last executing test programs: 4.973496861s ago: executing program 2 (id=5479): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000810) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040091}, 0x40004) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.56373031s ago: executing program 4 (id=5487): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setlease(r0, 0x400, 0x2) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getpeername$qrtr(r5, &(0x7f00000001c0), &(0x7f0000000340)=0xc) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC, @ANYBLOB="9f61aed6b3d861905d235f2bf1a701d56c4acc149e11aaf04b37ba36764e32503f3ebdfd7e95b72b99adfbf83df604000000cbf1f24c12811de8bd79f9bd4d7c1e020eb94dfd0e3d885ee99e473fefc94fce35c17543056a5ee22936ca94ed6578770b05c17b8b889fc177bef220c00061f888d83604d9a4b4753c"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000440)={'filter\x00', 0x0, [0x3, 0x2, 0x5, 0x319c0000, 0x2c7]}, &(0x7f00000004c0)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 4.032661173s ago: executing program 2 (id=5488): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 3.996608537s ago: executing program 2 (id=5489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES32], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fd228e32de8135f59ecb65ffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3.908869745s ago: executing program 2 (id=5490): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 3.698760176s ago: executing program 4 (id=5493): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x40, 0xfffff038}, {0x30, 0x0, 0x0, 0xffffb024}, {0x6, 0x0, 0x4}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) getrusage(0x0, &(0x7f0000000900)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 3.697826476s ago: executing program 0 (id=5494): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1", 0x27}], 0x1}, 0x4) 3.632362702s ago: executing program 4 (id=5498): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x1, 0x7999}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x2e8800, 0x0}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 3.545230941s ago: executing program 1 (id=5500): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x7) utime(&(0x7f0000000000)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000020000000000000000e2dd529808e6f99c8b00"/37], 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 3.486739417s ago: executing program 0 (id=5501): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1b, 0xffffffffffffffff, &(0x7f0000000100)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x4, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x1b0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x4e, 0x0) 3.423474173s ago: executing program 1 (id=5503): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5827c36c8bb04015, 0x2004, @fd_index=0x4, 0x9b, 0x9, 0x3, 0x5, 0x1, {0x1, r3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18) r7 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0xfd, 0x100, @val=0x80}, 'N'}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x80, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x1, 0x8, 0x7284, 0x24f80000}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xfffffffffffffe83, &(0x7f0000000300)}, 0x10) syz_usb_disconnect(0xffffffffffffffff) lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r9, 0x24, 0x0) 2.629341611s ago: executing program 1 (id=5504): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 2.624014891s ago: executing program 0 (id=5505): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="978207465f6143bd49dc3befdb498e45437f88c33155f98b799bd9c9b45766b71766d9fb935eb96fe71fa680f8f487", 0x2f}, {&(0x7f00000002c0)="ca9993447a14af3750d2b34d876d997b2098c895545a5aeb06410f03c5caa943a6ec73ecebdcff18ff217d5e1dd718f38e833e4530fe1e5c3f7ca0deb09b3dbb2cb389e599faccb3e96ee9ecd906994b992394670da97b1df969408de484264d6c04fb8b11f108d09fc00a262533ddaacc8e40f8008a", 0x76}, {&(0x7f0000000140)}, {&(0x7f0000000340)="8a8fbbdb94e29254888d4a00b76905ffbbb385329df59f3aaada888d3509546fb236721d3aa0fb59d121d5102b99044665da6435daa83195df43201952039352b2feb27f6de67c2eb8ee3294a6684794164e737bbbcfff189161d75836a053fc637db789fc40b0ae330def50dbd1f4eb4343bdcaa42496af", 0x78}, {&(0x7f00000004c0)="4e3fb6c497b2a03b7cf989b6fe46b0d015955329641b72f719902f4c9aa8787fb54aadbbb79285e31a2d7adb8f762712aeb1bfc8d50b9a3a8c86ada89b7d0e3c0a6560924c830e58b57c9b6236a593d9643441e2a1ec637f681f698048f3471280426e62b787f4ecdd6fece4bad9cb8f395c2c0061a11f29b2c1cd3268241d3f4b61ab4faf4000d92fa7cecf51f4aac2113222d01c352a97d9f910e8788875d32de5709ad9da94755eac1cfb300a8b4f290edaaf75eded56a77f3f5e9bcc954b6ed7f6d8f39126140964f478a41bbee32c17b9273324d22579ea25", 0xdb}], 0x5}}], 0x1, 0x4008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x1}, @IFLA_IPVLAN_FLAGS={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x318, 0x13, 0x400, 0x70bd27, 0x25dfdbfe, {0x25, 0xc3, 0x9, 0x6, {0x4e24, 0x4e20, [0x7, 0x3, 0x4, 0xffffffff], [0x9, 0x100, 0x800, 0xf6a], r2, [0xad9, 0x80000000]}, 0x73e, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xea, 0x1, "0bcd00dfe178e95825dfba67389dda5ec89615eef475df47570ec2fbd52e68407c86b64a22bbee20a056d289f154821be08faba1956b3a76868a32a740f755809dea41c2810cf2d5ec04042f31063215b6b5c680b3dcb28fe6cce48a3fd92f87d524ba27a35dea04aac2291b56f87f48de3fce492f0b8a0b2225e3a4004081219b135c8429782e9202700055333ac884fff4efde2617fda57709eb5a2f4f110c33432530faa3bc20fcff6edb352eec86501641922b7e04eecc97028d28705c720a8a20a38da80dabb13ba564046fda15f6f58ddf0a722978ce029e199ab6eb53371e592790b9"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "f15d57508f2c9ccdda206b74e51febea3be38cd64dbcf66f0e6ea1843f870dca2daffcd729bd1d137dc64bf477d3214bc5cd3a82f6c26866f02ed3dea92f672938d0250b09"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "825bf6ac026c6e7ffd4e5cdd6b8bde00fe1454237c576b8938cf2e2aece1a973330ace031898e4"}, @INET_DIAG_REQ_BYTECODE={0xca, 0x1, "ce33830dce29b45c9211d0ee5da73006ec98480c3cd6716eedc16d102f8402d4b7defec405ade0de8df551c603c97bfecdc0e6fefa412d327f99a5518ed99b9502295d2b6908000f4a69ca6baaabd02240f8e700b400ac6c097aabcb05ca9cb4840e8a93987656eee5b434a5c0dd8b2e562270b3d69d7977d93a939289584123a5e85df3d08625cb04f87e79d78bdcd4f766af676f8b1a015767bfc0004f738be0f55fdf860f8b99534a0f62cf7e83b757524b0ad6b888baacb448dd876fcddd5d3a1b7f85ad"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "af440ce0ba13c42322c37ce347e9fc4179e0b83aabd92f7b0477d73cae0d03eb37c5e2679d331ef85395f20ebd1aec962ba41a2ff111da79651f84b9df1998c9afb7bec3ab59735c3d55ffd917b9b42dd96151f32f08ee418b85b4b03d37f0789b3ba728b85bde3f452748f33b111fcaf495cbebff23f320c77e4021215dc0bc4f3451a5805c59ac3d763c43347a646e27cba8cf901c2d15"}]}, 0x318}}, 0x20060801) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYRESDEC=r1, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000001bfa200000000000007020000f8ffffffb703000008000000b7009500000100"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) 2.598826304s ago: executing program 3 (id=5506): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r3) 2.506086603s ago: executing program 1 (id=5507): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) 2.425246701s ago: executing program 1 (id=5508): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000810) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040091}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.862122286s ago: executing program 2 (id=5509): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0xb8f7, 0x8, 0x8000, 0x400250}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f00000002c0)=0x5, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0xffffffffffffff3f, &(0x7f0000000140)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xffc9) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "85"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24040800}, 0x40044) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 1.766794656s ago: executing program 0 (id=5510): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x92a, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x4) 1.603448862s ago: executing program 0 (id=5511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r0}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x40, 0x20, 0x9, 0x6, {{0x21, 0x4, 0x1, 0x4, 0x84, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0xf, 0x6b, [@private=0xa010101, @private=0xa010101, @broadcast]}, @timestamp={0x44, 0x18, 0xe3, 0x0, 0x0, [0x8, 0x96b, 0xfff, 0xefda, 0x8]}, @rr={0x7, 0x27, 0xaf, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @ssrr={0x89, 0x17, 0x16, [@local, @private=0xa010101, @loopback, @multicast2, @rand_addr=0x64010102]}, @generic={0xd, 0xa, "fc3407d0de05a483"}, @end]}}}}}) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e24, 0xe4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000540)={@private0, r3}, 0x14) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000f7ffffffffffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000800"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x433f, &(0x7f0000000300)={0x0, 0x543c, 0x40, 0x3, 0x310}, &(0x7f00000001c0), &(0x7f0000000200)) 1.582379514s ago: executing program 1 (id=5512): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 1.551866797s ago: executing program 0 (id=5513): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x1, 0x7999}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x2e8800, 0x0}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2000000) 1.533839169s ago: executing program 4 (id=5514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) unshare(0x60000600) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x644b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80a03, 0x7, 0x43a1bd76, 0x0, 0x400009, 0xfffffff9, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575", 0xe}, {&(0x7f00000001c0)="b700001806005abeef", 0x9}], 0x2) 1.133439738s ago: executing program 3 (id=5515): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x5827c36c8bb04015, 0x2004, @fd_index=0x4, 0x9b, 0x9, 0x3, 0x5, 0x1, {0x1, r3}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18) r7 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r7, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2000) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000280)) socket$packet(0x11, 0xa, 0x300) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0xfd, 0x100, @val=0x80}, 'N'}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7f, 0x80, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, 0x1, 0x8, 0x7284, 0x24f80000}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xfffffffffffffe83, &(0x7f0000000300)}, 0x10) syz_usb_disconnect(0xffffffffffffffff) lsm_set_self_attr(0x64, 0x0, 0x0, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r9, 0x24, 0x0) 969.362684ms ago: executing program 2 (id=5516): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="050000000064e0e4328328b16000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) 305.313579ms ago: executing program 3 (id=5517): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 276.772882ms ago: executing program 3 (id=5518): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) 238.919256ms ago: executing program 3 (id=5519): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 237.421386ms ago: executing program 3 (id=5520): fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x28) 15.865978ms ago: executing program 4 (id=5521): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x6, @a_listen={0x7, 0x3, 0x3, 0x80, 0x2, 0xf9, 0x4, "", 0x53, 0x5, 0x8, 0x1a, 0x2a, "92696d3d795e3837dce6b0a4c17f984a2a3c7abce445cca326de62ea07f9484556896f144e89bf370c41"}}, 0x39) 0s ago: executing program 4 (id=5522): sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, 0x0, 0x20000810) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040091}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): =0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 281.223199][ T29] audit: type=1326 audit(1761582370.003:42114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14628 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 281.870812][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 281.879880][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 281.894048][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3985'. [ 282.109400][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 282.213645][T14661] syzkaller0: entered promiscuous mode [ 282.219137][T14661] syzkaller0: entered allmulticast mode [ 282.269352][ T3615] Bluetooth: hci1: command 0x1003 tx timeout [ 282.281910][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 282.331883][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 282.359255][T14669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3992'. [ 282.383547][T14669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14669 comm=syz.4.3992 [ 282.409492][T14669] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3992'. [ 283.419662][T14703] syzkaller0: entered promiscuous mode [ 283.425141][T14703] syzkaller0: entered allmulticast mode [ 283.431697][T14705] syzkaller0: entered promiscuous mode [ 283.437228][T14705] syzkaller0: entered allmulticast mode [ 283.481515][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 283.490456][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 283.499435][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'. [ 283.622289][T14717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4008'. [ 283.631646][T14717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14717 comm=syz.0.4008 [ 284.349413][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 284.355417][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.518060][T14751] syzkaller0: entered promiscuous mode [ 284.523557][T14751] syzkaller0: entered allmulticast mode [ 286.134019][T14813] ipvlan0: entered promiscuous mode [ 286.650317][T14832] syzkaller0: entered promiscuous mode [ 286.655819][T14832] syzkaller0: entered allmulticast mode [ 286.890803][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 286.890878][ T29] audit: type=1400 audit(1761582375.863:42769): avc: denied { read write } for pid=11513 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.920541][ T29] audit: type=1400 audit(1761582375.863:42770): avc: denied { open } for pid=11513 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.073256][T14866] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.105938][ T29] audit: type=1326 audit(1761582376.073:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.127332][T14877] __nla_validate_parse: 9 callbacks suppressed [ 287.127345][T14877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4050'. [ 287.129566][ T29] audit: type=1326 audit(1761582376.073:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.168182][ T29] audit: type=1326 audit(1761582376.073:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.191790][ T29] audit: type=1326 audit(1761582376.073:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.215296][ T29] audit: type=1326 audit(1761582376.073:42775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.238937][ T29] audit: type=1326 audit(1761582376.073:42776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.238968][ T29] audit: type=1326 audit(1761582376.073:42777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.238990][ T29] audit: type=1326 audit(1761582376.073:42778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.2.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 287.347216][T14890] bridge: RTM_NEWNEIGH with invalid ether address [ 287.357653][T14891] syzkaller0: entered promiscuous mode [ 287.363146][T14891] syzkaller0: entered allmulticast mode [ 287.414290][T14901] ipvlan0: entered promiscuous mode [ 288.239277][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4065'. [ 288.272556][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4066'. [ 288.419149][T14964] syzkaller0: entered promiscuous mode [ 288.424790][T14964] syzkaller0: entered allmulticast mode [ 288.468362][T14967] ipvlan0: entered promiscuous mode [ 288.737017][T14991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14991 comm=syz.2.4077 [ 288.790866][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4078'. [ 288.850402][T14998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4080'. [ 288.859707][T14998] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.866928][T14998] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.885811][T14998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14998 comm=syz.2.4080 [ 288.898432][T14998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4080'. [ 289.053089][T15019] syzkaller0: entered promiscuous mode [ 289.058657][T15019] syzkaller0: entered allmulticast mode [ 289.106114][T15023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4086'. [ 289.158964][T15027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15027 comm=syz.1.4088 [ 289.188727][T15029] bridge: RTM_NEWNEIGH with invalid ether address [ 289.297685][T15038] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 289.430908][T15052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4099'. [ 289.463838][T15054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15054 comm=syz.1.4100 [ 289.488790][T15056] bridge: RTM_NEWNEIGH with invalid ether address [ 289.496953][T15048] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4096'. [ 289.589216][T15068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 289.694105][T15084] bridge: RTM_NEWNEIGH with invalid ether address [ 290.020095][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4115'. [ 290.104591][T15100] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.566227][ T3615] Bluetooth: hci0: sending frame failed (-49) [ 290.572512][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 290.598956][T15143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 290.776578][T15157] ipvlan0: entered promiscuous mode [ 291.625128][T15179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.654050][T15184] tipc: Enabled bearer , priority 0 [ 291.662158][T15184] tipc: Resetting bearer [ 291.669078][T15183] tipc: Disabling bearer [ 291.690531][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 291.909379][ T29] kauditd_printk_skb: 1330 callbacks suppressed [ 291.909394][ T29] audit: type=1326 audit(1761582380.893:44109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f750ce05e67 code=0x7ffc0000 [ 291.939498][ T29] audit: type=1326 audit(1761582380.903:44110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750cdab099 code=0x7ffc0000 [ 291.962480][ T29] audit: type=1326 audit(1761582380.903:44111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f750ce05e67 code=0x7ffc0000 [ 291.985452][ T29] audit: type=1326 audit(1761582380.903:44112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750cdab099 code=0x7ffc0000 [ 292.008371][ T29] audit: type=1326 audit(1761582380.903:44113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 292.031497][ T29] audit: type=1326 audit(1761582380.903:44114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 292.054551][ T29] audit: type=1326 audit(1761582380.913:44115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f750ce05e67 code=0x7ffc0000 [ 292.077490][ T29] audit: type=1326 audit(1761582380.913:44116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f750cdab099 code=0x7ffc0000 [ 292.100571][ T29] audit: type=1326 audit(1761582380.913:44117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 292.123642][ T29] audit: type=1326 audit(1761582380.923:44118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f750ce05e67 code=0x7ffc0000 [ 292.165476][T15212] ipvlan2: entered promiscuous mode [ 292.203401][T15216] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.259708][T15221] __nla_validate_parse: 6 callbacks suppressed [ 292.259722][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4158'. [ 292.274777][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4158'. [ 292.287332][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4158'. [ 292.826003][T15251] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.873791][T15258] syzkaller0: entered promiscuous mode [ 292.879279][T15258] syzkaller0: entered allmulticast mode [ 292.915189][T15259] ipvlan0: entered promiscuous mode [ 293.149798][T15278] ipvlan0: entered promiscuous mode [ 293.709440][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 293.715488][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 293.736711][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 293.745720][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 293.754848][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4179'. [ 293.885256][T15294] syzkaller0: entered promiscuous mode [ 293.890860][T15294] syzkaller0: entered allmulticast mode [ 294.044132][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 294.170819][T15318] ipvlan0: entered promiscuous mode [ 294.191189][T15321] ipvlan0: entered promiscuous mode [ 294.993814][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 294.996714][T15338] syzkaller0: entered promiscuous mode [ 295.005881][T15338] syzkaller0: entered allmulticast mode [ 295.170409][T15341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4198'. [ 295.223257][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 295.232231][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 295.241200][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4201'. [ 295.597321][T15372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 295.645030][T15375] ipvlan0: entered promiscuous mode [ 295.660184][T15377] bridge: RTM_NEWNEIGH with invalid ether address [ 295.745791][T15382] syzkaller0: entered promiscuous mode [ 295.751296][T15382] syzkaller0: entered allmulticast mode [ 296.129388][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.471005][T15424] syzkaller0: entered promiscuous mode [ 296.476489][T15424] syzkaller0: entered allmulticast mode [ 297.083718][ T7102] Bluetooth: hci1: command 0x1003 tx timeout [ 297.090077][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 297.280047][T15466] __nla_validate_parse: 6 callbacks suppressed [ 297.280061][T15466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4232'. [ 297.341773][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 297.341788][ T29] audit: type=1326 audit(1761582386.333:44659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 297.371576][ T29] audit: type=1326 audit(1761582386.333:44660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 297.396274][ T29] audit: type=1326 audit(1761582386.333:44661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.419838][ T29] audit: type=1326 audit(1761582386.333:44662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.443481][ T29] audit: type=1326 audit(1761582386.333:44663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.467077][ T29] audit: type=1326 audit(1761582386.343:44664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.490694][ T29] audit: type=1326 audit(1761582386.343:44665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.514239][ T29] audit: type=1326 audit(1761582386.343:44666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.537847][ T29] audit: type=1326 audit(1761582386.343:44667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.561464][ T29] audit: type=1326 audit(1761582386.353:44668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15465 comm="syz.2.4232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 297.731810][T15479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4236'. [ 297.764816][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 297.830896][T15494] bridge: RTM_NEWNEIGH with invalid ether address [ 298.029966][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 298.038901][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 298.048354][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 298.366517][T15513] syzkaller0: entered promiscuous mode [ 298.372042][T15513] syzkaller0: entered allmulticast mode [ 298.488895][T15521] syzkaller0: entered promiscuous mode [ 298.494524][T15521] syzkaller0: entered allmulticast mode [ 298.538876][T15525] bridge: RTM_NEWNEIGH with invalid ether address [ 298.686693][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 298.695853][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 298.705072][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4262'. [ 298.784070][T15548] syzkaller0: entered promiscuous mode [ 298.789637][T15548] syzkaller0: entered allmulticast mode [ 299.000573][T15557] syzkaller0: entered promiscuous mode [ 299.006094][T15557] syzkaller0: entered allmulticast mode [ 299.012146][T15559] bridge: RTM_NEWNEIGH with invalid ether address [ 299.602286][T15580] ipvlan2: entered promiscuous mode [ 299.624771][T15582] syzkaller0: entered promiscuous mode [ 299.630304][T15582] syzkaller0: entered allmulticast mode [ 299.671012][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'. [ 299.679952][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'. [ 299.791834][T15592] syzkaller0: entered promiscuous mode [ 299.792329][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 299.797325][T15592] syzkaller0: entered allmulticast mode [ 299.858547][T15596] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.249437][T15614] syzkaller0: entered promiscuous mode [ 300.254923][T15614] syzkaller0: entered allmulticast mode [ 300.333652][T15622] ipvlan0: entered promiscuous mode [ 300.441139][T15636] syzkaller0: entered promiscuous mode [ 300.446646][T15636] syzkaller0: entered allmulticast mode [ 300.494560][T15640] syzkaller0: entered promiscuous mode [ 300.500126][T15640] syzkaller0: entered allmulticast mode [ 300.518197][T15638] syzkaller0: entered promiscuous mode [ 300.523714][T15638] syzkaller0: entered allmulticast mode [ 300.576294][T15649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15649 comm=syz.0.4299 [ 300.975752][T15680] syzkaller0: entered promiscuous mode [ 300.981263][T15680] syzkaller0: entered allmulticast mode [ 301.009712][T15682] syzkaller0: entered promiscuous mode [ 301.015193][T15682] syzkaller0: entered allmulticast mode [ 301.127996][T15688] syzkaller0: entered promiscuous mode [ 301.133551][T15688] syzkaller0: entered allmulticast mode [ 301.144349][T15690] syzkaller0: entered promiscuous mode [ 301.149849][T15690] syzkaller0: entered allmulticast mode [ 301.306510][T15712] syzkaller0: entered promiscuous mode [ 301.312078][T15712] syzkaller0: entered allmulticast mode [ 301.447947][T15724] syzkaller0: entered promiscuous mode [ 301.453545][T15724] syzkaller0: entered allmulticast mode [ 301.625256][T15734] syzkaller0: entered promiscuous mode [ 301.630772][T15734] syzkaller0: entered allmulticast mode [ 301.639603][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.696607][T15739] syzkaller0: entered promiscuous mode [ 301.702217][T15739] syzkaller0: entered allmulticast mode [ 302.133823][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.319874][T15764] __nla_validate_parse: 19 callbacks suppressed [ 302.319945][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4341'. [ 302.351706][ T29] kauditd_printk_skb: 1160 callbacks suppressed [ 302.351718][ T29] audit: type=1326 audit(1761582391.343:45829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.381631][ T29] audit: type=1326 audit(1761582391.343:45830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.405278][ T29] audit: type=1326 audit(1761582391.343:45831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.428851][ T29] audit: type=1326 audit(1761582391.343:45832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.452797][ T29] audit: type=1326 audit(1761582391.343:45833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.476384][ T29] audit: type=1326 audit(1761582391.343:45834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.500084][ T29] audit: type=1326 audit(1761582391.343:45835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.523728][ T29] audit: type=1326 audit(1761582391.343:45836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.547294][ T29] audit: type=1326 audit(1761582391.343:45837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.571353][ T29] audit: type=1326 audit(1761582391.563:45838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.0.4341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 302.601266][T15771] ipvlan0: entered promiscuous mode [ 302.681471][T15780] syzkaller0: entered promiscuous mode [ 302.687017][T15780] syzkaller0: entered allmulticast mode [ 303.152534][T15790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4350'. [ 303.258082][T15792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'. [ 303.322976][T15798] syzkaller0: entered promiscuous mode [ 303.328528][T15798] syzkaller0: entered allmulticast mode [ 303.580886][T15816] syzkaller0: entered promiscuous mode [ 303.586368][T15816] syzkaller0: entered allmulticast mode [ 303.637130][T15818] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4361'. [ 303.646699][T15818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15818 comm=syz.4.4361 [ 303.659222][T15818] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4361'. [ 303.681669][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4362'. [ 303.719491][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.725745][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 303.758525][T15826] syzkaller0: entered promiscuous mode [ 303.764056][T15826] syzkaller0: entered allmulticast mode [ 304.198582][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 304.204764][ T3615] Bluetooth: hci1: command 0x1003 tx timeout [ 304.261506][T15839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15839 comm=syz.2.4369 [ 304.278127][T15839] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4369'. [ 304.309976][T15845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4373'. [ 304.320258][T15845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15845 comm=syz.0.4373 [ 304.334359][T15845] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4373'. [ 304.363394][ T561] Bluetooth: hci1: Frame reassembly failed (-84) [ 304.383309][ T41] Bluetooth: hci2: Frame reassembly failed (-84) [ 305.400759][T15861] syzkaller0: entered promiscuous mode [ 305.406241][T15861] syzkaller0: entered allmulticast mode [ 305.655158][T15870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4382'. [ 306.390686][T15872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15872 comm=syz.4.4383 [ 306.429371][ T4730] Bluetooth: hci2: command 0x1003 tx timeout [ 306.429371][ T7102] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 306.439334][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.441981][ T7102] Bluetooth: hci1: command 0x1003 tx timeout [ 306.447564][ T3615] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 306.453560][ T7102] Bluetooth: hci0: command 0x1003 tx timeout [ 306.646908][T15900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15900 comm=syz.2.4395 [ 306.749685][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.783946][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 306.830599][T15926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15926 comm=syz.0.4407 [ 306.976728][T15945] tipc: Enabled bearer , priority 0 [ 306.983779][T15945] syzkaller0: entered promiscuous mode [ 306.989246][T15945] syzkaller0: entered allmulticast mode [ 307.000596][T15944] tipc: Resetting bearer [ 307.008342][T15944] tipc: Disabling bearer [ 307.383209][T15957] __nla_validate_parse: 6 callbacks suppressed [ 307.383260][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 307.398431][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 307.407462][T15957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4419'. [ 307.536769][T15962] syzkaller0: entered promiscuous mode [ 307.542326][T15962] syzkaller0: entered allmulticast mode [ 307.812253][T15977] ipvlan2: entered promiscuous mode [ 307.821839][T15979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4428'. [ 307.831798][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 307.831811][ T29] audit: type=1326 audit(1761582396.823:46320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 307.894150][ T29] audit: type=1326 audit(1761582396.823:46321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 307.918695][ T29] audit: type=1326 audit(1761582396.823:46322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 307.942290][ T29] audit: type=1326 audit(1761582396.823:46323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 307.965839][ T29] audit: type=1326 audit(1761582396.823:46324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 307.989435][ T29] audit: type=1326 audit(1761582396.823:46325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 308.013013][ T29] audit: type=1326 audit(1761582396.823:46326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 308.036658][ T29] audit: type=1326 audit(1761582396.823:46327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 308.060284][ T29] audit: type=1326 audit(1761582396.823:46328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 308.083919][ T29] audit: type=1326 audit(1761582396.823:46329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15978 comm="syz.0.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 308.595960][T15997] syzkaller0: entered promiscuous mode [ 308.601456][T15997] syzkaller0: entered allmulticast mode [ 308.743126][T16008] syzkaller0: entered promiscuous mode [ 308.748606][T16008] syzkaller0: entered allmulticast mode [ 308.759095][T16009] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4435'. [ 308.829324][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 308.829324][ T7102] Bluetooth: hci0: command 0x1003 tx timeout [ 308.841565][ T4730] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.411702][T16030] syzkaller0: entered promiscuous mode [ 309.417701][T16030] syzkaller0: entered allmulticast mode [ 309.986730][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 310.099181][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4455'. [ 310.108087][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4455'. [ 311.823567][T16098] ipvlan0: entered promiscuous mode [ 311.838274][T16100] loop0: detected capacity change from 0 to 128 [ 311.869736][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'. [ 312.039365][ T4730] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 312.237438][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4480'. [ 312.312400][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 312.596430][T16137] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 312.766591][T16142] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4488'. [ 313.085586][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 313.085598][ T29] audit: type=1326 audit(1761582402.073:46738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.118595][ T29] audit: type=1326 audit(1761582402.103:46739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.142095][ T29] audit: type=1326 audit(1761582402.103:46740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.165769][ T29] audit: type=1326 audit(1761582402.103:46741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.189329][ T29] audit: type=1326 audit(1761582402.103:46742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.212901][ T29] audit: type=1326 audit(1761582402.103:46743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.236482][ T29] audit: type=1326 audit(1761582402.103:46744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.260109][ T29] audit: type=1326 audit(1761582402.103:46745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.283499][ T29] audit: type=1326 audit(1761582402.103:46746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.307071][ T29] audit: type=1326 audit(1761582402.103:46747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.1.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 313.438718][T16150] syzkaller0: entered promiscuous mode [ 313.444263][T16150] syzkaller0: entered allmulticast mode [ 313.685374][T16161] ipvlan2: entered promiscuous mode [ 314.156118][T16168] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 314.349420][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 314.391079][T16172] loop0: detected capacity change from 0 to 2048 [ 314.432282][T16172] Alternate GPT is invalid, using primary GPT. [ 314.438717][T16172] loop0: p2 p3 p7 [ 314.630790][T16180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4503'. [ 314.657617][T16182] syzkaller0: entered promiscuous mode [ 314.663117][T16182] syzkaller0: entered allmulticast mode [ 314.712644][T16192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4508'. [ 314.760354][T16194] syzkaller0: entered promiscuous mode [ 314.765888][T16194] syzkaller0: entered allmulticast mode [ 314.841973][T16202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4513'. [ 315.576547][T16236] ipvlan0: entered promiscuous mode [ 315.593902][T16238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4525'. [ 315.735380][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4528'. [ 316.667253][T16278] ipvlan0: entered promiscuous mode [ 316.929887][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.137519][T16288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4540'. [ 317.394236][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 317.656707][T16308] ipvlan0: entered promiscuous mode [ 317.904196][T16316] syzkaller0: entered promiscuous mode [ 317.909689][T16316] syzkaller0: entered allmulticast mode [ 318.081221][T16320] syzkaller0: entered promiscuous mode [ 318.086705][T16320] syzkaller0: entered allmulticast mode [ 318.094591][ T29] kauditd_printk_skb: 1055 callbacks suppressed [ 318.094658][ T29] audit: type=1326 audit(1761582407.083:47803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 318.123858][ T29] audit: type=1326 audit(1761582407.083:47804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 318.146859][ T29] audit: type=1326 audit(1761582407.083:47805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 318.169888][ T29] audit: type=1326 audit(1761582407.083:47806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 318.193117][ T29] audit: type=1326 audit(1761582407.163:47807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 318.216114][ T29] audit: type=1326 audit(1761582407.163:47808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 318.239143][ T29] audit: type=1326 audit(1761582407.163:47809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 318.262132][ T29] audit: type=1326 audit(1761582407.163:47810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 318.285090][ T29] audit: type=1326 audit(1761582407.163:47811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 318.308235][ T29] audit: type=1326 audit(1761582407.163:47812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16317 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 318.406906][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4555'. [ 318.427620][ T5966] Bluetooth: hci1: Frame reassembly failed (-84) [ 318.458738][T16336] syzkaller0: entered promiscuous mode [ 318.464275][T16336] syzkaller0: entered allmulticast mode [ 318.579231][T16345] syzkaller0: entered promiscuous mode [ 318.585268][T16345] syzkaller0: entered allmulticast mode [ 318.696580][T16348] syzkaller0: entered promiscuous mode [ 318.702089][T16348] syzkaller0: entered allmulticast mode [ 318.842603][T16352] tipc: Enabling of bearer rejected, failed to enable media [ 318.868842][T16352] syzkaller0: entered promiscuous mode [ 318.874504][T16352] syzkaller0: entered allmulticast mode [ 318.989699][ T4730] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.996421][T16361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4568'. [ 319.188270][T16370] syzkaller0: entered promiscuous mode [ 319.193774][T16370] syzkaller0: entered allmulticast mode [ 319.478759][T16378] syzkaller0: entered promiscuous mode [ 319.484310][T16378] syzkaller0: entered allmulticast mode [ 319.675550][T16380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4575'. [ 319.806954][T16392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4580'. [ 319.845022][T16395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16395 comm=syz.3.4581 [ 319.889401][T16395] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4581'. [ 320.070956][T16399] syzkaller0: entered promiscuous mode [ 320.076500][T16399] syzkaller0: entered allmulticast mode [ 320.094295][T16401] syzkaller0: entered promiscuous mode [ 320.099775][T16401] syzkaller0: entered allmulticast mode [ 320.189182][T16403] syzkaller0: entered promiscuous mode [ 320.194738][T16403] syzkaller0: entered allmulticast mode [ 320.267007][T16408] ipvlan0: entered promiscuous mode [ 320.303922][T16409] ipvlan2: entered promiscuous mode [ 320.429370][ T7102] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 320.671836][T16423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4592'. [ 321.305755][T16435] tipc: Enabling of bearer rejected, failed to enable media [ 321.387368][T16435] syzkaller0: entered promiscuous mode [ 321.392921][T16435] syzkaller0: entered allmulticast mode [ 321.410404][T16438] syzkaller0: entered promiscuous mode [ 321.415990][T16438] syzkaller0: entered allmulticast mode [ 321.568315][T16440] syzkaller0: entered promiscuous mode [ 321.573838][T16440] syzkaller0: entered allmulticast mode [ 321.695065][T16444] syzkaller0: entered promiscuous mode [ 321.700657][T16444] syzkaller0: entered allmulticast mode [ 321.858683][T16452] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 321.901270][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 321.910205][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 321.914176][T16454] syzkaller0: entered promiscuous mode [ 321.919801][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4605'. [ 321.924612][T16454] syzkaller0: entered allmulticast mode [ 322.005171][T16459] ipvlan0: entered promiscuous mode [ 322.180322][T16467] tipc: Enabling of bearer rejected, failed to enable media [ 322.193174][T16467] syzkaller0: entered promiscuous mode [ 322.198659][T16467] syzkaller0: entered allmulticast mode [ 322.369635][T16471] syzkaller0: entered promiscuous mode [ 322.375166][T16471] syzkaller0: entered allmulticast mode [ 322.717250][T16484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4614'. [ 322.820495][T16486] syzkaller0: entered promiscuous mode [ 322.826059][T16486] syzkaller0: entered allmulticast mode [ 323.010796][T16504] syzkaller0: entered promiscuous mode [ 323.016291][T16504] syzkaller0: entered allmulticast mode [ 323.243533][T16515] ipvlan0: entered promiscuous mode [ 323.280089][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 323.280140][ T29] audit: type=1326 audit(1761582412.273:48386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.350806][ T29] audit: type=1326 audit(1761582412.273:48387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.374393][ T29] audit: type=1326 audit(1761582412.273:48388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.397965][ T29] audit: type=1326 audit(1761582412.273:48389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.421445][ T29] audit: type=1326 audit(1761582412.273:48390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.445112][ T29] audit: type=1326 audit(1761582412.273:48391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.468581][ T29] audit: type=1326 audit(1761582412.273:48392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.492252][ T29] audit: type=1326 audit(1761582412.273:48393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16510 comm="syz.3.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 323.760235][T16524] ipvlan0: entered promiscuous mode [ 324.046778][T16535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4631'. [ 324.522134][ T29] audit: type=1326 audit(1761582413.513:48394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16552 comm="syz.3.4638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff87a28efc9 code=0x0 [ 325.261263][T16567] syzkaller0: entered promiscuous mode [ 325.266814][T16567] syzkaller0: entered allmulticast mode [ 325.440431][T16573] ipvlan2: entered promiscuous mode [ 325.559637][ T29] audit: type=1326 audit(1761582414.533:48395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16574 comm="syz.2.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 325.972754][T16582] syzkaller0: entered promiscuous mode [ 325.978237][T16582] syzkaller0: entered allmulticast mode [ 326.329914][T16588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4648'. [ 326.431884][T16595] ipvlan0: entered promiscuous mode [ 326.786458][T16604] ipvlan0: entered promiscuous mode [ 326.985978][T16607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16607 comm=syz.3.4654 [ 327.163271][T16612] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 327.219785][T16615] syzkaller0: entered promiscuous mode [ 327.225299][T16615] syzkaller0: entered allmulticast mode [ 328.114488][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 328.123408][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 328.139365][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4666'. [ 328.521266][T16652] syzkaller0: entered promiscuous mode [ 328.526739][T16652] syzkaller0: entered allmulticast mode [ 328.666173][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4672'. [ 328.675931][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 328.675943][ T29] audit: type=1326 audit(1761582417.673:48485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.705792][ T29] audit: type=1326 audit(1761582417.673:48486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.729433][ T29] audit: type=1326 audit(1761582417.673:48487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.753465][ T29] audit: type=1326 audit(1761582417.673:48488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.777017][ T29] audit: type=1326 audit(1761582417.673:48489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.800605][ T29] audit: type=1326 audit(1761582417.673:48490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.824939][ T29] audit: type=1326 audit(1761582417.673:48491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.848648][ T29] audit: type=1326 audit(1761582417.673:48492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.872888][ T29] audit: type=1326 audit(1761582417.673:48493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 328.896461][ T29] audit: type=1326 audit(1761582417.673:48494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16658 comm="syz.3.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 329.202958][T16674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4677'. [ 330.699400][T16699] syzkaller0: entered promiscuous mode [ 330.704915][T16699] syzkaller0: entered allmulticast mode [ 330.884817][T16709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4689'. [ 330.929219][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4691'. [ 331.270030][T16737] syzkaller0: entered promiscuous mode [ 331.275530][T16737] syzkaller0: entered allmulticast mode [ 332.152146][T16764] syzkaller0: entered promiscuous mode [ 332.157646][T16764] syzkaller0: entered allmulticast mode [ 332.341997][T16770] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 332.665128][T16782] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 332.682416][T16783] syzkaller0: entered promiscuous mode [ 332.687905][T16783] syzkaller0: entered allmulticast mode [ 332.749772][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.853830][T16793] syzkaller0: entered promiscuous mode [ 332.859341][T16793] syzkaller0: entered allmulticast mode [ 333.002965][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 333.011909][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 333.021162][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 333.346893][T16808] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 333.844681][T16818] syzkaller0: entered promiscuous mode [ 333.850208][T16818] syzkaller0: entered allmulticast mode [ 333.941081][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4727'. [ 333.969353][T16822] syzkaller0: entered promiscuous mode [ 333.974870][T16822] syzkaller0: entered allmulticast mode [ 333.990239][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 333.990253][ T29] audit: type=1326 audit(1761582422.983:49031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16823 comm="syz.2.4729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56769cefc9 code=0x0 [ 334.171130][T16833] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 334.183574][ T29] audit: type=1326 audit(1761582423.173:49032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.215768][ T29] audit: type=1326 audit(1761582423.173:49033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.239397][ T29] audit: type=1326 audit(1761582423.173:49034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.263536][ T29] audit: type=1326 audit(1761582423.173:49035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f750ce0f003 code=0x7ffc0000 [ 334.287011][ T29] audit: type=1326 audit(1761582423.173:49036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f750ce0f003 code=0x7ffc0000 [ 334.310417][ T29] audit: type=1326 audit(1761582423.173:49037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.333944][ T29] audit: type=1326 audit(1761582423.173:49038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.4.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.410785][ T29] audit: type=1326 audit(1761582423.403:49039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.435773][ T29] audit: type=1326 audit(1761582423.403:49040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16841 comm="syz.4.4736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 334.516977][T16846] syzkaller0: entered promiscuous mode [ 334.522572][T16846] syzkaller0: entered allmulticast mode [ 334.739091][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4739'. [ 334.829322][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 334.915875][T16857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4742'. [ 334.926677][T16854] syzkaller0: entered promiscuous mode [ 334.932232][T16854] syzkaller0: entered allmulticast mode [ 334.943141][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 334.952089][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 334.961015][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4743'. [ 334.977060][T16860] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.014918][T16862] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.169705][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4751'. [ 335.197352][T16881] syzkaller0: entered promiscuous mode [ 335.202904][T16881] syzkaller0: entered allmulticast mode [ 335.248544][T16887] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4750'. [ 335.314990][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 335.421107][T16891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4755'. [ 335.456285][T16893] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.467921][T16895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4757'. [ 335.513561][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4759'. [ 336.441617][T16925] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 336.770905][T16936] syzkaller0: entered promiscuous mode [ 336.776410][T16936] syzkaller0: entered allmulticast mode [ 337.006976][T16947] ipvlan2: entered promiscuous mode [ 337.079431][T16956] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 337.399517][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 337.407663][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.832236][T16972] syzkaller0: entered promiscuous mode [ 337.837719][T16972] syzkaller0: entered allmulticast mode [ 338.792594][T16994] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 338.842878][T16996] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 338.998810][T17003] ipvlan0: entered promiscuous mode [ 339.182666][T17007] syzkaller0: entered promiscuous mode [ 339.188203][T17007] syzkaller0: entered allmulticast mode [ 339.335292][ T29] kauditd_printk_skb: 1266 callbacks suppressed [ 339.335321][ T29] audit: type=1326 audit(1761582428.323:50307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.365729][ T29] audit: type=1326 audit(1761582428.323:50308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.389317][ T29] audit: type=1326 audit(1761582428.323:50309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.412946][ T29] audit: type=1326 audit(1761582428.323:50310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.436568][ T29] audit: type=1326 audit(1761582428.323:50311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.460546][ T29] audit: type=1326 audit(1761582428.323:50312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.484117][ T29] audit: type=1326 audit(1761582428.323:50313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.507670][ T29] audit: type=1326 audit(1761582428.323:50314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.531303][ T29] audit: type=1326 audit(1761582428.323:50315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 339.554778][ T29] audit: type=1326 audit(1761582428.323:50316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 340.430248][T17026] __nla_validate_parse: 11 callbacks suppressed [ 340.430261][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 340.438366][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 340.445384][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 340.451387][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.466517][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 340.480386][T17028] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 340.883732][T17048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4811'. [ 341.259537][ T3983] Bluetooth: hci0: sending frame failed (-49) [ 341.265724][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 341.759626][T17088] syzkaller0: entered promiscuous mode [ 341.765143][T17088] syzkaller0: entered allmulticast mode [ 341.833940][T17091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17091 comm=syz.4.4828 [ 341.846754][T17091] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4828'. [ 341.958432][T17097] ipvlan0: entered promiscuous mode [ 342.766442][T17116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4837'. [ 342.776318][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17116 comm=syz.1.4837 [ 342.789206][T17116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4837'. [ 342.813772][T17118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4838'. [ 344.136407][T17138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4844'. [ 344.276249][T17144] ipvlan2: entered promiscuous mode [ 344.351899][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 344.351911][ T29] audit: type=1326 audit(1761582433.343:50944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.461722][ T29] audit: type=1326 audit(1761582433.373:50945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.485357][ T29] audit: type=1326 audit(1761582433.373:50946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.508915][ T29] audit: type=1326 audit(1761582433.373:50947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.532483][ T29] audit: type=1326 audit(1761582433.373:50948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.556023][ T29] audit: type=1326 audit(1761582433.373:50949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.579655][ T29] audit: type=1326 audit(1761582433.373:50950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.603244][ T29] audit: type=1326 audit(1761582433.373:50951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.626752][ T29] audit: type=1326 audit(1761582433.373:50952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.650451][ T29] audit: type=1326 audit(1761582433.373:50953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17147 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 344.758678][T17155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4849'. [ 344.775174][T17153] team_slave_0: entered promiscuous mode [ 344.780847][T17153] team_slave_1: entered promiscuous mode [ 344.814275][T17153] macvtap1: entered promiscuous mode [ 344.819630][T17153] team0: entered promiscuous mode [ 344.824896][T17153] macvtap1: entered allmulticast mode [ 344.830398][T17153] team0: entered allmulticast mode [ 344.835626][T17153] team_slave_0: entered allmulticast mode [ 344.841420][T17153] team_slave_1: entered allmulticast mode [ 344.849906][T17153] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 345.916436][T17179] ipvlan0: entered promiscuous mode [ 345.941586][T17182] __nla_validate_parse: 1 callbacks suppressed [ 345.941600][T17182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4859'. [ 346.686036][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4862'. [ 346.702639][T17195] macvtap2: entered promiscuous mode [ 346.708042][T17195] macvtap2: entered allmulticast mode [ 346.715555][T17195] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 346.772676][T17201] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4865'. [ 346.876381][T17209] ipvlan0: entered promiscuous mode [ 346.959189][T17212] syzkaller0: entered promiscuous mode [ 346.964668][T17212] syzkaller0: entered allmulticast mode [ 347.669118][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4873'. [ 347.868902][T17239] syzkaller0: entered promiscuous mode [ 347.874469][T17239] syzkaller0: entered allmulticast mode [ 348.125992][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4883'. [ 348.386803][T17260] ipvlan0: entered promiscuous mode [ 348.607487][T17268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4886'. [ 348.661162][T17270] syzkaller0: entered promiscuous mode [ 348.666638][T17270] syzkaller0: entered allmulticast mode [ 349.065115][T17281] tipc: Started in network mode [ 349.070197][T17281] tipc: Node identity 1a0d0a13ede8, cluster identity 4711 [ 349.077339][T17281] tipc: Enabled bearer , priority 0 [ 349.099312][T17281] tipc: Resetting bearer [ 349.106336][T17280] tipc: Disabling bearer [ 349.141103][T17286] syzkaller0: entered promiscuous mode [ 349.146596][T17286] syzkaller0: entered allmulticast mode [ 349.183120][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 349.192092][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 349.201899][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 349.355889][T17297] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 349.444130][T17298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17298 comm=syz.0.4898 [ 349.469427][ T29] kauditd_printk_skb: 629 callbacks suppressed [ 349.469445][ T29] audit: type=1326 audit(1761582438.453:51583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 349.499331][ T29] audit: type=1326 audit(1761582438.453:51584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 349.523134][ T29] audit: type=1326 audit(1761582438.453:51585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 349.546694][ T29] audit: type=1326 audit(1761582438.453:51586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42c869f003 code=0x7ffc0000 [ 349.620677][T17298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4898'. [ 349.682827][T17302] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 349.788836][T17303] ipvlan0: entered promiscuous mode [ 349.791816][ T29] audit: type=1326 audit(1761582438.563:51587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42c869f003 code=0x7ffc0000 [ 349.817498][ T29] audit: type=1326 audit(1761582438.563:51588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 349.841061][ T29] audit: type=1326 audit(1761582438.573:51589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17294 comm="syz.1.4897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 349.864620][ T29] audit: type=1326 audit(1761582438.723:51590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.4.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 349.888171][ T29] audit: type=1326 audit(1761582438.723:51591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.4.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 349.911782][ T29] audit: type=1326 audit(1761582438.723:51592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17301 comm="syz.4.4900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 350.008236][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 350.341139][T17318] syzkaller0: entered promiscuous mode [ 350.346648][T17318] syzkaller0: entered allmulticast mode [ 351.046395][T17339] syzkaller0: entered promiscuous mode [ 351.051910][T17339] syzkaller0: entered allmulticast mode [ 351.640345][T17360] __nla_validate_parse: 6 callbacks suppressed [ 351.640354][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4920'. [ 351.655396][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4920'. [ 351.664531][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4920'. [ 351.738639][T17362] syzkaller0: entered promiscuous mode [ 351.744193][T17362] syzkaller0: entered allmulticast mode [ 352.011721][T17365] ipvlan0: entered promiscuous mode [ 352.019065][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 352.029450][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 352.058886][T17369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4924'. [ 352.320355][T17390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4932'. [ 352.507495][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 353.318872][T17417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4942'. [ 353.445929][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4946'. [ 353.457003][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'. [ 353.587592][T17437] ipvlan2: entered promiscuous mode [ 353.680861][ T7102] Bluetooth: hci0: sending frame failed (-49) [ 353.687168][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 353.812182][T17446] syzkaller0: entered promiscuous mode [ 353.817682][T17446] syzkaller0: entered allmulticast mode [ 353.860005][T17451] tipc: Enabled bearer , priority 0 [ 353.866940][T17451] syzkaller0: entered promiscuous mode [ 353.872529][T17451] syzkaller0: entered allmulticast mode [ 353.880152][T17451] tipc: Resetting bearer [ 353.888924][T17454] ipvlan0: entered promiscuous mode [ 353.948939][T17450] tipc: Resetting bearer [ 353.955114][T17450] tipc: Disabling bearer [ 354.479962][ T29] kauditd_printk_skb: 1037 callbacks suppressed [ 354.479975][ T29] audit: type=1326 audit(1761582443.473:52630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 354.513762][ T29] audit: type=1326 audit(1761582443.503:52631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 354.537381][ T29] audit: type=1326 audit(1761582443.503:52632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 354.560842][ T29] audit: type=1326 audit(1761582443.503:52633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 354.584334][ T29] audit: type=1326 audit(1761582443.503:52634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 354.608171][ T29] audit: type=1326 audit(1761582443.553:52635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 354.631651][ T29] audit: type=1326 audit(1761582443.553:52636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 354.655170][ T29] audit: type=1326 audit(1761582443.553:52637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 354.678716][ T29] audit: type=1326 audit(1761582443.553:52638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42c8695e67 code=0x7ffc0000 [ 354.702193][ T29] audit: type=1326 audit(1761582443.553:52639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17471 comm="syz.1.4961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42c863b099 code=0x7ffc0000 [ 354.947388][T17491] syzkaller0: entered promiscuous mode [ 354.952925][T17491] syzkaller0: entered allmulticast mode [ 356.169381][T17553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17553 comm=syz.3.4988 [ 356.254379][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 356.796366][T17589] syzkaller0: entered promiscuous mode [ 356.801969][T17589] syzkaller0: entered allmulticast mode [ 357.232682][T17593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17593 comm=syz.0.5000 [ 357.373216][T17611] __nla_validate_parse: 16 callbacks suppressed [ 357.373231][T17611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5006'. [ 357.410652][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 357.419575][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 357.446333][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 357.788517][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5010'. [ 358.269307][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.382352][T17639] ipvlan0: entered promiscuous mode [ 358.581467][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 358.778731][T17654] syzkaller0: entered promiscuous mode [ 358.784300][T17654] syzkaller0: entered allmulticast mode [ 359.219303][ T4730] Bluetooth: hci1: sending frame failed (-49) [ 359.225484][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 359.428599][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5025'. [ 359.437801][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 359.543537][T17677] ipvlan0: entered promiscuous mode [ 359.554361][ T29] kauditd_printk_skb: 1028 callbacks suppressed [ 359.554375][ T29] audit: type=1326 audit(1761582448.543:53668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 359.584196][ T29] audit: type=1326 audit(1761582448.543:53669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 359.614638][ T29] audit: type=1326 audit(1761582448.603:53670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 359.638461][ T29] audit: type=1326 audit(1761582448.603:53671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 359.662194][ T29] audit: type=1326 audit(1761582448.603:53672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 359.685797][ T29] audit: type=1326 audit(1761582448.603:53673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 360.199446][ T29] audit: type=1326 audit(1761582449.173:53674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17667 comm="syz.0.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 360.246029][ T29] audit: type=1326 audit(1761582449.233:53675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.0.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 360.269790][ T29] audit: type=1326 audit(1761582449.233:53676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.0.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 360.293347][ T29] audit: type=1326 audit(1761582449.233:53677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.0.5029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 360.365529][T17684] loop0: detected capacity change from 0 to 2048 [ 360.436594][T17684] Alternate GPT is invalid, using primary GPT. [ 360.442925][T17684] loop0: p2 p3 p7 [ 360.481491][T17691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5032'. [ 360.564706][T17695] ipvlan0: entered promiscuous mode [ 360.589391][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 360.732607][T17706] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5034'. [ 360.825988][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 361.955349][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5043'. [ 362.829330][ T4730] Bluetooth: hci0: command 0x1003 tx timeout [ 362.829338][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.864307][T17739] syzkaller0: entered promiscuous mode [ 362.869904][T17739] syzkaller0: entered allmulticast mode [ 363.019378][T17746] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5050'. [ 363.055738][T17749] ipvlan2: entered promiscuous mode [ 363.169894][T17754] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5051'. [ 363.438500][T17758] syzkaller0: entered promiscuous mode [ 363.444094][T17758] syzkaller0: entered allmulticast mode [ 364.354697][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 364.559957][ T29] kauditd_printk_skb: 764 callbacks suppressed [ 364.559976][ T29] audit: type=1326 audit(1761582453.553:54442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 364.600203][ T29] audit: type=1326 audit(1761582453.583:54443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92a3345e67 code=0x7ffc0000 [ 364.623201][ T29] audit: type=1326 audit(1761582453.583:54444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92a32eb099 code=0x7ffc0000 [ 364.646216][ T29] audit: type=1326 audit(1761582453.583:54445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 364.669252][ T29] audit: type=1326 audit(1761582453.583:54446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f92a3345e67 code=0x7ffc0000 [ 364.692256][ T29] audit: type=1326 audit(1761582453.583:54447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f92a32eb099 code=0x7ffc0000 [ 364.715315][ T29] audit: type=1326 audit(1761582453.583:54448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17792 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 364.738380][ T29] audit: type=1326 audit(1761582453.583:54449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 364.761912][ T29] audit: type=1326 audit(1761582453.583:54450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 364.785362][ T29] audit: type=1326 audit(1761582453.583:54451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17783 comm="syz.3.5061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 364.996429][T17811] ipvlan2: entered promiscuous mode [ 365.431936][T17815] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5072'. [ 365.830467][T17820] syzkaller0: entered promiscuous mode [ 365.835999][T17820] syzkaller0: entered allmulticast mode [ 366.055176][T17833] ipvlan2: entered promiscuous mode [ 366.456184][ T4730] Bluetooth: hci0: command 0x1003 tx timeout [ 366.462276][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 366.619208][T17845] syzkaller0: entered promiscuous mode [ 366.624718][T17845] syzkaller0: entered allmulticast mode [ 366.884302][T17861] syzkaller0: entered promiscuous mode [ 366.889835][T17861] syzkaller0: entered allmulticast mode [ 366.947761][T17868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5087'. [ 366.966229][T17870] syzkaller0: entered promiscuous mode [ 366.971794][T17870] syzkaller0: entered allmulticast mode [ 367.001626][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 367.124174][T17879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5089'. [ 367.357686][T17883] syzkaller0: entered promiscuous mode [ 367.363243][T17883] syzkaller0: entered allmulticast mode [ 367.723989][ T561] Bluetooth: hci1: Frame reassembly failed (-84) [ 368.138277][T17903] syzkaller0: entered promiscuous mode [ 368.143858][T17903] syzkaller0: entered allmulticast mode [ 368.302376][T17911] syzkaller0: entered promiscuous mode [ 368.308038][T17911] syzkaller0: entered allmulticast mode [ 368.394008][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5100'. [ 368.809296][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 369.069348][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 369.069341][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 369.100942][T17953] syzkaller0: entered promiscuous mode [ 369.106439][T17953] syzkaller0: entered allmulticast mode [ 369.266485][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5111'. [ 369.313874][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5112'. [ 369.430878][T17971] ipvlan0: entered promiscuous mode [ 369.569951][ T29] kauditd_printk_skb: 974 callbacks suppressed [ 369.570039][ T29] audit: type=1326 audit(1761582458.563:55426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 369.649313][ T29] audit: type=1326 audit(1761582458.593:55427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 369.672852][ T29] audit: type=1326 audit(1761582458.593:55428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 369.696361][ T29] audit: type=1326 audit(1761582458.593:55429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 369.719835][ T29] audit: type=1326 audit(1761582458.593:55430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 369.743337][ T29] audit: type=1326 audit(1761582458.593:55431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 369.766969][ T29] audit: type=1326 audit(1761582458.593:55432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 369.790544][ T29] audit: type=1326 audit(1761582458.603:55433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff87a285e67 code=0x7ffc0000 [ 369.810738][ T7102] Bluetooth: hci1: command 0x1003 tx timeout [ 369.814078][ T29] audit: type=1326 audit(1761582458.603:55434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff87a22b099 code=0x7ffc0000 [ 369.820051][ T4730] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 369.849622][ T29] audit: type=1326 audit(1761582458.603:55435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17954 comm="syz.3.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 370.159463][T17985] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 370.196536][T17988] syzkaller0: entered promiscuous mode [ 370.202046][T17988] syzkaller0: entered allmulticast mode [ 370.875257][ T4730] Bluetooth: hci2: command 0x1003 tx timeout [ 370.880354][ T3983] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 370.900242][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5129'. [ 370.909185][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5129'. [ 370.918547][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5129'. [ 371.116441][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5130'. [ 371.237495][T18023] syzkaller0: entered promiscuous mode [ 371.243005][T18023] syzkaller0: entered allmulticast mode [ 371.428218][T18026] ipvlan0: entered promiscuous mode [ 371.626317][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5134'. [ 371.656687][T18033] tipc: Enabling of bearer rejected, failed to enable media [ 371.667859][T18033] syzkaller0: entered promiscuous mode [ 371.673461][T18033] syzkaller0: entered allmulticast mode [ 372.465929][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5142'. [ 372.632418][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 372.652922][T18063] tipc: Enabled bearer , priority 0 [ 372.661275][T18063] syzkaller0: entered promiscuous mode [ 372.666749][T18063] syzkaller0: entered allmulticast mode [ 372.674619][T18063] tipc: Resetting bearer [ 372.681003][T18062] tipc: Resetting bearer [ 372.687436][T18062] tipc: Disabling bearer [ 373.704900][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5154'. [ 374.679303][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 374.679303][ T4730] Bluetooth: hci0: command 0x1003 tx timeout [ 374.702936][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 374.702951][ T29] audit: type=1326 audit(1761582463.693:55997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.732675][ T29] audit: type=1326 audit(1761582463.693:55998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.756349][ T29] audit: type=1326 audit(1761582463.693:55999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.780253][ T29] audit: type=1326 audit(1761582463.693:56000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.803821][ T29] audit: type=1326 audit(1761582463.693:56001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.827446][ T29] audit: type=1326 audit(1761582463.693:56002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.851067][ T29] audit: type=1326 audit(1761582463.693:56003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.874621][ T29] audit: type=1326 audit(1761582463.693:56004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.898210][ T29] audit: type=1326 audit(1761582463.693:56005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 374.921740][ T29] audit: type=1326 audit(1761582463.693:56006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.2.5164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56769cefc9 code=0x7ffc0000 [ 375.143539][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5168'. [ 375.152473][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5168'. [ 375.167115][T18144] syzkaller0: entered promiscuous mode [ 375.172786][T18144] syzkaller0: entered allmulticast mode [ 375.175198][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5168'. [ 375.202010][T18148] loop0: detected capacity change from 0 to 512 [ 375.210279][T18148] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 375.221486][T18148] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 375.229924][T18148] EXT4-fs (loop0): failed to initialize system zone (-117) [ 375.237213][T18148] EXT4-fs (loop0): mount failed [ 375.272486][T18156] loop0: detected capacity change from 0 to 512 [ 375.290780][T18156] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 375.306730][T18156] EXT4-fs (loop0): 1 truncate cleaned up [ 375.313846][T18156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.337544][T11513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.386565][T18178] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 376.444682][T18184] syzkaller0: entered promiscuous mode [ 376.450302][T18184] syzkaller0: entered allmulticast mode [ 376.827597][T18199] syzkaller0: entered promiscuous mode [ 376.833107][T18199] syzkaller0: entered allmulticast mode [ 377.309320][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 377.473653][T18212] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 377.494350][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5194'. [ 377.503333][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5194'. [ 377.520771][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5194'. [ 378.145554][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 378.466412][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5201'. [ 378.475334][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5201'. [ 378.512436][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5201'. [ 378.699135][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 379.867654][T18260] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 379.880536][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 379.880548][ T29] audit: type=1326 audit(1761582468.873:56490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.4.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 379.936606][ T29] audit: type=1326 audit(1761582468.903:56491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.4.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 379.960290][ T29] audit: type=1326 audit(1761582468.903:56492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.4.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f750ce0f003 code=0x7ffc0000 [ 379.983844][ T29] audit: type=1326 audit(1761582468.903:56493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.4.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f750ce0f003 code=0x7ffc0000 [ 380.007284][ T29] audit: type=1326 audit(1761582468.903:56494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.4.5207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 380.189330][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 380.189343][ T7102] Bluetooth: hci0: command 0x1003 tx timeout [ 380.253441][ T29] audit: type=1326 audit(1761582469.243:56495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18264 comm="syz.1.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 380.277076][ T29] audit: type=1326 audit(1761582469.243:56496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18264 comm="syz.1.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 380.300711][ T29] audit: type=1326 audit(1761582469.243:56497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18264 comm="syz.1.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 380.324245][ T29] audit: type=1326 audit(1761582469.243:56498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18264 comm="syz.1.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 380.347840][ T29] audit: type=1326 audit(1761582469.243:56499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18264 comm="syz.1.5209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 380.399710][T18267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5210'. [ 380.749322][ T3983] Bluetooth: hci1: command 0x1003 tx timeout [ 380.779318][ T4730] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 381.054711][T18293] syzkaller0: entered promiscuous mode [ 381.060224][T18293] syzkaller0: entered allmulticast mode [ 381.432525][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'. [ 381.441479][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'. [ 381.468910][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5223'. [ 381.606592][T18314] syzkaller0: entered promiscuous mode [ 381.612114][T18314] syzkaller0: entered allmulticast mode [ 382.647690][T18346] tipc: Started in network mode [ 382.652634][T18346] tipc: Node identity 72990f6a7169, cluster identity 4711 [ 382.659850][T18346] tipc: Enabled bearer , priority 0 [ 382.696091][T18346] syzkaller0: entered promiscuous mode [ 382.701651][T18346] syzkaller0: entered allmulticast mode [ 382.912438][T18346] tipc: Resetting bearer [ 382.924705][T18343] tipc: Resetting bearer [ 382.931657][T18343] tipc: Disabling bearer [ 382.938959][T18355] syzkaller0: entered promiscuous mode [ 382.944478][T18355] syzkaller0: entered allmulticast mode [ 383.001734][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5240'. [ 383.010644][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5240'. [ 383.019623][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5240'. [ 383.067520][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 383.076442][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 383.313323][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5241'. [ 385.056578][T18419] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 385.070979][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 385.070992][ T29] audit: type=1326 audit(1761582474.063:56733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.0.5254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 385.143838][ T29] audit: type=1326 audit(1761582474.093:56734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.0.5254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 385.167502][ T29] audit: type=1326 audit(1761582474.093:56735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.0.5254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92a334f003 code=0x7ffc0000 [ 385.191137][ T29] audit: type=1326 audit(1761582474.093:56736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.0.5254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92a334f003 code=0x7ffc0000 [ 385.214577][ T29] audit: type=1326 audit(1761582474.093:56737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18418 comm="syz.0.5254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a334efc9 code=0x7ffc0000 [ 385.700460][T18433] __nla_validate_parse: 7 callbacks suppressed [ 385.700477][T18433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5259'. [ 385.820753][ T29] audit: type=1326 audit(1761582474.803:56738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 385.844435][ T29] audit: type=1326 audit(1761582474.803:56739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 385.868079][ T29] audit: type=1326 audit(1761582474.803:56740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 385.891721][ T29] audit: type=1326 audit(1761582474.803:56741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 385.915316][ T29] audit: type=1326 audit(1761582474.803:56742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42c869efc9 code=0x7ffc0000 [ 386.062142][T18452] loop0: detected capacity change from 0 to 128 [ 386.386513][T18459] ipvlan0: entered promiscuous mode [ 386.960352][T18476] ipvlan0: entered promiscuous mode [ 387.211683][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5273'. [ 387.220683][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5273'. [ 387.260227][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5273'. [ 387.404694][T18488] tipc: Enabling of bearer rejected, failed to enable media [ 387.414438][T18488] syzkaller0: entered promiscuous mode [ 387.419919][T18488] syzkaller0: entered allmulticast mode [ 387.486923][T18491] tipc: Enabled bearer , priority 0 [ 387.511747][T18491] syzkaller0: entered promiscuous mode [ 387.517268][T18491] syzkaller0: entered allmulticast mode [ 387.558082][T18491] tipc: Resetting bearer [ 387.579871][T18490] tipc: Resetting bearer [ 387.605685][T18490] tipc: Disabling bearer [ 387.759334][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 387.850080][T18511] syzkaller0: entered promiscuous mode [ 387.855580][T18511] syzkaller0: entered allmulticast mode [ 388.711094][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'. [ 388.720039][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'. [ 388.729186][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5292'. [ 388.838806][T18534] tipc: Enabled bearer , priority 0 [ 388.858134][T18534] syzkaller0: entered promiscuous mode [ 388.863768][T18534] syzkaller0: entered allmulticast mode [ 388.874102][T18534] tipc: Resetting bearer [ 388.880703][T18533] tipc: Resetting bearer [ 388.887535][T18533] tipc: Disabling bearer [ 388.943624][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 388.952531][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 388.961555][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5294'. [ 389.789306][ T4730] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 389.789928][ T7102] Bluetooth: hci1: command 0x1003 tx timeout [ 389.795761][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 390.244285][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 390.244300][ T29] audit: type=1326 audit(1761582479.233:57013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.283040][ T29] audit: type=1326 audit(1761582479.233:57014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.306706][ T29] audit: type=1326 audit(1761582479.273:57015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.330278][ T29] audit: type=1326 audit(1761582479.273:57016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.354177][ T29] audit: type=1326 audit(1761582479.273:57017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.377784][ T29] audit: type=1326 audit(1761582479.273:57018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.401277][ T29] audit: type=1326 audit(1761582479.273:57019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.424929][ T29] audit: type=1326 audit(1761582479.273:57020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.448444][ T29] audit: type=1326 audit(1761582479.273:57021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.472038][ T29] audit: type=1326 audit(1761582479.273:57022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.3.5312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff87a28efc9 code=0x7ffc0000 [ 390.541538][ T561] Bluetooth: hci0: Frame reassembly failed (-84) [ 390.603609][ T561] Bluetooth: hci1: Frame reassembly failed (-84) [ 390.731139][T18608] __nla_validate_parse: 6 callbacks suppressed [ 390.731150][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5317'. [ 390.767078][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 390.775988][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 390.784967][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 390.842552][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 390.851444][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 390.860369][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 390.978919][ T61] Bluetooth: hci2: Frame reassembly failed (-84) [ 392.589851][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 392.679285][ T3983] Bluetooth: hci1: command 0x1003 tx timeout [ 392.679354][ T7102] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 392.990632][ T3615] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 393.116957][T18665] syzkaller0: entered promiscuous mode [ 393.122500][T18665] syzkaller0: entered allmulticast mode [ 393.128379][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5335'. [ 393.261495][T18677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5339'. [ 393.589444][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 393.626542][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'. [ 393.953970][T18705] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 393.990551][T18707] syzkaller0: entered promiscuous mode [ 393.996113][T18707] syzkaller0: entered allmulticast mode [ 394.226923][T18722] loop0: detected capacity change from 0 to 512 [ 394.233795][T18722] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 394.244502][T18722] EXT4-fs (loop0): 1 truncate cleaned up [ 394.250642][T18722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.266179][T18722] ipvlan0: entered promiscuous mode [ 395.020711][T11513] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.290980][T18751] syzkaller0: entered promiscuous mode [ 395.296584][T18751] syzkaller0: entered allmulticast mode [ 395.448489][T18755] syzkaller0: entered promiscuous mode [ 395.454065][T18755] syzkaller0: entered allmulticast mode [ 395.629566][ T3615] Bluetooth: hci0: command 0x1003 tx timeout [ 395.637732][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 395.682213][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 395.682226][ T29] audit: type=1326 audit(1761582484.673:57552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.713422][ T29] audit: type=1326 audit(1761582484.703:57553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.737049][ T29] audit: type=1326 audit(1761582484.703:57554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.760670][ T29] audit: type=1326 audit(1761582484.703:57555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.767678][T18763] __nla_validate_parse: 7 callbacks suppressed [ 395.767691][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 395.784223][ T29] audit: type=1326 audit(1761582484.703:57556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.784264][ T29] audit: type=1326 audit(1761582484.703:57557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.784283][ T29] audit: type=1326 audit(1761582484.703:57558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.784302][ T29] audit: type=1326 audit(1761582484.703:57559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.790490][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 395.799294][ T29] audit: type=1326 audit(1761582484.703:57560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.926491][ T29] audit: type=1326 audit(1761582484.703:57561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18759 comm="syz.4.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 395.930413][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5370'. [ 396.066685][T18769] ipvlan0: entered promiscuous mode [ 396.349717][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5374'. [ 396.649884][T18786] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.713947][T18788] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.720220][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 396.733217][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 396.769327][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 396.905442][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5383'. [ 396.914434][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5383'. [ 396.979498][T18801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5383'. [ 397.326549][T18818] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 397.841106][T18854] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 397.988850][T18863] ipvlan0: entered promiscuous mode [ 398.971516][T18899] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 399.548051][T18915] syzkaller0: entered promiscuous mode [ 399.553585][T18915] syzkaller0: entered allmulticast mode [ 399.694319][T18917] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 400.053735][T18935] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 400.225668][T18947] ipvlan0: entered promiscuous mode [ 400.404957][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 401.017356][T18961] __nla_validate_parse: 26 callbacks suppressed [ 401.017370][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5431'. [ 401.037471][ T29] kauditd_printk_skb: 1259 callbacks suppressed [ 401.037483][ T29] audit: type=1326 audit(1761582490.023:58821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.067997][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5432'. [ 401.076898][ T29] audit: type=1326 audit(1761582490.033:58822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.100565][ T29] audit: type=1326 audit(1761582490.033:58823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.124128][ T29] audit: type=1326 audit(1761582490.033:58824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.147805][ T29] audit: type=1326 audit(1761582490.033:58825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.171579][ T29] audit: type=1326 audit(1761582490.033:58826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.195387][ T29] audit: type=1326 audit(1761582490.033:58827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.218963][ T29] audit: type=1326 audit(1761582490.033:58828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.242593][ T29] audit: type=1326 audit(1761582490.033:58829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.266241][ T29] audit: type=1326 audit(1761582490.033:58830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18960 comm="syz.4.5431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 401.946967][T18982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 402.157641][T18993] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5440'. [ 402.255143][T18996] ipvlan0: entered promiscuous mode [ 402.347797][T19002] syzkaller0: entered promiscuous mode [ 402.353345][T19002] syzkaller0: entered allmulticast mode [ 402.429295][ T7102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 402.526866][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 402.535778][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 402.544891][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 402.601891][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 402.610782][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 402.637499][T19008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5446'. [ 402.793698][T19013] syzkaller0: entered promiscuous mode [ 402.799310][T19013] syzkaller0: entered allmulticast mode [ 403.136908][T19019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5449'. [ 403.578429][T19031] syzkaller0: entered promiscuous mode [ 403.583961][T19031] syzkaller0: entered allmulticast mode [ 403.625458][T19033] syzkaller0: entered promiscuous mode [ 403.631049][T19033] syzkaller0: entered allmulticast mode [ 404.167706][T19044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 404.362576][T19052] ipvlan0: entered promiscuous mode [ 404.705144][T19062] syzkaller0: entered promiscuous mode [ 404.710699][T19062] syzkaller0: entered allmulticast mode [ 405.264145][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 405.414029][T19082] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 405.789294][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 405.795575][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 405.830676][T19092] syzkaller0: entered promiscuous mode [ 405.836819][T19092] syzkaller0: entered allmulticast mode [ 405.848561][T19095] tipc: Enabled bearer , priority 0 [ 405.856001][T19095] syzkaller0: entered promiscuous mode [ 405.861540][T19095] syzkaller0: entered allmulticast mode [ 405.877271][T19093] tipc: Resetting bearer [ 405.883800][T19093] tipc: Disabling bearer [ 405.940688][T19100] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 406.059612][ T29] kauditd_printk_skb: 994 callbacks suppressed [ 406.059626][ T29] audit: type=1326 audit(1761582495.053:59825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.4.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.089453][ T29] audit: type=1326 audit(1761582495.053:59826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19105 comm="syz.4.5483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.145561][T19111] syzkaller0: entered promiscuous mode [ 406.151062][T19111] syzkaller0: entered allmulticast mode [ 406.330370][ T29] audit: type=1326 audit(1761582495.323:59827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.357660][ T29] audit: type=1326 audit(1761582495.343:59828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.381261][ T29] audit: type=1326 audit(1761582495.343:59829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.404872][ T29] audit: type=1326 audit(1761582495.343:59830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.428340][ T29] audit: type=1326 audit(1761582495.343:59831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.451950][ T29] audit: type=1326 audit(1761582495.343:59832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.475733][ T29] audit: type=1326 audit(1761582495.343:59833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.499180][ T29] audit: type=1326 audit(1761582495.343:59834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19116 comm="syz.4.5487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f750ce0efc9 code=0x7ffc0000 [ 406.765255][T19122] __nla_validate_parse: 11 callbacks suppressed [ 406.765267][T19122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5488'. [ 406.802061][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'. [ 406.811007][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'. [ 406.820962][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5489'. [ 406.889295][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 407.066098][T19134] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 407.109147][T19136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5493'. [ 407.137059][T19138] syzkaller0: entered promiscuous mode [ 407.142676][T19138] syzkaller0: entered allmulticast mode [ 407.167001][ T5966] Bluetooth: hci2: Frame reassembly failed (-84) [ 407.309305][ T7102] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 407.315483][ T4730] Bluetooth: hci1: command 0x1003 tx timeout [ 407.420778][T19157] ipvlan0: entered promiscuous mode [ 408.181540][T19162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19162 comm=syz.1.5504 [ 408.198919][T19162] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5504'. [ 408.909275][ T7102] Bluetooth: hci0: command 0x1003 tx timeout [ 408.909276][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.061314][T19181] syzkaller0: entered promiscuous mode [ 409.066865][T19181] syzkaller0: entered allmulticast mode [ 409.200746][T19183] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 409.216125][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.229495][ T7102] Bluetooth: hci2: command 0x1003 tx timeout [ 409.229599][ T3983] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 409.251628][ T5966] Bluetooth: hci1: Frame reassembly failed (-84) [ 410.492756][T19200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5517'. [ 410.531284][T19205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5519'. [ 411.229284][ T7102] Bluetooth: hci0: command 0x1003 tx timeout [ 411.229283][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.229395][ T7102] ================================================================== [ 411.229418][ T7102] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 411.229442][ T7102] [ 411.229449][ T7102] write to 0xffffffff88e84290 of 13 bytes by task 3615 on cpu 1: [ 411.229467][ T7102] vsnprintf+0x2ce/0x890 [ 411.229489][ T7102] vscnprintf+0x41/0x90 [ 411.229515][ T7102] printk_sprint+0x30/0x2d0 [ 411.229535][ T7102] vprintk_store+0x599/0x860 [ 411.229555][ T7102] vprintk_emit+0x10d/0x580 [ 411.229582][ T7102] vprintk_default+0x26/0x30 [ 411.229603][ T7102] vprintk+0x1d/0x30 [ 411.229628][ T7102] _printk+0x79/0xa0 [ 411.229653][ T7102] bt_err+0x9d/0xd0 [ 411.229679][ T7102] hci_dev_open_sync+0xfa4/0x2290 [ 411.229707][ T7102] hci_power_on+0xef/0x390 [ 411.229734][ T7102] process_scheduled_works+0x4ce/0x9d0 [ 411.229759][ T7102] worker_thread+0x582/0x770 [ 411.229774][ T7102] kthread+0x489/0x510 [ 411.229795][ T7102] ret_from_fork+0x122/0x1b0 [ 411.229815][ T7102] ret_from_fork_asm+0x1a/0x30 [ 411.229837][ T7102] [ 411.229844][ T7102] read to 0xffffffff88e84298 of 8 bytes by task 7102 on cpu 0: [ 411.229860][ T7102] data_push_tail+0xfd/0x420 [ 411.229880][ T7102] data_alloc+0xfb/0x2e0 [ 411.229897][ T7102] prb_reserve+0x807/0xaf0 [ 411.229914][ T7102] vprintk_store+0x56d/0x860 [ 411.229933][ T7102] vprintk_emit+0x10d/0x580 [ 411.229953][ T7102] vprintk_default+0x26/0x30 [ 411.229974][ T7102] vprintk+0x1d/0x30 [ 411.229999][ T7102] _printk+0x79/0xa0 [ 411.230025][ T7102] bt_err+0x9d/0xd0 [ 411.230049][ T7102] hci_cmd_timeout+0x97/0x140 [ 411.230076][ T7102] process_scheduled_works+0x4ce/0x9d0 [ 411.230105][ T7102] worker_thread+0x582/0x770 [ 411.230123][ T7102] kthread+0x489/0x510 [ 411.230144][ T7102] ret_from_fork+0x122/0x1b0 [ 411.230163][ T7102] ret_from_fork_asm+0x1a/0x30 [ 411.230185][ T7102] [ 411.230190][ T7102] value changed: 0x00000000fffff8ef -> 0x3a30696368203a68 [ 411.230202][ T7102] [ 411.230207][ T7102] Reported by Kernel Concurrency Sanitizer on: [ 411.230222][ T7102] CPU: 0 UID: 0 PID: 7102 Comm: kworker/u9:4 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 411.230253][ T7102] Tainted: [W]=WARN [ 411.230261][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.230275][ T7102] Workqueue: hci0 hci_cmd_timeout [ 411.230303][ T7102] ================================================================== [ 411.309314][ T3983] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 411.312197][ T7102] Bluetooth: hci1: command 0x1003 tx timeout