last executing test programs: 7m48.257956118s ago: executing program 2 (id=2258): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7m48.245466459s ago: executing program 2 (id=2259): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0c000000040000008100000008000000141000", @ANYRES32, @ANYBLOB="0000000f000000331db143b2d74493069e1c1c39fc0f110000000000cfb5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x88282, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001880)=ANY=[@ANYBLOB="600000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="08860100223803003800128006000100110000001c0003800c00010000000000090000000c0001000000000008000000080005000000000000000000000000000000000078fbe5930eb546f21f00b95e59aafd8c3d213bb12f59586a800735a936f5ba1a31f8c3cb2fed45dbfae9175aca6b22b53d6d2b217f2ddb49c953c3a4c326d42af33fbd59f9c40f9f9012ca372e44f8012eb1f3f35945b5b2a6e6a0b980beee2f78afa911083bc8d7", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000340)='.\x00', 0x850003d1) readv(r8, &(0x7f0000000480)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c000180060006008035"], 0x24}}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 7m48.098271755s ago: executing program 2 (id=2261): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 7m48.077079396s ago: executing program 2 (id=2262): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x900, 0x10) openat(r0, &(0x7f0000000040)='./bus\x00', 0x50000, 0x102) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5004, 0x0) r1 = io_uring_setup(0x4990, &(0x7f0000000100)={0x0, 0x7e41, 0x2, 0x0, 0x43}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c80)=""/189, 0xbd}], 0x1}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20000011}, 0x44040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000740)="2ae0e71086763618", 0x8, 0x24000040, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000180)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaabaaaaaaaaaaaaaaaaaa08004500002b0a0800000002907800000000e00010011100907800000000"], 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0xdb, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0xd48ccea25c98d53d, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0xa0, 0x6, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x40, 0x0, 0xfffffffc, 0x0, 0x18}, 0xffffffffffffffff, 0x800000003, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x17, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="f41fbe4a4b5d37c22d82549c3c8ecc4430cea8598099b6e8032e1304a9ac08a459c0a25b0985775234a08114896c713afdfa4240b79df2404be78b11e9e2f321596018f536b1f656e17633c10a51061290fc1f2c0d825bc36880dda719c7f156cf4cdc765a260310"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 7m47.158647926s ago: executing program 2 (id=2285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 7m45.91003266s ago: executing program 2 (id=2303): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 7m45.90980699s ago: executing program 32 (id=2303): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 4.974697715s ago: executing program 3 (id=8620): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = fsopen(&(0x7f0000000500)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000300000095000000000000008d762b41506847f188ac6a504c2400"/88], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) clock_nanosleep(0xc, 0x1, &(0x7f0000001e40)={0x9, 0x7}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe916e4017771c", 0x27) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="158904ca20c5f58ad2e8f6295c10edc42fbd6ec31153e09c3ac48a56b7ce2eadc6d12450135a", 0x26, 0x20000001, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.122033902s ago: executing program 3 (id=8631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4000001}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="080027008516"], 0x4c}}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f00000001c0)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0xff, 0x4e22, 0x400, 0x2, 0xa0, 0x20, 0x23}, {0x8, 0x1, 0x700000000000000, 0x2, 0xb35, 0xee, 0xffffffffffffffaa, 0xb}, {0xfffffffffffffffa, 0x1, 0xba0c, 0x4}, 0x8, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x6c}, 0xa, @in6=@private2, 0x3502, 0x0, 0x3, 0x0, 0x6, 0x9cf, 0x1}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000140)={[{@name={'name', 0x3d, '-'}}]}) 4.092247443s ago: executing program 3 (id=8632): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 4.080334414s ago: executing program 3 (id=8633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) getresgid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)) 3.532613397s ago: executing program 4 (id=8639): socket$packet(0x11, 0x3, 0x300) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) syz_io_uring_setup(0x2f91, &(0x7f0000000180)={0x0, 0xc383, 0x2000, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) epoll_create(0xaf2) r1 = fspick(0xffffffffffffff9c, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 3.508846858s ago: executing program 4 (id=8640): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 3.436927292s ago: executing program 4 (id=8641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r5, r6+60000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) 2.602934958s ago: executing program 4 (id=8656): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4800, 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.386531027s ago: executing program 4 (id=8660): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x4800, 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.340462259s ago: executing program 0 (id=8662): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x18) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xde, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(r9, 0x541d) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x31, 0x7fff, 0x6}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) signalfd4(r7, &(0x7f0000000740)={[0x1000]}, 0x8, 0x80000) pwritev2(r7, &(0x7f00000010c0)=[{&(0x7f00000006c0)="57586aefd1f283162195d3c8544345dc4f857387c74a30b8ca0497", 0x1b}, {&(0x7f0000000c80)="5571a7bfbfc4860aef2cdf7c0f1212c36b901e6b273fca252c00c084022a26451b3769e7d11354d95a2674fd860e4b39bc61e0943e46514ff24c66344b3d5b73909631e7f2ec199bb3c3a608bf57fca788d4b937e0c7e2356a509d387c44edfc75b6cc3e6893a7c9044202dc20517811674a9e17750ebf10a28c9c77dec4cea3b2487bb2f417d766433553c81e02fa526fa46c970202f7c2934058b6bcf68e7d2e426bf45198119eb2e097b231c8afa460cc7c1e977677ada972f7d9186aacde27ce40f62fddae87a030dcb1741316c63ea2ed", 0xd3}, {&(0x7f0000000d80)="9e0c41e48865146eceaf4cee7a9acc922f682b1d5b8555f31df9b119ba94f0e36e309b5c544ad29ad0073c89c0db6ee4e681e132ae0f00f9f26df71d13e2300882c1c125d806880aea2d0eddfdb890c3c94c2e978f2749319c7cb26f465c8497113c30b0f88ebfe9b5874f0e9804857fdebb3309f08a7df4e4a564dcaed411a97664369e68558b70bfe8872b233a1c741357fbb4e8924b0cbdffe7fe863e3a687541234fb7003d07a883dcf6e30ba0bd43c398093a808dd3", 0xb8}, {&(0x7f0000000e40)="de4b0b6033aaf2a5bebf4bd927227db0e5c579f21d1120c069464a5d9ef5c8a8b8b3b52b1f4a17a727cfbf6de57ba73f3a2466303bac0a20943e98c29055909f3c736ec4554f312bbfb95c7ade86a4f3cbb0ebde0ed6abe32354f4427fad1b64a692c8112a18d3e301144d55766499e86ec0af1cf78168aed8b7f03c592ad42fe52f98e692fcbff0936441e31376481640c8bc8795b1f68441070cc7a07894d76b4259760a9519d0e44c4ee1ed6c289809c8b14c568995525245cb56132dfb64", 0xc0}, {&(0x7f0000000700)="8b4cca0f74fe0e881493c73a", 0xc}, {&(0x7f0000000f00)="6d9998b36590151b77679e332b79a5964b7ae7993f58bc39ebbd7151d83751e658518e41d068974c3d0f894064e5bd8b2152f10d3510fe3e85bde84717c7f1c63df879ce5db64cc77ea2d6ceab526a1da541d4537c705da1c38e4a9a6a7e74f71c48d3e94e59aa04ef11e5f7e3f2de529a74ef4b4f97bd0b1c5d903408d91bee68859bbb92677e87d75f7431f6485f63b2eed6d06aec3cda11ebd0fd", 0x9c}, {&(0x7f0000000fc0)="9ae46123c9cab47ab44515051bc466658d572594a52bdaa6b2cf5be83751a270dc5f76941a9defcd44d954fad9b4eb0416bf7425a2f3da0ca61c7a964fc48251060feca673c0362b6aa141ffe71e41539db995ba8625f1a79d1866261b6a85247902f171ceab41220d0e810600be572aeecc761b59748b681ca38252cb4108775e260e4333c7d7e7e4831c59ee03487eae6bef62ca728060250c27c51090737ec110a131ac403f0088bb79a18dabf476c6d7e66fde04fc1ea152ee62be56d675a53919542c4e3059f0edcf4b498269", 0xcf}], 0x7, 0xfffffff7, 0x40, 0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="18040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c00038008000200020000008c00038040000380080001800400030034000180040003000400030008000100ffffffff0800020047504c000800020047504c00080001001000000004000300040003000400010044000380400001800800010001000000274e9b2f8e615104000300080002002f40280500", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468305f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB, @ANYRES32, @ANYBLOB="08000300010000000800030003000000"], 0x418}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) 2.301806671s ago: executing program 0 (id=8663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 2.251288323s ago: executing program 0 (id=8664): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000340)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.200385355s ago: executing program 4 (id=8665): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000000}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xfffffffd, 0xe0, &(0x7f0000000240)={0x5, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0xffffffff, 0x101, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) write$selinux_load(r0, &(0x7f0000000180)={0xf97cff8c, 0x8}, 0x10) 2.189849235s ago: executing program 0 (id=8666): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xa}, 0x18) socket$packet(0x11, 0x2, 0x300) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000180), &(0x7f0000000340)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1eb8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000020000000000000000181100008d1c43659f50e7ffd3ca02a2a8fdecdddf3508a9284173001b58b75224213bf1214184b96fba012fa69b0283b9bd7c64", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008d2a180004000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000001c0)='ext4_es_lookup_extent_exit\x00', r3, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa85326625fd82269, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r10, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r11, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r9, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}) 1.883908459s ago: executing program 3 (id=8634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r5, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) 1.809424202s ago: executing program 3 (id=8668): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80000000}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0xfffffffd, 0xe0, &(0x7f0000000240)={0x5, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0xffffffff, 0x101, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) write$selinux_load(r0, &(0x7f0000000180)={0xf97cff8c, 0x8}, 0x10) 1.750988354s ago: executing program 0 (id=8669): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2c000000000000000004"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r2) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) 1.674691528s ago: executing program 0 (id=8670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r5, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) 1.40160819s ago: executing program 5 (id=8672): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.359095752s ago: executing program 5 (id=8673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES8=0x0, @ANYRES64, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRES64], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xc1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) sendmsg$xdp(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="1d6701de4000cd951499349d20f0853083b83bd4bdf319fcbbf0027e5af120b20f7ebfacb4079d83da2667f1b9fc59b0ef815c8a1314bc81075316bba5db570f5800e84c243b315a7a767be1dd8196b32a93cac330e53bb898873ee584f3", 0x5e}], 0x1, 0x0, 0x0, 0x20008010}, 0x40) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000500)='./file0\x00', 0x29) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) 696.93959ms ago: executing program 5 (id=8676): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000004c00)={'IDLETIMER\x00'}, &(0x7f0000004c40)=0x1e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x200000000}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xb8, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) socket$inet(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00ecffffffffffffb602000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000"], 0x48) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa8aaaaaaad7e267bb86dd60122d9203803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000500000000260004001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107f50000000000000000000002000000000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYBLOB="4a5f4f250bc7a7d6d0f856315deb458f4c8ad4216253eb077a03b14455ff888dda8be1edff2cb88694da9af8b28a40e40955086d3ce683881d03d72a6b7b530df47efbcf30ccb049596c6dd9fb655e7d3fa6156b0f80e2d07fd0ff183e4defa77014ad219cd8b776b3a072f97a0390b88d7fbcab70cd0d859e4bbd6bec8e12"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 420.300752ms ago: executing program 1 (id=8679): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x10000000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2700e08f6f674c0786ab138d5df8ae4c5c6d22cffda1e2b54d5f6d2e84b5ed5690919c38af7e1fad544b628f98eb8c53db7d59ba0a53939758bf9786b05c9fbfb51eddf079ebf16922f0f594dc3ec96f98d7c91c2022f0752d19abd36951d0b3821a9e3cfd5a59b10a947ab0ad3beae2b064a9ec4c0da6bbc37dc2984f9f2b03ab4b73eb43a397858c544092130462cd220006fdf00e0e164dc93fff2aa6859c6ea1787c3df382fd92372f4dabe559d70dba575ad99e8584a5adedf1b698194dbfd23ec14a1db922a528b69147fe668067c905c4d281d978f9c6a6211922610b"]) fsync(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000001b80)="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", 0x1000) 372.790954ms ago: executing program 1 (id=8680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4000001}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="080027008516"], 0x4c}}, 0x4000804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f00000001c0)=0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e24, 0xff, 0x4e22, 0x400, 0x2, 0xa0, 0x20, 0x23}, {0x8, 0x1, 0x700000000000000, 0x2, 0xb35, 0xee, 0xffffffffffffffaa, 0xb}, {0xfffffffffffffffa, 0x1, 0xba0c, 0x4}, 0x8, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x6c}, 0xa, @in6=@private2, 0x3502, 0x0, 0x3, 0x0, 0x6, 0x9cf, 0x1}}, 0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000140)={[{@name={'name', 0x3d, '-'}}]}) 347.395265ms ago: executing program 5 (id=8681): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 296.411317ms ago: executing program 5 (id=8682): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) getresgid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000240)) 296.171118ms ago: executing program 5 (id=8683): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x6) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) write(r2, &(0x7f0000000100)="9e", 0x1) write(r2, &(0x7f0000000080)="d7", 0x1) 295.485428ms ago: executing program 1 (id=8684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 262.028669ms ago: executing program 1 (id=8685): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pwrite64(r0, &(0x7f00000000c0)="826c3dd6d31512636e4588185db8b900c28df818ebf1f8acffedde65562d75bb81ee08e228f007bf5d2b4b81863e7b86a1ed9ea3089e2f7c41e380b1ca985112c4ee74663b304158bf77ccd490edf88252afbf72973c65c353ce250d7963946aa75d0e9d3d9af3a0301302a2e29d222ff33782fdcb979098dc9da41afb3ca8fed8f4dbb7a26b2c2e6f1137588d920999", 0x90, 0x8000000000000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000005840)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x18) pivot_root(&(0x7f0000000980)='./file0/file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x81}, {0x6}]}, 0x10) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 89.633827ms ago: executing program 1 (id=8686): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x67}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000fcff0000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0x20040000) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000013c0)=@newtaction={0x88c, 0x30, 0x937, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffc, 0x9, 0x4, 0x4, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3ffffffc, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x3, 0x8, 0x400, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x0, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff5, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x0, 0x0, 0x7, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x7, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x7, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x8003, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x0, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x27, 0x6, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0x6, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=8687): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) chmod(&(0x7f0000000040)='./file0\x00', 0x13) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getpriority(0x1, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x57, &(0x7f0000000640)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x3, 0xffffffff) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) kernel console output (not intermixed with test programs): non:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 589.014062][T28988] lowmem_reserve[]: 0 0 4978 4978 [ 589.019118][T28988] Node 0 Normal free:4187464kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:154392kB inactive_anon:35204kB active_file:97324kB inactive_file:15424kB unevictable:36kB writepending:1884kB zspages:0kB present:5242880kB managed:5098240kB mlocked:36kB bounce:0kB free_pcp:17196kB local_pcp:884kB free_cma:0kB [ 589.052602][T28988] lowmem_reserve[]: 0 0 0 0 [ 589.057154][T28988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 589.069864][T28988] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 589.085872][T28988] Node 0 Normal: 990*4kB (ME) 694*8kB (UME) 336*16kB (ME) 279*32kB (ME) 178*64kB (UM) 559*128kB (UM) 308*256kB (UME) 94*512kB (UM) 63*1024kB (UME) 27*2048kB (UM) 936*4096kB (UM) = 4187400kB [ 589.104721][T28988] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 589.114007][T28988] 70375 total pagecache pages [ 589.118690][T28988] 41 pages in swap cache [ 589.122911][T28988] Free swap = 91132kB [ 589.126988][T28988] Total swap = 124996kB [ 589.131193][T28988] 2097051 pages RAM [ 589.135008][T28988] 0 pages HighMem/MovableOnly [ 589.139682][T28988] 81087 pages reserved [ 589.174159][T28980] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.225564][T29012] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 589.233832][T29012] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 589.242941][T28980] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.261257][T29012] __nla_validate_parse: 13 callbacks suppressed [ 589.261273][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7906'. [ 589.283408][T29012] bond3: Invalid ad_actor_system MAC address. [ 589.289542][T29012] bond3: option ad_actor_system: invalid value (1) [ 589.296768][T29012] bond3 (unregistering): Released all slaves [ 589.314520][T18450] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.325720][T18450] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.338205][T18450] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.349366][T18450] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.382066][T29012] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 589.410318][T29093] FAULT_INJECTION: forcing a failure. [ 589.410318][T29093] name failslab, interval 1, probability 0, space 0, times 0 [ 589.423037][T29093] CPU: 1 UID: 0 PID: 29093 Comm: syz.5.7907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 589.423142][T29093] Tainted: [W]=WARN [ 589.423148][T29093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.423166][T29093] Call Trace: [ 589.423172][T29093] [ 589.423180][T29093] __dump_stack+0x1d/0x30 [ 589.423201][T29093] dump_stack_lvl+0xe8/0x140 [ 589.423224][T29093] dump_stack+0x15/0x1b [ 589.423240][T29093] should_fail_ex+0x265/0x280 [ 589.423307][T29093] ? alloc_workqueue_noprof+0x1af/0x1330 [ 589.423411][T29093] should_failslab+0x8c/0xb0 [ 589.423442][T29093] __kmalloc_cache_noprof+0x4c/0x4a0 [ 589.423474][T29093] alloc_workqueue_noprof+0x1af/0x1330 [ 589.423511][T29093] ? kfree_const+0x3e/0x50 [ 589.423535][T29093] ? kobject_set_name_vargs+0xc0/0xe0 [ 589.423569][T29093] ? dev_set_name+0x83/0xb0 [ 589.423597][T29093] hci_register_dev+0x167/0x570 [ 589.423674][T29093] hci_uart_tty_ioctl+0x520/0x5c0 [ 589.423700][T29093] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 589.423768][T29093] tty_ioctl+0x83f/0xb80 [ 589.423791][T29093] ? __pfx_tty_ioctl+0x10/0x10 [ 589.423813][T29093] __se_sys_ioctl+0xce/0x140 [ 589.423834][T29093] __x64_sys_ioctl+0x43/0x50 [ 589.423927][T29093] x64_sys_call+0x1816/0x3000 [ 589.423947][T29093] do_syscall_64+0xd2/0x200 [ 589.423965][T29093] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.423991][T29093] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.424035][T29093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.424054][T29093] RIP: 0033:0x7f976995f749 [ 589.424069][T29093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.424207][T29093] RSP: 002b:00007f97683c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.424224][T29093] RAX: ffffffffffffffda RBX: 00007f9769bb5fa0 RCX: 00007f976995f749 [ 589.424236][T29093] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003 [ 589.424247][T29093] RBP: 00007f97683c7090 R08: 0000000000000000 R09: 0000000000000000 [ 589.424258][T29093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.424269][T29093] R13: 00007f9769bb6038 R14: 00007f9769bb5fa0 R15: 00007ffc9ae3dac8 [ 589.424344][T29093] [ 589.424360][T29093] Bluetooth: Can't register HCI device [ 589.551597][T29103] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 589.663523][T29106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7913'. [ 589.672584][T29106] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7913'. [ 589.697986][T29106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=29106 comm=syz.5.7913 [ 589.719622][T18449] Bluetooth: hci0: Frame reassembly failed (-84) [ 589.859685][T29139] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 589.867681][T29139] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 589.877817][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7921'. [ 589.895002][T29139] bond5: Invalid ad_actor_system MAC address. [ 589.901236][T29139] bond5: option ad_actor_system: invalid value (1) [ 589.909283][T29139] bond5 (unregistering): Released all slaves [ 589.975885][T29139] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 590.017422][T29210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7922'. [ 590.070295][T29225] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.101207][T29232] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 590.116064][T29232] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 590.125401][T29232] SELinux: failed to load policy [ 590.136769][T29238] vhci_hcd: invalid port number 23 [ 590.142573][T29238] netlink: 'syz.3.7932': attribute type 10 has an invalid length. [ 590.150438][T29238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7932'. [ 590.153042][T29241] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 590.170078][T29241] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 590.184362][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7933'. [ 590.196411][T29244] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7934'. [ 590.210739][T29241] bond7: Invalid ad_actor_system MAC address. [ 590.216986][T29241] bond7: option ad_actor_system: invalid value (1) [ 590.255415][T29241] bond7 (unregistering): Released all slaves [ 590.282004][T29244] loop3: detected capacity change from 0 to 512 [ 590.297158][T29313] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 590.304932][ T9] usb usb6-port1: attempt power cycle [ 590.318373][T29244] EXT4-fs (loop3): 1 truncate cleaned up [ 590.331316][T29244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.372423][T29317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7936'. [ 590.450856][T29322] 9pnet_fd: Insufficient options for proto=fd [ 590.470220][T29322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7937'. [ 590.489584][T29322] hsr_slave_0: left promiscuous mode [ 590.501457][T29322] hsr_slave_1: left promiscuous mode [ 590.728829][T20660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.862180][T29338] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 591.063931][T29355] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.099556][T29355] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.128099][T29355] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.176102][T29355] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.247867][T18443] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.266476][T18443] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.281087][T18443] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.294096][T18443] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.558379][T29401] netlink: 'syz.3.7956': attribute type 1 has an invalid length. [ 591.606018][T29405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=29405 comm=syz.3.7958 [ 591.623374][T18396] Bluetooth: hci1: Frame reassembly failed (-84) [ 591.641222][T17178] Bluetooth: hci0: command 0x1003 tx timeout [ 591.641471][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 591.711573][T29420] vhci_hcd: invalid port number 23 [ 591.848704][T29428] netlink: 'syz.4.7965': attribute type 1 has an invalid length. [ 591.900250][T29438] netlink: 'syz.4.7969': attribute type 1 has an invalid length. [ 591.924335][T29440] syzkaller0: entered promiscuous mode [ 591.959232][T29448] loop4: detected capacity change from 0 to 512 [ 591.966246][T29448] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 591.974780][T29448] EXT4-fs (loop4): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 592.060960][T29458] loop4: detected capacity change from 0 to 256 [ 592.108529][ T9] usb usb6-port1: unable to enumerate USB device [ 592.127756][T28970] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 592.135092][T28970] vhci_hcd: invalid port number 96 [ 592.140245][T28970] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 592.268035][T29480] netlink: 'syz.5.7982': attribute type 1 has an invalid length. [ 592.347794][T29492] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.393055][T29492] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.477347][T29506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.486889][T29506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.496143][T29492] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.585433][T29492] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.664030][T18420] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.697310][T18420] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.716975][T18420] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.725370][T18420] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.743000][T29549] netlink: 'syz.5.7996': attribute type 1 has an invalid length. [ 592.752146][T29546] netlink: 'syz.0.7995': attribute type 1 has an invalid length. [ 592.765264][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 592.765278][ T29] audit: type=1400 audit(586.826:41279): avc: denied { create } for pid=29551 comm="syz.5.7998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.793598][ T29] audit: type=1400 audit(586.837:41280): avc: denied { connect } for pid=29551 comm="syz.5.7998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.794273][T29546] netlink: 'syz.0.7995': attribute type 10 has an invalid length. [ 592.812919][ T29] audit: type=1400 audit(586.837:41281): avc: denied { write } for pid=29551 comm="syz.5.7998" path="socket:[121621]" dev="sockfs" ino=121621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 592.820768][T29546] dummy0: entered promiscuous mode [ 592.849515][T29546] batman_adv: batadv0: Interface activated: dummy0 [ 592.856194][T29546] net_ratelimit: 4 callbacks suppressed [ 592.856207][T29546] batadv0: mtu less than device minimum [ 592.867726][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.878273][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.888945][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.899695][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.910228][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.920884][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.931592][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.942334][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.952924][T29546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 592.955902][ T29] audit: type=1400 audit(587.026:41282): avc: denied { ioctl } for pid=29553 comm="syz.5.7999" path="socket:[121632]" dev="sockfs" ino=121632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 592.968106][T29546] batman_adv: batadv0: Interface deactivated: dummy0 [ 592.995390][T29546] batman_adv: batadv0: Removing interface: dummy0 [ 593.002608][T29546] bridge0: port 4(dummy0) entered blocking state [ 593.009183][T29546] bridge0: port 4(dummy0) entered disabled state [ 593.017438][T29546] dummy0: entered allmulticast mode [ 593.017678][T29559] netlink: 'syz.5.7999': attribute type 1 has an invalid length. [ 593.023642][T29546] bridge0: port 4(dummy0) entered blocking state [ 593.036902][T29546] bridge0: port 4(dummy0) entered forwarding state [ 593.051632][T29555] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.066529][T29554] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.073857][T29554] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.074977][ T29] audit: type=1400 audit(587.162:41283): avc: denied { create } for pid=29560 comm="syz.1.8001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 593.081951][T29554] bridge0: entered promiscuous mode [ 593.106661][ T29] audit: type=1400 audit(587.183:41284): avc: denied { write } for pid=29560 comm="syz.1.8001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 593.126454][T29561] lo speed is unknown, defaulting to 1000 [ 593.132472][T29561] lo speed is unknown, defaulting to 1000 [ 593.139489][T29555] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.153512][T29561] lo speed is unknown, defaulting to 1000 [ 593.156078][ T29] audit: type=1400 audit(587.236:41285): avc: denied { name_bind } for pid=29560 comm="syz.1.8001" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 593.160324][T29561] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 593.180498][ T29] audit: type=1400 audit(587.236:41286): avc: denied { node_bind } for pid=29560 comm="syz.1.8001" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 593.190833][T29561] lo speed is unknown, defaulting to 1000 [ 593.216897][ T29] audit: type=1400 audit(587.299:41287): avc: denied { map } for pid=29565 comm="syz.0.8002" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 593.240851][T29561] lo speed is unknown, defaulting to 1000 [ 593.249140][T29555] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.259951][T29561] lo speed is unknown, defaulting to 1000 [ 593.266250][T29561] lo speed is unknown, defaulting to 1000 [ 593.272283][T29561] lo speed is unknown, defaulting to 1000 [ 593.278224][T29561] lo speed is unknown, defaulting to 1000 [ 593.284222][T29561] lo speed is unknown, defaulting to 1000 [ 593.291732][T29579] SELinux: failed to load policy [ 593.296684][ T29] audit: type=1400 audit(587.383:41288): avc: denied { load_policy } for pid=29565 comm="syz.0.8002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 593.317397][T29555] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.372224][T18420] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.383278][T18420] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.398790][T18420] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.407362][T18420] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.443907][T29591] loop5: detected capacity change from 0 to 512 [ 593.450915][T29591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 593.462363][T29591] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 593.476966][T29591] EXT4-fs (loop5): 1 truncate cleaned up [ 593.483067][T29591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.526340][T29591] wg1 speed is unknown, defaulting to 1000 [ 593.532447][T29591] lo speed is unknown, defaulting to 1000 [ 593.538294][ T3614] Bluetooth: hci1: command 0x1003 tx timeout [ 593.544345][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 593.609577][T29591] pim6reg: entered allmulticast mode [ 593.617605][T29591] pim6reg: left allmulticast mode [ 593.674272][T18037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.710927][T29633] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.786296][T29633] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.833492][T29633] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.919604][T29633] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.941183][T29653] netlink: 'syz.1.8009': attribute type 1 has an invalid length. [ 593.954455][T29655] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.002997][T29665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=29665 comm=syz.1.8014 [ 594.016902][T29655] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.030536][T18420] Bluetooth: hci0: Frame reassembly failed (-84) [ 594.042696][T29655] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.090142][T29655] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.142031][ T5013] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.153743][T18413] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.164954][ T5013] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.176547][ T5013] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.230717][T29686] __nla_validate_parse: 21 callbacks suppressed [ 594.230733][T29686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8016'. [ 594.294052][T29686] loop3: detected capacity change from 0 to 512 [ 594.313700][T29686] EXT4-fs (loop3): 1 truncate cleaned up [ 594.321580][T29686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.558317][T20660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.607932][T29695] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.652599][T29695] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.700002][T29695] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.757072][T29695] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.946655][T12115] usb usb6-port1: attempt power cycle [ 595.381211][ T5013] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.403915][ T5013] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.420327][ T5013] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.434710][ T5013] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.449569][T29730] loop4: detected capacity change from 0 to 512 [ 595.457680][T29730] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.8026: inode has both inline data and extents flags [ 595.471274][T29730] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8026: couldn't read orphan inode 15 (err -117) [ 595.483780][T29730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.539073][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.580975][T29742] loop3: detected capacity change from 0 to 512 [ 595.588015][T29742] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 595.596488][T29742] EXT4-fs (loop3): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 595.626623][T29749] vhci_hcd: invalid port number 23 [ 595.693709][T29758] loop3: detected capacity change from 0 to 256 [ 595.785884][T29774] loop3: detected capacity change from 0 to 164 [ 595.793478][T29774] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 595.807227][T29774] pimreg: entered allmulticast mode [ 595.814065][T29774] pimreg: left allmulticast mode [ 595.863104][T29774] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 595.872176][T29774] rock: directory entry would overflow storage [ 595.878442][T29774] rock: sig=0x4f50, size=4, remaining=3 [ 595.884077][T29774] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 595.895294][T29787] netlink: 'syz.4.8043': attribute type 1 has an invalid length. [ 595.916124][T29789] vhci_hcd: invalid port number 23 [ 595.957265][ T3421] hid (null): invalid report_size 1600482145 [ 595.964534][ T3421] hid-generic 0003:0004:0000.000A: invalid report_size 1600482145 [ 595.972459][ T3421] hid-generic 0003:0004:0000.000A: item 0 4 1 7 parsing failed [ 595.976511][T29800] FAULT_INJECTION: forcing a failure. [ 595.976511][T29800] name failslab, interval 1, probability 0, space 0, times 0 [ 595.980489][ T3421] hid-generic 0003:0004:0000.000A: probe with driver hid-generic failed with error -22 [ 595.992711][T29800] CPU: 0 UID: 0 PID: 29800 Comm: syz.4.8048 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 595.992809][T29800] Tainted: [W]=WARN [ 595.992816][T29800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.992829][T29800] Call Trace: [ 595.992837][T29800] [ 595.992846][T29800] __dump_stack+0x1d/0x30 [ 595.992869][T29800] dump_stack_lvl+0xe8/0x140 [ 595.992963][T29800] dump_stack+0x15/0x1b [ 595.992982][T29800] should_fail_ex+0x265/0x280 [ 595.993016][T29800] ? tcp_sendmsg_fastopen+0x172/0x520 [ 595.993124][T29800] should_failslab+0x8c/0xb0 [ 595.993153][T29800] __kmalloc_cache_noprof+0x4c/0x4a0 [ 595.993187][T29800] tcp_sendmsg_fastopen+0x172/0x520 [ 595.993288][T29800] tcp_sendmsg_locked+0x26e1/0x2c00 [ 595.993328][T29800] ? __rcu_read_unlock+0x4f/0x70 [ 595.993426][T29800] ? xa_load+0xb1/0xe0 [ 595.993449][T29800] ? __account_obj_stock+0x2d6/0x350 [ 595.993484][T29800] ? __rcu_read_unlock+0x4f/0x70 [ 595.993510][T29800] ? avc_has_perm_noaudit+0x1b1/0x200 [ 595.993533][T29800] ? avc_has_perm+0xf7/0x180 [ 595.993568][T29800] ? _raw_spin_unlock_bh+0x36/0x40 [ 595.993664][T29800] ? __pfx_tcp_sendmsg+0x10/0x10 [ 595.993718][T29800] tcp_sendmsg+0x2f/0x50 [ 595.993745][T29800] inet6_sendmsg+0x76/0xd0 [ 595.993774][T29800] __sock_sendmsg+0x8b/0x180 [ 595.993815][T29800] ____sys_sendmsg+0x345/0x4e0 [ 595.993838][T29800] ___sys_sendmsg+0x17b/0x1d0 [ 595.993871][T29800] __sys_sendmmsg+0x178/0x300 [ 595.993901][T29800] __x64_sys_sendmmsg+0x57/0x70 [ 595.993975][T29800] x64_sys_call+0x1c4a/0x3000 [ 595.993998][T29800] do_syscall_64+0xd2/0x200 [ 595.994020][T29800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 595.994124][T29800] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 595.994157][T29800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.994301][T29800] RIP: 0033:0x7ff9dbe5f749 [ 595.994320][T29800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.994339][T29800] RSP: 002b:00007ff9da8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 595.994359][T29800] RAX: ffffffffffffffda RBX: 00007ff9dc0b5fa0 RCX: 00007ff9dbe5f749 [ 595.994372][T29800] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000008 [ 595.994385][T29800] RBP: 00007ff9da8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.994398][T29800] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 595.994411][T29800] R13: 00007ff9dc0b6038 R14: 00007ff9dc0b5fa0 R15: 00007ffe64076ec8 [ 595.994479][T29800] [ 596.002557][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 596.014715][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 596.297277][T29809] loop3: detected capacity change from 0 to 512 [ 596.305155][T29809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 596.313677][T29809] EXT4-fs (loop3): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 596.315819][T29810] netlink: 'syz.1.8050': attribute type 1 has an invalid length. [ 596.336095][T29810] netlink: 'syz.1.8050': attribute type 10 has an invalid length. [ 596.344000][T29810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8050'. [ 596.353282][T29810] dummy0: entered promiscuous mode [ 596.359824][T29810] bridge0: port 1(dummy0) entered blocking state [ 596.366242][T29810] bridge0: port 1(dummy0) entered disabled state [ 596.372750][T29810] dummy0: entered allmulticast mode [ 596.379169][T29810] bridge0: port 1(dummy0) entered blocking state [ 596.385553][T29810] bridge0: port 1(dummy0) entered forwarding state [ 596.413306][T29816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8053'. [ 596.427479][T29816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8053'. [ 596.463196][T29820] netlink: 'syz.1.8054': attribute type 1 has an invalid length. [ 596.472849][T29809] loop3: detected capacity change from 0 to 256 [ 596.509638][T29827] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 596.524136][T29827] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 596.543609][T29827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8055'. [ 596.543703][T29834] vhci_hcd: invalid port number 23 [ 596.561628][T29827] bond3: Invalid ad_actor_system MAC address. [ 596.567781][T29827] bond3: option ad_actor_system: invalid value (1) [ 596.575211][T29827] bond3 (unregistering): Released all slaves [ 596.592711][T29903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8060'. [ 596.622670][T29908] loop3: detected capacity change from 0 to 512 [ 596.632424][T29908] loop3: detected capacity change from 0 to 512 [ 596.660560][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8062'. [ 596.669604][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8062'. [ 596.679456][T29916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=29916 comm=syz.3.8062 [ 596.697137][T18448] Bluetooth: hci0: Frame reassembly failed (-84) [ 596.782025][T29926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8065'. [ 596.819187][T29930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8066'. [ 596.871466][T12115] usb usb6-port1: unable to enumerate USB device [ 596.878021][T29566] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 596.885492][T29566] vhci_hcd: invalid port number 96 [ 596.890745][T29566] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 596.912548][T29942] vhci_hcd: invalid port number 23 [ 596.928622][T29944] vhci_hcd: default hub control req: 5f00 v0000 i0000 l0 [ 597.081467][T29956] validate_nla: 2 callbacks suppressed [ 597.081554][T29956] netlink: 'syz.0.8079': attribute type 1 has an invalid length. [ 597.124109][T29956] netlink: 'syz.0.8079': attribute type 10 has an invalid length. [ 597.365660][T18420] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.399421][T18420] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.427974][T18420] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.454062][T18420] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.512887][T29976] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 597.555582][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 597.555597][ T29] audit: type=1400 audit(591.855:41690): avc: denied { read } for pid=29970 comm="syz.0.8082" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 597.584260][ T29] audit: type=1400 audit(591.855:41691): avc: denied { open } for pid=29970 comm="syz.0.8082" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 597.589914][T29976] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 597.757141][ T29] audit: type=1400 audit(591.939:41692): avc: denied { create } for pid=29970 comm="syz.0.8082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 597.776537][ T29] audit: type=1400 audit(591.949:41693): avc: denied { connect } for pid=29970 comm="syz.0.8082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 597.777547][T29976] bond1: Invalid ad_actor_system MAC address. [ 597.795956][ T29] audit: type=1400 audit(591.949:41694): avc: denied { module_request } for pid=29975 comm="syz.5.8083" kmod=72746E6C2D6C696E6B2D11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 597.824285][T29976] bond1: option ad_actor_system: invalid value (1) [ 597.834111][T29976] bond1 (unregistering): Released all slaves [ 597.958190][T29976] net_ratelimit: 13 callbacks suppressed [ 597.958208][T29976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 598.088996][ T29] audit: type=1400 audit(592.411:41695): avc: denied { map } for pid=30047 comm="syz.5.8084" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 598.117936][ T29] audit: type=1400 audit(592.443:41696): avc: denied { write } for pid=30055 comm="syz.0.8087" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 598.138145][T30054] netlink: 'syz.4.8086': attribute type 1 has an invalid length. [ 598.159501][T30058] SELinux: failed to load policy [ 598.184376][ T29] audit: type=1400 audit(592.495:41697): avc: denied { load_policy } for pid=30047 comm="syz.5.8084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 598.205245][ T29] audit: type=1400 audit(592.537:41698): avc: denied { mount } for pid=30060 comm="syz.4.8089" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 598.257232][T30065] loop4: detected capacity change from 0 to 512 [ 598.264825][T30065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 598.273337][T30065] EXT4-fs (loop4): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 598.373010][T30069] loop4: detected capacity change from 0 to 256 [ 598.409716][ T29] audit: type=1400 audit(592.747:41699): avc: denied { mounton } for pid=30064 comm="syz.4.8091" path="/477/file0" dev="tmpfs" ino=2589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 598.512693][T30076] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.549800][T30076] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.634762][T30076] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.644652][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 598.644851][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.857173][T30105] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.867139][T30105] netlink: 'syz.3.8099': attribute type 3 has an invalid length. [ 598.885850][T30076] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.962692][T30111] netlink: 'syz.3.8100': attribute type 1 has an invalid length. [ 599.028027][T18445] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.087966][T30117] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 599.099998][T18445] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.114633][T18445] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.125259][T18445] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.157609][T30131] vhci_hcd: invalid port number 23 [ 599.170026][T30136] __nla_validate_parse: 11 callbacks suppressed [ 599.170040][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8108'. [ 599.185222][T30136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8108'. [ 599.194710][T30136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30136 comm=syz.3.8108 [ 599.379294][T30146] siw: device registration error -23 [ 599.745969][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8109'. [ 599.764415][T30155] netlink: 'syz.1.8112': attribute type 1 has an invalid length. [ 599.775166][T30155] netlink: 'syz.1.8112': attribute type 10 has an invalid length. [ 599.783061][T30155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8112'. [ 599.921287][T30171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8116'. [ 600.051117][T30189] vhci_hcd: invalid port number 23 [ 600.115587][T30196] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.149561][T30206] SELinux: policydb version -298363419 does not match my version range 15-35 [ 600.158575][T30206] SELinux: failed to load policy [ 600.167447][T30206] random: crng reseeded on system resumption [ 600.408716][T30220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8131'. [ 600.529650][ T1028] usb usb6-port1: attempt power cycle [ 600.596044][T30229] 9pnet_fd: Insufficient options for proto=fd [ 600.635248][T30229] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8134'. [ 600.670036][T30229] hsr_slave_0: left promiscuous mode [ 600.692046][T30229] hsr_slave_1: left promiscuous mode [ 601.025856][T30235] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.049701][T30237] vhci_hcd: invalid port number 23 [ 601.073426][T30239] 9pnet_fd: Insufficient options for proto=fd [ 601.080468][T30239] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8137'. [ 601.148376][T30245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8140'. [ 601.166689][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 601.201671][T30254] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.235223][T30260] netlink: 'syz.0.8145': attribute type 1 has an invalid length. [ 601.253162][T30260] netlink: 'syz.0.8145': attribute type 10 has an invalid length. [ 601.256191][T30263] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.261021][T30260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8145'. [ 601.299276][T30268] netlink: 'syz.1.8148': attribute type 1 has an invalid length. [ 601.347046][T30276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30276 comm=syz.1.8152 [ 601.388641][T18420] Bluetooth: hci0: Frame reassembly failed (-84) [ 601.419073][T30286] dummy0: entered promiscuous mode [ 601.425267][T30286] bridge0: port 1(dummy0) entered blocking state [ 601.431709][T30286] bridge0: port 1(dummy0) entered disabled state [ 601.445323][T30286] dummy0: entered allmulticast mode [ 601.494890][T30291] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.685734][T30312] vhci_hcd: invalid port number 23 [ 601.771818][T30320] netlink: zone id is out of range [ 601.777042][T30320] netlink: zone id is out of range [ 601.782323][T30320] netlink: zone id is out of range [ 602.196024][T30342] vhci_hcd: invalid port number 23 [ 602.310695][ T1028] usb usb6-port1: unable to enumerate USB device [ 602.320193][T30048] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 602.327648][T30048] vhci_hcd: invalid port number 96 [ 602.332810][T30048] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 602.342601][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 602.342617][ T29] audit: type=1400 audit(596.883:41960): avc: denied { open } for pid=30350 comm="syz.0.8182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 602.367634][ T29] audit: type=1400 audit(596.883:41961): avc: denied { kernel } for pid=30350 comm="syz.0.8182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 602.483932][ T29] audit: type=1400 audit(596.957:41962): avc: denied { create } for pid=30350 comm="syz.0.8182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 602.503006][ T29] audit: type=1400 audit(597.009:41963): avc: denied { prog_run } for pid=30355 comm="syz.4.8183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.521533][ T29] audit: type=1400 audit(597.009:41964): avc: denied { create } for pid=30341 comm="syz.3.8177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.540768][ T29] audit: type=1400 audit(597.009:41965): avc: denied { setopt } for pid=30341 comm="syz.3.8177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.559795][ T29] audit: type=1400 audit(597.009:41966): avc: denied { connect } for pid=30341 comm="syz.3.8177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 602.578882][ T29] audit: type=1326 audit(597.009:41967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30355 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9dbe565e7 code=0x7ffc0000 [ 602.601767][ T29] audit: type=1326 audit(597.009:41968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30355 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9dbdfb829 code=0x7ffc0000 [ 602.624931][ T29] audit: type=1326 audit(597.009:41969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30355 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff9dbe565e7 code=0x7ffc0000 [ 602.672404][T30361] 9pnet_fd: Insufficient options for proto=fd [ 602.747627][T30365] loop5: detected capacity change from 0 to 512 [ 602.807506][T30365] EXT4-fs (loop5): 1 truncate cleaned up [ 602.830107][T30365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.064211][T30370] xt_TPROXY: Can be used only with -p tcp or -p udp [ 603.083860][T30395] vhci_hcd: invalid port number 23 [ 603.109227][T30399] validate_nla: 4 callbacks suppressed [ 603.109303][T30399] netlink: 'syz.4.8200': attribute type 1 has an invalid length. [ 603.115343][T30370] loop3: detected capacity change from 0 to 1024 [ 603.131653][T30370] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 603.230347][T30406] net_ratelimit: 6 callbacks suppressed [ 603.230364][T30406] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.367443][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 603.505311][T30446] netlink: 'syz.3.8211': attribute type 1 has an invalid length. [ 603.524892][T30447] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.577216][T18037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.599577][T30447] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.655298][T30447] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.705404][T30475] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 603.714852][T30447] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.724977][T30474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30474 comm=syz.4.8220 [ 603.740079][T30475] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 603.774932][T30475] bond5: Invalid ad_actor_system MAC address. [ 603.781187][T30475] bond5: option ad_actor_system: invalid value (1) [ 603.792219][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 603.804488][T30475] bond5 (unregistering): Released all slaves [ 603.823538][T30550] netlink: 'syz.5.8223': attribute type 1 has an invalid length. [ 603.833773][T18431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.843330][T18431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.851799][T18431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.875999][T18431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.947451][T30570] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.971716][T30576] SELinux: failed to load policy [ 603.980032][T30574] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.009960][T30585] vhci_hcd: invalid port number 23 [ 604.043460][T30591] loop3: detected capacity change from 0 to 512 [ 604.050661][T30591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.059255][T30591] EXT4-fs (loop3): bad geometry: block count 204800 exceeds size of device (64 blocks) [ 604.079259][T30594] sd 0:0:1:0: device reset [ 604.131036][T30601] netlink: 'syz.5.8240': attribute type 5 has an invalid length. [ 604.195684][T30591] loop3: detected capacity change from 0 to 256 [ 604.204289][T30608] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.270126][T30619] __nla_validate_parse: 21 callbacks suppressed [ 604.270141][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8245'. [ 604.290112][T30619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8245'. [ 604.290249][T30618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8247'. [ 604.419502][T30635] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.434953][T30636] loop5: detected capacity change from 0 to 256 [ 604.451044][T30641] netlink: 'syz.3.8253': attribute type 1 has an invalid length. [ 604.460068][T30641] netlink: 'syz.3.8253': attribute type 10 has an invalid length. [ 604.468032][T30641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8253'. [ 604.761762][T30656] loop3: detected capacity change from 0 to 512 [ 604.768633][T30656] EXT4-fs: Ignoring removed oldalloc option [ 604.775631][T30656] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 604.787899][T30656] EXT4-fs (loop3): 1 truncate cleaned up [ 604.794282][T30656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.538053][T30670] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.583990][T30674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8265'. [ 605.627848][T30678] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 605.644515][T30678] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 605.663269][ T3421] usb usb6-port1: attempt power cycle [ 605.672022][T30678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 605.705454][T30678] bond1: Invalid ad_actor_system MAC address. [ 605.711705][T30678] bond1: option ad_actor_system: invalid value (1) [ 605.729342][T30678] bond1 (unregistering): Released all slaves [ 605.739582][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 605.859109][T30752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8268'. [ 605.980550][T30757] 9pnet_fd: Insufficient options for proto=fd [ 605.997593][T30759] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8271'. [ 606.006744][T30759] netlink: 'syz.0.8271': attribute type 9 has an invalid length. [ 606.015254][T30757] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8270'. [ 606.063665][T30759] bond7: entered promiscuous mode [ 606.068756][T30759] bond7: entered allmulticast mode [ 606.082115][T30759] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.092271][T20660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.102642][T30759] bond7 (unregistering): Released all slaves [ 606.118166][T30798] netlink: 'syz.5.8275': attribute type 1 has an invalid length. [ 606.126842][T30798] netlink: 'syz.5.8275': attribute type 10 has an invalid length. [ 606.134704][T30798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8275'. [ 606.138157][T30834] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.151188][T30835] loop4: detected capacity change from 0 to 512 [ 606.158568][T30835] EXT4-fs: Ignoring removed bh option [ 606.164090][T30798] dummy0: entered promiscuous mode [ 606.173552][T30835] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.8273: corrupted in-inode xattr: invalid ea_ino [ 606.187842][T30798] team0: Port device dummy0 removed [ 606.193263][T30835] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.8273: couldn't read orphan inode 15 (err -117) [ 606.195042][T30798] bridge0: port 3(dummy0) entered blocking state [ 606.211669][T30798] bridge0: port 3(dummy0) entered disabled state [ 606.216536][T30835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.218257][T30798] dummy0: entered allmulticast mode [ 606.248304][T30841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=30841 comm=syz.0.8277 [ 606.291285][T30849] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 606.311768][T18446] Bluetooth: hci0: Frame reassembly failed (-84) [ 606.321853][T30849] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 606.343674][T30849] bond5: Invalid ad_actor_system MAC address. [ 606.349908][T30849] bond5: option ad_actor_system: invalid value (1) [ 606.362389][T30849] bond5 (unregistering): Released all slaves [ 606.493655][T30921] FAULT_INJECTION: forcing a failure. [ 606.493655][T30921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.506888][T30921] CPU: 0 UID: 0 PID: 30921 Comm: syz.3.8281 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.506920][T30921] Tainted: [W]=WARN [ 606.506926][T30921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.506939][T30921] Call Trace: [ 606.507014][T30921] [ 606.507023][T30921] __dump_stack+0x1d/0x30 [ 606.507055][T30921] dump_stack_lvl+0xe8/0x140 [ 606.507077][T30921] dump_stack+0x15/0x1b [ 606.507097][T30921] should_fail_ex+0x265/0x280 [ 606.507213][T30921] should_fail+0xb/0x20 [ 606.507228][T30921] should_fail_usercopy+0x1a/0x20 [ 606.507292][T30921] _copy_to_user+0x20/0xa0 [ 606.507314][T30921] simple_read_from_buffer+0xb5/0x130 [ 606.507342][T30921] proc_fail_nth_read+0x10e/0x150 [ 606.507438][T30921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 606.507491][T30921] vfs_read+0x1a8/0x770 [ 606.507517][T30921] ? __rcu_read_unlock+0x4f/0x70 [ 606.507545][T30921] ? __fget_files+0x184/0x1c0 [ 606.507618][T30921] ? __sys_bind+0x223/0x2a0 [ 606.507645][T30921] ksys_read+0xda/0x1a0 [ 606.507760][T30921] __x64_sys_read+0x40/0x50 [ 606.507782][T30921] x64_sys_call+0x27c0/0x3000 [ 606.507802][T30921] do_syscall_64+0xd2/0x200 [ 606.507822][T30921] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 606.507853][T30921] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 606.507919][T30921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.507964][T30921] RIP: 0033:0x7f037b90e15c [ 606.507982][T30921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 606.508000][T30921] RSP: 002b:00007f037a377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.508017][T30921] RAX: ffffffffffffffda RBX: 00007f037bb65fa0 RCX: 00007f037b90e15c [ 606.508030][T30921] RDX: 000000000000000f RSI: 00007f037a3770a0 RDI: 0000000000000007 [ 606.508041][T30921] RBP: 00007f037a377090 R08: 0000000000000000 R09: 0000000000000000 [ 606.508053][T30921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.508067][T30921] R13: 00007f037bb66038 R14: 00007f037bb65fa0 R15: 00007ffed43eecc8 [ 606.508145][T30921] [ 607.140925][T30946] netlink: 'syz.5.8291': attribute type 1 has an invalid length. [ 607.164434][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 607.164447][ T29] audit: type=1400 audit(601.943:42578): avc: denied { mounton } for pid=30947 comm="syz.5.8292" path="/512/file0" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 607.193850][ T29] audit: type=1400 audit(601.985:42579): avc: denied { mount } for pid=30947 comm="syz.5.8292" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 607.227760][ T29] audit: type=1326 audit(602.017:42580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976995f749 code=0x7ffc0000 [ 607.251172][ T29] audit: type=1326 audit(602.017:42581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976995f749 code=0x7ffc0000 [ 607.274221][ T29] audit: type=1326 audit(602.017:42582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f976995f749 code=0x7ffc0000 [ 607.297192][ T29] audit: type=1326 audit(602.017:42583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30950 comm="syz.5.8293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976995f749 code=0x7ffc0000 [ 607.416272][ T3421] usb usb6-port1: unable to enumerate USB device [ 607.422934][T30563] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 607.434697][T30563] vhci_hcd: invalid port number 96 [ 607.439843][T30563] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 607.484903][ T29] audit: type=1400 audit(602.279:42584): avc: denied { unmount } for pid=21265 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 607.504723][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.537748][ T29] audit: type=1326 audit(602.332:42585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30962 comm="syz.1.8299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8702bf749 code=0x7ffc0000 [ 607.560881][ T29] audit: type=1326 audit(602.332:42586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30962 comm="syz.1.8299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8702bf749 code=0x7ffc0000 [ 607.583879][ T29] audit: type=1326 audit(602.332:42587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30962 comm="syz.1.8299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8702bf749 code=0x7ffc0000 [ 607.644524][T30963] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.754084][T30963] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.817888][T30963] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.884891][T30963] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.931985][T30987] loop3: detected capacity change from 0 to 512 [ 608.013476][T30987] EXT4-fs (loop3): 1 truncate cleaned up [ 608.027921][T30987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.218492][T31006] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.244358][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 608.250519][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 608.322023][T31012] wg1 speed is unknown, defaulting to 1000 [ 608.328422][T31012] lo speed is unknown, defaulting to 1000 [ 608.356299][T31030] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 608.378180][T31030] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 608.417064][T31030] bond7: Invalid ad_actor_system MAC address. [ 608.423168][T31030] bond7: option ad_actor_system: invalid value (1) [ 608.432879][T31030] bond7 (unregistering): Released all slaves [ 608.573614][T18401] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.599624][T18401] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.628219][T20660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.659536][T18423] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.685664][T18423] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.723656][T31141] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.733363][T31131] netlink: 'syz.0.8318': attribute type 1 has an invalid length. [ 608.738409][T31149] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 608.759590][T31147] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 608.769023][T31149] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 608.784288][T31131] netlink: 'syz.0.8318': attribute type 10 has an invalid length. [ 608.785483][T31147] netlink: 'syz.1.8322': attribute type 10 has an invalid length. [ 608.825615][T31149] bond1: Invalid ad_actor_system MAC address. [ 608.831711][T31149] bond1: option ad_actor_system: invalid value (1) [ 608.853182][T31149] bond1 (unregistering): Released all slaves [ 608.856195][T31189] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 608.906491][T31189] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 608.916526][T31149] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 608.992987][T31189] bond7: Invalid ad_actor_system MAC address. [ 608.999223][T31189] bond7: option ad_actor_system: invalid value (1) [ 609.027757][T31189] bond7 (unregistering): Released all slaves [ 609.067681][T31143] ip6t_rpfilter: unknown options [ 609.075857][T31187] loop3: detected capacity change from 0 to 512 [ 609.093034][T31143] __nla_validate_parse: 18 callbacks suppressed [ 609.093054][T31143] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8321'. [ 609.111768][T31296] SELinux: failed to load policy [ 609.158022][T31300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8329'. [ 609.170049][T31187] EXT4-fs (loop3): 1 truncate cleaned up [ 609.220152][T31187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.452088][T31310] cgroup: No subsys list or none specified [ 609.572173][T31312] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.627732][T31312] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.685626][T20660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.700002][T31312] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.721853][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8334'. [ 609.737219][T31321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8334'. [ 609.800177][T31312] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.921217][T18429] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.944602][T18423] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.965782][T18423] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.982368][T18423] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.038863][T31363] FAULT_INJECTION: forcing a failure. [ 610.038863][T31363] name failslab, interval 1, probability 0, space 0, times 0 [ 610.051649][T31363] CPU: 0 UID: 0 PID: 31363 Comm: syz.5.8345 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 610.051685][T31363] Tainted: [W]=WARN [ 610.051691][T31363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.051702][T31363] Call Trace: [ 610.051750][T31363] [ 610.051759][T31363] __dump_stack+0x1d/0x30 [ 610.051780][T31363] dump_stack_lvl+0xe8/0x140 [ 610.051821][T31363] dump_stack+0x15/0x1b [ 610.051837][T31363] should_fail_ex+0x265/0x280 [ 610.051873][T31363] ? io_manage_buffers_legacy+0x305/0x6c0 [ 610.051901][T31363] should_failslab+0x8c/0xb0 [ 610.051999][T31363] __kmalloc_cache_noprof+0x4c/0x4a0 [ 610.052066][T31363] io_manage_buffers_legacy+0x305/0x6c0 [ 610.052094][T31363] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 610.052124][T31363] __io_issue_sqe+0xfe/0x2e0 [ 610.052148][T31363] ? io_assign_file+0x56/0x200 [ 610.052195][T31363] io_issue_sqe+0x56/0xa80 [ 610.052221][T31363] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 610.052352][T31363] io_submit_sqes+0x675/0x1060 [ 610.052394][T31363] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 610.052433][T31363] ? 0xffffffff81000000 [ 610.052446][T31363] ? __rcu_read_unlock+0x4f/0x70 [ 610.052517][T31363] ? get_pid_task+0x96/0xd0 [ 610.052539][T31363] ? proc_fail_nth_write+0x13b/0x160 [ 610.052569][T31363] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 610.052621][T31363] ? vfs_write+0x7e8/0x960 [ 610.052642][T31363] ? __rcu_read_unlock+0x4f/0x70 [ 610.052669][T31363] ? __fget_files+0x184/0x1c0 [ 610.052738][T31363] ? fput+0x8f/0xc0 [ 610.052760][T31363] __x64_sys_io_uring_enter+0x78/0x90 [ 610.052829][T31363] x64_sys_call+0x2df0/0x3000 [ 610.052850][T31363] do_syscall_64+0xd2/0x200 [ 610.052936][T31363] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 610.052962][T31363] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 610.052997][T31363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.053022][T31363] RIP: 0033:0x7f976995f749 [ 610.053118][T31363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.053136][T31363] RSP: 002b:00007f97683c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 610.053155][T31363] RAX: ffffffffffffffda RBX: 00007f9769bb5fa0 RCX: 00007f976995f749 [ 610.053166][T31363] RDX: 0000000000000000 RSI: 00000000000047fa RDI: 0000000000000007 [ 610.053178][T31363] RBP: 00007f97683c7090 R08: 0000000000000000 R09: 0000000000000000 [ 610.053189][T31363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.053232][T31363] R13: 00007f9769bb6038 R14: 00007f9769bb5fa0 R15: 00007ffc9ae3dac8 [ 610.053252][T31363] [ 610.377735][T31366] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.379298][T31369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8347'. [ 610.446670][T31366] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.483451][T31381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8350'. [ 610.483710][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8351'. [ 610.500273][T31381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8350'. [ 610.511924][T31366] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.526004][T31369] loop4: detected capacity change from 0 to 512 [ 610.545345][T31369] EXT4-fs (loop4): 1 truncate cleaned up [ 610.553510][T31369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.603269][T31366] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.618508][T31382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8351'. [ 610.693305][T18401] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.704491][T18401] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.723219][T18401] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.735917][T31407] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.749750][T18401] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.771617][T31407] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.784933][T31415] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 610.806363][T31420] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 610.825016][T31420] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 610.825777][T31407] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.848165][T31420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8355'. [ 610.864143][T31420] bond7: Invalid ad_actor_system MAC address. [ 610.870342][T31420] bond7: option ad_actor_system: invalid value (1) [ 610.886708][T31420] bond7 (unregistering): Released all slaves [ 610.900669][T31407] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.902111][ T23] usb usb6-port1: attempt power cycle [ 610.988250][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.031881][T31506] vhci_hcd: invalid port number 23 [ 611.072263][T31511] netlink: 'syz.3.8364': attribute type 1 has an invalid length. [ 611.081217][T31511] netlink: 'syz.3.8364': attribute type 10 has an invalid length. [ 611.150554][T31523] FAULT_INJECTION: forcing a failure. [ 611.150554][T31523] name failslab, interval 1, probability 0, space 0, times 0 [ 611.163331][T31523] CPU: 0 UID: 0 PID: 31523 Comm: syz.0.8369 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 611.163375][T31523] Tainted: [W]=WARN [ 611.163388][T31523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 611.163398][T31523] Call Trace: [ 611.163405][T31523] [ 611.163412][T31523] __dump_stack+0x1d/0x30 [ 611.163488][T31523] dump_stack_lvl+0xe8/0x140 [ 611.163576][T31523] dump_stack+0x15/0x1b [ 611.163591][T31523] should_fail_ex+0x265/0x280 [ 611.163636][T31523] ? tipc_group_create+0x66/0x290 [ 611.163662][T31523] should_failslab+0x8c/0xb0 [ 611.163749][T31523] __kmalloc_cache_noprof+0x4c/0x4a0 [ 611.163778][T31523] tipc_group_create+0x66/0x290 [ 611.163803][T31523] tipc_sk_join+0x130/0x2e0 [ 611.163826][T31523] tipc_setsockopt+0x598/0x620 [ 611.163875][T31523] ? __pfx_tipc_setsockopt+0x10/0x10 [ 611.163906][T31523] __sys_setsockopt+0x184/0x200 [ 611.163943][T31523] __x64_sys_setsockopt+0x64/0x80 [ 611.163969][T31523] x64_sys_call+0x20ec/0x3000 [ 611.163989][T31523] do_syscall_64+0xd2/0x200 [ 611.164007][T31523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 611.164070][T31523] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 611.164118][T31523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.164141][T31523] RIP: 0033:0x7f369a7bf749 [ 611.164155][T31523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.164170][T31523] RSP: 002b:00007f3699227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 611.164187][T31523] RAX: ffffffffffffffda RBX: 00007f369aa15fa0 RCX: 00007f369a7bf749 [ 611.164197][T31523] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008 [ 611.164208][T31523] RBP: 00007f3699227090 R08: 0000000000000010 R09: 0000000000000000 [ 611.164300][T31523] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 611.164313][T31523] R13: 00007f369aa16038 R14: 00007f369aa15fa0 R15: 00007ffe8da097a8 [ 611.164331][T31523] [ 611.598943][T31569] 9pnet_fd: Insufficient options for proto=fd [ 611.626795][T31572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31572 comm=syz.3.8383 [ 611.646784][T18453] Bluetooth: hci0: Frame reassembly failed (-84) [ 611.942485][T31612] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.962822][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 611.962877][ T29] audit: type=1400 audit(606.982:43297): avc: denied { setopt } for pid=31613 comm="syz.0.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 612.020307][ T29] audit: type=1400 audit(607.045:43298): avc: denied { sqpoll } for pid=31613 comm="syz.0.8394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 612.121830][ T29] audit: type=1400 audit(607.150:43299): avc: denied { read write } for pid=31617 comm="syz.0.8395" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 612.144890][ T29] audit: type=1400 audit(607.150:43300): avc: denied { open } for pid=31617 comm="syz.0.8395" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 612.625160][T31629] netlink: 'syz.0.8399': attribute type 1 has an invalid length. [ 612.633825][T31629] netlink: 'syz.0.8399': attribute type 10 has an invalid length. [ 612.655154][ T23] usb usb6-port1: unable to enumerate USB device [ 612.661688][T31262] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 612.671375][T31262] vhci_hcd: invalid port number 96 [ 612.676558][T31262] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 612.789848][T31641] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.012583][ T29] audit: type=1400 audit(608.085:43301): avc: denied { allowed } for pid=31655 comm="syz.4.8406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 613.031612][ T29] audit: type=1400 audit(608.085:43302): avc: denied { sqpoll } for pid=31655 comm="syz.4.8406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 613.106317][ T29] audit: type=1400 audit(608.127:43303): avc: denied { read } for pid=31655 comm="syz.4.8406" dev="nsfs" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 613.127079][ T29] audit: type=1400 audit(608.127:43304): avc: denied { open } for pid=31655 comm="syz.4.8406" path="net:[4026532542]" dev="nsfs" ino=4026532542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 613.150011][ T29] audit: type=1400 audit(608.127:43305): avc: denied { create } for pid=31655 comm="syz.4.8406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.170066][ T29] audit: type=1400 audit(608.137:43306): avc: denied { write } for pid=31655 comm="syz.4.8406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.346460][T31675] SELinux: failed to load policy [ 613.516629][T31696] loop4: detected capacity change from 0 to 2048 [ 613.532212][T31696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 613.545692][T31696] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 613.576280][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 613.585659][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 613.588136][ T3614] Bluetooth: hci0: command 0x1003 tx timeout [ 613.673263][T31715] loop3: detected capacity change from 0 to 256 [ 613.681949][T31717] FAULT_INJECTION: forcing a failure. [ 613.681949][T31717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.695224][T31717] CPU: 0 UID: 0 PID: 31717 Comm: syz.0.8430 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 613.695246][T31717] Tainted: [W]=WARN [ 613.695250][T31717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 613.695258][T31717] Call Trace: [ 613.695263][T31717] [ 613.695268][T31717] __dump_stack+0x1d/0x30 [ 613.695354][T31717] dump_stack_lvl+0xe8/0x140 [ 613.695366][T31717] dump_stack+0x15/0x1b [ 613.695377][T31717] should_fail_ex+0x265/0x280 [ 613.695457][T31717] should_fail+0xb/0x20 [ 613.695467][T31717] should_fail_usercopy+0x1a/0x20 [ 613.695480][T31717] _copy_from_iter+0xd2/0xe80 [ 613.695493][T31717] ? __build_skb_around+0x1ab/0x200 [ 613.695537][T31717] ? __alloc_skb+0x223/0x320 [ 613.695555][T31717] netlink_sendmsg+0x471/0x6b0 [ 613.695625][T31717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.695637][T31717] __sock_sendmsg+0x145/0x180 [ 613.695662][T31717] ____sys_sendmsg+0x345/0x4e0 [ 613.695685][T31717] ___sys_sendmsg+0x17b/0x1d0 [ 613.695728][T31717] __sys_sendmmsg+0x178/0x300 [ 613.695745][T31717] __x64_sys_sendmmsg+0x57/0x70 [ 613.695797][T31717] x64_sys_call+0x1c4a/0x3000 [ 613.695821][T31717] do_syscall_64+0xd2/0x200 [ 613.695835][T31717] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 613.695852][T31717] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 613.695912][T31717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.695925][T31717] RIP: 0033:0x7f369a7bf749 [ 613.695935][T31717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.695946][T31717] RSP: 002b:00007f3699227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 613.695958][T31717] RAX: ffffffffffffffda RBX: 00007f369aa15fa0 RCX: 00007f369a7bf749 [ 613.696029][T31717] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 613.696084][T31717] RBP: 00007f3699227090 R08: 0000000000000000 R09: 0000000000000000 [ 613.696119][T31717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.696127][T31717] R13: 00007f369aa16038 R14: 00007f369aa15fa0 R15: 00007ffe8da097a8 [ 613.696140][T31717] [ 613.940028][T31726] __nla_validate_parse: 10 callbacks suppressed [ 613.940044][T31726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8434'. [ 613.964316][T31730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=31730 comm=syz.0.8436 [ 613.982958][T18452] Bluetooth: hci0: Frame reassembly failed (-84) [ 614.020898][T31726] loop4: detected capacity change from 0 to 512 [ 614.039971][T31726] EXT4-fs (loop4): 1 truncate cleaned up [ 614.047775][T31726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.268710][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.303515][T31742] FAULT_INJECTION: forcing a failure. [ 614.303515][T31742] name failslab, interval 1, probability 0, space 0, times 0 [ 614.316268][T31742] CPU: 0 UID: 0 PID: 31742 Comm: syz.4.8438 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 614.316377][T31742] Tainted: [W]=WARN [ 614.316384][T31742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 614.316395][T31742] Call Trace: [ 614.316402][T31742] [ 614.316459][T31742] __dump_stack+0x1d/0x30 [ 614.316529][T31742] dump_stack_lvl+0xe8/0x140 [ 614.316541][T31742] dump_stack+0x15/0x1b [ 614.316552][T31742] should_fail_ex+0x265/0x280 [ 614.316586][T31742] ? sctp_stream_init_ext+0x39/0x130 [ 614.316623][T31742] should_failslab+0x8c/0xb0 [ 614.316640][T31742] __kmalloc_cache_noprof+0x4c/0x4a0 [ 614.316661][T31742] ? sctp_sched_prio_set+0x57f/0x5e0 [ 614.316685][T31742] sctp_stream_init_ext+0x39/0x130 [ 614.316703][T31742] sctp_sched_set_value+0xec/0x110 [ 614.316723][T31742] sctp_setsockopt_scheduler_value+0x2bd/0x350 [ 614.316811][T31742] sctp_setsockopt+0x74d/0xe30 [ 614.316825][T31742] sock_common_setsockopt+0x69/0x80 [ 614.316922][T31742] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 614.316938][T31742] __sys_setsockopt+0x184/0x200 [ 614.316959][T31742] __x64_sys_setsockopt+0x64/0x80 [ 614.316978][T31742] x64_sys_call+0x20ec/0x3000 [ 614.316991][T31742] do_syscall_64+0xd2/0x200 [ 614.317003][T31742] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 614.317059][T31742] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 614.317079][T31742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.317169][T31742] RIP: 0033:0x7ff9dbe5f749 [ 614.317180][T31742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.317191][T31742] RSP: 002b:00007ff9da8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 614.317203][T31742] RAX: ffffffffffffffda RBX: 00007ff9dc0b5fa0 RCX: 00007ff9dbe5f749 [ 614.317211][T31742] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000006 [ 614.317218][T31742] RBP: 00007ff9da8c7090 R08: 0000000000000008 R09: 0000000000000000 [ 614.317261][T31742] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 614.317278][T31742] R13: 00007ff9dc0b6038 R14: 00007ff9dc0b5fa0 R15: 00007ffe64076ec8 [ 614.317289][T31742] [ 614.562153][T31748] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.592766][T18439] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.626920][T18444] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.645879][T18444] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.660923][T18444] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.797256][T31775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8447'. [ 614.820277][T31775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8447'. [ 614.962767][T31789] loop3: detected capacity change from 0 to 256 [ 615.025495][T31794] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8451'. [ 615.048190][T31781] Set syz1 is full, maxelem 65536 reached [ 615.059171][T31794] hsr0 (unregistering): left allmulticast mode [ 615.350943][ T9] usb usb6-port1: attempt power cycle [ 615.686662][T31801] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.711131][T31807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8454'. [ 615.725706][T31811] cgroup: No subsys list or none specified [ 615.747598][T31815] dummy0: left allmulticast mode [ 615.752858][T31815] bridge0: port 1(dummy0) entered disabled state [ 615.769853][T31819] FAULT_INJECTION: forcing a failure. [ 615.769853][T31819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.782961][T31819] CPU: 1 UID: 0 PID: 31819 Comm: syz.4.8459 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 615.783066][T31819] Tainted: [W]=WARN [ 615.783072][T31819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 615.783085][T31819] Call Trace: [ 615.783092][T31819] [ 615.783121][T31819] __dump_stack+0x1d/0x30 [ 615.783142][T31819] dump_stack_lvl+0xe8/0x140 [ 615.783164][T31819] dump_stack+0x15/0x1b [ 615.783182][T31819] should_fail_ex+0x265/0x280 [ 615.783239][T31819] should_fail+0xb/0x20 [ 615.783306][T31819] should_fail_usercopy+0x1a/0x20 [ 615.783325][T31819] _copy_from_iter+0xd2/0xe80 [ 615.783347][T31819] ? __build_skb_around+0x1ab/0x200 [ 615.783428][T31819] ? __alloc_skb+0x223/0x320 [ 615.783469][T31819] netlink_sendmsg+0x471/0x6b0 [ 615.783554][T31819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.783576][T31819] __sock_sendmsg+0x145/0x180 [ 615.783644][T31819] ____sys_sendmsg+0x31e/0x4e0 [ 615.783668][T31819] ___sys_sendmsg+0x17b/0x1d0 [ 615.783761][T31819] __x64_sys_sendmsg+0xd4/0x160 [ 615.783786][T31819] x64_sys_call+0x191e/0x3000 [ 615.783807][T31819] do_syscall_64+0xd2/0x200 [ 615.783865][T31819] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 615.783891][T31819] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 615.783923][T31819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.784015][T31819] RIP: 0033:0x7ff9dbe5f749 [ 615.784031][T31819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.784049][T31819] RSP: 002b:00007ff9da8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.784134][T31819] RAX: ffffffffffffffda RBX: 00007ff9dc0b5fa0 RCX: 00007ff9dbe5f749 [ 615.784149][T31819] RDX: 0000000000008000 RSI: 0000200000001c00 RDI: 0000000000000003 [ 615.784163][T31819] RBP: 00007ff9da8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 615.784176][T31819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.784189][T31819] R13: 00007ff9dc0b6038 R14: 00007ff9dc0b5fa0 R15: 00007ffe64076ec8 [ 615.784210][T31819] [ 615.994629][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 616.015139][T31823] netlink: 'syz.3.8461': attribute type 1 has an invalid length. [ 616.050477][T31823] netlink: 'syz.3.8461': attribute type 10 has an invalid length. [ 616.058357][T31823] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8461'. [ 616.112910][T31823] bridge0: port 1(dummy0) entered blocking state [ 616.119303][T31823] bridge0: port 1(dummy0) entered disabled state [ 616.141328][T31823] dummy0: entered allmulticast mode [ 616.383513][T31829] Set syz1 is full, maxelem 65536 reached [ 616.694355][T31845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8467'. [ 616.794098][T31851] FAULT_INJECTION: forcing a failure. [ 616.794098][T31851] name failslab, interval 1, probability 0, space 0, times 0 [ 616.798674][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 616.798687][ T29] audit: type=1326 audit(612.172:43517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 616.806891][T31851] CPU: 1 UID: 0 PID: 31851 Comm: syz.4.8469 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 616.806958][T31851] Tainted: [W]=WARN [ 616.806965][T31851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 616.807057][T31851] Call Trace: [ 616.807064][T31851] [ 616.807072][T31851] __dump_stack+0x1d/0x30 [ 616.807096][T31851] dump_stack_lvl+0xe8/0x140 [ 616.807117][T31851] dump_stack+0x15/0x1b [ 616.807212][T31851] should_fail_ex+0x265/0x280 [ 616.807246][T31851] should_failslab+0x8c/0xb0 [ 616.807333][T31851] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 616.807461][T31851] ? sidtab_sid2str_get+0xa0/0x130 [ 616.807513][T31851] kmemdup_noprof+0x2b/0x70 [ 616.807540][T31851] sidtab_sid2str_get+0xa0/0x130 [ 616.807570][T31851] security_sid_to_context_core+0x1eb/0x2e0 [ 616.807604][T31851] security_sid_to_context+0x27/0x40 [ 616.807664][T31851] selinux_lsmprop_to_secctx+0x67/0xf0 [ 616.807695][T31851] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 616.807720][T31851] audit_log_subj_ctx+0xa4/0x3e0 [ 616.807821][T31851] ? skb_put+0xa9/0xf0 [ 616.807851][T31851] audit_log_task_context+0x48/0x70 [ 616.807875][T31851] audit_log_task+0xf4/0x250 [ 616.807945][T31851] ? kstrtouint+0x76/0xc0 [ 616.807976][T31851] audit_seccomp+0x61/0x100 [ 616.808046][T31851] ? __seccomp_filter+0x82d/0x1250 [ 616.808074][T31851] __seccomp_filter+0x83e/0x1250 [ 616.808102][T31851] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 616.808134][T31851] ? vfs_write+0x7e8/0x960 [ 616.808196][T31851] ? __rcu_read_unlock+0x4f/0x70 [ 616.808260][T31851] ? __fget_files+0x184/0x1c0 [ 616.808340][T31851] __secure_computing+0x82/0x150 [ 616.808399][T31851] syscall_trace_enter+0xcf/0x1e0 [ 616.808510][T31851] do_syscall_64+0xac/0x200 [ 616.808528][T31851] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 616.808599][T31851] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 616.808632][T31851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.808654][T31851] RIP: 0033:0x7ff9dbe5f749 [ 616.808680][T31851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.808699][T31851] RSP: 002b:00007ff9da8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 616.808719][T31851] RAX: ffffffffffffffda RBX: 00007ff9dc0b5fa0 RCX: 00007ff9dbe5f749 [ 616.808732][T31851] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000005 [ 616.808745][T31851] RBP: 00007ff9da8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 616.808758][T31851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.808777][T31851] R13: 00007ff9dc0b6038 R14: 00007ff9dc0b5fa0 R15: 00007ffe64076ec8 [ 616.808797][T31851] [ 616.808932][T31851] audit: error in audit_log_subj_ctx [ 616.812938][ T29] audit: type=1326 audit(612.172:43518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.126838][ T29] audit: type=1326 audit(612.172:43519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.149779][ T29] audit: type=1326 audit(612.172:43520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.172817][ T29] audit: type=1326 audit(612.172:43521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.195765][ T29] audit: type=1326 audit(612.172:43522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.218768][ T29] audit: type=1326 audit(612.172:43523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.241722][ T29] audit: type=1326 audit(612.172:43524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.264680][ T29] audit: type=1326 audit(612.172:43525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31850 comm="syz.4.8469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9dbe5f749 code=0x7ffc0000 [ 617.302727][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8472'. [ 617.316511][T31859] netlink: 'syz.3.8472': attribute type 13 has an invalid length. [ 617.359170][T31872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8476'. [ 617.645226][T31893] netlink: 'syz.4.8478': attribute type 1 has an invalid length. [ 617.694284][ T9] usb usb6-port1: unable to enumerate USB device [ 617.701028][T31670] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 617.708781][T31893] netlink: 'syz.4.8478': attribute type 10 has an invalid length. [ 617.716645][T31893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8478'. [ 617.732069][T31670] vhci_hcd: invalid port number 96 [ 617.737245][T31670] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 617.788192][T31899] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 617.806102][T31899] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 617.825149][T31899] bond3: Invalid ad_actor_system MAC address. [ 617.831364][T31899] bond3: option ad_actor_system: invalid value (1) [ 617.839124][T31899] bond3 (unregistering): Released all slaves [ 617.938193][T31899] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 618.231288][T32000] netlink: 'syz.3.8492': attribute type 1 has an invalid length. [ 618.298052][T31984] loop4: detected capacity change from 0 to 512 [ 618.321946][T31984] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 618.356847][T31984] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 618.377559][T31984] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8486: bg 0: block 248: padding at end of block bitmap is not set [ 618.392487][T31984] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.8486: Failed to acquire dquot type 1 [ 618.404589][T31984] EXT4-fs (loop4): 1 truncate cleaned up [ 618.410928][T31984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 618.427491][T31984] EXT4-fs (loop4): shut down requested (1) [ 618.577929][T21265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 618.602168][T32037] SELinux: failed to load policy [ 618.618855][T32038] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 618.627116][T32038] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 618.662684][T32038] bond7: Invalid ad_actor_system MAC address. [ 618.668873][T32038] bond7: option ad_actor_system: invalid value (1) [ 618.706047][T32038] bond7 (unregistering): Released all slaves [ 618.758798][T32109] openvswitch: netlink: Key type 8308 is out of range max 32 [ 618.826893][T32112] netlink: 'syz.4.8505': attribute type 1 has an invalid length. [ 618.877327][T32114] netlink: 'syz.4.8507': attribute type 10 has an invalid length. [ 618.885245][T32114] __nla_validate_parse: 7 callbacks suppressed [ 618.885259][T32114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8507'. [ 618.963795][T32123] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8510'. [ 619.010787][T32127] syz_tun: entered allmulticast mode [ 619.044539][T32127] loop4: detected capacity change from 0 to 2048 [ 619.085026][T32127] loop4: p1 < > p4 [ 619.090224][T32127] loop4: p4 size 8388608 extends beyond EOD, truncated [ 619.153177][T32127] gre1: entered promiscuous mode [ 619.179030][T32126] syz_tun: left allmulticast mode [ 619.401077][T32152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8515'. [ 619.425713][T32154] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 619.442603][T32154] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 619.452904][T32154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8516'. [ 619.467974][T32154] bond2: Invalid ad_actor_system MAC address. [ 619.474242][T32154] bond2: option ad_actor_system: invalid value (1) [ 619.475587][T32156] netlink: 'syz.4.8517': attribute type 1 has an invalid length. [ 619.490974][T32154] bond2 (unregistering): Released all slaves [ 619.588194][T32227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8519'. [ 619.623897][T32125] wg1 speed is unknown, defaulting to 1000 [ 619.645862][T32125] lo speed is unknown, defaulting to 1000 [ 619.655147][T32233] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.798682][T32233] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.858634][T32233] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.883068][T32268] lo: entered allmulticast mode [ 619.895101][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8527'. [ 619.919174][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8527'. [ 619.921439][T32268] loop3: detected capacity change from 0 to 2048 [ 619.945298][T32233] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.000501][T32268] loop3: p1 < > p4 [ 620.004833][T32268] loop3: p4 size 8388608 extends beyond EOD, truncated [ 620.052868][T32268] gre1: entered promiscuous mode [ 620.070211][T32267] lo: left allmulticast mode [ 620.075360][T18455] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.104748][T18455] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.113732][T18455] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.133656][T18455] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.158094][T32295] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.208137][T32305] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.226942][T32315] loop3: detected capacity change from 0 to 256 [ 620.238540][T32295] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.275349][T32325] loop3: detected capacity change from 0 to 128 [ 620.283968][T32325] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 620.296671][ T9] usb usb6-port1: attempt power cycle [ 620.297116][T32305] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.325348][T32295] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.371709][T32305] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.404159][T32295] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.486555][T32305] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.536279][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.554661][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.582255][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.601169][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.669729][T20660] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 620.706479][T32373] 9pnet_fd: Insufficient options for proto=fd [ 620.723962][T32373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8541'. [ 620.727288][T32345] wg1 speed is unknown, defaulting to 1000 [ 620.754486][T32345] lo speed is unknown, defaulting to 1000 [ 620.816748][T32391] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.874593][T32391] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.887953][T32345] chnl_net:caif_netlink_parms(): no params data found [ 620.938736][T32391] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.963771][T32345] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.970905][T32345] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.978430][T32345] bridge_slave_0: entered allmulticast mode [ 620.985039][T32345] bridge_slave_0: entered promiscuous mode [ 620.993521][T32345] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.000651][T32345] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.008034][T32345] bridge_slave_1: entered allmulticast mode [ 621.014596][T32345] bridge_slave_1: entered promiscuous mode [ 621.033243][T32391] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.046511][T32345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.058605][T32345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.084542][T32345] team0: Port device team_slave_0 added [ 621.091610][T32345] team0: Port device team_slave_1 added [ 621.111744][T32345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.118855][T32345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.119433][T32598] loop3: detected capacity change from 0 to 2048 [ 621.145000][T32345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.162343][T32598] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 621.171665][T32345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.178632][T32345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.204578][T32345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.230768][T18439] batadv1: left allmulticast mode [ 621.235822][T18439] batadv1: left promiscuous mode [ 621.240905][T18439] bridge0: port 4(batadv1) entered disabled state [ 621.248256][T18439] bridge0: port 3(dummy0) entered disabled state [ 621.255446][T18439] bridge_slave_1: left allmulticast mode [ 621.261196][T18439] bridge_slave_1: left promiscuous mode [ 621.266886][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.275156][T18439] bridge_slave_0: left allmulticast mode [ 621.281244][T18439] bridge_slave_0: left promiscuous mode [ 621.287224][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.696661][T18439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.706030][T18439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.715118][T18439] bond0 (unregistering): Released all slaves [ 621.723924][T18439] bond1 (unregistering): Released all slaves [ 621.732453][T18439] bond2 (unregistering): Released all slaves [ 621.762850][T32345] hsr_slave_0: entered promiscuous mode [ 621.768921][T32345] hsr_slave_1: entered promiscuous mode [ 621.783349][T18439] tipc: Left network mode [ 621.829101][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 621.829105][T18439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.829129][ T29] audit: type=1400 audit(617.463:43821): avc: denied { create } for pid=32704 comm="syz.3.8551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 621.862183][ T29] audit: type=1400 audit(617.463:43822): avc: denied { getopt } for pid=32704 comm="syz.3.8551" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 621.862201][T18439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.917470][ T29] audit: type=1400 audit(617.557:43823): avc: denied { setopt } for pid=32710 comm="syz.3.8553" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 621.937638][T18439] team0 (unregistering): Port device team_slave_1 removed [ 621.947020][T18439] team0 (unregistering): Port device team_slave_0 removed [ 622.002081][ T29] audit: type=1400 audit(617.641:43824): avc: denied { write } for pid=32733 comm="syz.3.8554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 622.034778][ T29] audit: type=1400 audit(617.673:43825): avc: denied { open } for pid=32744 comm="syz.3.8555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 622.054131][ T29] audit: type=1400 audit(617.673:43826): avc: denied { kernel } for pid=32744 comm="syz.3.8555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 622.076114][ T9] usb usb6-port1: unable to enumerate USB device [ 622.082801][T32027] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 622.090205][T32027] vhci_hcd: invalid port number 96 [ 622.095377][T32027] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 622.130521][ T29] audit: type=1400 audit(617.778:43827): avc: denied { prog_load } for pid=32751 comm="syz.5.8557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 622.149264][ T29] audit: type=1400 audit(617.778:43828): avc: denied { read write } for pid=20660 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.173033][ T29] audit: type=1400 audit(617.778:43829): avc: denied { open } for pid=20660 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.196713][ T29] audit: type=1400 audit(617.778:43830): avc: denied { ioctl } for pid=20660 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.205848][T32755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8558'. [ 622.231345][T32757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=32757 comm=syz.5.8559 [ 622.251958][T18399] Bluetooth: hci0: Frame reassembly failed (-84) [ 622.454209][T18439] IPVS: stop unused estimator thread 0... [ 622.466134][T32345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.477695][T32345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.489190][T32345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.498522][T32345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.533685][T32345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.545793][T32345] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.555867][T18415] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.563043][T18415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.574003][T18415] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.581086][T18415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.603129][T32345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.648520][T32345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.663349][ T348] SELinux: failed to load policy [ 622.735041][T32345] veth0_vlan: entered promiscuous mode [ 622.743159][T32345] veth1_vlan: entered promiscuous mode [ 622.757268][T32345] veth0_macvtap: entered promiscuous mode [ 622.764678][T32345] veth1_macvtap: entered promiscuous mode [ 622.776182][T32345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.785860][T32345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.796171][T18415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.805186][T18415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.814302][T18415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.823360][T18415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.913447][ T10] IPVS: starting estimator thread 0... [ 622.968842][ T369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8570'. [ 622.999930][ T362] IPVS: using max 4944 ests per chain, 247200 per kthread [ 623.490156][T18446] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.501553][T18446] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.512710][T18419] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.524494][T18419] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.552527][ T393] netlink: 'syz.1.8575': attribute type 10 has an invalid length. [ 623.560382][ T393] ipvlan0: entered allmulticast mode [ 623.565836][ T393] veth0_vlan: entered allmulticast mode [ 623.572905][ T393] team0: Device ipvlan0 failed to register rx_handler [ 623.595193][ T395] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 623.603314][ T395] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 623.620696][ T395] bond2: Invalid ad_actor_system MAC address. [ 623.626808][ T395] bond2: option ad_actor_system: invalid value (1) [ 623.634559][ T395] bond2 (unregistering): Released all slaves [ 623.712831][ T395] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 624.171383][ T3614] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.171445][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 624.333355][ T3421] usb usb6-port1: attempt power cycle [ 624.402356][ T481] __nla_validate_parse: 2 callbacks suppressed [ 624.402372][ T481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8581'. [ 624.422459][ T481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8581'. [ 624.516481][ T492] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.536317][ T494] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.554629][T18417] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.577410][ T494] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.591327][T18417] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.599695][T18417] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.610830][T18417] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.641789][ T494] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.687623][ T494] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.998378][ T532] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 625.006584][ T532] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 625.018496][ T532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8591'. [ 625.035932][ T532] bond1: Invalid ad_actor_system MAC address. [ 625.042109][ T532] bond1: option ad_actor_system: invalid value (1) [ 625.049883][ T532] bond1 (unregistering): Released all slaves [ 625.117759][ T532] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 625.150165][ T602] loop5: detected capacity change from 0 to 512 [ 625.156780][ T602] EXT4-fs: Ignoring removed i_version option [ 625.163036][ T602] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 625.233108][ T613] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.260217][ T615] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.478549][ T627] netlink: 'syz.5.8602': attribute type 10 has an invalid length. [ 625.486479][ T627] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8602'. [ 625.574096][ T638] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.608550][ T641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8608'. [ 625.691718][ T641] loop5: detected capacity change from 0 to 512 [ 625.711755][ T641] EXT4-fs (loop5): 1 truncate cleaned up [ 625.720884][ T641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.853069][ T658] loop4: detected capacity change from 0 to 512 [ 625.865218][ T658] EXT4-fs: Ignoring removed oldalloc option [ 625.878010][ T658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.893965][ T663] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.944718][ T663] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.002266][ T663] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.049937][ T663] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.063155][T18037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.067922][ T3421] usb usb6-port1: unable to enumerate USB device [ 626.078955][ T341] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.087334][ T341] vhci_hcd: invalid port number 96 [ 626.092478][ T341] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 626.135554][ T685] dummy0: left allmulticast mode [ 626.140721][ T685] bridge0: port 3(dummy0) entered disabled state [ 626.152777][ T685] bridge_slave_0: left allmulticast mode [ 626.158543][ T685] bridge_slave_0: left promiscuous mode [ 626.164276][ T685] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.173796][ T685] bridge_slave_1: left allmulticast mode [ 626.179467][ T685] bridge_slave_1: left promiscuous mode [ 626.185267][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.194630][ T685] bond0: (slave bond_slave_0): Releasing backup interface [ 626.205053][ T685] bond0: (slave bond_slave_1): Releasing backup interface [ 626.217932][ T685] team0: Port device team_slave_0 removed [ 626.226782][ T685] team0: Port device team_slave_1 removed [ 626.234219][ T685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.241741][ T685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.250839][ T685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.258282][ T685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.300444][ T692] FAULT_INJECTION: forcing a failure. [ 626.300444][ T692] name failslab, interval 1, probability 0, space 0, times 0 [ 626.313171][ T692] CPU: 1 UID: 0 PID: 692 Comm: syz.5.8621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 626.313220][ T692] Tainted: [W]=WARN [ 626.313231][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 626.313317][ T692] Call Trace: [ 626.313324][ T692] [ 626.313334][ T692] __dump_stack+0x1d/0x30 [ 626.313359][ T692] dump_stack_lvl+0xe8/0x140 [ 626.313382][ T692] dump_stack+0x15/0x1b [ 626.313399][ T692] should_fail_ex+0x265/0x280 [ 626.313473][ T692] should_failslab+0x8c/0xb0 [ 626.313526][ T692] kmem_cache_alloc_noprof+0x50/0x480 [ 626.313543][ T692] ? ioctx_alloc+0xf5/0x4e0 [ 626.313603][ T692] ioctx_alloc+0xf5/0x4e0 [ 626.313621][ T692] __se_sys_io_setup+0x6b/0x1b0 [ 626.313668][ T692] __x64_sys_io_setup+0x31/0x40 [ 626.313753][ T692] x64_sys_call+0x2f0e/0x3000 [ 626.313766][ T692] do_syscall_64+0xd2/0x200 [ 626.313779][ T692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 626.313810][ T692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.313823][ T692] RIP: 0033:0x7f976995f749 [ 626.313833][ T692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 626.313844][ T692] RSP: 002b:00007f97683c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 626.313856][ T692] RAX: ffffffffffffffda RBX: 00007f9769bb5fa0 RCX: 00007f976995f749 [ 626.313863][ T692] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 626.313906][ T692] RBP: 00007f97683c7090 R08: 0000000000000000 R09: 0000000000000000 [ 626.313920][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.313930][ T692] R13: 00007f9769bb6038 R14: 00007f9769bb5fa0 R15: 00007ffc9ae3dac8 [ 626.313942][ T692] [ 626.531456][ T699] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 626.540078][ T699] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 626.553245][ T699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8624'. [ 626.570804][ T699] bond1: Invalid ad_actor_system MAC address. [ 626.576964][ T699] bond1: option ad_actor_system: invalid value (1) [ 626.584347][ T699] bond1 (unregistering): Released all slaves [ 626.601785][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 626.601798][ T29] audit: type=1400 audit(622.470:44194): avc: denied { watch watch_reads } for pid=698 comm="syz.5.8624" path="/567" dev="tmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 626.609389][T18425] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.643909][T18419] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.663749][ T699] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 626.664381][T18419] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.672258][ T29] audit: type=1400 audit(622.533:44195): avc: denied { write } for pid=698 comm="syz.5.8624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 626.687415][T18419] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.707799][ T29] audit: type=1400 audit(622.575:44196): avc: denied { unmount } for pid=32345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 626.728547][T32345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.730763][ T29] audit: type=1400 audit(622.586:44197): avc: denied { create } for pid=774 comm="syz.1.8625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 626.756739][ T29] audit: type=1400 audit(622.586:44198): avc: denied { setopt } for pid=774 comm="syz.1.8625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 626.775672][ T29] audit: type=1400 audit(622.586:44199): avc: denied { map_read map_write } for pid=774 comm="syz.1.8625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 626.810286][ T29] audit: type=1400 audit(622.670:44200): avc: denied { allowed } for pid=774 comm="syz.1.8625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 626.823580][ T783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8627'. [ 626.829070][ T29] audit: type=1400 audit(622.670:44201): avc: denied { sqpoll } for pid=774 comm="syz.1.8625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 626.878293][ T29] audit: type=1400 audit(622.754:44202): avc: denied { read } for pid=784 comm="syz.4.8628" dev="nsfs" ino=4026533785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 626.898942][ T29] audit: type=1400 audit(622.754:44203): avc: denied { open } for pid=784 comm="syz.4.8628" path="net:[4026533785]" dev="nsfs" ino=4026533785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 626.949841][ T788] netlink: 'syz.1.8629': attribute type 10 has an invalid length. [ 626.957883][ T788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8629'. [ 627.074267][ T793] cgroup: No subsys list or none specified [ 627.395516][ T800] lo speed is unknown, defaulting to 1000 [ 627.479808][ T800] chnl_net:caif_netlink_parms(): no params data found [ 627.555763][ T800] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.563025][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.570572][ T800] bridge_slave_0: entered allmulticast mode [ 627.577337][ T800] bridge_slave_0: entered promiscuous mode [ 627.584741][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.591835][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.599098][ T800] bridge_slave_1: entered allmulticast mode [ 627.606052][ T800] bridge_slave_1: entered promiscuous mode [ 627.631594][ T800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.642431][ T800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.681924][ T800] team0: Port device team_slave_0 added [ 627.694580][ T800] team0: Port device team_slave_1 added [ 627.720801][ T800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.727832][ T800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.753807][ T800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.766201][ T800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.773268][ T800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.799248][ T800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.853766][ T800] hsr_slave_0: entered promiscuous mode [ 627.860628][ T1070] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.866745][ T800] hsr_slave_1: entered promiscuous mode [ 627.881569][ T800] debugfs: 'hsr0' already exists in 'hsr' [ 627.887383][ T800] Cannot create hsr debugfs directory [ 627.986542][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8644'. [ 628.029909][ T1121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8644'. [ 628.039600][ T800] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.127320][ T800] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.203017][ T800] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.239027][T18403] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.254872][T18403] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.264072][ T800] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.289125][T18443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.326849][T18403] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.395808][ T800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.424817][ T800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 628.458052][ T800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 628.474281][ T1190] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.484345][ T800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 628.592599][ T800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.611311][ T1205] loop5: detected capacity change from 0 to 256 [ 628.649927][ T800] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.663698][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.670791][T18402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.689013][ T800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.699484][ T800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.720653][ T1216] netlink: 'syz.0.8658': attribute type 1 has an invalid length. [ 628.740219][T18430] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.747368][T18430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.869274][ T800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.900318][ T1231] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.074864][ T1245] netlink: zone id is out of range [ 629.081166][ T1245] netlink: zone id is out of range [ 629.089808][ T800] veth0_vlan: entered promiscuous mode [ 629.101731][ T800] veth1_vlan: entered promiscuous mode [ 629.108330][ T1245] netlink: zone id is out of range [ 629.117441][ T1245] netlink: zone id is out of range [ 629.129140][ T800] veth0_macvtap: entered promiscuous mode [ 629.135481][ T1245] netlink: zone id is out of range [ 629.144310][ T1247] netlink: 'syz.0.8666': attribute type 12 has an invalid length. [ 629.154350][ T800] veth1_macvtap: entered promiscuous mode [ 629.161502][ T1248] SELinux: failed to load policy [ 629.167171][ T1245] netlink: zone id is out of range [ 629.183432][ T1245] netlink: zone id is out of range [ 629.189442][ T1245] netlink: zone id is out of range [ 629.196321][ T1245] netlink: zone id is out of range [ 629.208981][ T800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.221395][ T800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.232877][T18458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.242294][T18458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.273578][T18458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.302870][T18458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.379364][ T1261] __nla_validate_parse: 2 callbacks suppressed [ 629.379379][ T1261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8634'. [ 629.477910][ T1267] SELinux: failed to load policy [ 629.509056][ T1268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8669'. [ 629.558327][ T1272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8670'. [ 629.977982][ T1294] FAULT_INJECTION: forcing a failure. [ 629.977982][ T1294] name failslab, interval 1, probability 0, space 0, times 0 [ 629.990675][ T1294] CPU: 0 UID: 0 PID: 1294 Comm: syz.1.8675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 629.990706][ T1294] Tainted: [W]=WARN [ 629.990713][ T1294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 629.990780][ T1294] Call Trace: [ 629.990794][ T1294] [ 629.990802][ T1294] __dump_stack+0x1d/0x30 [ 629.990827][ T1294] dump_stack_lvl+0xe8/0x140 [ 629.990847][ T1294] dump_stack+0x15/0x1b [ 629.990863][ T1294] should_fail_ex+0x265/0x280 [ 629.990900][ T1294] ? audit_log_d_path+0x8d/0x150 [ 629.990926][ T1294] should_failslab+0x8c/0xb0 [ 629.990956][ T1294] __kmalloc_cache_noprof+0x4c/0x4a0 [ 629.990989][ T1294] audit_log_d_path+0x8d/0x150 [ 629.991090][ T1294] audit_log_d_path_exe+0x42/0x70 [ 629.991114][ T1294] audit_log_task+0x1e9/0x250 [ 629.991148][ T1294] audit_seccomp+0x61/0x100 [ 629.991207][ T1294] ? __seccomp_filter+0x82d/0x1250 [ 629.991233][ T1294] __seccomp_filter+0x83e/0x1250 [ 629.991261][ T1294] ? __list_del_entry_valid_or_report+0x65/0x130 [ 629.991366][ T1294] ? kcsan_end_scoped_access+0x48/0x2b0 [ 629.991403][ T1294] ? rcu_exp_handler+0x291/0x2f0 [ 629.991493][ T1294] __secure_computing+0x82/0x150 [ 629.991516][ T1294] syscall_trace_enter+0xcf/0x1e0 [ 629.991543][ T1294] do_syscall_64+0xac/0x200 [ 629.991619][ T1294] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 629.991645][ T1294] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 629.991674][ T1294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.991696][ T1294] RIP: 0033:0x7fc8702bf749 [ 629.991713][ T1294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.991768][ T1294] RSP: 002b:00007fc86ed27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 629.991793][ T1294] RAX: ffffffffffffffda RBX: 00007fc870515fa0 RCX: 00007fc8702bf749 [ 629.991806][ T1294] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000008 [ 629.991853][ T1294] RBP: 00007fc86ed27090 R08: 0000000000000000 R09: 0000000000000000 [ 629.991867][ T1294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.991880][ T1294] R13: 00007fc870516038 R14: 00007fc870515fa0 R15: 00007ffe25a53c78 [ 629.991900][ T1294] [ 630.289950][ T1279] lo speed is unknown, defaulting to 1000 [ 630.363925][ T1279] chnl_net:caif_netlink_parms(): no params data found [ 630.408793][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.415980][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.423274][ T1279] bridge_slave_0: entered allmulticast mode [ 630.429888][ T1279] bridge_slave_0: entered promiscuous mode [ 630.436673][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.443844][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.451200][ T1279] bridge_slave_1: entered allmulticast mode [ 630.457641][ T1279] bridge_slave_1: entered promiscuous mode [ 630.481301][ T1279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.493317][ T1279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.520643][ T1279] team0: Port device team_slave_0 added [ 630.528351][ T1279] team0: Port device team_slave_1 added [ 630.548607][ T1279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.555647][ T1279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.581864][ T1279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.595788][ T1279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.602815][ T1279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.628802][ T1279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.666956][ T1279] hsr_slave_0: entered promiscuous mode [ 630.673340][ T1279] hsr_slave_1: entered promiscuous mode [ 630.679680][ T1279] debugfs: 'hsr0' already exists in 'hsr' [ 630.685405][ T1279] Cannot create hsr debugfs directory [ 630.764089][ T1617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8677'. [ 630.784279][ T1279] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.815614][ T1634] 9pnet_fd: Insufficient options for proto=fd [ 630.823355][ T1634] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8679'. [ 630.841147][ T1279] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.869145][ T1636] cgroup: No subsys list or none specified [ 630.935880][ T1279] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.993826][ T1279] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.149821][ T1658] dummy0: left allmulticast mode [ 631.155040][ T1658] bridge0: port 1(dummy0) entered disabled state [ 631.179166][T12115] lo speed is unknown, defaulting to 1000 [ 631.201169][ T5983] usb usb6-port1: attempt power cycle [ 631.238259][ T1660] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.288799][ T1660] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.336317][ T1660] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.383593][ T1660] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.444186][T18445] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.461837][T18445] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.474714][T18445] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.488188][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 631.488227][T18458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.488248][ T29] audit: type=1326 audit(627.726:44406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8702bf749 code=0x7ffc0000 [ 631.488341][T18458] ================================================================== [ 631.494459][T18458] BUG: KCSAN: data-race in data_push_tail / string [ 631.494486][T18458] [ 631.494492][T18458] write to 0xffffffff88e74468 of 1 bytes by task 29 on cpu 1: [ 631.494507][T18458] string+0x187/0x220 [ 631.494531][T18458] vsnprintf+0x532/0x890 [ 631.494554][T18458] vscnprintf+0x41/0x90 [ 631.494576][T18458] printk_sprint+0x30/0x2d0 [ 631.494599][T18458] vprintk_store+0x599/0x860 [ 631.494627][T18458] vprintk_emit+0x10d/0x580 [ 631.494648][T18458] vprintk_default+0x26/0x30 [ 631.494672][T18458] vprintk+0x1d/0x30 [ 631.494701][T18458] _printk+0x79/0xa0 [ 631.494729][T18458] kauditd_hold_skb+0x1b1/0x1c0 [ 631.494755][T18458] kauditd_send_queue+0x273/0x2c0 [ 631.494781][T18458] kauditd_thread+0x421/0x630 [ 631.494803][T18458] kthread+0x489/0x510 [ 631.494827][T18458] ret_from_fork+0x122/0x1b0 [ 631.494850][T18458] ret_from_fork_asm+0x1a/0x30 [ 631.494873][T18458] [ 631.494881][T18458] read to 0xffffffff88e74468 of 8 bytes by task 18458 on cpu 0: [ 631.494899][T18458] data_push_tail+0xfd/0x420 [ 631.494921][T18458] data_alloc+0xfb/0x2e0 [ 631.494940][T18458] prb_reserve+0x807/0xaf0 [ 631.494959][T18458] vprintk_store+0x56d/0x860 [ 631.494983][T18458] vprintk_emit+0x10d/0x580 [ 631.495006][T18458] dev_vprintk_emit+0x242/0x2a0 [ 631.495031][T18458] dev_printk_emit+0x84/0xb0 [ 631.495055][T18458] __netdev_printk+0x35c/0x3e0 [ 631.495077][T18458] netdev_info+0x9b/0xd0 [ 631.495103][T18458] nsim_udp_tunnel_set_port+0x13b/0x160 [ 631.495129][T18458] __udp_tunnel_nic_device_sync+0x567/0x9c0 [ 631.495164][T18458] udp_tunnel_nic_device_sync_work+0x5d/0x5f0 [ 631.495200][T18458] process_scheduled_works+0x4ce/0x9d0 [ 631.495235][T18458] worker_thread+0x582/0x770 [ 631.495255][T18458] kthread+0x489/0x510 [ 631.495278][T18458] ret_from_fork+0x122/0x1b0 [ 631.495301][T18458] ret_from_fork_asm+0x1a/0x30 [ 631.495326][T18458] [ 631.495332][T18458] value changed: 0x000000010000182f -> 0x64696720303d6469 [ 631.495346][T18458] [ 631.495351][T18458] Reported by Kernel Concurrency Sanitizer on: [ 631.495368][T18458] CPU: 0 UID: 0 PID: 18458 Comm: kworker/u8:64 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 631.495403][T18458] Tainted: [W]=WARN [ 631.495412][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 631.495429][T18458] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 631.495471][T18458] ================================================================== [ 631.505617][ T29] audit: type=1326 audit(627.726:44407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.8687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8702bf749 code=0x7ffc0000 [ 632.309820][ T1279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 632.318223][ T1279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 632.327062][ T1279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 632.335850][ T1279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.372581][ T1279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.379818][T18458] dummy0: left allmulticast mode [ 632.385399][T18458] bridge0: port 4(dummy0) entered disabled state [ 632.392562][T18458] bridge0: port 3(vlan0) entered disabled state [ 632.399410][T18458] bridge_slave_1: left allmulticast mode [ 632.405246][T18458] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.413204][T18458] bridge_slave_0: left allmulticast mode [ 632.418834][T18458] bridge_slave_0: left promiscuous mode [ 632.424556][T18458] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.472897][T18458] team0: Port device geneve1 removed [ 632.755695][T18458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.765519][T18458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.775056][T18458] bond0 (unregistering): Released all slaves [ 632.783422][T18458] bond1 (unregistering): Released all slaves [ 632.791500][T18458] bond2 (unregistering): Released all slaves [ 632.799452][T18458] bond3 (unregistering): Released all slaves [ 632.807857][T18458] bond4 (unregistering): Released all slaves [ 632.815928][T18458] bond5 (unregistering): Released all slaves [ 632.824254][T18458] bond6 (unregistering): Released all slaves [ 632.836962][ T1279] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.846016][T18445] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.853164][T18445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.863427][T18445] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.870519][T18445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.896111][T18458] tipc: Left network mode [ 632.918699][T18458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.926182][T18458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.933861][T18458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.941391][T18458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.944562][ T5983] usb usb6-port1: unable to enumerate USB device [ 632.956269][ T1242] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 632.963640][ T1242] vhci_hcd: invalid port number 96 [ 632.963757][T18458] veth1_macvtap: left promiscuous mode [ 632.968739][ T1242] vhci_hcd: default hub control req: 0500 vfffa i0060 l0 [ 632.985165][T18458] veth0_macvtap: left promiscuous mode [ 632.990780][T18458] veth1_vlan: left promiscuous mode [ 633.039590][T18458] team0 (unregistering): Port device team_slave_1 removed [ 633.050081][T18458] team0 (unregistering): Port device team_slave_0 removed [ 633.096119][ T1279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.149178][ T1279] veth0_vlan: entered promiscuous mode [ 633.156696][ T1279] veth1_vlan: entered promiscuous mode [ 633.170582][ T1279] veth0_macvtap: entered promiscuous mode [ 633.178090][ T1279] veth1_macvtap: entered promiscuous mode [ 633.187497][ T1279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.198297][ T1279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.208671][T18431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.217620][T18431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.228189][T18431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.237741][T18431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.254740][ T29] audit: type=1400 audit(629.574:44408): avc: denied { mounton } for pid=1279 comm="syz-executor" path="/root/syzkaller.OXhjdG/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 633.279081][ T29] audit: type=1400 audit(629.574:44409): avc: denied { mount } for pid=1279 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 633.300788][ T29] audit: type=1400 audit(629.574:44410): avc: denied { mount } for pid=1279 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 633.322356][ T29] audit: type=1400 audit(629.574:44411): avc: denied { mounton } for pid=1279 comm="syz-executor" path="/root/syzkaller.OXhjdG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 633.348621][ T29] audit: type=1400 audit(629.574:44412): avc: denied { mounton } for pid=1279 comm="syz-executor" path="/root/syzkaller.OXhjdG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=132767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 633.375754][ T29] audit: type=1400 audit(629.574:44413): avc: denied { unmount } for pid=1279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 633.395476][ T29] audit: type=1400 audit(629.616:44414): avc: denied { mounton } for pid=1279 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 633.417837][ T29] audit: type=1400 audit(629.616:44415): avc: denied { mount } for pid=1279 comm="syz-executor" name="/" dev="gadgetfs" ino=3901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 633.444147][T18458] IPVS: stop unused estimator thread 0...