: Frame reassembly failed (-84) [ 675.689862][ T5138] Bluetooth: hci6: command 0x1003 tx timeout [ 675.696504][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 676.717962][T15597] sp0: Synchronizing with TNC [ 676.767962][T15600] sp1: Synchronizing with TNC [ 677.070560][ T5826] Bluetooth: hci7: command 0x1003 tx timeout [ 677.081348][ T5818] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 678.338851][T15611] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 678.919354][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 678.919368][ T30] audit: type=1400 audit(1762662659.216:2795): avc: denied { connect } for pid=15619 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 679.065379][T15624] sp0: Synchronizing with TNC [ 679.774025][T15634] overlayfs: failed to resolve './bus': -2 [ 680.182338][T15633] sp1: Synchronizing with TNC [ 680.233208][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 540 seconds [ 680.244112][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 540 seconds [ 680.255414][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 540 seconds [ 680.266768][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 540 seconds [ 680.607817][ T8948] Bluetooth: hci6: Frame reassembly failed (-84) [ 680.690696][ T30] audit: type=1326 audit(1762662660.886:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 680.934179][ T30] audit: type=1326 audit(1762662660.886:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 681.301918][ T8948] Bluetooth: hci7: Frame reassembly failed (-84) [ 681.311348][ T30] audit: type=1326 audit(1762662660.886:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 681.877198][ T30] audit: type=1326 audit(1762662660.886:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 681.915078][ T30] audit: type=1326 audit(1762662660.886:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 682.017757][ T30] audit: type=1326 audit(1762662660.886:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 682.074840][ T8948] Bluetooth: hci8: Frame reassembly failed (-84) [ 682.102115][ T30] audit: type=1326 audit(1762662660.886:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 682.143442][ T30] audit: type=1326 audit(1762662660.886:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 682.167397][ T30] audit: type=1326 audit(1762662660.886:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.6.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fad58f6c9 code=0x7ffc0000 [ 682.695863][ T5818] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 683.310625][ T5826] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 683.981073][T15673] sp0: Synchronizing with TNC [ 684.110476][T10375] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 684.856263][T15679] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1925'. [ 685.059545][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 685.059562][ T30] audit: type=1326 audit(1762662665.336:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.565511][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.577309][ T30] audit: type=1326 audit(1762662665.336:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.601571][ T30] audit: type=1326 audit(1762662665.336:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.627637][ T30] audit: type=1326 audit(1762662665.336:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.651297][ T30] audit: type=1326 audit(1762662665.336:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.805822][ T30] audit: type=1326 audit(1762662665.336:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.839334][ T30] audit: type=1326 audit(1762662665.336:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 685.984347][ T30] audit: type=1326 audit(1762662665.336:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 686.008062][ T30] audit: type=1326 audit(1762662665.336:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 686.492107][ T30] audit: type=1326 audit(1762662665.336:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15680 comm="syz.2.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 686.563851][T15679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.579616][T15679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.595010][T15679] bond0 (unregistering): Released all slaves [ 686.911326][T15706] sp0: Synchronizing with TNC [ 688.182011][ T8948] Bluetooth: hci6: Frame reassembly failed (-84) [ 688.432265][T15723] sp0: Synchronizing with TNC [ 689.381320][T15734] sp0: Synchronizing with TNC [ 689.529472][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1938'. [ 690.299353][T15660] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 690.305750][T10375] Bluetooth: hci6: command 0x1003 tx timeout [ 691.862675][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 330 seconds [ 691.877263][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 330 seconds [ 691.888489][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 330 seconds [ 691.903794][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 330 seconds [ 692.583237][T15764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1943'. [ 692.613823][T15761] sp0: Synchronizing with TNC [ 695.706073][T15759] syzkaller0: entered promiscuous mode [ 696.016650][T15774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1948'. [ 698.958316][T15799] Falling back ldisc for ptm1. [ 701.446992][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 701.447007][ T30] audit: type=1326 audit(1762662681.747:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.510377][ T30] audit: type=1326 audit(1762662681.787:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.577240][ T8208] Bluetooth: hci6: Frame reassembly failed (-84) [ 701.620762][ T30] audit: type=1326 audit(1762662681.787:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.649413][ T30] audit: type=1326 audit(1762662681.787:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.682474][ T30] audit: type=1326 audit(1762662681.787:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.715935][ T30] audit: type=1326 audit(1762662681.787:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.739507][ T30] audit: type=1326 audit(1762662681.787:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.767958][ T30] audit: type=1326 audit(1762662681.787:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.805841][ T30] audit: type=1326 audit(1762662681.787:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 701.882737][ T30] audit: type=1326 audit(1762662681.797:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.5.1955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f209f98f6c9 code=0x7ffc0000 [ 703.739155][T15660] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 704.572768][T15844] sp0: Synchronizing with TNC [ 706.821224][T15856] sp0: Synchronizing with TNC [ 707.094150][T15860] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1967'. [ 707.201926][T15859] sp1: Synchronizing with TNC [ 707.851220][T15863] syzkaller0: entered promiscuous mode [ 708.080598][T15871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1968'. [ 710.273514][ T6127] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 570 seconds [ 710.285310][ T6127] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 570 seconds [ 710.296401][ T6127] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 570 seconds [ 710.307951][ T6127] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 570 seconds [ 711.869638][T15889] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1973'. [ 712.592715][T15905] sp0: Synchronizing with TNC [ 712.745441][T15911] sp1: Synchronizing with TNC [ 717.141856][T15953] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1986'. [ 717.145242][T15952] syzkaller0: entered promiscuous mode [ 717.160367][ T5943] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 717.440988][ T5943] usb 6-1: config 255 has too many interfaces: 249, using maximum allowed: 32 [ 717.450034][ T5943] usb 6-1: config 255 has an invalid descriptor of length 132, skipping remainder of the config [ 717.592290][ T5943] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 249 [ 717.608354][ T5943] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 717.617472][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.625918][ T5943] usb 6-1: Product: syz [ 717.630131][ T5943] usb 6-1: Manufacturer: syz [ 717.697170][ T5943] usb 6-1: SerialNumber: syz [ 719.707954][ T5943] usb 6-1: USB disconnect, device number 17 [ 720.514241][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 722.430929][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 360 seconds [ 722.442938][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 360 seconds [ 722.454192][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 360 seconds [ 722.465207][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 360 seconds [ 723.199417][T15978] tipc: New replicast peer: 255.255.255.255 [ 723.205859][T15978] tipc: Enabled bearer , priority 10 [ 723.534344][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 723.534359][ T30] audit: type=1326 audit(1762662703.827:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 723.716719][ T30] audit: type=1326 audit(1762662703.827:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 723.803786][ T3452] Bluetooth: hci6: Frame reassembly failed (-84) [ 724.241582][ T30] audit: type=1326 audit(1762662703.827:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 724.391596][ T6314] tipc: Node number set to 1521459119 [ 724.435174][ T30] audit: type=1326 audit(1762662703.827:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.012973][ T30] audit: type=1326 audit(1762662703.827:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.037065][ T30] audit: type=1326 audit(1762662703.827:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.061136][ T30] audit: type=1326 audit(1762662703.827:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.085094][ T30] audit: type=1326 audit(1762662703.827:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.177798][ T30] audit: type=1326 audit(1762662703.827:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.209818][ T30] audit: type=1326 audit(1762662703.827:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.3.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 725.895608][T15660] Bluetooth: hci6: command 0x1003 tx timeout [ 725.954250][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 726.357179][ T8203] Bluetooth: hci6: Frame reassembly failed (-84) [ 726.495271][ T8203] Bluetooth: hci7: Frame reassembly failed (-84) [ 727.921586][T16052] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2006'. [ 728.096030][T16051] syzkaller0: entered promiscuous mode [ 728.192042][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 728.431496][ T5826] Bluetooth: hci6: command 0x1003 tx timeout [ 728.440619][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 728.471728][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2004'. [ 728.510641][T15660] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 728.837228][T16057] Falling back ldisc for ptm2. [ 735.383099][T16118] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2019'. [ 735.412500][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 735.412516][ T30] audit: type=1326 audit(1762662715.717:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 735.484444][ T3452] Bluetooth: hci6: Frame reassembly failed (-84) [ 735.508202][ T30] audit: type=1326 audit(1762662715.717:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 735.688065][ T30] audit: type=1326 audit(1762662715.747:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 735.715939][T16127] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2017'. [ 735.728525][ T30] audit: type=1326 audit(1762662715.747:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 735.861528][ T30] audit: type=1326 audit(1762662715.747:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 735.957510][ T30] audit: type=1326 audit(1762662715.747:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 736.003861][T16124] syzkaller0: entered promiscuous mode [ 736.005787][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.606211][ T30] audit: type=1326 audit(1762662715.747:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 737.032958][ T30] audit: type=1326 audit(1762662715.747:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 737.255962][ T30] audit: type=1326 audit(1762662715.747:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 737.297195][ T30] audit: type=1326 audit(1762662715.747:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.2.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa8c558f6c9 code=0x7ffc0000 [ 737.561497][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 737.561778][T15660] Bluetooth: hci6: command 0x1003 tx timeout [ 738.901647][T16156] overlayfs: missing 'lowerdir' [ 740.397897][T15876] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 600 seconds [ 740.408953][T15876] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 600 seconds [ 740.420067][T15876] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 600 seconds [ 740.431162][T15876] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 600 seconds [ 743.973046][T16189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2031'. [ 744.073520][T16194] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2034'. [ 744.339576][T16188] syzkaller0: entered promiscuous mode [ 745.664973][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 745.664983][ T30] audit: type=1326 audit(1762662725.877:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.717820][ T8948] Bluetooth: hci6: Frame reassembly failed (-84) [ 745.726628][ T30] audit: type=1326 audit(1762662725.877:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.755920][ T30] audit: type=1326 audit(1762662725.887:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.830383][ T30] audit: type=1326 audit(1762662725.887:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.854295][ T30] audit: type=1326 audit(1762662725.887:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.880510][ T30] audit: type=1326 audit(1762662725.887:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 745.950335][ T30] audit: type=1326 audit(1762662725.887:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 746.071480][ T30] audit: type=1326 audit(1762662725.887:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 746.161388][ T30] audit: type=1326 audit(1762662725.887:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 746.226571][ T30] audit: type=1326 audit(1762662725.887:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff771b8f6c9 code=0x7ffc0000 [ 747.003156][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.714733][T10375] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 748.876321][T16236] Falling back ldisc for ptm0. [ 750.261687][T16194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.272168][T16194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.283503][T16194] bond0 (unregistering): Released all slaves [ 752.540582][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 390 seconds [ 752.551315][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 390 seconds [ 752.562398][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 390 seconds [ 752.573671][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 390 seconds [ 753.312409][T16264] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2045'. [ 753.976840][T16302] overlayfs: missing 'lowerdir' [ 757.012340][T16328] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2054'. [ 757.076622][T16325] syzkaller0: entered promiscuous mode [ 757.304899][T16327] sp0: Synchronizing with TNC [ 758.815727][T16359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2060'. [ 759.070331][T10375] Bluetooth: hci5: command 0x0406 tx timeout [ 761.967667][T16376] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 763.902311][T16388] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 765.021138][T16399] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2067'. [ 765.063955][T16403] syzkaller0: entered promiscuous mode [ 765.624111][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 765.624125][ T30] audit: type=1400 audit(1762662745.927:3244): avc: denied { watch watch_reads } for pid=16409 comm="syz.5.2071" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 766.858096][T16423] Falling back ldisc for ptm0. [ 767.090660][T16428] Falling back ldisc for ptm2. [ 767.163398][T16430] Falling back ldisc for ptm1. [ 768.023690][T16450] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2075'. [ 768.240498][T16439] Falling back ldisc for ptm0. [ 768.361817][T16444] Falling back ldisc for ptm1. [ 770.446819][T15876] block nbd0: Possible stuck request ffff8880261f7000: control (read@0,1024B). Runtime 630 seconds [ 770.457566][T15876] block nbd0: Possible stuck request ffff8880261f71c0: control (read@1024,1024B). Runtime 630 seconds [ 770.468546][T15876] block nbd0: Possible stuck request ffff8880261f7380: control (read@2048,1024B). Runtime 630 seconds [ 770.625335][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2081'. [ 770.675930][T15876] block nbd0: Possible stuck request ffff8880261f7540: control (read@3072,1024B). Runtime 630 seconds [ 771.024746][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2081'. [ 771.125120][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2081'. [ 773.028806][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 773.153043][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 773.478106][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 774.308266][ T31] INFO: task syz.0.1776:14902 blocked for more than 143 seconds. [ 774.320505][ T31] Not tainted syzkaller #0 [ 774.334375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 774.365183][ T31] task:syz.0.1776 state:D stack:25384 pid:14902 tgid:14892 ppid:5813 task_flags:0x400140 flags:0x00080003 [ 774.377615][ T31] Call Trace: [ 774.377884][ T30] audit: type=1400 audit(1762662754.667:3245): avc: denied { write } for pid=5800 comm="syz-executor" path="pipe:[4881]" dev="pipefs" ino=4881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 774.415355][ T31] [ 774.418456][ T31] __schedule+0x1190/0x5de0 [ 774.427720][ T31] ? __pfx___schedule+0x10/0x10 [ 774.433260][ T31] ? find_held_lock+0x2b/0x80 [ 774.438476][ T31] ? schedule+0x2d7/0x3a0 [ 774.443146][ T31] schedule+0xe7/0x3a0 [ 774.447772][ T31] io_schedule+0xbf/0x130 [ 774.453092][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 774.459019][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 774.464796][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 774.810305][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 774.816386][ T31] ? __pfx___might_resched+0x10/0x10 [ 774.837456][ T31] ? compaction_free+0x148/0x3c0 [ 774.860521][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 774.865925][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 774.910331][ T31] ? __pfx_compaction_free+0x10/0x10 [ 774.937635][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 774.946426][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 774.951594][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 774.956945][ T31] ? __pfx_compaction_free+0x10/0x10 [ 774.962310][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 774.967864][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 774.973529][ T31] migrate_pages+0x1b5f/0x23a0 [ 774.978318][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 774.983769][ T31] ? __pfx_compaction_free+0x10/0x10 [ 774.989065][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 774.994266][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 775.002489][ T31] ? pfn_to_online_page+0x1de/0x560 [ 775.007722][ T31] compact_zone+0x2018/0x4750 [ 775.012488][ T31] ? __free_object+0x286/0x410 [ 775.017356][ T31] ? __pfx_debug_object_free+0x10/0x10 [ 775.022894][ T31] ? __pfx_compact_zone+0x10/0x10 [ 775.027926][ T31] ? __flush_work+0x938/0xcc0 [ 775.032668][ T31] ? __flush_work+0x4d0/0xcc0 [ 775.037356][ T31] compact_node+0x1a3/0x2c0 [ 775.041980][ T31] ? __pfx_compact_node+0x10/0x10 [ 775.047213][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 775.052473][ T31] sysctl_compaction_handler+0x141/0x210 [ 775.058114][ T31] proc_sys_call_handler+0x445/0x570 [ 775.063471][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 775.069284][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 775.074856][ T31] iter_file_splice_write+0xa24/0x12e0 [ 775.080536][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 775.086447][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 775.091918][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 775.097812][ T31] direct_splice_actor+0x192/0x6c0 [ 775.102985][ T31] splice_direct_to_actor+0x345/0xa30 [ 775.108357][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 775.114375][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 775.120390][ T31] do_splice_direct+0x174/0x240 [ 775.125249][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 775.130661][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 775.136568][ T31] ? rw_verify_area+0xcf/0x6c0 [ 775.141390][ T31] do_sendfile+0xb06/0xe50 [ 775.145905][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 775.151513][ T31] __x64_sys_sendfile64+0x154/0x220 [ 775.156699][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 775.162520][ T31] do_syscall_64+0xcd/0xfa0 [ 775.167028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.173031][ T31] RIP: 0033:0x7fdc4bf8f6c9 [ 775.177441][ T31] RSP: 002b:00007fdc4cd73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 775.185979][ T31] RAX: ffffffffffffffda RBX: 00007fdc4c1e6270 RCX: 00007fdc4bf8f6c9 [ 775.193988][ T31] RDX: 00002000000000c0 RSI: 000000000000000b RDI: 000000000000000c [ 775.202116][ T31] RBP: 00007fdc4c011f91 R08: 0000000000000000 R09: 0000000000000000 [ 775.210087][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 775.218124][ T31] R13: 00007fdc4c1e6308 R14: 00007fdc4c1e6270 R15: 00007ffdbf6bc088 [ 775.226281][ T31] [ 775.290309][ T31] [ 775.290309][ T31] Showing all locks held in the system: [ 775.298027][ T31] 1 lock held by khungtaskd/31: [ 775.360376][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 775.412165][ T31] 2 locks held by getty/5578: [ 775.416863][ T31] #0: ffff888035bb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 775.427018][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 775.442060][ T31] 1 lock held by udevd/5811: [ 775.447397][ T31] #0: ffff888143311358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 775.464725][ T31] 3 locks held by kworker/1:4/5888: [ 775.469919][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 775.480778][ T31] #1: ffffc90005297d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 775.492280][ T31] #2: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 775.520523][ T31] 1 lock held by udevd/9328: [ 775.525128][ T31] #0: ffff888025cdc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 775.534764][ T31] 1 lock held by syz.0.1776/14902: [ 775.539870][ T31] #0: ffff88807bc10420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 775.570278][ T31] 1 lock held by syz.2.2086/16503: [ 775.575409][ T31] #0: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 775.602237][ T31] 1 lock held by syz.4.2088/16508: [ 775.607437][ T31] [ 775.609757][ T31] ============================================= [ 775.609757][ T31] [ 775.680305][ T31] NMI backtrace for cpu 1 [ 775.680322][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 775.680342][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 775.680350][ T31] Call Trace: [ 775.680356][ T31] [ 775.680362][ T31] dump_stack_lvl+0x116/0x1f0 [ 775.680391][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 775.680409][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 775.680434][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 775.680459][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 775.680480][ T31] watchdog+0xf3f/0x1170 [ 775.680504][ T31] ? rcu_is_watching+0x12/0xc0 [ 775.680524][ T31] ? __pfx_watchdog+0x10/0x10 [ 775.680542][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 775.680568][ T31] ? __kthread_parkme+0x19e/0x250 [ 775.680593][ T31] ? __pfx_watchdog+0x10/0x10 [ 775.680613][ T31] kthread+0x3c5/0x780 [ 775.680634][ T31] ? __pfx_kthread+0x10/0x10 [ 775.680652][ T31] ? rcu_is_watching+0x12/0xc0 [ 775.680672][ T31] ? __pfx_kthread+0x10/0x10 [ 775.680689][ T31] ret_from_fork+0x675/0x7d0 [ 775.680703][ T31] ? __pfx_kthread+0x10/0x10 [ 775.680718][ T31] ret_from_fork_asm+0x1a/0x30 [ 775.680752][ T31] [ 775.680758][ T31] Sending NMI from CPU 1 to CPUs 0: [ 775.808857][ C0] NMI backtrace for cpu 0 [ 775.808872][ C0] CPU: 0 UID: 0 PID: 16508 Comm: syz.4.2088 Not tainted syzkaller #0 PREEMPT(full) [ 775.808893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 775.808900][ C0] RIP: 0010:pvclock_clocksource_read_nowd+0x11/0x100 [ 775.808927][ C0] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 53 48 89 fb 48 83 ec 10 8b 17 <83> e2 fe 41 89 d4 0f 01 f9 66 90 48 c1 e2 20 8b 6b 18 48 09 c2 48 [ 775.808939][ C0] RSP: 0018:ffffc900042ef050 EFLAGS: 00000286 [ 775.808951][ C0] RAX: 0000000000000000 RBX: ffffffff93a7b000 RCX: ffffffff8217a442 [ 775.808960][ C0] RDX: 000000000000000a RSI: ffffffff822fa57b RDI: ffffffff93a7b000 [ 775.808968][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff94000247c06 [ 775.808976][ C0] R10: ffffea000123e037 R11: 0000000000000001 R12: ffffea000123e000 [ 775.808984][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 775.808993][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 775.809007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 775.809016][ C0] CR2: 00007f9d9dbd3f98 CR3: 00000000332fd000 CR4: 00000000003526f0 [ 775.809024][ C0] Call Trace: [ 775.809028][ C0] [ 775.809033][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 775.809054][ C0] kvm_sched_clock_read+0x11/0x20 [ 775.809071][ C0] local_clock_noinstr+0xd/0xe0 [ 775.809089][ C0] local_clock+0x10/0x30 [ 775.809101][ C0] __reset_page_owner+0x20/0x1a0 [ 775.809115][ C0] free_unref_folios+0xa31/0x1610 [ 775.809136][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 775.809155][ C0] folios_put_refs+0x4be/0x750 [ 775.809170][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 775.809184][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 775.809199][ C0] shmem_undo_range+0x58f/0x1150 [ 775.809222][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 775.809264][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 775.809283][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 775.809302][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 775.809321][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 775.809341][ C0] ? find_held_lock+0x2b/0x80 [ 775.809356][ C0] ? evict+0x3a2/0x920 [ 775.809373][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 775.809391][ C0] evict+0x3e6/0x920 [ 775.809407][ C0] ? __pfx_evict+0x10/0x10 [ 775.809424][ C0] ? iput.part.0+0x6a1/0xb00 [ 775.809442][ C0] iput.part.0+0x6a9/0xb00 [ 775.809457][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 775.809477][ C0] iput+0x35/0x40 [ 775.809491][ C0] dentry_unlink_inode+0x29c/0x480 [ 775.809507][ C0] __dentry_kill+0x1d0/0x600 [ 775.809521][ C0] ? shrink_dentry_list+0x11a/0x5d0 [ 775.809538][ C0] shrink_dentry_list+0x140/0x5d0 [ 775.809556][ C0] ? shrink_dcache_parent+0x22/0x530 [ 775.809573][ C0] shrink_dcache_parent+0xe1/0x530 [ 775.809590][ C0] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 775.809607][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 775.809622][ C0] ? d_walk+0x44c/0xa60 [ 775.809640][ C0] shrink_dcache_for_umount+0xa5/0x3e0 [ 775.809659][ C0] generic_shutdown_super+0x6c/0x390 [ 775.809677][ C0] kill_litter_super+0x70/0xa0 [ 775.809694][ C0] deactivate_locked_super+0xc1/0x1a0 [ 775.809713][ C0] deactivate_super+0xde/0x100 [ 775.809731][ C0] cleanup_mnt+0x225/0x450 [ 775.809751][ C0] task_work_run+0x150/0x240 [ 775.809765][ C0] ? __pfx_task_work_run+0x10/0x10 [ 775.809782][ C0] do_exit+0x86f/0x2bf0 [ 775.809800][ C0] ? ___sys_sendmsg+0x141/0x1d0 [ 775.809819][ C0] ? __pfx_do_exit+0x10/0x10 [ 775.809836][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 775.809849][ C0] ? find_held_lock+0x2b/0x80 [ 775.809866][ C0] do_group_exit+0xd3/0x2a0 [ 775.809889][ C0] get_signal+0x2671/0x26d0 [ 775.809909][ C0] ? __pfx_get_signal+0x10/0x10 [ 775.809927][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 775.809943][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 775.809965][ C0] exit_to_user_mode_loop+0x85/0x130 [ 775.809978][ C0] do_syscall_64+0x426/0xfa0 [ 775.809991][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.810004][ C0] RIP: 0033:0x7f9d9cd8f6c9 [ 775.810014][ C0] Code: Unable to access opcode bytes at 0x7f9d9cd8f69f. [ 775.810020][ C0] RSP: 002b:00007f9d9dbd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.810032][ C0] RAX: 000000000000006c RBX: 00007f9d9cfe6090 RCX: 00007f9d9cd8f6c9 [ 775.810041][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 775.810049][ C0] RBP: 00007f9d9ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 775.810057][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.810064][ C0] R13: 00007f9d9cfe6128 R14: 00007f9d9cfe6090 R15: 00007ffc33a0a0e8 [ 775.810079][ C0] [ 776.735338][ T8208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.905649][ T8208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.975637][ T8208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.032769][ T8208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.519266][ T8208] bond1 (unregistering): Released all slaves [ 777.575406][ T8208] tipc: Disabling bearer [ 777.592861][ T8208] tipc: Disabling bearer [ 777.598663][ T8208] tipc: Left network mode [ 777.768852][ T8208] hsr_slave_0: left promiscuous mode [ 777.774927][ T8208] hsr_slave_1: left promiscuous mode [ 777.780889][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.788822][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.800685][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.808065][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.821334][ T8208] veth1_macvtap: left promiscuous mode [ 777.827295][ T8208] veth0_macvtap: left promiscuous mode [ 777.833724][ T8208] veth1_vlan: left promiscuous mode [ 777.975299][ T8208] pim6reg (unregistering): left allmulticast mode [ 778.198222][ T8208] team0 (unregistering): Port device team_slave_1 removed [ 778.226938][ T8208] team0 (unregistering): Port device team_slave_0 removed [ 778.738492][ T8208] IPVS: stop unused estimator thread 0... [ 779.124161][ T8208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 779.192338][ T8208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 779.248190][ T8208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 779.301806][ T8208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 779.469804][ T8208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.548338][ T8208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.627830][ T8208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.690033][ T8208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.842102][ T8208] batman_adv: batadv0: Interface deactivated: gretap2 [ 779.965482][ T8208] dvmrp8 (unregistering): left allmulticast mode [ 780.068397][ T8208] batman_adv: batadv0: Removing interface: gretap2 [ 780.296451][ T8208] : left promiscuous mode [ 780.387959][ T8208] tipc: Disabling bearer [ 780.395697][ T8208] tipc: Left network mode [ 780.408826][ T8208] tipc: Left network mode [ 780.422329][ T8208] tipc: Disabling bearer [ 780.438710][ T8208] tipc: Left network mode [ 780.971500][ T8208] hsr_slave_0: left promiscuous mode [ 780.977601][ T8208] hsr_slave_1: left promiscuous mode [ 780.983893][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.997318][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.008537][ T8208] hsr_slave_0: left promiscuous mode [ 781.017210][ T8208] hsr_slave_1: left promiscuous mode [ 781.023884][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.033693][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.045638][ T8208] hsr_slave_0: left promiscuous mode [ 781.052055][ T8208] hsr_slave_1: left promiscuous mode [ 781.057946][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.065532][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.075853][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.083286][ T8208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.115406][ T8208] veth1_macvtap: left promiscuous mode [ 781.121044][ T8208] veth0_macvtap: left promiscuous mode [ 781.126655][ T8208] veth1_vlan: left promiscuous mode [ 781.131999][ T8208] veth0_vlan: left promiscuous mode [ 781.493729][ T8208] team0 (unregistering): Port device team_slave_1 removed [ 781.524656][ T8208] team0 (unregistering): Port device team_slave_0 removed [ 781.804120][ T8208] team0 (unregistering): Port device batadv1 removed [ 782.028255][ T8208] team0 (unregistering): Port device team_slave_1 removed [ 782.058831][ T8208] team0 (unregistering): Port device team_slave_0 removed [ 782.558179][ T8208] team0 (unregistering): Port device team_slave_1 removed [ 782.590798][ T8208] team0 (unregistering): Port device team_slave_0 removed [ 782.609168][ T7572] block nbd1: Possible stuck request ffff88802629e000: control (read@0,1024B). Runtime 420 seconds [ 782.621616][ T7572] block nbd1: Possible stuck request ffff88802629e1c0: control (read@1024,1024B). Runtime 420 seconds [ 782.632772][ T7572] block nbd1: Possible stuck request ffff88802629e380: control (read@2048,1024B). Runtime 420 seconds [ 782.643769][ T7572] block nbd1: Possible stuck request ffff88802629e540: control (read@3072,1024B). Runtime 420 seconds [ 783.534287][ T8208] IPVS: stop unused estimator thread 0...