last executing test programs: 4.751687301s ago: executing program 3 (id=2048): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) socket$inet6(0xa, 0x805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) syz_emit_ethernet(0xfffffffffffffec3, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "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"}}}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1, 0x0, 0x1c}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) setregid(0x0, 0xffffffffffffffff) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.351832859s ago: executing program 3 (id=2095): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x40801) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 3.254737519s ago: executing program 3 (id=2096): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x201, 0x0) ioctl$FITHAW(r5, 0xc0045878) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x4}, 0x106200, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) copy_file_range(r3, &(0x7f0000000200)=0xfffffffffffffff3, 0xffffffffffffffff, &(0x7f0000000280)=0x9d10, 0x40, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], 0x0, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xa00, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100801a, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") 3.044284769s ago: executing program 3 (id=2101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000b4000000dfffffffff3800ff9502000000000000a469e6e07346a674c734aacb7c45bcbf2cda3d1bec543a0809204fa35a6953c08332947d9df32fb43f7a29a44640717ad9c5bcf5a6f5b713"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0xc9}], 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000031401002cbd7000ffdbdf050900020073797a32000000000800410072786500140033006c6f00000000000000000000000000000900020073797a32000000000800410073697700140033007465616d3000000000000000000000000900020073797a3100000000080041007278650014003300736974300000000000000000000000000900020073797a310000000008004100736977001400330068737230000000000000000000000000d578bcd50c3adb4b195ded4080e5ba0f93e116424b22cfbd88d671389d99f9234c44c999e15276764f33fbd63f83ec30ea039ab013920f199139f196ee1f34ebe1e9574e2d742a55007c4f851fa137c55eea51edca4c65913273a641626cf375e4c8c6066fc0d5cc5ab595ce74c27955459b9eb127fd0341e9457156796f46b74d7e2722e8fae072cc69277342c416783036677786304973114f2416c4aa6a24c8a2b64e9e7243997f964a874a6fbc0ee10cc35e20e3402f0e5e79ca77c688ca6868bc1f944605a7ed425243eed6b7446d60674feb36ccec684a9d6aeb1225110573"], 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="8800006a881f4d01090000000000"], 0x8) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x9}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0xff01, 0x7, 0x928b, 0x0, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x66, 0x0, 0xc, 0x29, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x18, 0xae, 0x0, 0xb, [0x3, 0xfffffffd, 0x3, 0xb, 0x92d]}]}}}}}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0xa, 0x4e20, 0x9, 0xa, 0x20, 0xa0, 0x0, r7, r9}, {0xffffffffffff7a12, 0x6, 0x8001, 0x7, 0x0, 0x7, 0x8, 0x8}, {0x5, 0x66, 0x1000}, 0xffff, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@private=0xa010102, 0x4d6, 0x3c}, 0xa, @in=@loopback, 0x34ff, 0x3, 0x0, 0x1, 0x2, 0x3, 0x1000}}, 0xe8) sendmmsg(r6, &(0x7f0000000400)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="21a3ba8a3001fa31ecef0497810378ec826d954a0d86d40f30040ed5e4d9e633ad916ba8a192b1e4d649a53ff897a65d9dc7b0a645b37fe374d3a8d63b687376cbbef6c27c387d5645471e5d5988c1a0621404dede178ee68c57fb52d784b4e21843a9280b0ccfa2730645e0bd6996b00a9a947640952d2504e8bce110ba5d1e131155004d74dfeeacd3ad14071f26b7ce2607232e2ce44a4af55afb4176a8e17a8546b09efb3d2ae87147f80560c50594c54cdfdc7afcd6b50f7e83136b852507a5a278fb750f29f9ba", @ANYRES32=r3], 0xd8}}], 0x400000000000389, 0x4004) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r10, &(0x7f0000000440)) 2.185599354s ago: executing program 3 (id=2117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f00000005c0)=ANY=[], 0x1, 0x371, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0xfff7) r3 = open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) unshare(0x6a040000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES8], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r7 = request_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000600)={'syz', 0x0}, &(0x7f00000004c0)='\x01', 0xfffffffffffffffa) keyctl$setperm(0x5, r7, 0x10040a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r9, 0x1) flock(r9, 0x2) dup3(r9, r8, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x2, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x2040400) r11 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 1.798369442s ago: executing program 1 (id=2132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)}], 0x1}}], 0x1, 0x0) 1.767332395s ago: executing program 1 (id=2133): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 1.766949215s ago: executing program 1 (id=2134): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r2, 0x0, 0x1}, 0x18) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1.749276947s ago: executing program 1 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 1.728988039s ago: executing program 1 (id=2137): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.679775594s ago: executing program 1 (id=2139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.577720424s ago: executing program 4 (id=2143): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) shutdown(r3, 0x1) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2c41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x201, 0x0) ioctl$FITHAW(r6, 0xc0045878) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x4}, 0x106200, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) copy_file_range(r4, &(0x7f0000000200)=0xfffffffffffffff3, 0xffffffffffffffff, &(0x7f0000000280)=0x9d10, 0x40, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], 0x0, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xa00, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100801a, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") 1.295280052s ago: executing program 4 (id=2149): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.236604768s ago: executing program 4 (id=2152): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000080000000000"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r5, 0x8, 0x0, 0x0, 0x14}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0xa8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x78, 0x2, [@TCA_BASIC_EMATCHES={0x74, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR='D\n', @TCF_META_TYPE_VAR="10ef6b021511", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="18079cebdf6f78", @TCF_META_TYPE_VAR="a184", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ca169e5833", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0xa8}}, 0x0) 1.236079178s ago: executing program 4 (id=2153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 1.234459608s ago: executing program 3 (id=2154): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) socket$inet6(0xa, 0x805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) syz_emit_ethernet(0xfffffffffffffec3, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "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"}}}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1, 0x0, 0x1c}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) setregid(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.201628081s ago: executing program 4 (id=2156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) getsockopt$bt_hci(r3, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2c41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x201, 0x0) ioctl$FITHAW(r7, 0xc0045878) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x4}, 0x106200, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r8, 0x0) copy_file_range(r4, &(0x7f0000000200)=0xfffffffffffffff3, r8, &(0x7f0000000280)=0x9d10, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], 0x0, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xa00, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100801a, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") 1.082733553s ago: executing program 4 (id=2159): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0502103, &(0x7f00000001c0)={0x0, 0x9, 0xb50}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x400) ioctl$TCFLSH(r4, 0x400455c8, 0x0) 469.911473ms ago: executing program 0 (id=2175): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000002000000000000080000000000"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r5, 0x8, 0x0, 0x0, 0x14}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0xa0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x70, 0x2, [@TCA_BASIC_EMATCHES={0x6c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR='D\n', @TCF_META_TYPE_VAR="10ef6b021511", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="18079cebdf6f78", @TCF_META_TYPE_VAR="a184", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ca169e5833", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0xa0}}, 0x0) 449.230285ms ago: executing program 0 (id=2176): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18002, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@nouid32}, {@nobarrier}, {@inode_readahead_blks}, {@minixdf}, {@grpjquota}]}, 0xfd, 0xbb6, &(0x7f0000000bc0)="$eJzs3M1rXOUaAPDnnHy3uXfSy+VyezfN5XJp4XKnaSXFFsFUKm5cCLoVGtJJCZl+kERq0iwm+g+IuhbcCGpRurDrbhTcutG6tbgQisRGQUQjZz6S2MwkaTvJicnvB2/O+85zJu/z5DBz3hdmEsC+NZj9SCMOR8T5JKJQfzyNiO5qrzeiUjtvaXF+7KfF+bEklpdf/D6JJCLuL86PNX5XUj8erA96I+KLZ5L42+vr552enZscLZdLU/Xx8ZlLV49Pz879f+LS6MXSxdLlE6eeHD45fGro9HDbav35m5FbP/77uW8rv3zw640f3noviZHor8fW1tEugzG48jdZqzMiRts9WU466vWsrTPp3ORJ6TYnBQBAS+maNdw/ohAdsbp4K8SnX+aaHAAAANAWyx0RywAAAMAel9j/AwAAwB7X+BzA/cX5sUbL9xMJO+ve2YgYqNW/VG+1SGdUqsfe6IqIA/eTWPu11qT2tMc2GBF3vz79cdZim76HvJHKQkT8s9n1T6r1D1S/xb2+/jQihtow/+AD4z9T/SNtmD/v+gHYn26frd3I1t//0pX1TzS5/3U2uXc9irzvf43139K69d9q/R0t1n8vbHGO6++/c61VLKv/qVvPftRo2fzZ8bGKegj3FiL+1dms/mSl/qRF/ee3OEfht2ulVrG8619+N+JoNK+/Idn4/xMdH58ol4ZqP5vOsfD58Iet5s+7/uz6H2hR/2bX/+oW53j53LmbrWKb159+1528VO111x95dXRmZupERHfy/PrHT26cS+Ocxu/I6j/2n41f/83qz94TKvW/Q7YXWKgfs/FrD8z59I3rn2xUf7b3y/P6X3jE6/9G/9bm+O9nbx5rFVu7/81aNv/dpLYXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICGNCL6I0mLK/00LRYjDkbE3+NAWr4yPfO/8SuvXL6QxSIGoisdnyiXhiKiUBsn2fhEtd+3Mj5ZHa/Gn4iIQxHxdqGvOi6OXSlfyLt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVhyMiP5I0mJEpBGxVEjTYjHvrAAAAIC2G8g7AQAAAGDb2f8DAADAXjdi/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2O3Tk9p0kIipn+qot012PdeWaGbDd0rwTAHLTkXcCQG46804AyM1D7vEtF2APSjaJ97aM9LQ9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2r6OHb99JIqJypq/aMt31WFfTZxzZweyA7ZTmnQCQm46Ngp07lwew87zEYf9qvscH9pNkk3jv6jmVP0Z6ti0nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHaf/mpL0mJEpNV+mhaLEX+JiIHoSsYnyqWhiPhrRHxV6OrJxj15Jw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDbTc/OTY6Wy6Upnb3a6Y1dkYbOpp1kd6RR6+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB6mZ+cmR8vl0tR03pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeZuenZscLZdLU1vo3HyYk9d08q4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/B4AAP//pOgNdw==") openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x800}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 303.60862ms ago: executing program 0 (id=2177): mq_open(&(0x7f0000000200)='&\xbd@\x81\xbf\x00\x840\xc5\xbe\x9b\x03\x8c,2[X\x02\xa4\xadk\xd3<#\x0e\x1e\x18C\x95\x06\x17N\x15!f\xa8\x9cn\xe9B\xb14d\xddj\xfc\xe0\xe5\xc8l2\xbd\x96F\xfe\xd6\xc3\xff\x14\xb3z\x00\x83\xfd\x00\x00\x00\x00\x00\x00\xe1\xf6\xc5:\x9a\xb4\xfaw\x8a\x9f\x0f\xdf\x9c\xbc\xfb{\x17.\xe9Z\xabV\xae\x10\xaf\xc9i7@\x03\xbb\xc8\x8d\xaa\xafB\x13;\xee\xfc\xff\xff\xff\xff\xff\xff\xffO\r\\\x8e\xca\xee\xa7-Z\r\xcb\xdc\bL\xec\xd4\xc0\xddQ\xf1L\xa0\xf0~~Nj\xc3\xfe\xd4Q\xad\x7f\xb5W\xf4)z\xca\n\xa5\x02\xb5]O\x15\a\xbf\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xb4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 214.633849ms ago: executing program 0 (id=2179): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x40801) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x38, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r11 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) 135.947656ms ago: executing program 2 (id=2181): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 120.998368ms ago: executing program 0 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c00028005000200830000000800034000006ad50800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 120.562268ms ago: executing program 2 (id=2183): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 106.492129ms ago: executing program 0 (id=2184): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) socket$inet6(0xa, 0x805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) syz_emit_ethernet(0xfffffffffffffec3, &(0x7f0000001380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0xfbf, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @remote, {[@ssrr={0x89, 0xb, 0xa, [@broadcast, @multicast2]}, @noop]}}, "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"}}}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1, 0x0, 0x1c}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x10) setregid(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 85.581031ms ago: executing program 2 (id=2185): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r2, 0x0, 0x1}, 0x18) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 69.577803ms ago: executing program 2 (id=2195): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 43.828425ms ago: executing program 2 (id=2196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 0s ago: executing program 2 (id=2197): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x2a0a1}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x83d00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001880), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x2c, r4, 0x472ae5ca623fd52b, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0xffffffffffffffb0, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10841}, 0x8c0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r7, 0x1, 0x123, 0x224}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000047183c0773d11144ce312c83e35c3c52ada6dcda87633ae1aca71c2a82c888ed2d72fdb7a059ecc2628eeac78af254203566abb43f9b51fbd1f88502bdb151751c0cf9034cc592bd30915836e93d5466017bc181ee49a5cf82ff2c6a382ddb92f4a9f1159406b871253842e8604db93e0dac63b3995e7729b846aa8ef2696ef7", @ANYRES16=r9, @ANYRESDEC=r8, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf250a00000006000900000000000c000600000000000000000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYBLOB="06000900ffff00000c000600030000c3d10000000600f7ff000002000c0006000300000003000000e81c6d64b6fc7e59a718f207d36e55891e84bf5da773cec82e0aa3982239691201d442757ea35f610efdc9e6195a6f3dc82a1c46d5e3339205b6e6a14ce71f82053cdccb9ff85b31acfb5b"], 0x68}, 0x1, 0x0, 0x0, 0x400c044}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r11) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r12, @ANYBLOB="01052bbd7000fcdbdf2513000000e400138040000080110001004e4c424c5f434950534f763400000000130001002f6465762f6472692f6361726423000008000100212d262c0b000100293a262e5d452f00280000800a0001007d212b7d26280000060001002f7d0000050001005c000000070001002e2c5b0028000080080001006e666300080001006e666300110001004e4c424c5f434950534f7634000000001c000080040001000b000100317d40295d23260007000100232e270018000080130001002f6465762f6472692f63617264230000080000800400010014000080060001002f2f000007000100d3213a00080001"], 0x104}, 0x1, 0x0, 0x0, 0x1462c17a104c842f}, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r13) kernel console output (not intermixed with test programs): netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.483552][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.496405][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.504981][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.546687][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.551199][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 66.587269][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 66.614719][ T4803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 66.621307][ T4803] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 66.628937][ T4803] vhci_hcd vhci_hcd.0: Device attached [ 66.638261][ T4804] vhci_hcd: connection closed [ 66.638442][ T3442] vhci_hcd: stop threads [ 66.647531][ T3442] vhci_hcd: release socket [ 66.651966][ T3442] vhci_hcd: disconnect device [ 67.062059][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 67.154614][ T4815] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 67.162346][ T4815] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 67.319321][ T4832] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.358155][ T4832] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.431355][ T29] audit: type=1326 audit(1760725849.180:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4835 comm="syz.4.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x0 [ 67.493328][ T4832] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.509309][ T4842] serio: Serial port ttyS3 [ 67.535809][ T3442] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.543054][ T4844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 67.549595][ T4844] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 67.557236][ T4844] vhci_hcd vhci_hcd.0: Device attached [ 67.563872][ T4848] siw: device registration error -23 [ 67.572104][ T4846] vhci_hcd: connection closed [ 67.572240][ T3442] vhci_hcd: stop threads [ 67.581269][ T3442] vhci_hcd: release socket [ 67.585696][ T3442] vhci_hcd: disconnect device [ 67.622484][ T4832] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.719405][ T3442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.739446][ T3442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.748157][ T3442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.760813][ T3442] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.161086][ T4864] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 68.179378][ T4864] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 68.625907][ T4883] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.672518][ T4883] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.712495][ T4883] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.772578][ T4883] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.836852][ T3442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.847656][ T3442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.858173][ T3442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.868977][ T3442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.896571][ T4891] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 68.903169][ T4891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.910875][ T4891] vhci_hcd vhci_hcd.0: Device attached [ 68.928112][ T4892] vhci_hcd: connection closed [ 68.928293][ T1403] vhci_hcd: stop threads [ 68.937384][ T1403] vhci_hcd: release socket [ 68.941830][ T1403] vhci_hcd: disconnect device [ 69.229180][ T4909] serio: Serial port ttyS3 [ 69.285143][ T4910] siw: device registration error -23 [ 69.342296][ T4912] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 69.357796][ T4912] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 69.573684][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.636662][ T29] audit: type=1326 audit(1760725851.380:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.672389][ T29] audit: type=1326 audit(1760725851.380:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.790804][ T29] audit: type=1326 audit(1760725851.480:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.814299][ T29] audit: type=1326 audit(1760725851.480:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.837782][ T29] audit: type=1326 audit(1760725851.480:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.861212][ T29] audit: type=1326 audit(1760725851.480:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.884663][ T29] audit: type=1326 audit(1760725851.480:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.908007][ T29] audit: type=1326 audit(1760725851.480:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 69.931406][ T29] audit: type=1326 audit(1760725851.480:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4919 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 70.059544][ T4930] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.104539][ T4930] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.135435][ T4944] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 70.141977][ T4944] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.149657][ T4944] vhci_hcd vhci_hcd.0: Device attached [ 70.157659][ T4945] vhci_hcd: connection closed [ 70.157712][ T3442] vhci_hcd: stop threads [ 70.166682][ T3442] vhci_hcd: release socket [ 70.171219][ T3442] vhci_hcd: disconnect device [ 70.177779][ T4930] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.222895][ T4930] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.304559][ T4956] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 70.312241][ T4956] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 70.561403][ T1403] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.677236][ T4966] __nla_validate_parse: 23 callbacks suppressed [ 70.677346][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.487'. [ 70.736270][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 71.224074][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 71.362672][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 71.374687][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 71.494698][ T4999] netlink: 5 bytes leftover after parsing attributes in process `syz.1.498'. [ 71.503677][ T4999] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 71.511138][ T4999] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 71.700060][ T5004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.499'. [ 71.714380][ T5004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 72.226485][ T5024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.506'. [ 72.272415][ T5030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.509'. [ 72.467784][ T5035] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 72.478317][ T5035] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 72.624702][ T3646] Bluetooth: hci0: command 0x1003 tx timeout [ 72.630912][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.737618][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 72.737635][ T29] audit: type=1326 audit(1760725854.480:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.786733][ T29] audit: type=1326 audit(1760725854.520:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.811972][ T29] audit: type=1326 audit(1760725854.560:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.835385][ T29] audit: type=1326 audit(1760725854.560:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.859291][ T29] audit: type=1326 audit(1760725854.560:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.882747][ T29] audit: type=1326 audit(1760725854.560:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.906103][ T29] audit: type=1326 audit(1760725854.560:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.929502][ T29] audit: type=1326 audit(1760725854.560:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.952836][ T29] audit: type=1326 audit(1760725854.560:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 72.976108][ T29] audit: type=1326 audit(1760725854.560:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5047 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 73.179814][ T5071] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 73.190310][ T5071] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 73.213244][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.240818][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.257003][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.289444][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.386119][ T3442] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.740259][ T5108] Zero length message leads to an empty skb [ 73.756936][ T5104] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.841311][ T5104] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.014287][ T5104] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.146143][ T5104] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.181327][ T5118] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 74.188955][ T5118] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 74.269711][ T3442] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.281928][ T3442] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298344][ T3442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.315869][ T3442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.124038][ T5161] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.216650][ T5161] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.268343][ T5166] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 75.293306][ T5166] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 75.324891][ T5161] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.421330][ T3646] Bluetooth: hci0: command 0x1003 tx timeout [ 75.431362][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.431665][ T5161] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.572077][ T5181] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 75.587669][ T1403] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.604206][ T1403] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.612888][ T1403] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650185][ T1403] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.678776][ T5188] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 75.685939][ T5187] serio: Serial port ttyS3 [ 75.693100][ T5188] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 75.707908][ T5191] __nla_validate_parse: 24 callbacks suppressed [ 75.707929][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 75.739950][ T5195] siw: device registration error -23 [ 75.762906][ T5189] netlink: 'syz.4.564': attribute type 10 has an invalid length. [ 75.789469][ T5189] team0: Port device dummy0 added [ 75.875510][ T3442] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.928146][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 75.999314][ T5218] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.075882][ T5218] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.154023][ T5218] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.233082][ T5218] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.528423][ T5225] netlink: 5 bytes leftover after parsing attributes in process `syz.2.579'. [ 76.540474][ T5225] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 76.559135][ T5225] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 76.607975][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 76.638820][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 76.656225][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 76.668420][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 76.755314][ T5237] netlink: 5 bytes leftover after parsing attributes in process `syz.0.583'. [ 76.764628][ T5237] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 76.774991][ T5237] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 76.838604][ T5244] netlink: 'syz.2.587': attribute type 10 has an invalid length. [ 76.849693][ T5244] team0: Port device dummy0 added [ 76.889463][ T5247] serio: Serial port ttyS3 [ 76.945012][ T5248] siw: device registration error -23 [ 76.974770][ T5252] netlink: 5 bytes leftover after parsing attributes in process `syz.1.590'. [ 76.983877][ T5252] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 76.992081][ T5252] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 77.010556][ T5256] netlink: 5 bytes leftover after parsing attributes in process `syz.0.592'. [ 77.019512][ T5256] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 77.026956][ T5256] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 77.890808][ T3646] Bluetooth: hci0: command 0x1003 tx timeout [ 77.897083][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.958229][ T5299] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 77.967491][ T5299] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 78.033482][ T5310] serio: Serial port ttyS3 [ 78.084216][ T5318] siw: device registration error -23 [ 78.140957][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 78.140973][ T29] audit: type=1326 audit(1760725859.890:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.170531][ T29] audit: type=1326 audit(1760725859.890:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.194838][ T29] audit: type=1326 audit(1760725859.940:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.222483][ T29] audit: type=1326 audit(1760725859.970:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.245964][ T29] audit: type=1326 audit(1760725859.970:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.271928][ T29] audit: type=1326 audit(1760725859.970:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.295332][ T29] audit: type=1326 audit(1760725859.970:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.295387][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.318637][ T29] audit: type=1326 audit(1760725859.970:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.318674][ T29] audit: type=1326 audit(1760725859.970:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.327032][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.350064][ T29] audit: type=1326 audit(1760725859.970:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5325 comm="syz.1.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 78.373788][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.413410][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.717946][ T5349] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 78.725564][ T5349] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 78.874410][ T5358] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.923740][ T5358] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.978426][ T5358] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.042607][ T5358] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.132143][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.140509][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.157617][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.183224][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.196294][ T5385] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 79.207090][ T5385] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 79.266930][ T5394] serio: Serial port ttyS3 [ 79.481701][ T5417] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.532720][ T5417] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.604559][ T5417] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.663839][ T5417] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.819058][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.840517][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.856094][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.864648][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.900182][ T5427] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 79.909305][ T5427] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 80.102351][ T5446] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 80.227650][ T5452] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.248002][ T1000] Bluetooth: hci1: Frame reassembly failed (-84) [ 80.254776][ T5457] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 80.274342][ T5457] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 80.316878][ T5459] Bluetooth: hci0: command 0x1003 tx timeout [ 80.323032][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.369980][ T5452] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.503413][ T5452] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.561698][ T5465] 0ªX¹¦À: renamed from caif0 [ 80.589534][ T5465] 0ªX¹¦À: entered allmulticast mode [ 80.594863][ T5465] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 80.627861][ T5452] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.727784][ T5478] __nla_validate_parse: 23 callbacks suppressed [ 80.727803][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 80.782350][ T5482] serio: Serial port ttyS3 [ 80.794419][ T5484] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 80.829499][ T5486] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 80.862205][ T5487] siw: device registration error -23 [ 80.885865][ T5489] netlink: 5 bytes leftover after parsing attributes in process `syz.4.684'. [ 80.895053][ T5489] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 80.904135][ T5489] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 81.000938][ T5491] netlink: 5 bytes leftover after parsing attributes in process `syz.2.685'. [ 81.009879][ T5491] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 81.017558][ T5491] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 81.053332][ T5493] netlink: 5 bytes leftover after parsing attributes in process `syz.4.686'. [ 81.062387][ T5493] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 81.070022][ T5493] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 81.342625][ T5509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.692'. [ 81.355707][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 81.364980][ T5513] siw: device registration error -23 [ 81.676326][ T5505] serio: Serial port ttyS3 [ 81.805933][ T5524] netlink: 5 bytes leftover after parsing attributes in process `syz.0.697'. [ 81.815621][ T5524] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 81.835036][ T5524] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 81.995766][ T5526] netlink: 5 bytes leftover after parsing attributes in process `syz.0.698'. [ 82.004831][ T5526] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 82.023423][ T5526] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 82.166415][ T5532] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 82.246115][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 82.261311][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 82.303587][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 82.312844][ T3646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 82.378897][ T5546] serio: Serial port ttyS3 [ 82.402656][ T5550] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 82.430065][ T5554] siw: device registration error -23 [ 83.074032][ T5588] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 83.199952][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.210955][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.259843][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.276042][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.445191][ T5615] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.531927][ T5615] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.614879][ T5615] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.638114][ T5624] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 83.647583][ T5628] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 83.662327][ T5630] serio: Serial port ttyS3 [ 83.675546][ T5615] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.713092][ T5635] siw: device registration error -23 [ 83.720617][ T5624] team0: Port device dummy0 added [ 83.767639][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.783172][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.807994][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.818733][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.869390][ T5648] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 83.877011][ T5648] net_ratelimit: 3 callbacks suppressed [ 83.877022][ T5648] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 84.179030][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 84.179049][ T29] audit: type=1326 audit(1760725865.920:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.208639][ T29] audit: type=1326 audit(1760725865.920:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.232096][ T29] audit: type=1326 audit(1760725865.920:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.255449][ T29] audit: type=1326 audit(1760725865.920:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.278907][ T29] audit: type=1326 audit(1760725865.920:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.302438][ T29] audit: type=1326 audit(1760725865.920:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.325972][ T29] audit: type=1326 audit(1760725865.920:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.349361][ T29] audit: type=1326 audit(1760725865.920:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.373155][ T29] audit: type=1326 audit(1760725865.920:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.396689][ T29] audit: type=1326 audit(1760725865.920:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 84.775402][ T5700] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 84.781954][ T5700] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.789749][ T5700] vhci_hcd vhci_hcd.0: Device attached [ 84.810707][ T5701] vhci_hcd: connection closed [ 84.815537][ T1000] vhci_hcd: stop threads [ 84.824661][ T1000] vhci_hcd: release socket [ 84.829151][ T1000] vhci_hcd: disconnect device [ 85.383729][ T5719] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 85.403086][ T5719] team0: Port device dummy0 added [ 85.411372][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.878074][ T5743] __nla_validate_parse: 34 callbacks suppressed [ 85.878151][ T5743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.781'. [ 85.953780][ T5752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 85.966996][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 86.075073][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'. [ 86.089753][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 86.182152][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'. [ 86.198181][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 86.251646][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 86.314471][ T5789] netlink: 5 bytes leftover after parsing attributes in process `syz.2.796'. [ 86.323957][ T5789] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 86.331849][ T5789] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.357857][ T5792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 86.414734][ T5800] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 86.422492][ T5800] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.506982][ T5812] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 86.514711][ T5812] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.590719][ T5818] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 86.598622][ T5818] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.712000][ T5821] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.781883][ T5821] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.864252][ T5821] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.934611][ T5854] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 86.953202][ T5854] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.971233][ T5821] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.002508][ T5863] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 87.009053][ T5863] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.016699][ T5863] vhci_hcd vhci_hcd.0: Device attached [ 87.027301][ T5864] vhci_hcd: connection closed [ 87.027522][ T31] vhci_hcd: stop threads [ 87.029960][ T1403] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.032367][ T31] vhci_hcd: release socket [ 87.032378][ T31] vhci_hcd: disconnect device [ 87.040771][ T1403] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.065171][ T1403] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.076504][ T1403] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.302989][ T3442] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.513117][ T5904] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 87.541406][ T5904] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 87.919254][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 88.059035][ T5943] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 88.073953][ T5943] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 88.146134][ T5947] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 88.166357][ T5947] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 88.301423][ T5968] serio: Serial port ttyS3 [ 88.352330][ T5972] siw: device registration error -23 [ 88.734320][ T5982] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 88.743500][ T5982] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 89.318272][ T6011] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 89.325973][ T6011] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 89.342368][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 89.342386][ T29] audit: type=1326 audit(1760725871.100:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.353170][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.372563][ T29] audit: type=1326 audit(1760725871.100:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.378394][ T5993] Bluetooth: hci0: command 0x1003 tx timeout [ 89.401657][ T29] audit: type=1326 audit(1760725871.100:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.431094][ T29] audit: type=1326 audit(1760725871.100:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.454522][ T29] audit: type=1326 audit(1760725871.100:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.477896][ T29] audit: type=1326 audit(1760725871.100:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.501292][ T29] audit: type=1326 audit(1760725871.100:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.524760][ T29] audit: type=1326 audit(1760725871.100:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.548104][ T29] audit: type=1326 audit(1760725871.100:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.571470][ T29] audit: type=1326 audit(1760725871.100:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6012 comm="syz.2.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 89.665102][ T6018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.666581][ T6025] serio: Serial port ttyS3 [ 89.712432][ T6018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.730424][ T6030] siw: device registration error -23 [ 89.775406][ T6029] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.812261][ T6018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.852649][ T6029] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.892135][ T6018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.932192][ T6029] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.956517][ T3442] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.968468][ T3442] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.977321][ T5993] Bluetooth: hci1: command 0x1003 tx timeout [ 89.983379][ T3646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 89.984583][ T3442] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.001656][ T6029] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.034893][ T3442] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.164688][ T6041] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.222492][ T6041] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.272760][ T6041] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.301046][ T6057] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 90.308247][ T6057] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 90.333565][ T6041] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.412381][ T1403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.420795][ T1403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.428990][ T1403] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.439656][ T1403] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.180876][ T5459] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 91.181368][ T5993] Bluetooth: hci2: command 0x1003 tx timeout [ 91.210937][ T6084] __nla_validate_parse: 34 callbacks suppressed [ 91.210959][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 91.246150][ T1403] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.258197][ T1403] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.270480][ T1403] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.287872][ T1403] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.317459][ T6092] serio: Serial port ttyS3 [ 91.322730][ T6094] netlink: 5 bytes leftover after parsing attributes in process `syz.3.916'. [ 91.331621][ T6094] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 91.338763][ T6094] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 91.368675][ T6095] siw: device registration error -23 [ 91.472631][ T6105] netlink: 24 bytes leftover after parsing attributes in process `syz.1.920'. [ 91.491281][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 91.765258][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 91.961702][ T6123] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.016268][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 92.030393][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 92.040506][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 92.067207][ T6123] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.089873][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 92.161666][ T6123] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.232365][ T6140] netlink: 5 bytes leftover after parsing attributes in process `syz.4.934'. [ 92.241617][ T6140] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 92.259246][ T6140] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 92.285277][ T6123] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.455346][ T6162] serio: Serial port ttyS3 [ 92.506258][ T6170] siw: device registration error -23 [ 92.530788][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.711557][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.099065][ T6218] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 93.106307][ T6218] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 93.542941][ T6249] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 93.550367][ T6249] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 93.696582][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.711871][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722920][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.740048][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.879552][ T6284] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 93.941854][ T6282] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.011558][ T6282] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.043037][ T6282] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.112472][ T6282] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.514993][ T6299] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 94.522616][ T6299] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 94.758173][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 94.758186][ T29] audit: type=1326 audit(1760725876.500:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.788469][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.789506][ T29] audit: type=1326 audit(1760725876.500:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.818339][ T29] audit: type=1326 audit(1760725876.500:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.841878][ T29] audit: type=1326 audit(1760725876.500:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.886722][ T29] audit: type=1326 audit(1760725876.600:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.910271][ T29] audit: type=1326 audit(1760725876.600:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.933714][ T29] audit: type=1326 audit(1760725876.600:9190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.957273][ T29] audit: type=1326 audit(1760725876.600:9191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 94.980747][ T29] audit: type=1326 audit(1760725876.600:9192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 95.004102][ T29] audit: type=1326 audit(1760725876.600:9193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6317 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f772680efc9 code=0x7ffc0000 [ 95.041676][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.049973][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069873][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.078389][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.110782][ T6321] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.142625][ T6321] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.186001][ T6341] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 95.193555][ T6341] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 95.210693][ T6321] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.240291][ T6342] program syz.1.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.262449][ T6321] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.741258][ T6369] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 95.749927][ T6372] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 95.757835][ T6372] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 96.102976][ T6407] serio: Serial port ttyS3 [ 96.129884][ T6412] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 96.137187][ T6412] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 96.782342][ T6443] __nla_validate_parse: 41 callbacks suppressed [ 96.782356][ T6443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 96.803671][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 96.924327][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 96.942931][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 96.952546][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 96.961971][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 96.972691][ T6450] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1060'. [ 96.981814][ T6450] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 96.989279][ T6450] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 97.199301][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 97.216591][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 97.226455][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 97.255378][ T6479] serio: Serial port ttyS3 [ 97.305991][ T6482] siw: device registration error -23 [ 97.427014][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.442260][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.461164][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.471386][ T6496] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 97.478773][ T6496] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 97.494706][ T3442] Bluetooth: hci1: Frame reassembly failed (-84) [ 97.501104][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.593669][ T6508] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 97.601112][ T6508] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.008745][ T6534] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 98.016470][ T6534] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 98.053285][ T6530] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.102863][ T6530] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.162384][ T6530] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.204443][ T6530] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.246373][ T6546] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 98.282225][ T1403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.302921][ T1403] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.319161][ T1403] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.329117][ T1403] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.615693][ T5459] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.621998][ T5993] Bluetooth: hci0: command 0x1003 tx timeout [ 98.697494][ T6600] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 98.706777][ T6600] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 99.393847][ T6673] serio: Serial port ttyS3 [ 99.490943][ T3646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 99.491214][ T5459] Bluetooth: hci1: command 0x1003 tx timeout [ 99.509077][ T6682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.552257][ T6682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.652692][ T6682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.712315][ T6682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.790259][ T3442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.808933][ T3442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.824892][ T3442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.833573][ T3442] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.863432][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 99.863445][ T29] audit: type=1326 audit(1760725881.610:9313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 99.893553][ T29] audit: type=1326 audit(1760725881.610:9314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 99.918051][ T6724] siw: device registration error -23 [ 99.941490][ T29] audit: type=1326 audit(1760725881.610:9315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 99.965259][ T29] audit: type=1326 audit(1760725881.610:9316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 99.988724][ T29] audit: type=1326 audit(1760725881.610:9317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 100.012376][ T29] audit: type=1400 audit(1760725881.720:9318): avc: denied { bind } for pid=6725 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.040204][ T29] audit: type=1326 audit(1760725881.790:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 100.063832][ T29] audit: type=1326 audit(1760725881.790:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 100.088301][ T29] audit: type=1326 audit(1760725881.790:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 100.111742][ T29] audit: type=1326 audit(1760725881.790:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6727 comm="syz.2.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 100.156238][ T6735] FAULT_INJECTION: forcing a failure. [ 100.156238][ T6735] name failslab, interval 1, probability 0, space 0, times 1 [ 100.169011][ T6735] CPU: 0 UID: 0 PID: 6735 Comm: syz.4.1174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.169093][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.169108][ T6735] Call Trace: [ 100.169113][ T6735] [ 100.169119][ T6735] __dump_stack+0x1d/0x30 [ 100.169138][ T6735] dump_stack_lvl+0xe8/0x140 [ 100.169156][ T6735] dump_stack+0x15/0x1b [ 100.169218][ T6735] should_fail_ex+0x265/0x280 [ 100.169256][ T6735] should_failslab+0x8c/0xb0 [ 100.169290][ T6735] kmem_cache_alloc_noprof+0x50/0x480 [ 100.169327][ T6735] ? audit_log_start+0x342/0x720 [ 100.169363][ T6735] audit_log_start+0x342/0x720 [ 100.169462][ T6735] ? kstrtouint+0x76/0xc0 [ 100.169491][ T6735] audit_seccomp+0x48/0x100 [ 100.169546][ T6735] ? __seccomp_filter+0x82d/0x1250 [ 100.169569][ T6735] __seccomp_filter+0x83e/0x1250 [ 100.169596][ T6735] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.169657][ T6735] ? vfs_write+0x7e8/0x960 [ 100.169677][ T6735] ? __rcu_read_unlock+0x4f/0x70 [ 100.169723][ T6735] ? __fget_files+0x184/0x1c0 [ 100.169749][ T6735] __secure_computing+0x82/0x150 [ 100.169833][ T6735] syscall_trace_enter+0xcf/0x1e0 [ 100.169858][ T6735] do_syscall_64+0xac/0x200 [ 100.169880][ T6735] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.169923][ T6735] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.169944][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.169963][ T6735] RIP: 0033:0x7f14b9ceefc9 [ 100.170055][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.170071][ T6735] RSP: 002b:00007f14b8757038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 100.170154][ T6735] RAX: ffffffffffffffda RBX: 00007f14b9f45fa0 RCX: 00007f14b9ceefc9 [ 100.170166][ T6735] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000001025 [ 100.170273][ T6735] RBP: 00007f14b8757090 R08: 0000000000000000 R09: 0000000000000000 [ 100.170285][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.170296][ T6735] R13: 00007f14b9f46038 R14: 00007f14b9f45fa0 R15: 00007fff225351a8 [ 100.170314][ T6735] [ 100.225300][ T6716] serio: Serial port ttyS3 [ 100.362609][ T6740] netlink: 'syz.4.1176': attribute type 1 has an invalid length. [ 100.435346][ T6740] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 100.457138][ T6748] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 100.471386][ T6748] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 100.472480][ T6740] SELinux: Context system_u:object is not valid (left unmapped). [ 100.527117][ T6747] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.582816][ T6747] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.603858][ T6763] serio: Serial port ttyS3 [ 100.632441][ T6747] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.655083][ T6771] siw: device registration error -23 [ 100.693969][ T6747] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.723791][ T6774] siw: device registration error -23 [ 100.834031][ T6791] netlink: 'syz.1.1194': attribute type 4 has an invalid length. [ 100.971392][ T6798] netlink: 'syz.1.1197': attribute type 4 has an invalid length. [ 101.074700][ T6809] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 101.082649][ T6809] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 101.376110][ T6834] hsr0 speed is unknown, defaulting to 1000 [ 101.417154][ T6836] FAULT_INJECTION: forcing a failure. [ 101.417154][ T6836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.430677][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.1.1210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.430702][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.430715][ T6836] Call Trace: [ 101.430720][ T6836] [ 101.430726][ T6836] __dump_stack+0x1d/0x30 [ 101.430747][ T6836] dump_stack_lvl+0xe8/0x140 [ 101.430769][ T6836] dump_stack+0x15/0x1b [ 101.430843][ T6836] should_fail_ex+0x265/0x280 [ 101.430927][ T6836] should_fail_alloc_page+0xf2/0x100 [ 101.430959][ T6836] __alloc_frozen_pages_noprof+0xff/0x360 [ 101.430993][ T6836] alloc_pages_mpol+0xb3/0x260 [ 101.431011][ T6836] vma_alloc_folio_noprof+0x1aa/0x300 [ 101.431043][ T6836] handle_mm_fault+0xec2/0x2be0 [ 101.431071][ T6836] ? mt_find+0x208/0x320 [ 101.431103][ T6836] do_user_addr_fault+0x3fe/0x1080 [ 101.431175][ T6836] exc_page_fault+0x62/0xa0 [ 101.431198][ T6836] asm_exc_page_fault+0x26/0x30 [ 101.431290][ T6836] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 101.431321][ T6836] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff f8 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 101.431338][ T6836] RSP: 0018:ffffc90012457cb8 EFLAGS: 00050246 [ 101.431355][ T6836] RAX: ffff88811952aba0 RBX: 0000000000000040 RCX: 0000000000000040 [ 101.431371][ T6836] RDX: 0000000000000000 RSI: ffffc90012457d10 RDI: 0000200000033a80 [ 101.431463][ T6836] RBP: ffffc90012457d90 R08: 000000000000019d R09: 0000000000000000 [ 101.431478][ T6836] R10: 0001c90012457d10 R11: 0001c90012457d4f R12: 0000200000033ac0 [ 101.431494][ T6836] R13: 00007ffffffff000 R14: 0000200000033a80 R15: ffffc90012457d10 [ 101.431526][ T6836] _copy_to_user+0x7c/0xa0 [ 101.431561][ T6836] rng_dev_read+0x3ef/0x740 [ 101.431596][ T6836] ? __pfx_rng_dev_read+0x10/0x10 [ 101.431680][ T6836] vfs_readv+0x3fb/0x690 [ 101.431809][ T6836] __x64_sys_preadv+0xfd/0x1c0 [ 101.431835][ T6836] x64_sys_call+0x282e/0x3000 [ 101.431861][ T6836] do_syscall_64+0xd2/0x200 [ 101.431891][ T6836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.431964][ T6836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 101.431993][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.432020][ T6836] RIP: 0033:0x7fbba671efc9 [ 101.432039][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.432062][ T6836] RSP: 002b:00007fbba5187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 101.432143][ T6836] RAX: ffffffffffffffda RBX: 00007fbba6975fa0 RCX: 00007fbba671efc9 [ 101.432174][ T6836] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 101.432189][ T6836] RBP: 00007fbba5187090 R08: 0000000000000000 R09: 0000000000000000 [ 101.432205][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.432220][ T6836] R13: 00007fbba6976038 R14: 00007fbba6975fa0 R15: 00007ffd4e7aa3c8 [ 101.432299][ T6836] [ 101.728529][ T6772] serio: Serial port ttyS3 [ 101.907644][ T6858] hsr0 speed is unknown, defaulting to 1000 [ 101.967329][ T6867] netlink: 'syz.1.1221': attribute type 4 has an invalid length. [ 101.975315][ T6867] __nla_validate_parse: 40 callbacks suppressed [ 101.975395][ T6867] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1221'. [ 102.081152][ T6870] serio: Serial port ttyS3 [ 102.132740][ T6877] siw: device registration error -23 [ 102.163547][ T6881] FAULT_INJECTION: forcing a failure. [ 102.163547][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 102.176276][ T6881] CPU: 0 UID: 0 PID: 6881 Comm: syz.0.1227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.176308][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.176323][ T6881] Call Trace: [ 102.176330][ T6881] [ 102.176339][ T6881] __dump_stack+0x1d/0x30 [ 102.176365][ T6881] dump_stack_lvl+0xe8/0x140 [ 102.176435][ T6881] dump_stack+0x15/0x1b [ 102.176452][ T6881] should_fail_ex+0x265/0x280 [ 102.176504][ T6881] should_failslab+0x8c/0xb0 [ 102.176539][ T6881] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 102.176644][ T6881] ? __alloc_skb+0x101/0x320 [ 102.176676][ T6881] __alloc_skb+0x101/0x320 [ 102.176699][ T6881] ? audit_log_start+0x342/0x720 [ 102.176725][ T6881] audit_log_start+0x3a0/0x720 [ 102.176823][ T6881] ? kstrtouint+0x76/0xc0 [ 102.176945][ T6881] audit_seccomp+0x48/0x100 [ 102.176985][ T6881] ? __seccomp_filter+0x82d/0x1250 [ 102.177020][ T6881] __seccomp_filter+0x83e/0x1250 [ 102.177055][ T6881] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.177146][ T6881] ? vfs_write+0x7e8/0x960 [ 102.177169][ T6881] ? __rcu_read_unlock+0x4f/0x70 [ 102.177202][ T6881] ? __fget_files+0x184/0x1c0 [ 102.177298][ T6881] __secure_computing+0x82/0x150 [ 102.177331][ T6881] syscall_trace_enter+0xcf/0x1e0 [ 102.177429][ T6881] do_syscall_64+0xac/0x200 [ 102.177459][ T6881] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.177540][ T6881] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.177630][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.177655][ T6881] RIP: 0033:0x7f09420aefc9 [ 102.177673][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.177696][ T6881] RSP: 002b:00007f0940b0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.177720][ T6881] RAX: ffffffffffffffda RBX: 00007f0942305fa0 RCX: 00007f09420aefc9 [ 102.177736][ T6881] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 102.177752][ T6881] RBP: 00007f0940b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.177819][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.177834][ T6881] R13: 00007f0942306038 R14: 00007f0942305fa0 R15: 00007ffe20eef2b8 [ 102.177855][ T6881] [ 102.636932][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1244'. [ 102.655763][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 102.697276][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1246'. [ 102.717340][ T6928] FAULT_INJECTION: forcing a failure. [ 102.717340][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 102.717451][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.2.1246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.717545][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.717561][ T6928] Call Trace: [ 102.717569][ T6928] [ 102.717578][ T6928] __dump_stack+0x1d/0x30 [ 102.717613][ T6928] dump_stack_lvl+0xe8/0x140 [ 102.717638][ T6928] dump_stack+0x15/0x1b [ 102.717701][ T6928] should_fail_ex+0x265/0x280 [ 102.717740][ T6928] should_failslab+0x8c/0xb0 [ 102.717766][ T6928] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 102.717880][ T6928] ? __alloc_skb+0x101/0x320 [ 102.717983][ T6928] __alloc_skb+0x101/0x320 [ 102.718015][ T6928] netlink_alloc_large_skb+0xbf/0xf0 [ 102.718050][ T6928] netlink_sendmsg+0x3cf/0x6b0 [ 102.718084][ T6928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.718167][ T6928] __sock_sendmsg+0x145/0x180 [ 102.718193][ T6928] ____sys_sendmsg+0x31e/0x4e0 [ 102.718235][ T6928] ___sys_sendmsg+0x17b/0x1d0 [ 102.718409][ T6928] __x64_sys_sendmsg+0xd4/0x160 [ 102.718441][ T6928] x64_sys_call+0x191e/0x3000 [ 102.718545][ T6928] do_syscall_64+0xd2/0x200 [ 102.718568][ T6928] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.718598][ T6928] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.718627][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.718681][ T6928] RIP: 0033:0x7f7f2c97efc9 [ 102.718695][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.718712][ T6928] RSP: 002b:00007f7f2b3e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.718730][ T6928] RAX: ffffffffffffffda RBX: 00007f7f2cbd5fa0 RCX: 00007f7f2c97efc9 [ 102.718857][ T6928] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.718874][ T6928] RBP: 00007f7f2b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.718893][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.718915][ T6928] R13: 00007f7f2cbd6038 R14: 00007f7f2cbd5fa0 R15: 00007ffd220d5508 [ 102.718941][ T6928] [ 102.765288][ T6932] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1247'. [ 102.811837][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 102.997440][ T1403] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.997513][ T1403] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.013664][ T3442] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.013721][ T3442] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.132784][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 103.162150][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 103.463051][ T6981] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.474406][ T6999] capability: warning: `syz.3.1273' uses deprecated v2 capabilities in a way that may be insecure [ 103.496705][ T6981] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.562929][ T6981] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.612963][ T6981] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.625361][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 103.639799][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 103.669080][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.683501][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.705149][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.726516][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.770600][ T7036] FAULT_INJECTION: forcing a failure. [ 103.770600][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.783928][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.1282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.784004][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.784083][ T7036] Call Trace: [ 103.784090][ T7036] [ 103.784098][ T7036] __dump_stack+0x1d/0x30 [ 103.784194][ T7036] dump_stack_lvl+0xe8/0x140 [ 103.784287][ T7036] dump_stack+0x15/0x1b [ 103.784302][ T7036] should_fail_ex+0x265/0x280 [ 103.784354][ T7036] should_fail+0xb/0x20 [ 103.784388][ T7036] should_fail_usercopy+0x1a/0x20 [ 103.784406][ T7036] strncpy_from_user+0x25/0x230 [ 103.784464][ T7036] path_setxattrat+0xeb/0x310 [ 103.784510][ T7036] __x64_sys_fsetxattr+0x6b/0x80 [ 103.784540][ T7036] x64_sys_call+0x1ced/0x3000 [ 103.784560][ T7036] do_syscall_64+0xd2/0x200 [ 103.784589][ T7036] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.784622][ T7036] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 103.784679][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.784707][ T7036] RIP: 0033:0x7f772680efc9 [ 103.784721][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.784737][ T7036] RSP: 002b:00007f7725277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 103.784754][ T7036] RAX: ffffffffffffffda RBX: 00007f7726a65fa0 RCX: 00007f772680efc9 [ 103.784769][ T7036] RDX: 0000200000000580 RSI: 0000200000000040 RDI: 0000000000000003 [ 103.784784][ T7036] RBP: 00007f7725277090 R08: 0000000000000000 R09: 0000000000000000 [ 103.784812][ T7036] R10: 000000000000006b R11: 0000000000000246 R12: 0000000000000001 [ 103.784823][ T7036] R13: 00007f7726a66038 R14: 00007f7726a65fa0 R15: 00007fff1b730cc8 [ 103.784843][ T7036] [ 103.991239][ T7045] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 104.002122][ T7045] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 104.053585][ T1000] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.179964][ T7068] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.222159][ T7068] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.279916][ T7084] FAULT_INJECTION: forcing a failure. [ 104.279916][ T7084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.293067][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: syz.1.1300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.293130][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.293145][ T7084] Call Trace: [ 104.293153][ T7084] [ 104.293161][ T7084] __dump_stack+0x1d/0x30 [ 104.293189][ T7084] dump_stack_lvl+0xe8/0x140 [ 104.293213][ T7084] dump_stack+0x15/0x1b [ 104.293263][ T7084] should_fail_ex+0x265/0x280 [ 104.293373][ T7084] should_fail+0xb/0x20 [ 104.293411][ T7084] should_fail_usercopy+0x1a/0x20 [ 104.293435][ T7084] _copy_to_user+0x20/0xa0 [ 104.293466][ T7084] simple_read_from_buffer+0xb5/0x130 [ 104.293545][ T7084] proc_fail_nth_read+0x10e/0x150 [ 104.293599][ T7084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.293671][ T7084] vfs_read+0x1a8/0x770 [ 104.293695][ T7084] ? __rcu_read_unlock+0x4f/0x70 [ 104.293723][ T7084] ? __fget_files+0x184/0x1c0 [ 104.293755][ T7084] ksys_read+0xda/0x1a0 [ 104.293781][ T7084] __x64_sys_read+0x40/0x50 [ 104.293850][ T7084] x64_sys_call+0x27c0/0x3000 [ 104.293874][ T7084] do_syscall_64+0xd2/0x200 [ 104.293902][ T7084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 104.293926][ T7084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 104.294142][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.294219][ T7084] RIP: 0033:0x7fbba671d9dc [ 104.294236][ T7084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.294258][ T7084] RSP: 002b:00007fbba5187030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.294281][ T7084] RAX: ffffffffffffffda RBX: 00007fbba6975fa0 RCX: 00007fbba671d9dc [ 104.294377][ T7084] RDX: 000000000000000f RSI: 00007fbba51870a0 RDI: 0000000000000004 [ 104.294391][ T7084] RBP: 00007fbba5187090 R08: 0000000000000000 R09: 0000000000000014 [ 104.294404][ T7084] R10: 0000000088a8ffff R11: 0000000000000246 R12: 0000000000000001 [ 104.294415][ T7084] R13: 00007fbba6976038 R14: 00007fbba6975fa0 R15: 00007ffd4e7aa3c8 [ 104.294432][ T7084] [ 104.506790][ T7068] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.542795][ T7068] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.553938][ T7096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 104.584957][ T7103] serio: Serial port ttyS3 [ 104.639604][ T7108] siw: device registration error -23 [ 104.741995][ T7119] siw: device registration error -23 [ 104.986983][ T7124] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 105.030245][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 105.030262][ T29] audit: type=1107 audit(1760725886.770:9838): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 105.103464][ T29] audit: type=1400 audit(1760725886.850:9839): avc: denied { execmem } for pid=7134 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.415619][ T7113] serio: Serial port ttyS3 [ 105.448175][ T7140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7140 comm=syz.2.1322 [ 105.492857][ T29] audit: type=1326 audit(1760725887.240:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 105.516540][ T29] audit: type=1326 audit(1760725887.240:9841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 105.540410][ T29] audit: type=1326 audit(1760725887.240:9842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 105.563993][ T29] audit: type=1326 audit(1760725887.240:9843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7143 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 105.594919][ T29] audit: type=1107 audit(1760725887.340:9844): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 105.623403][ T29] audit: type=1400 audit(1760725887.370:9845): avc: denied { read write } for pid=7155 comm="syz.1.1330" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.647034][ T29] audit: type=1400 audit(1760725887.370:9846): avc: denied { open } for pid=7155 comm="syz.1.1330" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.745204][ T7164] serio: Serial port ttyS3 [ 105.771393][ T29] audit: type=1326 audit(1760725887.520:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x0 [ 105.796010][ T7169] siw: device registration error -23 [ 105.875832][ T1000] Bluetooth: hci1: Frame reassembly failed (-84) [ 106.008762][ T7172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7172 comm=syz.0.1335 [ 106.130726][ T5993] Bluetooth: hci0: command 0x1003 tx timeout [ 106.136787][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.752101][ T7224] 9pnet_fd: Insufficient options for proto=fd [ 106.812151][ T7232] serio: Serial port ttyS3 [ 106.868028][ T7238] siw: device registration error -23 [ 107.556214][ T3442] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.566863][ T3442] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.577931][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.589182][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.639522][ T7261] 9pnet_fd: Insufficient options for proto=fd [ 107.674824][ T7263] SELinux: Context @ is not valid (left unmapped). [ 107.760895][ T7275] hsr0 speed is unknown, defaulting to 1000 [ 107.864112][ T7281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.891186][ T5993] Bluetooth: hci1: command 0x1003 tx timeout [ 107.897293][ T5459] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 107.924891][ T7281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.971358][ T7292] __nla_validate_parse: 20 callbacks suppressed [ 107.971377][ T7292] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1386'. [ 107.992492][ T7292] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 108.006932][ T7292] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 108.024463][ T7281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.043497][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 108.112982][ T7281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.170432][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.190723][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.199086][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.207461][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.290593][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 108.501199][ T7337] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.562296][ T7337] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.612640][ T7337] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.662353][ T7337] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.708330][ T7345] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1407'. [ 108.718967][ T7345] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 108.726616][ T7345] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 108.776880][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1411'. [ 108.790012][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 108.889835][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 109.009877][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1417'. [ 109.025742][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1417'. [ 109.071811][ T7383] serio: Serial port ttyS3 [ 109.123197][ T7388] siw: device registration error -23 [ 109.148173][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 109.351966][ T7405] 9pnet_fd: Insufficient options for proto=fd [ 109.376202][ T7407] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 109.383735][ T7407] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 109.890684][ T5459] Bluetooth: hci0: command 0x1003 tx timeout [ 109.896760][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.971971][ T7443] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 109.979095][ T7443] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 110.141584][ T7465] serio: Serial port ttyS3 [ 110.198930][ T7468] siw: device registration error -23 [ 110.215472][ T1000] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.546592][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 110.546606][ T29] audit: type=1326 audit(1760725892.290:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 110.576581][ T29] audit: type=1326 audit(1760725892.290:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 110.600035][ T29] audit: type=1326 audit(1760725892.290:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 110.623691][ T29] audit: type=1326 audit(1760725892.290:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 110.754884][ T29] audit: type=1326 audit(1760725892.500:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 110.778334][ T29] audit: type=1326 audit(1760725892.500:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz.4.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 110.927910][ T29] audit: type=1326 audit(1760725892.670:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 110.951496][ T29] audit: type=1326 audit(1760725892.670:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 110.975087][ T29] audit: type=1326 audit(1760725892.670:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 110.998793][ T29] audit: type=1326 audit(1760725892.670:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7508 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 111.158048][ T7531] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 111.165486][ T7531] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 111.447041][ T7549] serio: Serial port ttyS3 [ 111.498017][ T7552] siw: device registration error -23 [ 111.523939][ T7551] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.562396][ T7551] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.612129][ T7551] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.672534][ T7551] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.716542][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.728137][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.739272][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.750357][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.290755][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.292974][ T5459] Bluetooth: hci0: command 0x1003 tx timeout [ 112.486952][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.499190][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.515106][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.523813][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.569342][ T7606] serio: Serial port ttyS3 [ 112.620102][ T7607] siw: device registration error -23 [ 112.779922][ T7619] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 112.787355][ T7619] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 113.051736][ T7631] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.076541][ T7637] __nla_validate_parse: 29 callbacks suppressed [ 113.076631][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 113.097043][ T7631] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.107031][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 113.174654][ T7631] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.214093][ T7631] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.278310][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.289635][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.301240][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.313669][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.350432][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1534'. [ 113.441185][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1541'. [ 113.463444][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 113.488324][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 113.530516][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 113.602528][ T7693] serio: Serial port ttyS3 [ 113.658063][ T7702] siw: device registration error -23 [ 113.673401][ T7689] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.712267][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 113.771653][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 113.795704][ T7689] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.806626][ T7713] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1561'. [ 113.819957][ T7713] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 113.827910][ T7713] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 113.875591][ T7689] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.952395][ T7689] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.008001][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.026258][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.050407][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.059188][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.177153][ T7754] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 114.185149][ T7754] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 114.260360][ T7759] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.332577][ T7759] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.392909][ T7759] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.492771][ T7759] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.558380][ T7806] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 114.566965][ T7806] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 114.627253][ T7813] serio: Serial port ttyS3 [ 114.942085][ T7853] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 114.956851][ T7853] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 115.377956][ T7898] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 115.385968][ T7898] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 115.603052][ T7906] 9pnet_fd: Insufficient options for proto=fd [ 115.679423][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 115.679441][ T29] audit: type=1326 audit(1760725897.420:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 115.709193][ T29] audit: type=1326 audit(1760725897.420:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 115.732807][ T29] audit: type=1326 audit(1760725897.420:10096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7921 comm="syz.0.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 115.757107][ T7926] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 115.764527][ T7926] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 115.825662][ T29] audit: type=1326 audit(1760725897.570:10097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 115.849300][ T29] audit: type=1326 audit(1760725897.570:10098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba671efc9 code=0x7ffc0000 [ 115.893833][ T29] audit: type=1107 audit(1760725897.640:10099): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 115.979991][ T29] audit: type=1326 audit(1760725897.720:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 116.003604][ T29] audit: type=1326 audit(1760725897.720:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 116.027689][ T29] audit: type=1326 audit(1760725897.740:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 116.051306][ T29] audit: type=1326 audit(1760725897.740:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7948 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 116.253518][ T7975] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 116.261459][ T7975] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 116.415033][ T7993] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 116.422627][ T7993] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 116.661352][ T8023] serio: Serial port ttyS3 [ 116.712120][ T8027] siw: device registration error -23 [ 116.722910][ T8029] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 116.730300][ T8029] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 116.938022][ T8046] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 116.963859][ T8046] team0: Port device dummy0 added [ 117.224137][ T8077] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 117.231649][ T8077] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 117.537185][ T1000] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.548484][ T1000] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.560067][ T1000] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.571609][ T1000] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.117630][ T8133] __nla_validate_parse: 36 callbacks suppressed [ 118.117649][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 118.151779][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 118.352441][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 118.453385][ T8166] netlink: 'syz.2.1752': attribute type 1 has an invalid length. [ 118.461213][ T8166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1752'. [ 118.473227][ T8166] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 118.543387][ T8168] serio: Serial port ttyS3 [ 118.615730][ T8175] siw: device registration error -23 [ 118.885516][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'. [ 118.912587][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'. [ 118.925782][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 118.928995][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 118.960714][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1763'. [ 119.204672][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 119.472699][ T8249] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 119.487517][ T8249] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 119.539310][ T8239] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.578548][ T8262] netlink: 'syz.2.1790': attribute type 4 has an invalid length. [ 119.589148][ T8239] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.642319][ T8239] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.713535][ T8239] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.940417][ T8292] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 119.948081][ T8292] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 119.993190][ T8296] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 120.000783][ T8296] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 120.192095][ T8310] serio: Serial port ttyS3 [ 121.125838][ T8364] netlink: 'syz.3.1833': attribute type 4 has an invalid length. [ 121.156878][ T8367] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 121.163499][ T8367] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.171160][ T8367] vhci_hcd vhci_hcd.0: Device attached [ 121.181026][ T8368] vhci_hcd: connection closed [ 121.181183][ T1000] vhci_hcd: stop threads [ 121.190244][ T1000] vhci_hcd: release socket [ 121.194806][ T1000] vhci_hcd: disconnect device [ 121.234038][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 121.234064][ T29] audit: type=1107 audit(1760725902.980:10278): pid=8373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 121.319064][ T8383] serio: Serial port ttyS3 [ 121.369992][ T8384] siw: device registration error -23 [ 121.398385][ T29] audit: type=1107 audit(1760725903.140:10279): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 121.601993][ T8391] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 121.647065][ T1000] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.658794][ T1000] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.670418][ T1000] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.684421][ T1000] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.716383][ T8404] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 121.724303][ T8404] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 121.747893][ T29] audit: type=1107 audit(1760725903.490:10280): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 121.889128][ T8424] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 121.899908][ T8424] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 121.913662][ T8426] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 121.925263][ T8426] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.161265][ T8436] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 122.167835][ T8436] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.175511][ T8436] vhci_hcd vhci_hcd.0: Device attached [ 122.205719][ T8438] vhci_hcd: connection closed [ 122.206142][ T37] vhci_hcd: stop threads [ 122.215169][ T37] vhci_hcd: release socket [ 122.219669][ T37] vhci_hcd: disconnect device [ 122.230258][ T29] audit: type=1107 audit(1760725903.980:10281): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 122.348083][ T8456] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 122.404165][ T8465] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 122.412018][ T8465] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.578398][ T8476] hsr0 speed is unknown, defaulting to 1000 [ 122.800737][ T8502] serio: Serial port ttyS3 [ 122.853661][ T8506] siw: device registration error -23 [ 122.928709][ T8500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.943626][ T8513] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 122.953262][ T8513] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.995539][ T8500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.038207][ T8500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.092145][ T8500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.152116][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.171913][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.198359][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.206650][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.302968][ T8535] __nla_validate_parse: 39 callbacks suppressed [ 123.302984][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1898'. [ 123.340140][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 123.371579][ T8529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.422604][ T8529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.484175][ T8529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.547057][ T8529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.636088][ T1000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.660498][ T1000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.679960][ T1000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.698599][ T1000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.957326][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1909'. [ 123.983185][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 124.014979][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'. [ 124.089056][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 124.103514][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 124.128937][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 124.138414][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'. [ 124.168994][ T29] audit: type=1107 audit(1760725905.910:10282): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 124.338763][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 124.551883][ T29] audit: type=1107 audit(1760725906.290:10283): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 124.615231][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 124.701963][ T8637] hsr0 speed is unknown, defaulting to 1000 [ 124.731358][ T29] audit: type=1326 audit(1760725906.480:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.0.1938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09420aefc9 code=0x0 [ 124.807646][ T8639] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.907145][ T8639] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.918757][ T29] audit: type=1107 audit(1760725906.670:10285): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 124.983118][ T8639] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.092335][ T8639] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.168143][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.177504][ T29] audit: type=1326 audit(1760725906.920:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 125.187398][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.209319][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.218113][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.221639][ T29] audit: type=1326 audit(1760725906.930:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8670 comm="syz.4.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f14b9ceefc9 code=0x7ffc0000 [ 125.322864][ T8681] 9pnet_fd: Insufficient options for proto=fd [ 125.379059][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.657213][ T8710] netlink: 'syz.1.1964': attribute type 4 has an invalid length. [ 125.666580][ T8707] 9pnet_fd: Insufficient options for proto=fd [ 125.679588][ T8712] 9pnet_fd: Insufficient options for proto=fd [ 125.725194][ T8720] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 125.732741][ T8720] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 125.992899][ T8746] 9pnet_fd: Insufficient options for proto=fd [ 126.015898][ T8750] netlink: 'syz.1.1982': attribute type 4 has an invalid length. [ 126.087466][ T8759] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 126.097530][ T8759] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 126.129002][ T8762] netlink: 'syz.3.1987': attribute type 4 has an invalid length. [ 126.220220][ T8774] 9pnet_fd: Insufficient options for proto=fd [ 126.495930][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 126.495954][ T29] audit: type=1107 audit(1760725908.240:10325): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 126.526544][ T8803] netlink: 'syz.2.2005': attribute type 4 has an invalid length. [ 126.549992][ T8807] 9pnet_fd: Insufficient options for proto=fd [ 126.565549][ T8811] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 126.582923][ T8811] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 126.616613][ T8813] serio: Serial port ttyS3 [ 126.727219][ T29] audit: type=1107 audit(1760725908.470:10326): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 126.832784][ T8838] netlink: 'syz.0.2020': attribute type 4 has an invalid length. [ 126.867193][ T8844] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 126.890110][ T8844] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 126.989718][ T8849] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.052449][ T8849] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.096131][ T29] audit: type=1107 audit(1760725908.840:10327): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 127.105157][ T8862] hsr0 speed is unknown, defaulting to 1000 [ 127.142586][ T8849] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.188945][ T8849] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.237983][ T1000] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.253506][ T1000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.268847][ T1000] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.281745][ T1000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.409410][ T29] audit: type=1326 audit(1760725909.150:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 127.409570][ T8887] FAULT_INJECTION: forcing a failure. [ 127.409570][ T8887] name failslab, interval 1, probability 0, space 0, times 0 [ 127.433041][ T29] audit: type=1326 audit(1760725909.150:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 127.445618][ T8887] CPU: 1 UID: 0 PID: 8887 Comm: syz.2.2039 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.445652][ T8887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.445732][ T8887] Call Trace: [ 127.445743][ T8887] [ 127.445755][ T8887] __dump_stack+0x1d/0x30 [ 127.445857][ T8887] dump_stack_lvl+0xe8/0x140 [ 127.445891][ T8887] dump_stack+0x15/0x1b [ 127.445914][ T8887] should_fail_ex+0x265/0x280 [ 127.445962][ T8887] should_failslab+0x8c/0xb0 [ 127.446006][ T8887] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 127.446093][ T8887] ? sidtab_sid2str_get+0xa0/0x130 [ 127.446135][ T8887] kmemdup_noprof+0x2b/0x70 [ 127.446168][ T8887] sidtab_sid2str_get+0xa0/0x130 [ 127.446209][ T8887] security_sid_to_context_core+0x1eb/0x2e0 [ 127.446318][ T8887] security_sid_to_context+0x27/0x40 [ 127.446355][ T8887] selinux_lsmprop_to_secctx+0x67/0xf0 [ 127.446432][ T8887] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 127.446484][ T8887] audit_log_subj_ctx+0xa4/0x3e0 [ 127.446513][ T8887] ? skb_put+0xa9/0xf0 [ 127.446549][ T8887] audit_log_task_context+0x48/0x70 [ 127.446581][ T8887] audit_log_task+0xf4/0x250 [ 127.446666][ T8887] ? kstrtouint+0x76/0xc0 [ 127.446784][ T8887] audit_seccomp+0x61/0x100 [ 127.446826][ T8887] ? __seccomp_filter+0x82d/0x1250 [ 127.446869][ T8887] __seccomp_filter+0x83e/0x1250 [ 127.446944][ T8887] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.446986][ T8887] ? vfs_write+0x7e8/0x960 [ 127.447025][ T8887] __secure_computing+0x82/0x150 [ 127.447061][ T8887] syscall_trace_enter+0xcf/0x1e0 [ 127.447164][ T8887] do_syscall_64+0xac/0x200 [ 127.447199][ T8887] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.447239][ T8887] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.447272][ T8887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.447351][ T8887] RIP: 0033:0x7f7f2c97efc9 [ 127.447373][ T8887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.447440][ T8887] RSP: 002b:00007f7f2b3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000114 [ 127.447468][ T8887] RAX: ffffffffffffffda RBX: 00007f7f2cbd5fa0 RCX: 00007f7f2c97efc9 [ 127.447487][ T8887] RDX: 0000000000000003 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 127.447616][ T8887] RBP: 00007f7f2b3e7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.447633][ T8887] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 127.447650][ T8887] R13: 00007f7f2cbd6038 R14: 00007f7f2cbd5fa0 R15: 00007ffd220d5508 [ 127.447677][ T8887] [ 127.447691][ T8887] audit: error in audit_log_subj_ctx [ 127.469151][ T29] audit: type=1326 audit(1760725909.150:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 127.483603][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.488993][ T29] audit: type=1326 audit(1760725909.150:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f2c97d810 code=0x7ffc0000 [ 127.776156][ T29] audit: type=1326 audit(1760725909.150:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7f2c97da7f code=0x7ffc0000 [ 127.799750][ T29] audit: type=1326 audit(1760725909.150:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8886 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7f2c97efc9 code=0x7ffc0000 [ 127.866943][ T8913] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 127.902040][ T8913] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 127.958600][ T8911] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.017254][ T8911] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.067731][ T8911] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.168971][ T8911] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.208590][ T8951] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 128.216771][ T8951] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 128.417136][ T8966] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 128.424923][ T8966] __nla_validate_parse: 35 callbacks suppressed [ 128.424939][ T8966] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2071'. [ 128.501599][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 128.569388][ T8987] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2081'. [ 128.591619][ T8987] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 128.599089][ T8987] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 128.658798][ T1000] Bluetooth: hci1: Frame reassembly failed (-84) [ 128.798074][ T8999] netlink: 'syz.1.2085': attribute type 4 has an invalid length. [ 128.805858][ T8999] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2085'. [ 128.874451][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 128.928702][ T9011] hsr0 speed is unknown, defaulting to 1000 [ 128.981359][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 129.176031][ T1000] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.187343][ T1000] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.198499][ T1000] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.209957][ T1000] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.336806][ T9028] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2096'. [ 129.345868][ T9028] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 129.353148][ T9028] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 129.417051][ T9031] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2097'. [ 129.455484][ T9036] 9pnet_fd: Insufficient options for proto=fd [ 129.477224][ T9038] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2100'. [ 129.486316][ T9038] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 129.493576][ T9038] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 129.550366][ T9041] serio: Serial port ttyS3 [ 129.919187][ T9051] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.970966][ T5459] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.984834][ T9051] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.994943][ T9056] siw: device registration error -23 [ 130.063346][ T9051] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.112300][ T9051] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.123289][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 130.166214][ T9065] 9pnet_fd: Insufficient options for proto=fd [ 130.173137][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.192292][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.200754][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.213082][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.283130][ T9075] hsr0 speed is unknown, defaulting to 1000 [ 130.381419][ T9054] serio: Serial port ttyS3 [ 130.425072][ T9080] hsr0 speed is unknown, defaulting to 1000 [ 130.471278][ T9082] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 130.634225][ T9095] 9pnet_fd: Insufficient options for proto=fd [ 130.684874][ T9101] validate_nla: 3 callbacks suppressed [ 130.684893][ T9101] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 130.698227][ T5993] Bluetooth: hci1: command 0x1003 tx timeout [ 130.698490][ T3646] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 130.707560][ T9101] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 130.751079][ T9106] netlink: 'syz.4.2129': attribute type 4 has an invalid length. [ 130.887532][ T1000] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.976350][ T9136] netlink: 'syz.4.2141': attribute type 4 has an invalid length. [ 131.014447][ T9140] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 131.021983][ T9140] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 131.358328][ T9165] netlink: 'syz.4.2153': attribute type 4 has an invalid length. [ 131.398784][ T9171] 0ªX¹¦D: renamed from 31ªX¹¦D (while UP) [ 131.413486][ T9171] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 131.464843][ T9167] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.502536][ T9167] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.513393][ T9178] program syz.2.2158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.524949][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 131.524967][ T29] audit: type=1326 audit(1760725913.270:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9179 comm="syz.4.2159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14b9ceefc9 code=0x0 [ 131.583201][ T9167] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.624216][ T9167] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.628679][ T1000] Bluetooth: hci1: Frame reassembly failed (-84) [ 131.654452][ T29] audit: type=1107 audit(1760725913.400:10415): pid=9191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='777' [ 131.705544][ T9196] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 131.714440][ T9196] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 131.877897][ T9201] netlink: 'syz.0.2167': attribute type 4 has an invalid length. [ 132.025798][ T29] audit: type=1326 audit(1760725913.770:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 132.049703][ T29] audit: type=1326 audit(1760725913.770:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 132.073412][ T29] audit: type=1326 audit(1760725913.770:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 132.096932][ T29] audit: type=1326 audit(1760725913.770:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9212 comm="syz.0.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09420aefc9 code=0x7ffc0000 [ 132.492632][ T9236] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.532082][ T9236] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.583087][ T9236] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.642642][ T9236] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.930683][ T5459] Bluetooth: hci0: command 0x1003 tx timeout [ 132.930688][ T3646] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.930811][ T5459] ================================================================== [ 132.930837][ T5459] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 132.930867][ T5459] [ 132.930873][ T5459] write to 0xffffffff88e29cb8 of 13 bytes by task 3646 on cpu 0: [ 132.930888][ T5459] vsnprintf+0x2ce/0x890 [ 132.930913][ T5459] vscnprintf+0x41/0x90 [ 132.930940][ T5459] printk_sprint+0x30/0x2d0 [ 132.930957][ T5459] vprintk_store+0x599/0x860 [ 132.930975][ T5459] vprintk_emit+0x10d/0x580 [ 132.930993][ T5459] vprintk_default+0x26/0x30 [ 132.931012][ T5459] vprintk+0x1d/0x30 [ 132.931037][ T5459] _printk+0x79/0xa0 [ 132.931062][ T5459] bt_err+0x9d/0xd0 [ 132.931086][ T5459] hci_dev_open_sync+0xfa4/0x2290 [ 132.931107][ T5459] hci_power_on+0xef/0x390 [ 132.931126][ T5459] process_scheduled_works+0x4ce/0x9d0 [ 132.931155][ T5459] worker_thread+0x582/0x770 [ 132.931171][ T5459] kthread+0x489/0x510 [ 132.931195][ T5459] ret_from_fork+0x122/0x1b0 [ 132.931213][ T5459] ret_from_fork_asm+0x1a/0x30 [ 132.931251][ T5459] [ 132.931258][ T5459] read to 0xffffffff88e29cb8 of 8 bytes by task 5459 on cpu 1: [ 132.931272][ T5459] data_push_tail+0xfd/0x420 [ 132.931296][ T5459] data_alloc+0xfb/0x2e0 [ 132.931330][ T5459] prb_reserve+0x807/0xaf0 [ 132.931346][ T5459] vprintk_store+0x56d/0x860 [ 132.931364][ T5459] vprintk_emit+0x10d/0x580 [ 132.931383][ T5459] vprintk_default+0x26/0x30 [ 132.931403][ T5459] vprintk+0x1d/0x30 [ 132.931428][ T5459] _printk+0x79/0xa0 [ 132.931453][ T5459] bt_err+0x9d/0xd0 [ 132.931477][ T5459] hci_cmd_timeout+0x97/0x140 [ 132.931497][ T5459] process_scheduled_works+0x4ce/0x9d0 [ 132.931527][ T5459] worker_thread+0x582/0x770 [ 132.931543][ T5459] kthread+0x489/0x510 [ 132.931562][ T5459] ret_from_fork+0x122/0x1b0 [ 132.931581][ T5459] ret_from_fork_asm+0x1a/0x30 [ 132.931602][ T5459] [ 132.931606][ T5459] value changed: 0x00000000ffffe159 -> 0x746f6f7465756c42 [ 132.931618][ T5459] [ 132.931622][ T5459] Reported by Kernel Concurrency Sanitizer on: [ 132.931633][ T5459] CPU: 1 UID: 0 PID: 5459 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.931657][ T5459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 132.931677][ T5459] Workqueue: hci0 hci_cmd_timeout [ 132.931701][ T5459] ================================================================== [ 133.173506][ T1000] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.192537][ T1000] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.200873][ T1000] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.209271][ T1000] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.650708][ T3646] Bluetooth: hci1: command 0x1003 tx timeout [ 133.650708][ T5993] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 134.275866][ T1000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.287171][ T1000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.297702][ T1000] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.309069][ T1000] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0