last executing test programs: 7m48.695451255s ago: executing program 1 (id=2559): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') pread64(r5, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) 7m47.263434691s ago: executing program 1 (id=2574): syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7m46.277906069s ago: executing program 1 (id=2584): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00') pread64(r5, &(0x7f000001a240)=""/102385, 0x18ff1, 0x100008) 7m44.449726435s ago: executing program 1 (id=2604): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40c8, &(0x7f0000000200), 0xfb, 0x496, &(0x7f0000000f40)="$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") mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) 7m44.161912304s ago: executing program 1 (id=2605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xf5, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="ae1d4b", 0x3}], 0x1}}], 0x1, 0x0) 7m40.997040606s ago: executing program 1 (id=2640): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x2, {0x2, 0x4e1f, @multicast1}, 'vxcan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m40.988718626s ago: executing program 32 (id=2640): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x2, {0x2, 0x4e1f, @multicast1}, 'vxcan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000400)=""/4096, &(0x7f0000000000)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.872096005s ago: executing program 2 (id=10768): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 1.829055935s ago: executing program 2 (id=10770): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) 1.488375514s ago: executing program 2 (id=10777): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 1.482190724s ago: executing program 4 (id=10778): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000140000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000940)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff7b) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1c1002, 0x14a) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x22b, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0xe, 0x3, 0x601e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r0, r3, r3, r0, r3, r1], &(0x7f00000007c0)=[{0x2, 0x5, 0xe, 0x9}, {0x3, 0x5, 0x4}, {0x2, 0x4, 0x10, 0x8}, {0x5, 0x2, 0x9, 0x7}, {0x0, 0x5, 0x10, 0xa}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_clone3(&(0x7f00000076c0)={0x40008080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc02000007000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 1.197072074s ago: executing program 5 (id=10783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.148663644s ago: executing program 5 (id=10784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.061207544s ago: executing program 4 (id=10787): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) 1.036425023s ago: executing program 5 (id=10789): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2000400c}, 0x4000) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r3 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r3, &(0x7f00000005c0)={&(0x7f00000002c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/4, 0x4}, {&(0x7f0000000500)=""/84, 0x54}], 0x3}, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="14000000100001000000000000000000003c5d46eb7ca73f560a0b040000000000000000020000050900010073797a30000000000900020073797a3200000000400004803c00018008000100636d700030000280080002400000000508000240000000001c00038015000000007b1e98fe20374aa7a8464f53f55e166d000000140000001100010000000000000000000200000a"], 0x94}}, 0x14b6deac033214c2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x12041, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.007294253s ago: executing program 3 (id=10790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x30040840) 960.342893ms ago: executing program 3 (id=10791): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 871.720923ms ago: executing program 5 (id=10793): pipe(&(0x7f0000000180)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0xb0, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb87}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x319e34dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f198338}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16a16d5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b58}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x263c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e4b5e33}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x14, 0xc, 0x0, 0x1, [{0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8e54aeb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x14, 0x8, 0x0, 0x1, [{0x4}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ab70bbf}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8085}, 0x20000002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0214a3090400000028bd7000fbdbdf250200180000f8f1b5c0d7f60004d4000004d300000000fd6c3fb35518b2d767d044c6e55d887986968c8d36dea93ba7d34018a26954b6f5d61a363664de67510c1a0a20333d547d061b001d888030bd322e0fc2dba0ad084854b5f31258f7a441a5d694b971c631288d498eda60382ba8b465bc5644a90793b33332ee8b4d0a0ce29b7b570101668557d8542ebc7f42785e5390b54d951b7a47828a018decdaed77b2fb6cf6be81fac1494d1b4551899099e9c3c63e"], 0x20}}, 0x80) 583.646662ms ago: executing program 5 (id=10796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0214a3090400000028bd7000fbdbdf2502001800"], 0x20}}, 0x80) 533.405342ms ago: executing program 0 (id=10797): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x40002119, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xffe0}, {0x1, 0x5}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='f2fs_sync_file_exit\x00', r1, 0x0, 0x1}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x747, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0x3, 0xffff, 0x7, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r12, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x0) preadv(r10, &(0x7f0000000840)=[{&(0x7f0000000880)=""/4088, 0xff8}], 0x1, 0x8, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r14, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x6, 0x1e, 0xfc, &(0x7f0000000240)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) setpriority(0x0, 0x0, 0x3) 532.700812ms ago: executing program 5 (id=10798): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000280), 0x5, 0x777, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvbJImTauJIGg9BQQNlCamxlbBQ8WDCBYKerZdNttQs8mW7KY0IaBFBC+CigfBXnpWrDdv4o+r/hceRCmaFiseJDKbnXbb7OZHk+xG9/OByb43bzZvvvvmx9udx0wAXWsk/ZOLOBIRHyYRQ/X5SUT01VK9EafWlru9slxIpyRWV1//Paktc2tluRAN70kdqmcej4jv34s4mltfb2VxaSZfKhXn6/nx6uzF8cri0rELs/np4nRx7sTE5OTxk8+dPLF7sf7509Lh3z565ekvT/397mPXP/ghiVNxuF7WGMduGYmR+mfSl36E93h5tyvrsKTTK8ADSXfNnrW9PI7EUPTUUgDA/9nbEbEKAHSZxPkfALpM9jvArZXlQjZ19heJ9rrxUkQMrMWfXd9cK+mtX7MbqF0HHbyV3HNlJImI4V2ofyQirn795hfpFHt0HRKgmXeuRMS54ZH1x/9k3ZiF7Xpmg7ID9deR++Y7/kH7fJv2f55v1v/L3en/RJP+T3+TffdBbLr/H9yFSjaQ9v9ebBjbdrsh/rrhnnruoVqfry85f6FUTI9tD0fEaPT1p/mJDeoYvfnPzVZljf2/Pz5+6/O0/vT17hK5X3v7733PVL6a30nMjW5ciXiit1n8yZ32T1r0f89ssY5XX3j/s1ZlafxpvNm0Pv6oj07aG6vXIp5q2v53R7QlLccnDsXJE+O1zWE82yia+OrnTwdb1d/Y/umU1p99F2iHtP0HN45/OGkcr1nZfh0/Xhv6rlXZ5vE33/4PJG/U0lk/4nK+Wp2fiDiQvLZ+/vG7783y2fJp/KNPNt//N9r+0++E57YQ+9VvNi7fD+0/ta32337i+u2Znlb1b639J2up0fqcrRz/trqCO/nsAAAAAAAAAAAAAAAAAAAAAAAAAGCrchFxOJLc2J10Ljc2tvYM70djMFcqV6pHz5cX5qai9qzs4ejLZbe6HGq4H+pE/X74Wf74fflnI+KRiPik/2CS3UdxqsOxAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDmUIvn/6d+6e/02gEAe2ag0ysAALSd8z8AdB/nfwDoPs7/ANB9nP8BoPs4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDHzpw+nU6rf60sF9L81KXFhZnypWNTxYGIWCiMFcrzF8emy+XpUnGsUJ7d7P+VyuWLkzG3cHm8WqxUxyuLS2dnywtz1bMXZvPTxbPFvrZEBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbU1lcmsmXSsV5iQdIrLalroF9EOkmiZ765rRf1qetiWR9URL7YcV2lOjwgQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+LfAAAA//9Ish6y") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf2501"], 0x18}}, 0x2000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r1) 459.535882ms ago: executing program 2 (id=10799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[], 0x0) 402.511302ms ago: executing program 4 (id=10800): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x3}, {0x8}]}}]}]}, 0x3c}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 238.746211ms ago: executing program 2 (id=10809): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 167.773001ms ago: executing program 0 (id=10810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r1}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000001080)) 89.587411ms ago: executing program 3 (id=10811): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000001c0)={0xfffffff9, 0x0, 0x300, 0x1, 0x4, "f996ff109a04000000008000", 0x0, 0xa56e}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 54.265871ms ago: executing program 0 (id=10812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002c"], 0x18}}, 0x2000) 21.063801ms ago: executing program 0 (id=10813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="0214a3090400000028bd7000fbdb"], 0x20}}, 0x80) 0s ago: executing program 4 (id=10814): bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f00000003c0)='sched_switch\x00', r3, 0x0, 0xc2}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c0", 0x2f) write$qrtrtun(r5, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c", 0x2b) write$qrtrtun(r5, &(0x7f0000000c00)="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", 0x3d1) write$qrtrtun(r5, &(0x7f00000003c0)="b9f7e454d6ce3c38320af2cda788e32c79a152b0dc36b2bdac6494a7d1f3e718f268a55c29480f0c36d8de3d666657", 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): z.3.8933'. [ 567.520506][T27649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.527592][T27649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.553767][T27649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.634106][T27649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.641256][T27649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.667302][T27649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.736983][T27649] hsr_slave_0: entered promiscuous mode [ 567.746039][T27649] hsr_slave_1: entered promiscuous mode [ 567.754622][T27649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.773067][T27649] Cannot create hsr debugfs directory [ 567.788509][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8942'. [ 568.200861][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 568.200876][ T29] audit: type=1326 audit(2000000344.090:41460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.251462][ T29] audit: type=1326 audit(2000000344.130:41461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.275188][ T29] audit: type=1326 audit(2000000344.130:41462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.298901][ T29] audit: type=1326 audit(2000000344.130:41463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.322727][ T29] audit: type=1326 audit(2000000344.130:41464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.346551][ T29] audit: type=1326 audit(2000000344.130:41465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.370357][ T29] audit: type=1326 audit(2000000344.130:41466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.394088][ T29] audit: type=1326 audit(2000000344.130:41467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.417924][ T29] audit: type=1326 audit(2000000344.130:41468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.441804][ T29] audit: type=1326 audit(2000000344.130:41469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27764 comm="syz.4.8947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 568.482988][T27649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 568.504700][T27649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 568.537265][T27649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 568.550076][T27649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.596745][T27779] can: request_module (can-proto-0) failed. [ 568.624863][T27779] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 568.654328][T27791] veth0_vlan: entered allmulticast mode [ 568.713877][T27791] veth0_vlan: left promiscuous mode [ 568.727358][T27791] veth0_vlan: entered promiscuous mode [ 568.774665][T27806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8953'. [ 568.807452][T27649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.841603][T27649] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.863990][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.871138][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.908068][T10738] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.915193][T10738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.050441][T27649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.135644][T27861] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8966'. [ 569.146802][T27861] 0ªX¹¦À: renamed from 61ªX¹¦À [ 569.163885][T27861] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 569.211749][T27871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8968'. [ 569.240602][T27649] veth0_vlan: entered promiscuous mode [ 569.269306][T27649] veth1_vlan: entered promiscuous mode [ 569.292336][T27649] veth0_macvtap: entered promiscuous mode [ 569.302640][T27649] veth1_macvtap: entered promiscuous mode [ 569.315770][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.326472][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.336418][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.346963][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.356955][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.367691][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.377648][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.388150][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.398118][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.408618][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.418928][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.429384][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.439353][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.449949][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.459860][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.470346][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.480254][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.490741][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.494052][T27886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.500593][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.512925][T27886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.519509][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.539239][T27649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.547527][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.558016][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.567978][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.578440][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.588346][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.598978][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.609332][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.619796][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.619812][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.619827][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.619842][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.619908][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.619927][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.619941][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.619951][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.619964][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.620027][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.620044][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.620063][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.620088][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.620106][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.620123][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.620140][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.783117][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.783135][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.783225][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.783244][T27649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.823802][T27649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.825742][T27649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.854099][T27649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.862979][T27649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.871840][T27649] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.880630][T27649] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.966313][T27903] tap0: tun_chr_ioctl cmd 2147767517 [ 569.983760][T27904] 0ªX¹¦À: renamed from caif0 [ 569.990589][T27904] 0ªX¹¦À: entered allmulticast mode [ 569.996069][T27904] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 570.086800][T27908] veth0_vlan: left promiscuous mode [ 570.109883][T27908] veth0_vlan: entered promiscuous mode [ 570.172710][T27915] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 570.309428][T27925] __nla_validate_parse: 1 callbacks suppressed [ 570.309498][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8985'. [ 570.383541][T27934] tap0: tun_chr_ioctl cmd 2147767517 [ 570.457539][T27943] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 570.462422][T27948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8994'. [ 570.542309][T27957] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8992'. [ 570.553428][T27957] 1ªX¹¦À: renamed from 60ªX¹¦À [ 570.564484][T27957] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 570.662050][T27958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8997'. [ 570.714569][T27965] can: request_module (can-proto-0) failed. [ 570.863177][T27978] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 571.102978][T27998] can: request_module (can-proto-0) failed. [ 571.172264][T28004] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 571.310816][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9023'. [ 571.444702][T28017] loop2: detected capacity change from 0 to 8192 [ 571.544232][T28031] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 571.780899][T28047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9035'. [ 571.914922][T28069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.923912][T28069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.209398][T28096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9059'. [ 572.600549][T28123] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 572.639613][T28128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.659729][T28128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.864104][T28140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9079'. [ 572.910785][T28143] tap0: tun_chr_ioctl cmd 2147767517 [ 572.952427][T28147] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 572.982909][T28145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9078'. [ 573.014169][T28152] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 573.209272][ T29] kauditd_printk_skb: 728 callbacks suppressed [ 573.209289][ T29] audit: type=1400 audit(2000000349.100:42198): avc: denied { create } for pid=28167 comm="syz.3.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.236459][ T29] audit: type=1400 audit(2000000349.100:42199): avc: denied { bind } for pid=28167 comm="syz.3.9091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.256529][ T29] audit: type=1400 audit(2000000349.100:42200): avc: denied { write } for pid=28167 comm="syz.3.9091" path="socket:[96410]" dev="sockfs" ino=96410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.280494][ T29] audit: type=1400 audit(2000000349.110:42201): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 573.302722][ T29] audit: type=1400 audit(2000000349.110:42202): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.324415][ T29] audit: type=1400 audit(2000000349.110:42203): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 573.347144][ T29] audit: type=1400 audit(2000000349.110:42204): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 573.431999][ T29] audit: type=1326 audit(2000000349.320:42205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28171 comm="syz.3.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 573.486873][ T29] audit: type=1326 audit(2000000349.350:42206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28171 comm="syz.3.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 573.510646][ T29] audit: type=1326 audit(2000000349.350:42207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28171 comm="syz.3.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 573.588435][T28180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9095'. [ 573.622727][T28182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.631362][T28182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.712389][T28190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.721176][T28190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.187161][T28220] tap0: tun_chr_ioctl cmd 2147767517 [ 574.331768][T28228] loop2: detected capacity change from 0 to 8192 [ 575.055176][T28247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.065615][T28247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.102603][T28251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.111206][T28251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.471205][T28269] __nla_validate_parse: 1 callbacks suppressed [ 575.471220][T28269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9133'. [ 575.523392][T28273] tap0: tun_chr_ioctl cmd 2147767517 [ 575.954478][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9144'. [ 576.283846][T28303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.292562][T28303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.785397][T28325] tap0: tun_chr_ioctl cmd 2147767517 [ 576.888195][T28334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9157'. [ 577.434536][T28356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.444457][T28356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.708427][T28374] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9175'. [ 577.725669][T28374] 0ªX¹¦À: renamed from 61ªX¹¦À [ 577.739919][T28374] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 577.778467][T28375] veth0_vlan: left promiscuous mode [ 577.797043][T28375] veth0_vlan: entered promiscuous mode [ 577.931318][T28381] loop2: detected capacity change from 0 to 512 [ 577.977436][T28381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.990724][T28381] ext4 filesystem being mounted at /599/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.023293][T19870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.206372][T28410] lo speed is unknown, defaulting to 1000 [ 578.295264][T28410] chnl_net:caif_netlink_parms(): no params data found [ 578.341471][T28410] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.348810][T28410] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.356365][T28410] bridge_slave_0: entered allmulticast mode [ 578.362947][T28410] bridge_slave_0: entered promiscuous mode [ 578.369883][T28410] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.377103][T28410] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.384759][T28410] bridge_slave_1: entered allmulticast mode [ 578.391380][T28410] bridge_slave_1: entered promiscuous mode [ 578.414424][T28410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.435051][T28410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.470061][T28410] team0: Port device team_slave_0 added [ 578.490310][T28410] team0: Port device team_slave_1 added [ 578.511452][T28410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.518623][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.544775][T28410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.561040][T28410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.568178][T28410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.594665][T28410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.629360][T28410] hsr_slave_0: entered promiscuous mode [ 578.635710][T28438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.649760][T28438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.658370][T28410] hsr_slave_1: entered promiscuous mode [ 578.664976][T28410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.673889][T28410] Cannot create hsr debugfs directory [ 578.730463][T28410] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.764183][ T29] kauditd_printk_skb: 757 callbacks suppressed [ 578.764254][ T29] audit: type=1400 audit(2000000354.650:42965): avc: denied { create } for pid=28444 comm="syz.4.9199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 578.792210][ T29] audit: type=1400 audit(2000000354.680:42966): avc: denied { setopt } for pid=28444 comm="syz.4.9199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 578.816702][T28410] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.839404][ T29] audit: type=1326 audit(2000000354.730:42967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 578.880845][ T29] audit: type=1326 audit(2000000354.750:42968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 578.904574][ T29] audit: type=1326 audit(2000000354.750:42969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 578.928398][ T29] audit: type=1326 audit(2000000354.750:42970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.4.9201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 578.967618][T28410] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.017385][T28458] veth0_vlan: entered allmulticast mode [ 579.044475][T28410] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.056450][T28458] veth0_vlan: left promiscuous mode [ 579.067524][T28458] veth0_vlan: entered promiscuous mode [ 579.113668][T28458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9205'. [ 579.183847][T28410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.205064][T28410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.227577][T28410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.240419][ T29] audit: type=1326 audit(2000000355.110:42971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.3.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 579.241347][T28410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.264106][ T29] audit: type=1326 audit(2000000355.110:42972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.3.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 579.264182][ T29] audit: type=1326 audit(2000000355.110:42973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.3.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 579.264214][ T29] audit: type=1326 audit(2000000355.110:42974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28471 comm="syz.3.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 579.397542][T28410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.406252][T28479] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 579.422608][T28410] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.456487][T28410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.466944][T28410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.490387][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.497524][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.516482][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.523610][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.558038][T28488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9214'. [ 579.895772][T28410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.924509][T28502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.933428][T28502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.029211][T28410] veth0_vlan: entered promiscuous mode [ 580.042910][T28410] veth1_vlan: entered promiscuous mode [ 580.064334][T28410] veth0_macvtap: entered promiscuous mode [ 580.073164][T28410] veth1_macvtap: entered promiscuous mode [ 580.088438][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.099122][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.109015][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.119543][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.129492][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.140008][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.149892][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.160702][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.170674][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.181126][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.190996][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.201544][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.211653][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.222229][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.232073][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.242563][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.252467][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.262929][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.272794][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.283235][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.293081][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.303672][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.364051][T28410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.372551][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.383148][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.393023][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.403569][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.413459][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.424246][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.435618][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.446166][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.456026][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.466585][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.476495][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.487030][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.497021][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.507633][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.517595][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.528293][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.538153][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.548637][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.558665][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.569144][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.579078][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.589615][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.599526][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.610181][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.620063][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.630528][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.640724][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.651685][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.661572][T28410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.672237][T28410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.682898][T28410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.695111][T28410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.703953][T28410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.712715][T28410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.721545][T28410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.918520][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9227'. [ 581.106873][T28541] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 581.150588][T28546] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 581.580831][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9241'. [ 581.910996][T28578] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 582.592901][T28616] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 582.940240][T28636] tap0: tun_chr_ioctl cmd 2147767517 [ 583.202851][T28647] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 583.856462][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 583.856507][ T29] audit: type=1326 audit(2000000359.750:43647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 583.888301][ T29] audit: type=1326 audit(2000000359.750:43648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 583.912199][ T29] audit: type=1326 audit(2000000359.750:43649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 583.935753][ T29] audit: type=1326 audit(2000000359.750:43650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 583.959464][ T29] audit: type=1326 audit(2000000359.750:43651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 583.983079][ T29] audit: type=1326 audit(2000000359.750:43652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 584.007218][ T29] audit: type=1326 audit(2000000359.750:43653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 584.031096][ T29] audit: type=1326 audit(2000000359.750:43654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 584.054667][ T29] audit: type=1326 audit(2000000359.750:43655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 584.078324][ T29] audit: type=1326 audit(2000000359.750:43656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28680 comm="syz.0.9289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6df655d29 code=0x7ffc0000 [ 584.697573][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9314'. [ 584.711600][T28741] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 584.829413][T28753] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9319'. [ 584.838892][T28753] 0ªX¹¦À: renamed from caif0 [ 584.845400][T28753] 0ªX¹¦À: entered allmulticast mode [ 584.850811][T28753] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 585.143140][T28761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.153061][T28761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.491090][T28786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9327'. [ 585.872039][T28788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.890986][T28788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.060787][T28802] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 586.115658][T28808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.126909][T28808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.175052][T28810] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 586.238304][T28820] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 586.610752][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9356'. [ 586.697082][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9354'. [ 586.825106][T28852] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 587.274206][T28871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.283726][T28873] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9367'. [ 587.291658][T28871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.304427][T28873] 1ªX¹¦À: renamed from 60ªX¹¦À [ 587.311435][T28873] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 587.537434][T28894] loop2: detected capacity change from 0 to 8192 [ 588.042987][T28930] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 588.067815][T28932] tap0: tun_chr_ioctl cmd 2147767517 [ 588.221584][T28947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.241151][T28947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.570253][T28917] syz.2.9384 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 588.585260][T28917] CPU: 0 UID: 0 PID: 28917 Comm: syz.2.9384 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 588.596057][T28917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.606212][T28917] Call Trace: [ 588.609509][T28917] [ 588.612446][T28917] dump_stack_lvl+0xf2/0x150 [ 588.617079][T28917] dump_stack+0x15/0x1a [ 588.621255][T28917] dump_header+0x83/0x2d0 [ 588.625663][T28917] oom_kill_process+0x341/0x4c0 [ 588.630572][T28917] out_of_memory+0x9af/0xbe0 [ 588.635186][T28917] ? css_next_descendant_pre+0x11c/0x140 [ 588.640915][T28917] mem_cgroup_out_of_memory+0x13e/0x190 [ 588.646495][T28917] try_charge_memcg+0x508/0x7f0 [ 588.651371][T28917] obj_cgroup_charge_pages+0xbd/0x1a0 [ 588.656828][T28917] __memcg_kmem_charge_page+0x9d/0x170 [ 588.662314][T28917] __alloc_pages_noprof+0x1bc/0x340 [ 588.667618][T28917] alloc_pages_mpol_noprof+0xec/0x1e0 [ 588.673266][T28917] alloc_pages_noprof+0xe1/0x100 [ 588.678241][T28917] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 588.684158][T28917] __kvmalloc_node_noprof+0x121/0x170 [ 588.689586][T28917] ? ip_set_alloc+0x1f/0x30 [ 588.694144][T28917] ip_set_alloc+0x1f/0x30 [ 588.698545][T28917] hash_ipport_create+0x4dc/0x9f0 [ 588.703621][T28917] ? __pfx_hash_ipport_create+0x10/0x10 [ 588.709188][T28917] ip_set_create+0x359/0x8a0 [ 588.713864][T28917] ? strnstr+0xe1/0x100 [ 588.718053][T28917] ? nfnetlink_rcv_msg+0x3ef/0x570 [ 588.723188][T28917] nfnetlink_rcv_msg+0x4a9/0x570 [ 588.728166][T28917] netlink_rcv_skb+0x12c/0x230 [ 588.733005][T28917] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 588.738711][T28917] nfnetlink_rcv+0x16c/0x15d0 [ 588.743493][T28917] ? kmem_cache_free+0xdc/0x2d0 [ 588.748379][T28917] ? nlmon_xmit+0x51/0x60 [ 588.752723][T28917] ? __kfree_skb+0x102/0x150 [ 588.757328][T28917] ? consume_skb+0x49/0x160 [ 588.761883][T28917] ? nlmon_xmit+0x51/0x60 [ 588.766314][T28917] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 588.771644][T28917] ? __dev_queue_xmit+0xb6e/0x2090 [ 588.776809][T28917] ? ref_tracker_free+0x3a5/0x410 [ 588.781880][T28917] ? __dev_queue_xmit+0x186/0x2090 [ 588.787013][T28917] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 588.792520][T28917] netlink_unicast+0x599/0x670 [ 588.797381][T28917] netlink_sendmsg+0x5cc/0x6e0 [ 588.802173][T28917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.807597][T28917] __sock_sendmsg+0x140/0x180 [ 588.812486][T28917] ____sys_sendmsg+0x312/0x410 [ 588.817281][T28917] __sys_sendmsg+0x19d/0x230 [ 588.821904][T28917] __x64_sys_sendmsg+0x46/0x50 [ 588.828421][T28917] x64_sys_call+0x2734/0x2dc0 [ 588.833141][T28917] do_syscall_64+0xc9/0x1c0 [ 588.837710][T28917] ? clear_bhb_loop+0x55/0xb0 [ 588.842482][T28917] ? clear_bhb_loop+0x55/0xb0 [ 588.847223][T28917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.853149][T28917] RIP: 0033:0x7f6826e85d29 [ 588.857608][T28917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.877395][T28917] RSP: 002b:00007f68254f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.885824][T28917] RAX: ffffffffffffffda RBX: 00007f6827075fa0 RCX: 00007f6826e85d29 [ 588.893899][T28917] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000009 [ 588.902168][T28917] RBP: 00007f6826f01b08 R08: 0000000000000000 R09: 0000000000000000 [ 588.910449][T28917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.918439][T28917] R13: 0000000000000000 R14: 00007f6827075fa0 R15: 00007fffd2af8908 [ 588.926476][T28917] [ 588.929702][T28917] memory: usage 307200kB, limit 307200kB, failcnt 47 [ 588.936469][T28917] memory+swap: usage 307232kB, limit 9007199254740988kB, failcnt 0 [ 588.944440][T28917] kmem: usage 305164kB, limit 9007199254740988kB, failcnt 0 [ 588.951802][T28917] Memory cgroup stats for /syz2: [ 588.951871][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 588.951887][ T29] audit: type=1326 audit(2000000364.470:44225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28963 comm="syz.5.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 588.955745][T28917] cache 299008 [ 588.956930][ T29] audit: type=1326 audit(2000000364.470:44226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28963 comm="syz.5.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 588.963048][T28917] rss 1785856 [ 588.963058][T28917] shmem 0 [ 588.963064][T28917] mapped_file 299008 [ 588.963072][T28917] dirty 106496 [ 588.963078][T28917] writeback 0 [ 588.963101][T28917] workingset_refault_anon 6 [ 588.986477][ T29] audit: type=1326 audit(2000000364.490:44227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28963 comm="syz.5.9404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 588.989850][T28917] workingset_refault_file 0 [ 588.989862][T28917] swap 32768 [ 589.066770][T28917] swapcached 0 [ 589.070605][T28917] pgpgin 688219 [ 589.074092][T28917] pgpgout 687710 [ 589.077765][T28917] pgfault 822484 [ 589.081337][T28917] pgmajfault 14 [ 589.084930][T28917] inactive_anon 1777664 [ 589.089131][T28917] active_anon 8192 [ 589.092862][T28917] inactive_file 0 [ 589.096545][T28917] active_file 299008 [ 589.100455][T28917] unevictable 0 [ 589.103941][T28917] hierarchical_memory_limit 314572800 [ 589.109431][T28917] hierarchical_memsw_limit 9223372036854771712 [ 589.115748][T28917] total_cache 299008 [ 589.119657][T28917] total_rss 1785856 [ 589.123474][T28917] total_shmem 0 [ 589.126976][T28917] total_mapped_file 299008 [ 589.131435][T28917] total_dirty 106496 [ 589.135431][T28917] total_writeback 0 [ 589.139262][T28917] total_workingset_refault_anon 6 [ 589.144726][T28917] total_workingset_refault_file 0 [ 589.149881][T28917] total_swap 32768 [ 589.153690][T28917] total_swapcached 0 [ 589.157818][T28917] total_pgpgin 688219 [ 589.161898][T28917] total_pgpgout 687710 [ 589.164238][ T29] audit: type=1326 audit(2000000365.050:44228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.165999][T28917] total_pgfault 822484 [ 589.166011][T28917] total_pgmajfault 14 [ 589.166021][T28917] total_inactive_anon 1777664 [ 589.166110][T28917] total_active_anon 8192 [ 589.166119][T28917] total_inactive_file 0 [ 589.166129][T28917] total_active_file 299008 [ 589.207714][T28970] tap0: tun_chr_ioctl cmd 2147767517 [ 589.211291][T28917] total_unevictable 0 [ 589.211303][T28917] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 589.219180][ T29] audit: type=1326 audit(2000000365.080:44229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.221245][T28917] ,oom_memcg=/syz2,task_memcg=/syz2 [ 589.225245][ T29] audit: type=1326 audit(2000000365.090:44230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.234198][T28917] ,task=syz.2.9384,pid=28915,uid=0 [ 589.234221][T28917] Memory cgroup out of memory: Killed process 28917 (syz.2.9384) total-vm:95560kB, anon-rss:2324kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 589.257877][ T29] audit: type=1326 audit(2000000365.090:44231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.257908][ T29] audit: type=1326 audit(2000000365.090:44232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.356277][ T29] audit: type=1326 audit(2000000365.090:44233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.379906][ T29] audit: type=1326 audit(2000000365.090:44234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28969 comm="syz.3.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cea965d29 code=0x7ffc0000 [ 589.613208][T28990] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9414'. [ 589.645484][T28990] 1ªX¹¦À: renamed from 60ªX¹¦À [ 589.658828][T28990] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 589.843907][T29015] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 590.043394][T29029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9433'. [ 590.161516][T29038] tap0: tun_chr_ioctl cmd 2147767517 [ 590.492004][T29051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9440'. [ 590.501121][T29051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9440'. [ 590.735462][T29053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.774373][T29055] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 590.802527][T29053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.987562][T29067] tap0: tun_chr_ioctl cmd 2147767517 [ 591.060453][T29076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.069067][T29076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.173901][T29078] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 591.394210][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9456'. [ 591.952170][T29100] tap0: tun_chr_ioctl cmd 2147767517 [ 592.183500][T29116] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9467'. [ 592.192813][T29116] 0ªX¹¦À: renamed from caif0 [ 592.200687][T29116] 0ªX¹¦À: entered allmulticast mode [ 592.206094][T29116] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 592.224342][T29117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9464'. [ 592.233441][T29117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9464'. [ 592.562880][T29123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.572578][T29123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.974691][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9489'. [ 592.999877][T29167] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 593.254030][T29190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9495'. [ 593.263050][T29190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9495'. [ 593.639702][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9504'. [ 593.661265][T29200] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 593.947214][T29231] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 593.965023][ T29] kauditd_printk_skb: 963 callbacks suppressed [ 593.965038][ T29] audit: type=1400 audit(2000000369.850:45198): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 593.994364][ T29] audit: type=1400 audit(2000000369.850:45199): avc: denied { create } for pid=29232 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.090260][ T29] audit: type=1400 audit(2000000369.930:45200): avc: denied { write } for pid=29232 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.110211][ T29] audit: type=1400 audit(2000000369.930:45201): avc: denied { nlmsg_write } for pid=29232 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 594.130516][ T29] audit: type=1400 audit(2000000369.950:45202): avc: denied { create } for pid=29236 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.150325][ T29] audit: type=1400 audit(2000000369.950:45203): avc: denied { setopt } for pid=29236 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.170069][ T29] audit: type=1400 audit(2000000369.960:45204): avc: denied { create } for pid=29236 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 594.190927][ T29] audit: type=1400 audit(2000000369.960:45205): avc: denied { write } for pid=29236 comm="syz.5.9520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 594.213492][ T29] audit: type=1400 audit(2000000370.100:45206): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 594.236361][ T29] audit: type=1400 audit(2000000370.100:45207): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 594.645922][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9524'. [ 595.105047][T29279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9535'. [ 595.300314][T29288] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 595.531037][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9546'. [ 595.575855][T29315] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 595.648453][T29322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.662947][T29322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.034212][T29357] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 596.647467][T29389] tap0: tun_chr_ioctl cmd 2147767517 [ 596.669107][T29391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.677794][T29391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.334924][T29419] __nla_validate_parse: 1 callbacks suppressed [ 597.334938][T29419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9593'. [ 597.359639][T29420] tap0: tun_chr_ioctl cmd 2147767517 [ 597.366494][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9595'. [ 597.407548][T29426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9597'. [ 597.518484][T29437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.528570][T29437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.585948][T29441] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9600'. [ 597.617086][T29441] 1ªX¹¦À: renamed from 60ªX¹¦À [ 597.634854][T29441] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 597.804624][T29452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9607'. [ 598.049136][T29470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9610'. [ 598.715682][T29472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9613'. [ 598.993647][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 598.993662][ T29] audit: type=1400 audit(2000000374.880:45886): avc: denied { open } for pid=29480 comm="syz.0.9617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 599.018038][T29479] tap0: tun_chr_ioctl cmd 2147767517 [ 599.019414][ T29] audit: type=1400 audit(2000000374.880:45887): avc: denied { kernel } for pid=29480 comm="syz.0.9617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 599.044414][ T29] audit: type=1326 audit(2000000374.910:45888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.068144][ T29] audit: type=1326 audit(2000000374.910:45889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.092005][ T29] audit: type=1326 audit(2000000374.910:45890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.115639][ T29] audit: type=1326 audit(2000000374.910:45891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.139575][ T29] audit: type=1326 audit(2000000374.910:45892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.163246][ T29] audit: type=1326 audit(2000000374.910:45893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.163689][T29491] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 599.186746][ T29] audit: type=1400 audit(2000000374.920:45894): avc: denied { create } for pid=29478 comm="syz.2.9616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 599.186785][ T29] audit: type=1326 audit(2000000374.920:45895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.2.9616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 599.285182][T29502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.294751][T29502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.402654][T29508] loop2: detected capacity change from 0 to 2048 [ 599.421136][T29508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.502138][T29516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9626'. [ 600.083681][T29530] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 600.201161][T28410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.290729][T29539] tap0: tun_chr_ioctl cmd 2147767517 [ 600.353280][T29546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.371510][T29546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.522953][T29555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9639'. [ 601.335184][T29563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9646'. [ 601.643077][T29578] loop2: detected capacity change from 0 to 2048 [ 601.690244][T29578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.699488][T29584] tap0: tun_chr_ioctl cmd 2147767517 [ 601.842362][T29595] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 601.876107][T29599] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 601.953919][T29608] tap0: tun_chr_ioctl cmd 2147767517 [ 602.429115][T28410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.649120][T29673] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9686'. [ 602.659751][T29673] 0ªX¹¦À: renamed from caif0 [ 602.675599][T29673] 0ªX¹¦À: entered allmulticast mode [ 602.680887][T29673] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 602.820079][T29682] loop2: detected capacity change from 0 to 8192 [ 603.240557][T29715] loop2: detected capacity change from 0 to 512 [ 603.274321][T29715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.286949][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9708'. [ 603.296375][T29715] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 603.329792][T28410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.573045][T29748] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 603.894405][T29777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9726'. [ 603.996714][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 603.996737][ T29] audit: type=1400 audit(2000000379.890:46628): avc: denied { map_create } for pid=29766 comm="syz.3.9729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 604.022458][ T29] audit: type=1400 audit(2000000379.890:46629): avc: denied { bpf } for pid=29766 comm="syz.3.9729" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 604.180660][ T29] audit: type=1400 audit(2000000379.970:46630): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 604.203747][ T29] audit: type=1400 audit(2000000380.000:46631): avc: denied { perfmon } for pid=29780 comm="syz.5.9732" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 604.225269][ T29] audit: type=1400 audit(2000000380.000:46632): avc: denied { map_read map_write } for pid=29780 comm="syz.5.9732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 604.242089][T29786] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.245683][ T29] audit: type=1400 audit(2000000380.010:46633): avc: denied { prog_load } for pid=29766 comm="syz.3.9729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 604.245716][ T29] audit: type=1400 audit(2000000380.030:46634): avc: denied { create } for pid=29782 comm="syz.4.9733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 604.252218][T29786] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 604.252235][T29786] audit: backlog limit exceeded [ 604.269668][T29786] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 604.375146][T29792] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9735'. [ 604.385744][T29792] 0ªX¹¦À: renamed from 61ªX¹¦À [ 604.399238][T29792] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 604.597570][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9736'. [ 605.375169][T29823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9743'. [ 605.545964][T29827] loop2: detected capacity change from 0 to 2048 [ 605.619306][T29827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.181489][T29898] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 606.270787][T28410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.544897][T29933] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 606.634950][T29936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9786'. [ 606.649988][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9793'. [ 607.162734][T29966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9806'. [ 607.202591][T29971] tap0: tun_chr_ioctl cmd 2147767517 [ 607.450636][T29995] tap0: tun_chr_ioctl cmd 2147767517 [ 607.642672][T30012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9818'. [ 607.661197][T30010] tap0: tun_chr_ioctl cmd 2147767517 [ 607.875117][T30017] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9826'. [ 607.919263][T30017] 1ªX¹¦À: renamed from 60ªX¹¦À [ 607.974114][T30017] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 608.132894][T30044] tap0: tun_chr_ioctl cmd 2147767517 [ 608.450874][T30069] loop2: detected capacity change from 0 to 2048 [ 608.501268][T30069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.571427][T30081] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 608.597896][T30077] tap0: tun_chr_ioctl cmd 2147767517 [ 608.646735][T30088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.657041][T30088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.984248][T30112] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9865'. [ 608.993490][T30112] 1ªX¹¦À: renamed from 60ªX¹¦À [ 609.002695][T30112] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 609.021111][ T29] kauditd_printk_skb: 1020 callbacks suppressed [ 609.021129][ T29] audit: type=1400 audit(2000000384.910:47655): avc: denied { unlink } for pid=27426 comm="syz-executor" name="file0" dev="tmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 609.054593][ T29] audit: type=1400 audit(2000000384.940:47656): avc: denied { create } for pid=30113 comm="syz.3.9866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.071930][T30116] tap0: tun_chr_ioctl cmd 2147767517 [ 609.074389][ T29] audit: type=1400 audit(2000000384.950:47657): avc: denied { write } for pid=30113 comm="syz.3.9866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.099050][ T29] audit: type=1326 audit(2000000384.950:47658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.122757][ T29] audit: type=1326 audit(2000000384.950:47659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.146496][ T29] audit: type=1326 audit(2000000384.950:47660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.170108][ T29] audit: type=1326 audit(2000000384.950:47661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.193810][ T29] audit: type=1326 audit(2000000384.950:47662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.217427][ T29] audit: type=1326 audit(2000000384.950:47663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.241304][ T29] audit: type=1326 audit(2000000384.950:47664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30115 comm="syz.5.9867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 609.352755][T28410] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.501779][T30143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.510458][T30143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.033120][T30187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9895'. [ 610.179187][T30189] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 610.274267][T30193] FAULT_INJECTION: forcing a failure. [ 610.274267][T30193] name failslab, interval 1, probability 0, space 0, times 0 [ 610.287036][T30193] CPU: 0 UID: 0 PID: 30193 Comm: syz.0.9901 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 610.297830][T30193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.307976][T30193] Call Trace: [ 610.311267][T30193] [ 610.314225][T30193] dump_stack_lvl+0xf2/0x150 [ 610.318880][T30193] dump_stack+0x15/0x1a [ 610.323075][T30193] should_fail_ex+0x223/0x230 [ 610.327783][T30193] should_failslab+0x8f/0xb0 [ 610.332402][T30193] kmem_cache_alloc_node_noprof+0x59/0x320 [ 610.338266][T30193] ? __alloc_skb+0x10b/0x310 [ 610.342930][T30193] __alloc_skb+0x10b/0x310 [ 610.347397][T30193] netlink_alloc_large_skb+0xad/0xe0 [ 610.352785][T30193] netlink_sendmsg+0x3b4/0x6e0 [ 610.357609][T30193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.362953][T30193] __sock_sendmsg+0x140/0x180 [ 610.367738][T30193] ____sys_sendmsg+0x312/0x410 [ 610.372533][T30193] __sys_sendmsg+0x19d/0x230 [ 610.377219][T30193] __x64_sys_sendmsg+0x46/0x50 [ 610.382068][T30193] x64_sys_call+0x2734/0x2dc0 [ 610.386796][T30193] do_syscall_64+0xc9/0x1c0 [ 610.391317][T30193] ? clear_bhb_loop+0x55/0xb0 [ 610.396085][T30193] ? clear_bhb_loop+0x55/0xb0 [ 610.400868][T30193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.406787][T30193] RIP: 0033:0x7fe6df655d29 [ 610.411212][T30193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.430859][T30193] RSP: 002b:00007fe6ddcc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.439326][T30193] RAX: ffffffffffffffda RBX: 00007fe6df845fa0 RCX: 00007fe6df655d29 [ 610.447309][T30193] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 610.455291][T30193] RBP: 00007fe6ddcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 610.463276][T30193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.471263][T30193] R13: 0000000000000000 R14: 00007fe6df845fa0 R15: 00007fff901714f8 [ 610.479277][T30193] [ 610.584832][T30210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.601550][T30210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.648025][T30222] FAULT_INJECTION: forcing a failure. [ 610.648025][T30222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.661248][T30222] CPU: 1 UID: 0 PID: 30222 Comm: syz.4.9914 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 610.672028][T30222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.682192][T30222] Call Trace: [ 610.685554][T30222] [ 610.688500][T30222] dump_stack_lvl+0xf2/0x150 [ 610.693150][T30222] dump_stack+0x15/0x1a [ 610.697348][T30222] should_fail_ex+0x223/0x230 [ 610.702058][T30222] should_fail+0xb/0x10 [ 610.706222][T30222] should_fail_usercopy+0x1a/0x20 [ 610.711366][T30222] _copy_to_user+0x20/0xa0 [ 610.715850][T30222] simple_read_from_buffer+0xa0/0x110 [ 610.721269][T30222] proc_fail_nth_read+0xf9/0x140 [ 610.726302][T30222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 610.731871][T30222] vfs_read+0x1a2/0x700 [ 610.736045][T30222] ? __rcu_read_unlock+0x4e/0x70 [ 610.741028][T30222] ? __fget_files+0x17c/0x1c0 [ 610.745748][T30222] ksys_read+0xe8/0x1b0 [ 610.749983][T30222] __x64_sys_read+0x42/0x50 [ 610.754496][T30222] x64_sys_call+0x2874/0x2dc0 [ 610.759211][T30222] do_syscall_64+0xc9/0x1c0 [ 610.763718][T30222] ? clear_bhb_loop+0x55/0xb0 [ 610.768481][T30222] ? clear_bhb_loop+0x55/0xb0 [ 610.773247][T30222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.779292][T30222] RIP: 0033:0x7feb3895473c [ 610.780601][T30208] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9908'. [ 610.783714][T30222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 610.792824][T30208] 0ªX¹¦À: renamed from 61ªX¹¦À [ 610.812226][T30222] RSP: 002b:00007feb36fc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 610.812255][T30222] RAX: ffffffffffffffda RBX: 00007feb38b45fa0 RCX: 00007feb3895473c [ 610.812271][T30222] RDX: 000000000000000f RSI: 00007feb36fc70a0 RDI: 0000000000000004 [ 610.812287][T30222] RBP: 00007feb36fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 610.849580][T30222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.857562][T30222] R13: 0000000000000000 R14: 00007feb38b45fa0 R15: 00007fffdb37a618 [ 610.865581][T30222] [ 610.871774][T30208] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 611.119322][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9920'. [ 611.139526][T30237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9920'. [ 611.278870][T30258] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 611.381759][T30271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9927'. [ 611.809794][T30297] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 611.949677][T30309] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 612.096259][T30322] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9955'. [ 612.275192][T30341] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 612.459672][T30352] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9963'. [ 612.732806][T30359] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9967'. [ 612.748286][T30359] 0ªX¹¦À: renamed from 61ªX¹¦À [ 612.797212][T30359] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 612.899361][T30370] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9970'. [ 612.908612][T30370] 1ªX¹¦À: renamed from 60ªX¹¦À [ 612.915277][T30370] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 613.159007][T30374] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 613.283725][T30392] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9979'. [ 613.298833][T30392] 0ªX¹¦À: renamed from 61ªX¹¦À [ 613.310178][T30392] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 613.609603][T30419] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 613.698634][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9987'. [ 614.085027][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 614.085097][ T29] audit: type=1400 audit(2000000389.970:48123): avc: denied { unlink } for pid=26113 comm="syz-executor" name="file0" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 614.133445][ T29] audit: type=1400 audit(2000000389.980:48124): avc: denied { prog_load } for pid=30431 comm="syz.4.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.152757][ T29] audit: type=1400 audit(2000000389.980:48125): avc: denied { bpf } for pid=30431 comm="syz.4.9997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.173770][ T29] audit: type=1400 audit(2000000389.980:48126): avc: denied { perfmon } for pid=30431 comm="syz.4.9997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 614.195211][ T29] audit: type=1400 audit(2000000389.980:48127): avc: denied { create } for pid=30431 comm="syz.4.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 614.215712][ T29] audit: type=1400 audit(2000000389.980:48128): avc: denied { write } for pid=30431 comm="syz.4.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 614.236276][ T29] audit: type=1400 audit(2000000389.980:48129): avc: denied { nlmsg_write } for pid=30431 comm="syz.4.9997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 614.257368][ T29] audit: type=1400 audit(2000000389.980:48130): avc: denied { map_create } for pid=30429 comm="syz.0.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 614.277173][ T29] audit: type=1400 audit(2000000389.980:48131): avc: denied { create } for pid=30429 comm="syz.0.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 614.296869][ T29] audit: type=1400 audit(2000000389.980:48132): avc: denied { write } for pid=30429 comm="syz.0.9995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 614.318537][T30441] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 614.704054][T30471] tap0: tun_chr_ioctl cmd 2147767517 [ 615.007473][T30483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10018'. [ 615.071489][T30484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10016'. [ 615.395112][T30494] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 615.527071][T30506] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10029'. [ 615.673289][T30521] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 615.763650][T30522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10030'. [ 616.196714][T30542] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10042'. [ 616.359662][T30555] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 616.545369][T30570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10054'. [ 616.661007][T30586] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 616.724863][T30590] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 616.870848][T30605] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10066'. [ 616.881468][T30605] 1ªX¹¦À: renamed from 60ªX¹¦À [ 616.892132][T30605] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 617.001376][T30622] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 617.077218][T30625] loop2: detected capacity change from 0 to 8192 [ 617.168191][T30638] FAULT_INJECTION: forcing a failure. [ 617.168191][T30638] name failslab, interval 1, probability 0, space 0, times 0 [ 617.181324][T30638] CPU: 0 UID: 0 PID: 30638 Comm: syz.4.10083 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 617.192240][T30638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 617.202348][T30638] Call Trace: [ 617.205688][T30638] [ 617.208644][T30638] dump_stack_lvl+0xf2/0x150 [ 617.213319][T30638] dump_stack+0x15/0x1a [ 617.217536][T30638] should_fail_ex+0x223/0x230 [ 617.222315][T30638] should_failslab+0x8f/0xb0 [ 617.226936][T30638] kmem_cache_alloc_node_noprof+0x59/0x320 [ 617.232855][T30638] ? __alloc_skb+0x10b/0x310 [ 617.237468][T30638] __alloc_skb+0x10b/0x310 [ 617.241952][T30638] netlink_alloc_large_skb+0xad/0xe0 [ 617.247264][T30638] netlink_sendmsg+0x3b4/0x6e0 [ 617.252126][T30638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.257513][T30638] __sock_sendmsg+0x140/0x180 [ 617.262215][T30638] ____sys_sendmsg+0x312/0x410 [ 617.267029][T30638] __sys_sendmsg+0x19d/0x230 [ 617.271649][T30638] __x64_sys_sendmsg+0x46/0x50 [ 617.276507][T30638] x64_sys_call+0x2734/0x2dc0 [ 617.281210][T30638] do_syscall_64+0xc9/0x1c0 [ 617.285736][T30638] ? clear_bhb_loop+0x55/0xb0 [ 617.290499][T30638] ? clear_bhb_loop+0x55/0xb0 [ 617.295194][T30638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.301120][T30638] RIP: 0033:0x7feb38955d29 [ 617.305580][T30638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.325444][T30638] RSP: 002b:00007feb36fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.334050][T30638] RAX: ffffffffffffffda RBX: 00007feb38b45fa0 RCX: 00007feb38955d29 [ 617.342033][T30638] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 617.350259][T30638] RBP: 00007feb36fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 617.358286][T30638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.366265][T30638] R13: 0000000000000000 R14: 00007feb38b45fa0 R15: 00007fffdb37a618 [ 617.374269][T30638] [ 617.578451][T30654] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 617.609591][T30661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.619193][T30661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.702171][T30671] tap0: tun_chr_ioctl cmd 2147767517 [ 617.946313][T30694] __nla_validate_parse: 1 callbacks suppressed [ 617.946358][T30694] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10109'. [ 617.965264][T30694] 1ªX¹¦À: renamed from 60ªX¹¦À [ 617.972297][T30694] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 618.080168][T30696] loop2: detected capacity change from 0 to 8192 [ 618.275014][T30708] tap0: tun_chr_ioctl cmd 2147767517 [ 618.428609][T30721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.447711][T30721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.484865][T30722] loop2: detected capacity change from 0 to 8192 [ 618.565844][T30730] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10124'. [ 618.584153][T30730] 0ªX¹¦À: renamed from 61ªX¹¦À [ 618.593830][T30730] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 618.782841][T30743] ALSA: seq fatal error: cannot create timer (-19) [ 618.817914][T30748] tap0: tun_chr_ioctl cmd 2147767517 [ 618.971654][T30755] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 619.158458][ T29] kauditd_printk_skb: 875 callbacks suppressed [ 619.158476][ T29] audit: type=1400 audit(2000000395.050:49008): avc: denied { create } for pid=30765 comm="syz.0.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.206496][ T29] audit: type=1400 audit(2000000395.050:49009): avc: denied { write } for pid=30765 comm="syz.0.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.227037][ T29] audit: type=1400 audit(2000000395.050:49010): avc: denied { nlmsg_write } for pid=30765 comm="syz.0.10140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.248337][ T29] audit: type=1400 audit(2000000395.080:49011): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 619.270744][ T29] audit: type=1400 audit(2000000395.080:49012): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.292625][ T29] audit: type=1400 audit(2000000395.080:49013): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.315711][ T29] audit: type=1400 audit(2000000395.080:49014): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.441092][ T29] audit: type=1400 audit(2000000395.100:49015): avc: denied { unlink } for pid=28410 comm="syz-executor" name="file0" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 619.464062][ T29] audit: type=1326 audit(2000000395.140:49016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30767 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 619.488023][ T29] audit: type=1326 audit(2000000395.140:49017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30767 comm="syz.2.10143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 619.662114][T30783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.679671][T30783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.752772][T30784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10146'. [ 619.899577][T30780] loop2: detected capacity change from 0 to 8192 [ 620.771474][T30811] loop2: detected capacity change from 0 to 8192 [ 620.788518][T30815] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10157'. [ 620.820507][T30815] 1ªX¹¦À: renamed from 60ªX¹¦À [ 620.873469][T30815] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 620.929357][T30817] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 621.100028][T30827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.130013][T30827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.452317][T30847] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 621.520947][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10172'. [ 621.931659][T30854] FAULT_INJECTION: forcing a failure. [ 621.931659][T30854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.944939][T30854] CPU: 1 UID: 0 PID: 30854 Comm: syz.2.10176 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 621.956000][T30854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.966076][T30854] Call Trace: [ 621.969431][T30854] [ 621.972549][T30854] dump_stack_lvl+0xf2/0x150 [ 621.977350][T30854] dump_stack+0x15/0x1a [ 621.981648][T30854] should_fail_ex+0x223/0x230 [ 621.986404][T30854] should_fail+0xb/0x10 [ 621.990579][T30854] should_fail_usercopy+0x1a/0x20 [ 621.995641][T30854] _copy_from_user+0x1e/0xb0 [ 622.000264][T30854] memdup_user+0x64/0xc0 [ 622.004700][T30854] strndup_user+0x68/0xa0 [ 622.009069][T30854] __se_sys_mount+0x4e/0x2d0 [ 622.013746][T30854] ? restore_fpregs_from_fpstate+0x64/0x130 [ 622.019743][T30854] __x64_sys_mount+0x67/0x80 [ 622.024379][T30854] x64_sys_call+0x2c84/0x2dc0 [ 622.029201][T30854] do_syscall_64+0xc9/0x1c0 [ 622.033736][T30854] ? clear_bhb_loop+0x55/0xb0 [ 622.038447][T30854] ? clear_bhb_loop+0x55/0xb0 [ 622.043182][T30854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.049141][T30854] RIP: 0033:0x7f6826e85d29 [ 622.053578][T30854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.073282][T30854] RSP: 002b:00007f68254f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.081779][T30854] RAX: ffffffffffffffda RBX: 00007f6827075fa0 RCX: 00007f6826e85d29 [ 622.089849][T30854] RDX: 0000000020000180 RSI: 00000000200001c0 RDI: 0000000000000000 [ 622.097934][T30854] RBP: 00007f68254f7090 R08: 0000000020000300 R09: 0000000000000000 [ 622.105967][T30854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.113963][T30854] R13: 0000000000000000 R14: 00007f6827075fa0 R15: 00007fffd2af8908 [ 622.121972][T30854] [ 622.266415][T30858] tap0: tun_chr_ioctl cmd 2147767517 [ 622.472789][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10189'. [ 622.572784][T30891] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10187'. [ 622.593120][T30891] 0ªX¹¦À: renamed from 61ªX¹¦À [ 622.611767][T30891] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 622.741369][T30899] tap0: tun_chr_ioctl cmd 2147767517 [ 622.780808][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10196'. [ 622.790075][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10196'. [ 622.852582][T30914] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10197'. [ 622.861761][T30914] 1ªX¹¦À: renamed from 60ªX¹¦À [ 622.874047][T30914] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 623.170570][T30937] tap0: tun_chr_ioctl cmd 2147767517 [ 623.209173][T30944] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 623.221019][T30938] lo speed is unknown, defaulting to 1000 [ 623.543284][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10219'. [ 623.553521][T30963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10219'. [ 623.642396][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10220'. [ 623.651562][T30972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10220'. [ 624.040194][T30974] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 624.073261][T30976] tap0: tun_chr_ioctl cmd 2147767517 [ 624.170854][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 624.170869][ T29] audit: type=1400 audit(2000000400.060:49720): avc: denied { read write } for pid=28410 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.205135][ T29] audit: type=1400 audit(2000000400.060:49721): avc: denied { open } for pid=28410 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.229585][ T29] audit: type=1400 audit(2000000400.060:49722): avc: denied { ioctl } for pid=28410 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.255420][ T29] audit: type=1400 audit(2000000400.070:49723): avc: denied { prog_load } for pid=30981 comm="syz.2.10227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 624.274912][ T29] audit: type=1400 audit(2000000400.070:49724): avc: denied { bpf } for pid=30981 comm="syz.2.10227" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 624.295932][ T29] audit: type=1400 audit(2000000400.070:49725): avc: denied { map_create } for pid=30981 comm="syz.2.10227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 624.315556][ T29] audit: type=1400 audit(2000000400.070:49726): avc: denied { map_read map_write } for pid=30981 comm="syz.2.10227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 624.335827][ T29] audit: type=1400 audit(2000000400.070:49727): avc: denied { perfmon } for pid=30981 comm="syz.2.10227" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 624.357027][ T29] audit: type=1400 audit(2000000400.070:49728): avc: denied { prog_run } for pid=30981 comm="syz.2.10227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 624.376308][ T29] audit: type=1326 audit(2000000400.070:49729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30981 comm="syz.2.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6826e85d29 code=0x7ffc0000 [ 624.447754][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10230'. [ 624.600059][T31008] tap0: tun_chr_ioctl cmd 2147767517 [ 624.639213][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10242'. [ 624.648523][T31016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10242'. [ 624.714338][T31025] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10241'. [ 624.733481][T31025] 1ªX¹¦À: renamed from 60ªX¹¦À [ 624.751748][T31025] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 624.789381][T31032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.798524][T31032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.060441][T31051] tap0: tun_chr_ioctl cmd 2147767517 [ 625.385103][T31076] tap0: tun_chr_ioctl cmd 2147767517 [ 625.684717][T31103] tap0: tun_chr_ioctl cmd 2147767517 [ 626.074628][T31136] tap0: tun_chr_ioctl cmd 2147767517 [ 626.697365][T31170] tap0: tun_chr_ioctl cmd 2147767517 [ 627.183364][T31205] tap0: tun_chr_ioctl cmd 2147767517 [ 627.210952][T31206] 0ªX¹¦À: renamed from 61ªX¹¦À [ 627.217937][T31206] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 627.431701][T31229] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 627.499228][T31234] netlink: 'syz.2.10328': attribute type 13 has an invalid length. [ 627.512232][T31234] 0ªX¹¦À: renamed from 61ªX¹¦À [ 627.521585][T31234] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 628.372188][T31250] __nla_validate_parse: 17 callbacks suppressed [ 628.372203][T31250] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10333'. [ 628.653675][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10340'. [ 628.659361][ T1080] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 628.675559][T31267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.684800][T31267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.685039][ T1080] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 628.908909][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10345'. [ 628.918067][T31280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10345'. [ 629.011732][T31282] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10346'. [ 629.263658][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 629.263677][ T29] audit: type=1400 audit(2000000405.150:50833): avc: denied { create } for pid=31291 comm="syz.3.10350" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 629.300077][ T29] audit: type=1400 audit(2000000405.180:50834): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 629.322449][ T29] audit: type=1400 audit(2000000405.180:50835): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.344392][ T29] audit: type=1400 audit(2000000405.180:50836): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 629.367364][ T29] audit: type=1400 audit(2000000405.180:50837): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 629.390443][ T29] audit: type=1400 audit(2000000405.180:50838): avc: denied { map } for pid=31291 comm="syz.3.10350" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 629.415137][ T29] audit: type=1400 audit(2000000405.180:50839): avc: denied { read write } for pid=31291 comm="syz.3.10350" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=107432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 629.629731][ T29] audit: type=1400 audit(2000000405.520:50840): avc: denied { prog_load } for pid=31300 comm="syz.4.10354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 629.649268][ T29] audit: type=1400 audit(2000000405.520:50841): avc: denied { bpf } for pid=31300 comm="syz.4.10354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.670389][ T29] audit: type=1400 audit(2000000405.520:50842): avc: denied { perfmon } for pid=31300 comm="syz.4.10354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.711737][T31303] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 629.755951][T31310] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10357'. [ 629.945523][ T3174] usb usb2-port1: attempt power cycle [ 630.153908][T31344] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10371'. [ 630.494356][T31376] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10382'. [ 630.503809][T31376] 0ªX¹¦À: renamed from 61ªX¹¦À [ 630.510724][T31376] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 630.564364][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10386'. [ 630.592907][T31381] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 630.684915][T31392] FAULT_INJECTION: forcing a failure. [ 630.684915][T31392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.698140][T31392] CPU: 1 UID: 0 PID: 31392 Comm: syz.3.10392 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 630.709143][T31392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.719438][T31392] Call Trace: [ 630.722725][T31392] [ 630.725671][T31392] dump_stack_lvl+0xf2/0x150 [ 630.730321][T31392] dump_stack+0x15/0x1a [ 630.734632][T31392] should_fail_ex+0x223/0x230 [ 630.739332][T31392] should_fail+0xb/0x10 [ 630.743643][T31392] should_fail_usercopy+0x1a/0x20 [ 630.748778][T31392] _copy_from_user+0x1e/0xb0 [ 630.753649][T31392] __sys_bpf+0x14e/0x7a0 [ 630.757999][T31392] __x64_sys_bpf+0x43/0x50 [ 630.762500][T31392] x64_sys_call+0x2914/0x2dc0 [ 630.767208][T31392] do_syscall_64+0xc9/0x1c0 [ 630.771986][T31392] ? clear_bhb_loop+0x55/0xb0 [ 630.776668][T31392] ? clear_bhb_loop+0x55/0xb0 [ 630.781351][T31392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.787314][T31392] RIP: 0033:0x7f6cea965d29 [ 630.791740][T31392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.811374][T31392] RSP: 002b:00007f6ce8fd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 630.819876][T31392] RAX: ffffffffffffffda RBX: 00007f6ceab55fa0 RCX: 00007f6cea965d29 [ 630.827907][T31392] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000009 [ 630.836019][T31392] RBP: 00007f6ce8fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 630.843993][T31392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.851968][T31392] R13: 0000000000000000 R14: 00007f6ceab55fa0 R15: 00007fff188b8bc8 [ 630.859984][T31392] [ 631.076226][T31413] 0ªX¹¦À: renamed from 61ªX¹¦À [ 631.082968][T31413] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 631.561156][T31451] 1ªX¹¦À: renamed from 60ªX¹¦À [ 631.568027][T31451] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 631.586366][T31450] tap0: tun_chr_ioctl cmd 2147767517 [ 631.765717][ T3174] usb usb2-port1: unable to enumerate USB device [ 631.783874][T31240] hub 2-0:1.0: USB hub found [ 631.792631][T31240] hub 2-0:1.0: 8 ports detected [ 631.901897][T31480] lo speed is unknown, defaulting to 1000 [ 632.188666][T31495] 0ªX¹¦À: renamed from 61ªX¹¦À [ 632.206146][T31495] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 632.659146][T31519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.728654][T31519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.778749][T31519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.858687][T31519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.897751][T31519] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.909643][T31519] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.921271][T31519] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.933179][T31519] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.978815][T31536] netlink: 'syz.3.10450': attribute type 8 has an invalid length. [ 633.051051][T31544] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 633.454059][T31591] __nla_validate_parse: 10 callbacks suppressed [ 633.454075][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10474'. [ 633.473153][T31591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10474'. [ 633.725597][ T9] usb usb2-port1: attempt power cycle [ 634.063376][T31613] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10482'. [ 634.072595][T31613] 1ªX¹¦À: renamed from 60ªX¹¦À [ 634.079297][T31613] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 634.265644][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 634.265660][ T29] audit: type=1326 audit(2000000410.150:51676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.295611][ T29] audit: type=1326 audit(2000000410.160:51677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.320537][ T29] audit: type=1326 audit(2000000410.160:51678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.344458][ T29] audit: type=1326 audit(2000000410.160:51679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.368304][ T29] audit: type=1326 audit(2000000410.160:51680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.392215][ T29] audit: type=1326 audit(2000000410.160:51681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.415931][ T29] audit: type=1400 audit(2000000410.160:51682): avc: denied { create } for pid=31621 comm="syz.4.10486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 634.436119][ T29] audit: type=1326 audit(2000000410.160:51683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.459835][ T29] audit: type=1326 audit(2000000410.160:51684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.483646][ T29] audit: type=1326 audit(2000000410.160:51685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31621 comm="syz.4.10486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb38955d29 code=0x7ffc0000 [ 634.719475][T31644] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 634.790242][T31652] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 634.812738][T31654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10499'. [ 635.050649][T31674] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 635.086754][T31679] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 635.150874][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10511'. [ 635.176441][T31684] lo speed is unknown, defaulting to 1000 [ 635.510307][T31706] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 635.534296][T31700] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 635.605633][ T9] usb usb2-port1: unable to enumerate USB device [ 635.813329][T31730] tap0: tun_chr_ioctl cmd 2147767517 [ 636.430183][T31772] xt_CT: No such helper "syz0" [ 636.456301][T31780] FAULT_INJECTION: forcing a failure. [ 636.456301][T31780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.469485][T31780] CPU: 0 UID: 0 PID: 31780 Comm: syz.0.10551 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 636.480595][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.490669][T31780] Call Trace: [ 636.494006][T31780] [ 636.496957][T31780] dump_stack_lvl+0xf2/0x150 [ 636.501633][T31780] dump_stack+0x15/0x1a [ 636.505893][T31780] should_fail_ex+0x223/0x230 [ 636.510674][T31780] should_fail+0xb/0x10 [ 636.514862][T31780] should_fail_usercopy+0x1a/0x20 [ 636.519911][T31780] _copy_from_user+0x1e/0xb0 [ 636.524536][T31780] move_addr_to_kernel+0x82/0x120 [ 636.529636][T31780] copy_msghdr_from_user+0x271/0x2a0 [ 636.534943][T31780] __sys_sendmmsg+0x1e8/0x4b0 [ 636.539707][T31780] __x64_sys_sendmmsg+0x57/0x70 [ 636.544624][T31780] x64_sys_call+0x29aa/0x2dc0 [ 636.549348][T31780] do_syscall_64+0xc9/0x1c0 [ 636.554011][T31780] ? clear_bhb_loop+0x55/0xb0 [ 636.558741][T31780] ? clear_bhb_loop+0x55/0xb0 [ 636.563524][T31780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.569554][T31780] RIP: 0033:0x7fe6df655d29 [ 636.573984][T31780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.593690][T31780] RSP: 002b:00007fe6ddcc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 636.602257][T31780] RAX: ffffffffffffffda RBX: 00007fe6df845fa0 RCX: 00007fe6df655d29 [ 636.610254][T31780] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 636.618382][T31780] RBP: 00007fe6ddcc1090 R08: 0000000000000000 R09: 0000000000000000 [ 636.626358][T31780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.634354][T31780] R13: 0000000000000000 R14: 00007fe6df845fa0 R15: 00007fff901714f8 [ 636.642392][T31780] [ 636.669064][T31781] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10550'. [ 636.681186][T31781] 0ªX¹¦À: renamed from 61ªX¹¦À [ 636.761978][T31781] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 637.164019][T31817] vlan2: entered allmulticast mode [ 637.178909][T31820] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10562'. [ 637.191237][T31820] 1ªX¹¦À: renamed from 60ªX¹¦À [ 637.224465][T31826] FAULT_INJECTION: forcing a failure. [ 637.224465][T31826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.237753][T31826] CPU: 0 UID: 0 PID: 31826 Comm: syz.2.10570 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 637.248638][T31826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 637.258794][T31826] Call Trace: [ 637.262081][T31826] [ 637.265010][T31826] dump_stack_lvl+0xf2/0x150 [ 637.269727][T31826] dump_stack+0x15/0x1a [ 637.273898][T31826] should_fail_ex+0x223/0x230 [ 637.278685][T31826] should_fail+0xb/0x10 [ 637.282976][T31826] should_fail_usercopy+0x1a/0x20 [ 637.288043][T31826] _copy_from_user+0x1e/0xb0 [ 637.292668][T31826] copy_msghdr_from_user+0x54/0x2a0 [ 637.297970][T31826] ? __fget_files+0x17c/0x1c0 [ 637.302723][T31826] __sys_sendmsg+0x13e/0x230 [ 637.307374][T31826] __x64_sys_sendmsg+0x46/0x50 [ 637.312162][T31826] x64_sys_call+0x2734/0x2dc0 [ 637.317063][T31826] do_syscall_64+0xc9/0x1c0 [ 637.321623][T31826] ? clear_bhb_loop+0x55/0xb0 [ 637.326307][T31826] ? clear_bhb_loop+0x55/0xb0 [ 637.331038][T31826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.336951][T31826] RIP: 0033:0x7f6826e85d29 [ 637.341435][T31826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.361078][T31826] RSP: 002b:00007f68254f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.369524][T31826] RAX: ffffffffffffffda RBX: 00007f6827075fa0 RCX: 00007f6826e85d29 [ 637.377498][T31826] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 637.385481][T31826] RBP: 00007f68254f7090 R08: 0000000000000000 R09: 0000000000000000 [ 637.393468][T31826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.401463][T31826] R13: 0000000000000000 R14: 00007f6827075fa0 R15: 00007fffd2af8908 [ 637.409442][T31826] [ 637.413262][T31820] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 637.535219][T31841] lo speed is unknown, defaulting to 1000 [ 637.717900][T31860] FAULT_INJECTION: forcing a failure. [ 637.717900][T31860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.731221][T31860] CPU: 0 UID: 0 PID: 31860 Comm: syz.5.10582 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 637.742101][T31860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 637.752231][T31860] Call Trace: [ 637.755527][T31860] [ 637.758508][T31860] dump_stack_lvl+0xf2/0x150 [ 637.763202][T31860] dump_stack+0x15/0x1a [ 637.767405][T31860] should_fail_ex+0x223/0x230 [ 637.772121][T31860] should_fail+0xb/0x10 [ 637.776309][T31860] should_fail_usercopy+0x1a/0x20 [ 637.781390][T31860] _copy_from_user+0x1e/0xb0 [ 637.786012][T31860] __sys_bpf+0x14e/0x7a0 [ 637.790344][T31860] __x64_sys_bpf+0x43/0x50 [ 637.794795][T31860] x64_sys_call+0x2914/0x2dc0 [ 637.799506][T31860] do_syscall_64+0xc9/0x1c0 [ 637.804054][T31860] ? clear_bhb_loop+0x55/0xb0 [ 637.808791][T31860] ? clear_bhb_loop+0x55/0xb0 [ 637.813498][T31860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.819475][T31860] RIP: 0033:0x7fb0b52a5d29 [ 637.824331][T31860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.844214][T31860] RSP: 002b:00007fb0b3917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.852653][T31860] RAX: ffffffffffffffda RBX: 00007fb0b5495fa0 RCX: 00007fb0b52a5d29 [ 637.860653][T31860] RDX: 0000000000000020 RSI: 0000000020000000 RDI: 0000000000000009 [ 637.868670][T31860] RBP: 00007fb0b3917090 R08: 0000000000000000 R09: 0000000000000000 [ 637.876657][T31860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.884682][T31860] R13: 0000000000000000 R14: 00007fb0b5495fa0 R15: 00007ffe9ea14058 [ 637.892759][T31860] [ 637.905635][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10583'. [ 637.914635][T31858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10583'. [ 638.017210][T31874] 0ªX¹¦À: renamed from 61ªX¹¦À [ 638.033065][T31874] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 638.090212][T31880] lo speed is unknown, defaulting to 1000 [ 638.130701][T31883] tap0: tun_chr_ioctl cmd 2147767517 [ 638.613771][T31921] __nla_validate_parse: 2 callbacks suppressed [ 638.613784][T31921] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10605'. [ 638.629332][T31921] 1ªX¹¦À: renamed from 60ªX¹¦À [ 638.636025][T31921] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 639.366837][ T29] kauditd_printk_skb: 1007 callbacks suppressed [ 639.366873][ T29] audit: type=1400 audit(2000000415.260:52693): avc: denied { create } for pid=31934 comm="syz.2.10611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 639.490295][ T29] audit: type=1326 audit(2000000415.380:52694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.555398][ T29] audit: type=1326 audit(2000000415.380:52695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.579263][ T29] audit: type=1326 audit(2000000415.410:52696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0b52a7c47 code=0x7ffc0000 [ 639.603091][ T29] audit: type=1326 audit(2000000415.410:52697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.626887][ T29] audit: type=1326 audit(2000000415.410:52698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.650635][ T29] audit: type=1326 audit(2000000415.410:52699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.674277][ T29] audit: type=1326 audit(2000000415.410:52700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.698074][ T29] audit: type=1326 audit(2000000415.410:52701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.722070][ T29] audit: type=1326 audit(2000000415.410:52702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31947 comm="syz.5.10616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb0b52a5d29 code=0x7ffc0000 [ 639.804199][T31958] lo speed is unknown, defaulting to 1000 [ 639.848410][T31965] pimreg: entered allmulticast mode [ 639.877292][T31960] pimreg: left allmulticast mode [ 640.057890][T31979] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 640.227434][T31987] lo speed is unknown, defaulting to 1000 [ 640.248635][T31985] xt_CT: No such helper "syz0" [ 640.299284][T32000] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10638'. [ 640.339499][T31989] lo speed is unknown, defaulting to 1000 [ 640.464560][T32007] tap0: tun_chr_ioctl cmd 2147767517 [ 640.506198][T32012] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 640.636635][T32020] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 640.942724][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10652'. [ 640.981721][T32028] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10650'. [ 640.996694][T32041] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 641.017381][T32039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10652'. [ 641.063542][T32028] 1ªX¹¦À: renamed from 60ªX¹¦À [ 641.077613][T32028] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 641.095220][T32042] tap0: tun_chr_ioctl cmd 2147767517 [ 641.206263][T32053] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 641.275137][T32055] lo speed is unknown, defaulting to 1000 [ 641.354198][T32067] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10662'. [ 641.363359][T32067] 1ªX¹¦À: renamed from 60ªX¹¦À [ 641.373353][T32067] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 641.394334][T32072] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 641.490846][T32079] bridge_slave_1: left allmulticast mode [ 641.496771][T32079] bridge_slave_1: left promiscuous mode [ 641.502639][T32079] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.522110][T32079] bridge_slave_0: left allmulticast mode [ 641.527979][T32079] bridge_slave_0: left promiscuous mode [ 641.533837][T32079] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.576935][T32077] lo speed is unknown, defaulting to 1000 [ 641.591618][T32082] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 641.615068][T32084] tap0: tun_chr_ioctl cmd 2147767517 [ 641.793581][T32097] lo speed is unknown, defaulting to 1000 [ 641.937954][T32112] 0ªX¹¦À: renamed from 61ªX¹¦À [ 641.945160][T32112] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 641.967675][T32114] xt_CT: No such helper "syz0" [ 642.506963][T32131] tap0: tun_chr_ioctl cmd 2147767517 [ 642.658292][T32141] lo speed is unknown, defaulting to 1000 [ 642.872715][T11281] IPVS: starting estimator thread 0... [ 642.997701][T32152] IPVS: using max 2448 ests per chain, 122400 per kthread [ 643.099058][T32143] Set syz1 is full, maxelem 65536 reached [ 643.338893][T32175] FAULT_INJECTION: forcing a failure. [ 643.338893][T32175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.352128][T32175] CPU: 0 UID: 0 PID: 32175 Comm: syz.0.10704 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 643.363062][T32175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 643.373152][T32175] Call Trace: [ 643.376451][T32175] [ 643.379467][T32175] dump_stack_lvl+0xf2/0x150 [ 643.384145][T32175] dump_stack+0x15/0x1a [ 643.388464][T32175] should_fail_ex+0x223/0x230 [ 643.393165][T32175] should_fail+0xb/0x10 [ 643.397355][T32175] should_fail_usercopy+0x1a/0x20 [ 643.402513][T32175] _copy_from_user+0x1e/0xb0 [ 643.407206][T32175] copy_from_sockptr+0x62/0xa0 [ 643.412067][T32175] packet_setsockopt+0x806/0xfd0 [ 643.417030][T32175] ? __pfx_packet_setsockopt+0x10/0x10 [ 643.422560][T32175] __sys_setsockopt+0x187/0x200 [ 643.427493][T32175] __x64_sys_setsockopt+0x66/0x80 [ 643.432589][T32175] x64_sys_call+0x282e/0x2dc0 [ 643.437329][T32175] do_syscall_64+0xc9/0x1c0 [ 643.441846][T32175] ? clear_bhb_loop+0x55/0xb0 [ 643.446579][T32175] ? clear_bhb_loop+0x55/0xb0 [ 643.451272][T32175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.457210][T32175] RIP: 0033:0x7fe6df655d29 [ 643.461640][T32175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.481362][T32175] RSP: 002b:00007fe6ddcc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 643.490071][T32175] RAX: ffffffffffffffda RBX: 00007fe6df845fa0 RCX: 00007fe6df655d29 [ 643.498060][T32175] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 643.506045][T32175] RBP: 00007fe6ddcc1090 R08: 000000000000001c R09: 0000000000000000 [ 643.514024][T32175] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 643.522008][T32175] R13: 0000000000000000 R14: 00007fe6df845fa0 R15: 00007fff901714f8 [ 643.530001][T32175] [ 643.689502][T32177] __nla_validate_parse: 7 callbacks suppressed [ 643.689518][T32177] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10705'. [ 643.711122][T32177] 0ªX¹¦À: renamed from 61ªX¹¦À [ 643.718003][T32177] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 643.774625][T32184] lo speed is unknown, defaulting to 1000 [ 643.861318][T32188] lo speed is unknown, defaulting to 1000 [ 643.980293][T32207] bond1: entered promiscuous mode [ 643.985632][T32207] bond1: entered allmulticast mode [ 643.994650][T32207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.007843][T32207] bond1 (unregistering): Released all slaves [ 644.078693][T32213] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 644.201070][T32226] tap0: tun_chr_ioctl cmd 2147767517 [ 644.367301][T32246] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 644.376696][ T29] kauditd_printk_skb: 862 callbacks suppressed [ 644.376709][ T29] audit: type=1400 audit(2000000420.270:53565): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 644.438029][T32254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10734'. [ 644.451546][ T29] audit: type=1400 audit(2000000420.310:53566): avc: denied { read } for pid=32250 comm="syz.5.10733" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 644.473274][ T29] audit: type=1400 audit(2000000420.310:53567): avc: denied { open } for pid=32250 comm="syz.5.10733" path="net:[4026532438]" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 644.496887][ T29] audit: type=1400 audit(2000000420.310:53568): avc: denied { create } for pid=32250 comm="syz.5.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 644.517385][ T29] audit: type=1400 audit(2000000420.330:53569): avc: denied { ioctl } for pid=32253 comm="syz.3.10734" path="socket:[110470]" dev="sockfs" ino=110470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.543615][ T29] audit: type=1400 audit(2000000420.340:53570): avc: denied { create } for pid=32250 comm="syz.5.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.565497][ T29] audit: type=1400 audit(2000000420.340:53571): avc: denied { setopt } for pid=32250 comm="syz.5.10733" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 644.586292][ T29] audit: type=1400 audit(2000000420.340:53572): avc: denied { write } for pid=32250 comm="syz.5.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 644.606582][ T29] audit: type=1400 audit(2000000420.340:53573): avc: denied { create } for pid=32250 comm="syz.5.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 644.733875][ T29] audit: type=1400 audit(2000000420.620:53574): avc: denied { map_create } for pid=32258 comm="syz.3.10736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 644.866658][T32267] tap0: tun_chr_ioctl cmd 2147767517 [ 644.998076][T32282] lo speed is unknown, defaulting to 1000 [ 645.250588][T32307] tap0: tun_chr_ioctl cmd 2147767517 [ 645.452919][T32319] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 645.536693][T32333] lo speed is unknown, defaulting to 1000 [ 645.606698][T32337] lo speed is unknown, defaulting to 1000 [ 645.857714][T32355] lo speed is unknown, defaulting to 1000 [ 645.975639][T32363] lo speed is unknown, defaulting to 1000 [ 646.674891][T32408] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 647.180124][T32438] lo speed is unknown, defaulting to 1000 [ 647.410257][T32456] ================================================================== [ 647.418409][T32456] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 647.426801][T32456] [ 647.429157][T32456] write to 0xffff888108912674 of 4 bytes by task 32457 on cpu 0: [ 647.436987][T32456] rxrpc_input_call_event+0x8ef/0x12e0 [ 647.442479][T32456] rxrpc_io_thread+0x30e/0x1fb0 [ 647.447346][T32456] kthread+0x1d1/0x210 [ 647.451430][T32456] ret_from_fork+0x4b/0x60 [ 647.455866][T32456] ret_from_fork_asm+0x1a/0x30 [ 647.460646][T32456] [ 647.462977][T32456] read to 0xffff888108912674 of 4 bytes by task 32456 on cpu 1: [ 647.470614][T32456] rxrpc_send_data+0x889/0x1820 [ 647.475500][T32456] rxrpc_do_sendmsg+0xb92/0xc30 [ 647.480370][T32456] rxrpc_sendmsg+0x417/0x520 [ 647.484973][T32456] __sock_sendmsg+0x140/0x180 [ 647.489689][T32456] ____sys_sendmsg+0x312/0x410 [ 647.494481][T32456] __sys_sendmsg+0x19d/0x230 [ 647.499081][T32456] __x64_sys_sendmsg+0x46/0x50 [ 647.503858][T32456] x64_sys_call+0x2734/0x2dc0 [ 647.508547][T32456] do_syscall_64+0xc9/0x1c0 [ 647.513069][T32456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.519092][T32456] [ 647.521417][T32456] value changed: 0x00000000 -> 0x00000003 [ 647.527134][T32456] [ 647.529548][T32456] Reported by Kernel Concurrency Sanitizer on: [ 647.535695][T32456] CPU: 1 UID: 0 PID: 32456 Comm: syz.4.10814 Not tainted 6.13.0-rc6-syzkaller-00231-g77a903cd8e5a #0 [ 647.546569][T32456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.556630][T32456] ==================================================================