last executing test programs: 4.290197409s ago: executing program 3 (id=7335): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x2008098, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1d3, &(0x7f00000004c0)="$eJzs3L1qFFEUB/CbGE2MJKQStPGijTaDprZQJIK4oKgrfoAwIRNddt0NO1PsisXWVj6HiDZ2gvgCeQu7IIRUqRzRzYeJIY26G8zv18yZ+TNwDgOX4Q7MyuXXz+uLebKYFmF0YiSMXgm9sD4SZsJo2NQLF94/WHt19+Gjm1crlbnxjcsxxukznx6/fHv2c3Hi/ofpj+NheebJyursl+WTy6dWvt17VstjLY/NVhHTON9qFel8I4sLtbyexHi7kaV5FmvNPGvvyBcbraWlbkybC1OTS+0sz2Pa7MZ61o1FKxbtbkyfprVmTJIkTk0G/kT1zXpZhtWyLMvxXijLctgNMWCe/+G2uajfiXEihK+9TrVT7R/7+fUblbmL8aeZ7bvWOp3qka38Uj+PO/OjYXIjn90zPxbOn+vnP7Jrtyq78uNh4d+PDwAAAAAA/6Ukbvl9f39k43TPvF/98n1g1/79WDg9NqAhAAAAgH3l3Rf1tNHI2getGAsHog2FYiDFu3Ag2tguhr0yAQAAf9v2S/+wOwEAAAAAAAAAAAAAAAAAAIDDaxC/Exv2jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+/keAAD///dtbTI=") write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.236937374s ago: executing program 3 (id=7338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001050530e58ffe0f0f1bd41f1f81e813d000020000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 1.604565442s ago: executing program 4 (id=7394): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x8, 0x81, 0x91, 0xffffffff}, 0x98) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x8, 0x81, 0x91, 0xffffffff}, 0x98) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1a, 0x8001, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040081) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000700406918545315f17c6dbfcb8aa32c0000000000000004850000014400000095147a27d1bb7f"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) io_setup(0x7, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x8, 0x0, r8, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.488680614s ago: executing program 4 (id=7395): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x33, 0x35}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 1.42330405s ago: executing program 4 (id=7397): getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'pimreg0\x00', {0x3}}) (async) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000240)={0xbbf8, 0x2, 'client0\x00', 0x80000002, "4deab9dd85086e18", "c79309edd14768bfafdc32aafad79cf38eb6a16e47dbb5a87c2e7c5c61dfba34", 0xfffffff7, 0x6}) (async) keyctl$link(0x8, r1, r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xc2, 0xffffffff, 0x7fff, 0x8bc0, r2, 0x216bc68b, '\x00', 0x0, r2, 0x5, 0x3, 0x1, 0x0, @value=r2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0x6a, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x65, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xa, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff0, 0x1}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x9c, &(0x7f0000000440)=""/156, 0x41100, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x10, 0xd, 0xffff}, 0x10, r4, r2, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) execve(&(0x7f0000000900)='./file0\x00', &(0x7f0000000a00)={[&(0x7f0000000940)='*\'\x00', &(0x7f0000000980)=')&^!\x00', &(0x7f00000009c0)='syzkaller\x00']}, &(0x7f0000000b80)={[&(0x7f0000000a40)='syz', &(0x7f0000000a80)='\b\x00', &(0x7f0000000ac0)='pimreg0\x00', &(0x7f0000000b00)='^-,,\'\x00', &(0x7f0000000b40)='syz']}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r2, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f0000000c80)=[{}], 0x8, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f00), r2) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FAMILY={0x5, 0xd, 0x22}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x884) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r6) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xf8, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xcb, 0x8, "330869494e36da34abfd4c69baabf7c659a22e06ef2b39161ba0c773fd3932256eacadc11e22275fb935362012fa7c20828b6653bdd80bc860f23b5cc02320fc6e1d5f0497a66a60ba9078cb259626478539e74fb4fbff3ec35768a4467df7fc809db8b71afb638e3fa32ea551da3ff5f28fdecc24e2b0686147ad1b02d70a8337a9a46b6c68f7a8b18c1fd7f0f1a219cc5ce5714a6c3b7c051d1a6582afff292cb99cd07ec2db5f8a3c2c6100e658e9bee36ea2258f3ebbb772089de87948264e0d48828c2deb"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x5) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x24, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x900}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0xc0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001740)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001700)={&(0x7f0000001400)={0x2fc, r9, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_VALUE={0xc8, 0x4, "e6b19862d271de370ad560389a2a2569e1a363948f6f376f6ffbd212d100d4fe7afc80f8828fa9106a9c2429f5096729c227705c0a112914a1a95953e17aeee94d20c8ad0dda8f8f7aa4eb35beda86605419f476310426080629d48a8aae2c9bddee34b3de7203ba2da0a112dbcc4af19907bd51b98eb1e168452ab367b869a6aa6c21ea24fb329aa11b34766d09a93eda175c4c184444821e4c59670420b6c2af5c2f2f426d1ef8b82418da361f3f05195abc8a27c8957699a7fbc3fe293e770cf9568c"}, @ETHTOOL_A_BITSET_VALUE={0x64, 0x4, "a3932eea739f274c3395bd3e7fcdf47c9d183c94a9e7be20351ca801fc1e83ec9afccd58c5d762260a196bb270f3723b2906379adfa12fa1ca63dff04192a68ec2515139436b75d34c08c67d76f8aeee4dbf0e9db2fdfcb77fca605c76a01810"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x92, 0x5, "c6f8466860066a02d3d3f06d44f2de90e093eed31bac37dfecb5a8bb56510b8554ba2bd8969e4ee72a82f89f7afcb7ec8251fa7a5fc59e3e772eabfb53e55e0931039516f6a36f1c446b506586f56f763689f0db01972cd62a6f6327d240142aff7ad8481382a65887e1cb36d0aba8ba064f0bc76934d8ee4e22650270abc266d8b80e3169b8370826e13d40336a"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/selinux/mls\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',({'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb1]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x800}, 0x48040) (async) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001780), &(0x7f00000017c0)=0x4) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000019c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001840)={0x140, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf906}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffe00000}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000090}, 0x8000) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a40), r6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000001b40)={0x3, 'rose0\x00', {0x2}, 0x2}) 1.42285588s ago: executing program 4 (id=7398): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b64f3db93b2ed50eabc614b66a40e165b49932d429e18a91cd89e23e356c09371ea0807cd1834e1919813bf69c7e544417ec1b0a9ae65d4e44ecb05a7c193604f270b2e3b12036c5a73ec4e4f73336b28dba9558f26dd094b95a0ab28e225393fc4e71ecb3178c115875ed559eeb051793d941e803cc6dc6ff5b6480b184b855a71e120d19face36a4a3aa5f77c753e6027405437d7b7e4d2f025ab9389b9afc1dcda4ba8c7e83b5bb5b43985fa316445835c91457c055401da26b0531b8fc455b98f3d134e8cea352108d791ddcb7143ee5c30fbf2608b92515709d20d937019cae776ad02c2cc3f289d1f535adb7041d09545f379f5e0dea1c492da44e18c0e6e07d31850208b6b708cc555e3c44763d0dc2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1822000000000000000000000000000018110000", @ANYBLOB="f5c2be8ab7965a3e3b63a0883f3039fdfb08bcc8d7c061d6901e5fef6ba3e02d22dfd4e855ff80be8c6e4ac6df8a359784ef44fedd40ea1b9aad6de6f810f858c5e391a8dd054afff85720553b90ef1a2a10c3ad676e4b7d6c44bb0a993c73d229c34837c5bede0f477de368155a3149f52b7309ff4fc1fd4be9bc22a5a7f26c77f35be111709b635d5059e856f6a856687fcdd02b1249cca704b86f64afce241165fb98f7f3fc35af389fbb07ed14a6d417bdaa4308cbd2c45db3025afd60ee07f49d41dd22dbe32ee4bcd64806dad49e9ae7a9d6e49c665a4be4f69cde5d44c296d360673b5fc25adae4ceef", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) getpriority(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0xfffe, @private=0xa090100}, 'hsr0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r1], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sync() syz_usb_connect(0x6, 0xb43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 998.530092ms ago: executing program 1 (id=7407): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 991.086842ms ago: executing program 3 (id=7408): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x33, 0x35}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) 981.892343ms ago: executing program 1 (id=7409): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x9, 0x62}, {0x3, 0x1}, 0x1, 0x2, 0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1d, 0x7fc1, 0xff, 0x5, 0x81, r0, 0x9, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2}, 0x50) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x5) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x6}, 0x8) recvmsg$can_raw(r0, &(0x7f00000013c0)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/29, 0x1d}, {&(0x7f00000012c0)=""/83, 0x53}, {&(0x7f0000001340)=""/39, 0x27}], 0x4}, 0x60000101) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001400)={{r0}, "45bb0a8c1e5dab734b2b970cf45092acb5280af02a78a61a2cdec2447522d269c6080a6b2687131aee9467b44b8671e0a75138ecfcef1d7d866659669a0eb61d9120bb5460c7a5ffe3fc182aaf6782e18f7b499c8626c8984f61a1cca0eca9f3012a8e62a316e803db76634a64a743dc0bad99e500c04457acb84d77699fd3963dac5f351a0ad8bf0ada67e8c806091de15f3cec7c3903b81925e36446d1aa1a1f81ab907135a7fa0cb55aeb6cce8a73b2380be65648bd5e7a0f522ed12a4ca4ea85ad79e2a0ff1d9638138c008d2c14858e6c275e0b88b8406f6d623ae109176a9fd0e4d3eac17c346f3963acf098b7646071d4a414bc18dad469063548e4a06004ad8ade80e4698723e91bdeef54850d843825c2230d893cb241b8208088633cf310245d11cca6440a8b5ac446fbbb081eb9eee20439daf3ec2c71a3945679a7f1ee947c2f249ee5bdf4a7396769a08ada68b0140fd5b6db5caa70cf0db6d325ce1a79e3485c77af14db5a28a84f5623a859665e2b4e9da1ae96a378bdf27a517024c96d5093a951d678b76c472aa90ea67f68a95fcd66192de2a4742d27264daddb5637fe0e972693f28a9634363d3780e1786853aaffeb23914f917838c2337bef60acbc53ea0888e3f8d5fcdd59b32e6dadd4aece95c515ef8606231d8607fe6ce2e6d3c828b1713620aee4821a0e50e698a6538446fbcdfcdd42066a70d7591c6499c2163f28943ccd513c5a2ffb8b505fdb730a09d3021c136438c715e15177a36dd93513ef85d1c1d6f3fedb63a21b66d9ae3cd1df4eb31bf670c10b8a7cbfd9f32a91f4b188d0bd66b86ffab018b110ee8cf2ed34deb15c40a3eeae5c9467870dc08220e272699fc162b96bfc2fbf44f18a6389567159517cfb12155f2e147fee72463d320862e229e99e9acb8a5c21b98bce1910ab3d13c62265bccac9fbe0304e5eb1633258920bf60fb7a1964a617d00975ef8c860937640273768c5e3848f515686754f6ef5f7d5554470cd60ef21f11400a356004c97a9921b06136388b7ac6ed8702cfdb78d1040ffe643ebe91be98ce24e95d57cf258fea29cb9e157cd4d4e90fc56b869accd791da8e33f72ac5721914f7bc20df89de144b5a9053300da90a141e68f1da1914d4ca44e78d5aff59275835de80ba2df0b687a3387ee519a2b714119b1600c8e27266bfc5163edb0436bc81b8f05054b58cffe5da39090d2f579101dfa904c9429fc3395b92aab1a49bfd3232b891f49c5f65f0d531d56be31a794e2cb1d9777b61b34181df684274c39295f7a06767f63458bba1fd950de29b3d60453767b2fc3ef97337a0ff005053a0e0ea2279fc1ca3486bb102eaada774672d322883cc6964be0c12c41b0ddeef8350cf3e7b3ea4fa6b49597ce3fb49a65d71c0d6c94c153a0c1867b0de78413870653d172e5b5368dacc19a22e72980b27641206cb1289636237d3249ab784c3ab38da64ae2e490ad999843ec2e00422a1932749809d6f794732356dae2ce7056b6316d9640be17544a10305fa9771e43e7b97e97ef25f919b961cb2d42d5e1263e3ef6f46677ffff7f8860eb2603f06b0004e9e0425f7b545a4fbd7e039bdbc97c2d315ec813aa0a4dab392604e02e3945a4e4017d1d2529997a732dcb939011f548fdc28d58824197f4f11121151bfec2f91ce1bee679145e3dca0d6542cb5d928761941a6ade1f84febb87d07226e7ad77ad6489592dc664450002b90d63cdb7cb249e834edcf67af4411ab4f61a210098ef1cd151841b3110b650590dceab11142fd38ff97d1e6abc66ac5b463577b95ee5dc68f56cd824f72217227e87797ad6d497acd960fefc0602c19a02fec18a22829d1f3728007af98765dd4200e580197f0b419cf1fda8d7ab0d8650a6e182b4e9faa781bdfd9835f94b48355a6cd9bd3670f0eec796d29ab9997a9065de7df7a7a3c1e094a8e2befa0d42489440e7c312e17e23a430fd6082bd58933c1cb00c4ad2ef155f4e59c681e81c9656b1972db087e18886a05c2069c4c8f604d22ba7a80951b57eee3de857dec26481e31a51ff212c17b5787201cd5be05abcdc7b8c17ae28436611b43d2966a21932f90ad900ccad4f4f8cd3b76256c0eab4f8b083e9bc153a69100e98eac542002f44807a9e659c34970fd551e9072f82c1a4b0658aaa0352e91451e4cc56b2608044855c86859e332af2943425cdf19ac5fa4c9d5e105d432441bf2848b29f89fa34ce7d0935876fdedc9611c8c71a78a8d7028d8613cd943cb28323e492929ad7ad345427ceafdd0e6abe3358e175c8e8d0adf929e7998625ea1305e46512c7cb196b24428987518d2e4026ab290d8572ad725c5b1bb775b81753543a648bc9eaf34d1da28b91076aaa5e89252a603ada3e6a15c59facdba14001284eab99aa1d4210229b0f8150b4fd769ed37ee1b2d081e803314281a76c10c72f7fd0f6bb243909adebe0c1d34db4bced642d47d053779deedb7dead278e90746e52ee951fcaa40ad457714987c0105ffa90cdb5dfff23e9c5b5d4c1648f64ca05f4f49fbe0532c11f9a414e1726d130d6c9cc9d8472dbb32c010deccf98e389436dfda55687dc6713be25f39399f350043fca9baaafbccbd99da870b8a0fed4d6221d5e823baeb3161150d4bb2a76eead040d8c812910b193190c41cb63361e14a7b60fc4163a68191d6c0fa8521f116c67e671188553beec162c1af520827c78c886b0d6af2c7f1679db7a97260effe61c1b532aa6ca73717490c4e0402df58d56e5fbaa6b3fba186b58e747174dabac1c83cff889b3ab7c55def15f897bc70ab16c776f3b844fae4af6525d86a704aecd86433d8d445547fdaf52121a77b3dd580c49e81eaa54d76bc067173d509700bad25ed232751e8b7962c9286b9ea5cde6c705c4119433dbe8875018ebaf819fb3faa06d75cdf44bf22e87bf226ab3d740eb6fcd15206bcff6e5f2e59cd469aeaf7ca8f4d1800af2d511dc94a473720c685fdd8fe2a766a23360f1e1b5f61d75492a4968dd32076dc6467f75f048c3b4182a0590c97ed919ecfc3ee0e4a6787af3c1525f68e000592ee1ae53b454a39c96508624557d2452349d19f8ce81aef8fa60014e56c804d053531f45bf684d391f45c8cdfdec1ce05c7271ab8c33538394a37478a54ad25881f3cb35e8579be20d4900718f3bf7c414cae7d4338bd6799b89b39246514a0169c251e3d2bbeabae78a24e2626f2e7df11e25fcb8030a16835bb9edcec006bed2297a7b174fd571ba55742303349edf838e7e190fc58bddbc01f40de2a1c74803f30e11256ea78eaf2fbce3fe109ca2481f63530af14106bbbde0a746f41e13aea41d81760142bc8d448c6398ec6462642e999ca4f47e12ca1e3fdca3cc7d1c86f4d57156700c0269e8d85e9bae51a1bf145da657311f8d70a5ae886c7caaea17d9cbd7c47de9d6689927ea2bc003be8f128538570468e36721fb25d11146c1fab555baf7a357d11648f24cfd19ee1621280e49ccae054136abc6e1eeaf8f25fc9e3dd4d1aa580b39a4679aa31d63efb4919c1d54f9b403d87e5195c53e181de02fc01856b004af005c6062ceb577c3dce45987e2d2a206c63aa4cbbce5d0a31eb5fe662abd9060fc7f06252d78d86217b97081b8c2fbf2057a4dfdd6aeb0e4ae74edf784c6d04d4a23612f823240124e565084b82a0d6504e25d4a2843589a51aa218dcabedea912f595ff419bdb79d405bb4ae21d120d8edc16cee8a777edd53d56f53b4ac254e9dfe25160e7a855a3d70db120d81fc00d0a465e1c9fea53d036c380010b086068e062c3a8d84ca1d01abf68ac3e1c9953119e096a36c2e8c05ba739bbd910c14344b1eddd37c37a22fca70bb1051890fb5fb1df8ef477a45ca0ae0e8280521d6b4c3c9050c7c97c222b8f227b5a254bdc8bf3d08aa36682d152e55071f8964a545ea2a702e9905cab0a288e9a05b8ff1f11aab73ac385db16fc3a18e0300bc14c8f08a2b7c9d63d1590618a997e31350460f7ab6fffc15a55d2ff58d954b4f93b15fbcd29de62d5af964921836b306bd70dc5a780cc33a9e4903a234092e4f4ef39d4cfa956c149a877a6e980d4c55204ccd354bf485aada35e70d29ab79edc53030f2a037786fb6c434656cac7288e56ddddd4f3382fac58a1f8232fc856ceefb9ee446eb94232633399de715211b41e4987a9c7c6fbeb45edac3569feeaa9edef7526e5de99271769f85c3e39ebdaef731165aa5a544a6ef86dfd8bcd178289c3be5d7dd09636c8ba46f54fa21dd2c319d4991d0ba1d145edf3539065309dd4f4761f908e61e5a5669b3c64daec0d7c5f8473c849ab8b0200c51031e1d6df48015e97d118e9b7032535f6b6e571426d1360f74246efc2db53654334e1896ad97bfb9ab8c3ef85ebf1f044529d588d778cabb10b41ec52f57faeafe1880a40c83760845d0890108e4e182cf5f2a9ab2f93f591a589f9efffa6edc1972135c1d10ae1f0dd87aa626713e0399586b9945690f0e5c8b46c25605a4adb1d9b0472b1c7fd6017335a7e02a936a05d2d3d6ba14cf41687b753a3ec94b1648d5ffb24a9b448d9459330dfe101388e428bfc7985f4ae5dde6dbc7e546e6f23a6f09ed5bad1c4824d52b008217cb99ec5ab8d148cc021cafd6824667d9c3a57f0480276c325dd8d7159ad81ec0546af81bd0e83af62fdd056537732415c904715759c2f422e3d61bb8bb3de87a90c86254a82c23f09e0dd8c58cd4657a123c8871902ec9e99a3c1bf0bc311ee6a85e09d5a3d55f6cd4c764e2f46c0d8d142624cf8e7bcec1a33ae9a9b9e875d2e0e48b5aa87195262fe9b57e2d3a70cc857085d01b3e63a3836bd6b7bc70f706131874fc8564a22c8b641f0aee20035667cc99e4a8fe4ba426e2ab43b9a1bbbb98bce365e06db70776f7e3c5aed3f1e4cdc774332122c95860cad6d59010c2b837e424952a20ff18d18f821a040e42e61d3c345e1585f7c852ea1d5555928c1aab529eadf8ee5a388b6c7ca7cff08aa199fe9671c6a7cce7b1480843f9a97aa176abbaa120c20c04adf95446d44f37f884ab0ae7c66ec631499e3beff8a9e9c39a8ce80f1508b926383e7bc0fd612d6e5a698433cdd1c95ed575ebe228f95f0ae96637a94ebc6066332c0cd60ed18ffe1be2655cde8024a6ceced04a014fc27641da73d28f6540c609dfbe84626a098123e303a8c79df2aa10acfb43199d6cc42bf1dfdde541109ab2f89045b3e9262e5a46678d9332fb62e537f15e024de0235badf56e6d7f77155f3696c909e8f8b6a696d46409ecf12d10bcc86cc6b7b8d3669d269eced41b08b27b237673900b3095505638f24730ae37de68fdc02a7f80eab6949ff85aef07d7ae766418ac9730c75c2b4ff4230bda0f8ce0b14eaf1b1e0c9fd0694781bb9c2919c47e7e3772c5b7bf80ba536b5e509142538853d35f4a8069d3c9ae5ece1117278416b6deefcfb6d5fcf1fc70b6d66e5d13a6c17f79f90846c33c04159ecb7b854b6e2990d223af696bb8d0baefbe3e0a41a7ae2c92e46914fd354518775484d33408be25648c7bb232cd958488249c24987ac24ae59a498538abd5ea8d90b8e97288177f187f01b3626f0bae2babd6cee84c76d2d0ce8c631b0a62f29fd02a4a1ae6ca0fdbf549807d84e93b401b4f49e050b27ebad89a31f17dd69e132117c53af5a737833d43ec6e42dd31789e748832dfe66b961e490a4cdc9c9573bc1356e9561dc481e74c839b3d9e43fe15e982f22f"}) syz_genetlink_get_family_id$tipc(&(0x7f0000002400), r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000002440)={{0xb, 0x7}, 'port0\x00', 0x0, 0x1a0070, 0x3, 0x1ff, 0x1ff, 0xffffffff, 0xfffffffc, 0x0, 0x6, 0x7}) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000002500)={{r0}, "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"}) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000003500)={'#! ', './file0', [{0x20, ',^:#'}], 0xa, "e5a9569bac479f"}, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000003640)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003600)={&(0x7f0000003580)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1b}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004884) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000003680)) syz_genetlink_get_family_id$ethtool(&(0x7f0000003740), 0xffffffffffffffff) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000039c0)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003980)={&(0x7f00000037c0)={0x1ac, 0xa, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0xac, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x41bba18e270e663c}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_SET_EXPRESSIONS={0xa8, 0x12, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000080}, 0x810) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003a00)={0x0, 0xe637, 0x8}, &(0x7f0000003a40)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000003a80)={r4, @in6={{0xa, 0x4e21, 0x2, @empty, 0x101}}}, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000003e40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e00)={&(0x7f0000003bc0)={0x234, r5, 0x0, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6e}}}}, [@NL80211_ATTR_FRAME={0x105, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_b, @from_mac, {0x6, 0xf80}, @device_b}, @random="eddbf1eb929195138d19ce40ea5fdb93c252d04a18d88a578cc84a42a95710c44544e825ff396105d72c69523f608e6e6d5d25cc25a63ec600eab99b5d9107d2c01950c2f12d51e991b5035726ab432a31005b60f52212e7d9d275cb75b6f3500b8baaee4f45696602034964be86b2d189b548c36ed7f08946ec88e880f6b30f25a5592b1e9ef178cdacf6d0b81923466f14f20f188620fa289861728e07977d778eb823b82072ddede3bed150f870288df0d55da90d71a0b782849fa78b8af097a1467f0462cd7a2540fd3cbb53903771b60110690b6a58441972c085445d45d99df4"}}, @NL80211_ATTR_FRAME={0x10c, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac, {0x5, 0xf1a}}, 0x7, @default, 0x2, @void, @void, @val={0x3, 0x1, 0x70}, @void, @void, @val={0x2d, 0x1a, {0x2880, 0x3, 0x3, 0x0, {0xfff, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x0, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x6}}, [{0xdd, 0x9f, "0d8b247e7bbdb55ec206eca1b00fad21e9023a53c738d8c95ab02e9f3d976ba6ce725d7269f6e3f52b8c3e0f2910afaa21da1a14aea0a1fe826d01c1cc5dfad69d43fff09fe01386724c90aba54cc4c70ba27ce4e0427b05b4c045761c0d9a8bffb2f8d630569d6125cd0dfb5e8829cddecd39484e1b48e625015ab2b011403c31b106db630002ef38a4fcf7326e9918c6bf249bd45fe2a51d44f938927a90"}, {0xdd, 0x11, "25b8c82a1d8ab42af35bfab0b37bf6a1c2"}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4c011}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003ec0)={&(0x7f0000003e80)='siox_set_data\x00', r0, 0x0, 0x1}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000003f00)={'bond_slave_1\x00'}) r7 = request_key(&(0x7f0000003f40)='id_legacy\x00', &(0x7f0000003f80)={'syz', 0x1}, &(0x7f0000003fc0)='tunnel\x00', 0xfffffffffffffffb) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000004000)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000004100)=0xe8) lstat(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r7, r8, r9) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000042c0)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x40, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x80) 896.907291ms ago: executing program 1 (id=7413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0082}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@getqdisc={0x38, 0x26, 0x300, 0xc70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff2, 0x1ffe3}, {0xa, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x12, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000900000000000000d6d5000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x22, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x400004, 0xa, 0xc, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r0], &(0x7f00000003c0)=[{0x1, 0x7, 0xd, 0x7}, {0x2, 0x5, 0xe, 0x9}], 0x10, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00'}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/fib_triestat\x00') r6 = socket(0x18, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000009000600072000000000000700000000000000000000000d00000000060000000000000c02000000000000002e2e00"], 0x0, 0x45}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendfile(r6, r5, 0x0, 0x8) bind$bt_hci(r1, &(0x7f0000000bc0)={0x1f, 0x204, 0x1}, 0x6) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xen_mc_entry_alloc\x00', r8, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0xfff6, {0x0, 0x1}, {0x3a, 0x101}, @cond=[{0x5, 0x1, 0x4007, 0x420, 0x5, 0x177d}, {0x8, 0x8001, 0xfa70, 0xd, 0xfffe, 0x6}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 887.904712ms ago: executing program 3 (id=7415): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r0, @ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x110000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000028c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x57d7dd75, 0x2) unshare(0x26020400) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 816.23279ms ago: executing program 2 (id=7417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') 805.858001ms ago: executing program 1 (id=7418): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000010) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x4000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (fail_nth: 6) 480.966842ms ago: executing program 2 (id=7419): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) 464.205864ms ago: executing program 3 (id=7420): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) write$cgroup_int(r3, 0x0, 0x2) 436.224707ms ago: executing program 2 (id=7421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98980000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x400000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd7, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 435.158457ms ago: executing program 3 (id=7423): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1fd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffa8}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @empty}], 0x4c) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50}, 0x94) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000d94ea9977f532a6bedf697e4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000180)=r4, 0x12) splice(r7, 0x0, r9, 0x0, 0x7, 0x9) write$P9_RWRITE(r9, &(0x7f0000000040)={0xb}, 0x11000) read(r8, &(0x7f0000032440)=""/102364, 0x18fdc) 402.1073ms ago: executing program 4 (id=7424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0xa38, 0x0, 0xa, 0x148, 0x0, 0x60, 0x9a0, 0x2a8, 0x2a8, 0x9a0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'ip6tnl0\x00'}, 0x0, 0x8a8, 0x910, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x2}, {0x80000001}, {0xf, 0x2}, {0x200, 0x1}, {0x0, 0x5be7f83cee24a62a}, {0x4, 0x1}, {0x593}, {0xf778, 0x3}, {0x3, 0x1}, {0xf, 0x1}, {0x12, 0x1}], [{0x8}, {0x10}, {0x2, 0x1}, {0x18cfe09f, 0xffffffa0}, {0x5, 0x3ff}, {0x8, 0xf}, {0xcd, 0x55}, {0x4, 0xf}, {0x5, 0x38}, {0x40, 0x1a02}, {0x80, 0x7ff}], 0x8, 0x2}, {[{0xb}, {0x1, 0x3}, {0x7b}, {0xffffffff}, {0x7, 0x2}, {0xa0, 0x2}, {0x1, 0x3}, {0x10000, 0x2}, {0x9, 0x2}, {0x6d2, 0x2}, {0x6, 0x3}], [{0x0, 0x2}, {0x4, 0x7ff}, {0x4, 0x7}, {0x1, 0xe}, {0x22c454a6, 0xfffffff3}, {0xdce, 0x4780}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x40}, {0xfff, 0xa}, {0x3, 0x6}], 0x2, 0x8}, {[{0x2, 0x1}, {0x1}, {0xfff, 0x3}, {0x8, 0x1}, {0x0, 0x3}, {0x69f}, {0xffff0000, 0x2}, {0x5, 0x1}, {0x4, 0x3}, {0x8000, 0x3}, {0x7, 0x3}], [{0x0, 0x2000}, {0xc, 0x3}, {0x80000000, 0x7f17}, {0xf, 0x8000}, {0xd, 0x1}, {0xc6, 0xc24}, {0x1, 0xfffffffa}, {0x9, 0xa77}, {0xfffffffc, 0x2}, {0xffffb8d7, 0x7}, {0x1fb, 0x7ff}], 0xa, 0x2}, {[{0x5, 0x1}, {0xe116, 0x2}, {0x3, 0x2}, {0x9, 0x3}, {0x7, 0x2}, {0x3, 0x2}, {0xfff, 0x1}, {0x7ff, 0x3}, {0x9c, 0x3}, {0xe9d, 0x3}, {0x868, 0x2}], [{0xfffffffc, 0x8}, {0x800, 0x5}, {0xc, 0x7}, {0x5, 0x5a4}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0xfff}, {0xffffff81, 0x7ff}, {0x7, 0x3}, {0xc78, 0x9}, {0x93, 0x9}], 0x7, 0x9}, {[{0xe, 0x2}, {0x9}, {0x3, 0x1}, {0x4, 0x2}, {}, {0x4f4}, {0x2, 0x2}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x80000000, 0x2}], [{0xe70, 0xa3}, {0x100, 0x8}, {0xfffffffe, 0x1}, {0x7ba, 0x42c11bd9}, {0x1, 0x5}, {0x5, 0x5}, {0xffff2d51, 0x1}, {0x5, 0x1}, {0x8, 0x4}, {0x6, 0x3}, {0x3, 0x3}], 0x0, 0x9}, {[{0x1, 0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x9, 0x1}, {0x80000001, 0x1}, {0xffff9d57}, {0xff, 0x2}, {0x5}, {0x5075, 0x3}, {0x6, 0x1}, {0x10000, 0x1}], [{0x0, 0x9}, {0x8c, 0x7fff}, {0x1}, {0x6, 0x8001}, {0x3, 0x80000001}, {0x8}, {0x1, 0xc}, {0x2, 0x8}, {0x73a, 0x1}, {0xfffffffb, 0x5}, {0x6, 0x6}], 0x6, 0x2}, {[{0xfffffffc, 0x3}, {0x5, 0x3}, {0x2, 0x3}, {0xa646, 0x2}, {0x40, 0x3}, {0xfffffffe, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x1000, 0x1}, {0x1, 0x1}, {0x400, 0x3}], [{0x7f, 0x10000}, {0x9, 0xff}, {0x718f, 0x5}, {0x3, 0x7}, {0x7, 0xe}, {0x3, 0x3}, {0x4, 0x10001}, {0x6, 0x3}, {0x1, 0x101}, {0x800, 0x4}, {0x9, 0xa49}], 0x7, 0x7}, {[{0x7f}, {0xf, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x1}, {0x7fffffff, 0x1}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x8}, {0x3, 0x3}], [{0xe, 0x3}, {0x7fffffff, 0x5}, {0x10001, 0xc696}, {0x400, 0x7ff}, {0x9, 0x7}, {0x0, 0x10000}, {0x9, 0x7f}, {0x1, 0x4}, {0x0, 0x80000000}, {0x85, 0x8}, {0x6, 0x2}], 0x7, 0xb}, {[{0x6, 0x3}, {0x9}, {0x800}, {0x7fffffff, 0x3}, {0xd}, {0x1, 0x3}, {}, {0x93, 0x3}, {0x4a6}, {0xc, 0x3}, {0xfffffff8, 0x3}], [{0x3, 0x7}, {0xffffffff, 0x556385be}, {0x3, 0x40000000}, {0x5, 0xfffff748}, {0xca, 0xff}, {0x3}, {0x9, 0x2}, {0xfffffff7, 0xb6d4}, {0x40, 0x5}, {0xd447, 0x101}, {0x9}], 0x7, 0x7}, {[{0x20000000, 0x2}, {0xf, 0x1}, {0x8, 0x1}, {0xffff0000}, {0x7fffffff, 0x2}, {0x5, 0x1}, {0x7}, {0x9, 0x3}, {0x4, 0x2}, {0x8, 0x1}, {0x5, 0x3}], [{0xdc, 0xfffffffe}, {0x3ff, 0x401}, {0x96, 0x4}, {0x401, 0x6}, {0x4, 0x3dc33565}, {0x3ff, 0x7fff}, {0xffffffff, 0xf}, {0x3d, 0x9}, {0x9}, {0xfffffffb, 0x2}, {0x0, 0x200}], 0x2, 0x7}, {[{0xfffffffd}, {0x400000, 0x2}, {0x10, 0x3}, {0x2}, {0x3}, {0x0, 0x3}, {0x3f79, 0x2}, {0x80000000, 0x1}, {0x3, 0x2}, {0x40, 0x1}, {0x6, 0x3}], [{0x101, 0x6c}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x2afd, 0xd}, {0x398, 0x1c2c}, {0x5, 0x1}, {0x1}, {0xe, 0x2}, {0x89b, 0xe}], 0x5, 0x7}], 0x5, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0xfc, 0xd3, 0xe, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa98) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8, 0x80, 0x2, 0x8, {{0x1c, 0x4, 0x0, 0x23, 0x70, 0x68, 0x0, 0x8d, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @timestamp_addr={0x44, 0x14, 0xd6, 0x1, 0xd, [{@rand_addr=0x64010101, 0xfffff801}, {@rand_addr=0x64010100, 0x1}]}, @rr={0x7, 0x7, 0xbf, [@empty]}, @timestamp={0x44, 0x8, 0x19, 0x0, 0x1, [0x40]}, @timestamp_prespec={0x44, 0x14, 0xbb, 0x3, 0x5, [{@rand_addr=0x64010100, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}]}, @end, @rr={0x7, 0x1f, 0x87, [@private=0xa010102, @remote, @local, @loopback, @loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x10}]}, @end, @noop, @end]}}}}}) r4 = getuid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000340)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_lt={'euid<', r4}}, {@hash}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL\x00'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00', @in6=@local, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x2c, r3, r4}, {0x44, 0x1, 0x1, 0x1, 0x5, 0x2, 0xe0000000, 0x80000000}, {0x10000, 0x6, 0x8, 0xfffffffffffffff9}, 0x7, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d2, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x3, 0x2, 0xffff, 0x80}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="2000000000000e00000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000a461aa6dbc0ff470c0f95de2d8c154000000feffffff0000000000001300000000000000000000000000000000000000000900000000000000000000000000000000ffff0f7dddb2c1f0ba4488793c9dea681ac2ffff000000000000"]}, 0x127) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f0000001ec0)="fc06b933b26388715708274ccf4a881247a70e3da9cde6c89b33a16e2afb6e05d5ef41f221c05ec12c7641d86064303e1730bf50b399965b49d62a6cbeb6fb9df1f4f62f773437996da1f3d6386dbbf1169df7aac05e419d3e85b80c1e05beff6a63dfe878edcfc9a9e7b199afb18c9eedbe7bb77a1b6c1a7254944856b34d1beaf88672", &(0x7f0000001f80)=""/117, &(0x7f0000002000)="18bb333a021157281f628fc7cfc94301440cec7b6612faf5739675f82ca1368d5b55c0f6151d82c810ce3c4b7df8bfcdcafa37bc641d7636c2bf6e1448ed5fdc6fd4ec8fd7ed01a129bf106cd61eb0404636dd82f196dce510310a22fbde990856f5ef0894ee11dda4472334826ffa2ce92b56b1f4", &(0x7f0000002080)="ff483ee40849319e81c3121a5f323e43a9fec7b812ad03dc854351306b47fef162ca2aafbf8330c790c31f5cce03f5f5ed51323422b8a3fda589b635479b7e157e96055201312e80d02233cd43dfd6d9c969ae77ef16c7a97a95be6618027fc3151eb9ea4e99b0ac35925cad497d29c37f23737a178fa38cd50236b57d69420a925cb233097053d64d04f1aa48222a9e86a50bf4ec7c54ff", 0x7ff, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f00000014c0)={0x9d8, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x15}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x183, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xac, 0xb}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @dsss={0x3, 0x1, 0x8c}, @cf={0x4, 0x6, {0xad, 0x9, 0x2, 0x7ff}}, @random={0x6, 0xae, "2153732da9bb18ac485551cc71b7730806002e903cb8c7589135b827467d492e308f892452d33eef0e5ac80b0c3aef20a1758d4d5f983bbea2646afc0435b479f642fe080bafeb253c0d7fa55e86d98574f17177b7e4e2a8f63d89bc2afd44de94a3f8a2560c851945a9ffc4733841fb17719213909c0d31ad1840b1a190d4da482054dd0246d300aff5fa39356f8936a2348db7915bd3e024ed1bbc4a6a66195bdf033e270536fb76e9b35468fa"}, @measure_req={0x26, 0x25, {0x8, 0xd, 0x3, "94c70170d449b0de94488c4c21a044523f7ebb8e147934b831728118ba52c52a3fcc"}}, @fast_bss_trans={0x37, 0x93, {0x0, 0x4, "5e08b02a8a2f8b370439ee5e0224ce0d", "90096afabf3e3fe6a8ff0bf5e819c085378b7d4e3a68d69cacbe4269a26c4575", "8ffc6326e8becc542501deff5b89ebbc99ba76bed8790f59f2e7759ebc98f543", [{0x4, 0x2, "96d0"}, {0x3, 0x11, "92151bf8b2b9e82409d7603a50ad4f9ea6"}, {0x2}, {0x1, 0x26, "46350658b14174c037e138e2d492d56535202f91059c142998b37fe74ea84b9f5b5a618a0525"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24, 0x80, [@mic={0x8c, 0x18, {0xcec, "eda6ad5cb648", @long="a8ce38bf8cdb0e104d0856bb8db81d14"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @NL80211_ATTR_IE={0x61, 0x2a, [@fast_bss_trans={0x37, 0x5b, {0x6, 0x1, "f2ac8612c15373b9761ec16b97e1bb96", "4c6efcab5eaa055ddacc36381295f6ecc19b81bed2fbaee6c5f830e511862e31", "0896b22a9acf07db716f884f72b23bb0b8c0b4e10a4871f39524a48fe9b1d19e", [{0x4, 0x7, "1107f352e942e6"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x26, 0x80, [@mic={0x8c, 0x18, {0x1cc, "7a59c2ffa7b8", @long="30bad33e0339db5f1b0beae3063c16cd"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0x140, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x44, 0x2, "ee847dfba1439fd5ef8b759a9e8a25f79e338af49598e41db5036942c13fb5d047922e6fd00e8970acc76fe20418407047e4f3955fa3e87fda4f60b55630a2e5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe, 0x3, "b80fb6fe1ffc41db6aad"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "3f5ecf9d97c2b684258f175162680233667b426e02c4acce7f4f0eb8617fc45eb7963013da00796010281b7e2aa266294181f714b51407a0ec172016a1e844cce75722dcc6e043f7b81bf8a773186431bfd65e42db090474833622a8de774ca3dbcf1ffe9c84428c5218823ec192d098b92178819201e7addd3963188f54ccb978dcdbb71b766df979f7b4d82b65ddca7b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3b, 0x3, "402072650b36ac565f698b8fc377118422bbad2439ddaec388b62cb4a61da9581caffd6df91f6d635208e956bf2096925f33c3d1eb3286"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x277, 0xf, [@tim={0x5, 0x5d, {0x2, 0xf9, 0x9, "28b8b0c0c2b9550d5befbde6d200ea4b97953005b6c9f30531e6c194aa8f96a0b738ecba86e57d25680ecd5d4f11ee431043b383992a907cc9e23c248f47f7456405948b60739b82dbbbf030b77ebdfce20d808d7fb301507a29"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x72, 0xb8, 0x2b}}, @random={0x3, 0xb7, "59e0f00d428f9c6aa1bd6f80f0731811b324d318ffcaa398c08929b41147ad403e89ffdc1b2b2a178c6fdc2a4e03c269a86e4f096cb42dad716ff5bc2e7c2050d161f16f65fa319c96b7c9fbc7084db073a0d3fc9f8af7ed5afecd246b9608c06da0d7073fd2351910935f9acb3b92dfddd6168c055393eb1ec6378c8146e56b6a5880b63bc71178cf01fbf52909db79d28b492164c742d5b761ece001f188a2048803548e59d4e5d6fd5c217501f44b0457570683bc50"}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0xe5ab, 0x1fb9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x6, 0x2, 0xa}}, @measure_req={0x26, 0xe3, {0x9, 0xfb, 0x85, "1664d8a54fc4d9c0af45a136cf90188e963b568afc5a81c1b74ed591c9a02968c3e227cdcbc3734e07de6cb3d4e269fc69ddc0d281c843136f887b746940659fc82f49ad944a341930391af9564de08b8c7205716cb5c10378805be57a01a4f9214fc16c907f1baeed3487005913c3f06b0a42b3e108e126f92b96fe78acf3abf1a117afe020c656d4efe0861db0d62e1457814ed1d7917be9f261b9088fff5e81c172eb565c77af94056c90bb5438d3e07e8b2094cd23a70f9c8b538eaa852fae509d7771e690f686cce02094890e9488b2df0f6fcef266a3b98e2f8b1da248"}}, @random_vendor={0xdd, 0x4a, "814c9fbf878dca348a6949f745c72bca66fb060aa87d2f5e6f13494f21860285768291b563a4d79b63ea707e6f5e5b1e095459652023e024128b81494615f9526c0adb0e406b4f260bf2"}, @ibss={0x6, 0x2, 0x1}, @ibss={0x6, 0x2, 0xe}]}, @NL80211_ATTR_BEACON_TAIL={0x298, 0xf, [@chsw_timing={0x68, 0x4, {0x9, 0x4}}, @random={0x80, 0x6b, "e79fbbeda89aeaca66f23fb0451e7036595ac402a910f7c2afe538aa4e9e88bcaa333a5c11b24f5dd62d98d95a4b2096358e976920522cf4cd447d53938614da5163ed8bb9dc4d26fd87a2b52b7dee5cce7ed5e8c086259f98bfcb2198792a299290c02765065bf7e717b0"}, @prep={0x83, 0x1f, {{}, 0xfc, 0x4, @device_b, 0x5, @void, 0x7f, 0xf6, @device_b, 0x81}}, @preq={0x82, 0x88, {{0x1, 0x1}, 0x10, 0x4, 0x10001, @device_b, 0xfe3, @void, 0x1, 0x93ea, 0xa, [{{0x1}, @device_b, 0x4a}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{}, @device_a, 0xfffffffb}, {{0x1, 0x0, 0x1}, @broadcast, 0x8000}, {{0x1, 0x0, 0x1}, @device_a, 0x1ff}, {{0x1}}, {{0x1, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_a, 0x3}]}}, @preq={0x82, 0x6d, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0xd3, 0x3, 0xa0, @device_a, 0x2, @value, 0x0, 0x7, 0x7, [{{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x8}, {{0x1}, @device_a, 0x40}, {{0x1, 0x0, 0x1}}, {{0x1}, @broadcast, 0xe4de}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{0x1}, @device_a, 0x7fff}]}}, @random_vendor={0xdd, 0xf7, "295ab5d3588c1229ef58c3742f04bbc6813503ac4c9f1326e8a74d5301397cf7c09f658a75041cda6136371e88d009706926739cd52f0cf39133e4e8eb1802d9425dc631fa8c3f931ef14bb8e9af6f45a36fd99020f13a3fc697cd8c0a2449a841c6fd37afd2635e2b17e6a37911dcd6fa781cf14d7f2d7c3f8b0d5596a6c45aaf0041910dfed52536cb8bc7dd7c58b1825c0c83a86e2e0a66502aa68487e37b06e44e96f0a7489f38746f23804bddf009719d29f910f5a99fe49b60809031a5d89fabdb8f007a221f7691311799057cd3c003b568f5731493394b531b34dfb89ca25bd3f107c54652495c1fe77bea159d4cdc9a8d6170"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xb9}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x113, 0x80, [@preq={0x82, 0x46, {{0x0, 0x1}, 0x2, 0x6d, 0x10000, @device_a, 0xe13f, @void, 0xae9e, 0x7f8, 0x4, [{{0x0, 0x0, 0x1}, @broadcast, 0x401}, {{0x1, 0x0, 0x1}, @device_b, 0x8}, {{}, @device_a, 0xfffffffc}, {{0x0, 0x0, 0x1}, @device_b, 0x3}]}}, @mic={0x8c, 0x18, {0xd6a, "a299018bed83", @long="aee8500034d7c832ba47a2459306af24"}}, @ibss={0x6, 0x2, 0x200}, @chsw_timing={0x68, 0x4, {0x3ff, 0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @tim={0x5, 0x96, {0xe, 0xab, 0x4, "9ad336faf8c70f8ce339e7d4727e00badf2e3cd9a1e82eab468dac78270e29ef57126eafd94f8e43be2a581c438b0129c0d9e2ed509d05ccdca31cd4e0fab8ee033864f96fa85494d50eb38d1f994c91066674c77574d53481a05d6144342837493087531b39e4e5c4505bed2960cf545a798e6ef9f14ee6c4aeea340c968fc9c17bbed1a075701ccf938aff19ab7f7c817c5c"}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x4, 0x0, {0x1, 0x1831, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x2c2adfa2, 0x5}}]}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x8850}, 0x4000000) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) lsm_get_self_attr(0x68, &(0x7f00000008c0)={0x0, 0x0, 0xe8, 0xc8, ""/200}, &(0x7f0000000200)=0xe8, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 283.877381ms ago: executing program 4 (id=7426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) unshare(0x64000600) gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000002c0)={0x32, 0xe1, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0xfffffd90, 0x0}) 283.661102ms ago: executing program 1 (id=7427): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 283.243602ms ago: executing program 0 (id=7428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)=""/26, 0x1a}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ff0100005c00000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fefb"], 0x50) 282.718642ms ago: executing program 1 (id=7429): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x993, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x39}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @generic={0x4, 0x3, 0x9, 0x7, 0x9309}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001300)=""/4096, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x5e, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x5, 0x4, 0x4}, {0x1, 0x3, 0x8, 0x6}, {0x0, 0x4, 0xb}, {0x3, 0x5, 0xe, 0x2}, {0x3, 0x2, 0x10, 0x4}, {0x4, 0x1, 0x7, 0x6}, {0x2, 0x3, 0xf}, {0x0, 0x4, 0x3, 0x4}], 0x10, 0xa}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3c, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2ec000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0xb, 0x7, 0x2, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r13}, 0x10) r14 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r14, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 238.522536ms ago: executing program 2 (id=7430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x7000000, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xc, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xa9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 170.887833ms ago: executing program 2 (id=7431): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r0, @ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x110000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f00000028c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x57d7dd75, 0x2) unshare(0x26020400) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) 169.763963ms ago: executing program 0 (id=7432): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) 83.872091ms ago: executing program 0 (id=7433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x48, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffe0}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 54.029644ms ago: executing program 0 (id=7434): ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f00000004c0)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xbf}, @exit], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4}, 0x94) 36.607436ms ago: executing program 0 (id=7435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={0x0, 0xfffffffffffffec4, &(0x7f0000000400)=[{&(0x7f0000000000)="d8000000580081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208000d0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aebff0000005025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000006c0)="0cb87a130e586f7ec4bc1618afc081c2f8a4404d743d557ede488455e3f2725479817f29a3896f86161b70e304977bedc36173a15c9cf6171c7bcd56a3ee6b280755011d53cad086b3afd3a3c44c7b0065a44353ecc23a130f3fdbf4218c3530a2f9af2692ca61bce47fc41ebf83566b4dd9cde0ee06848a38377653e835ec514b9eef32c532fca1cce108df282fd48238a58e7105999efb12082f644f3b8303bcaf92a8b7dc676e75f20aa4e710de2d1dae7ac586da0d57a7a0fd97b2f9303f6ab36bef0c1c76d98dc4ac25dc9f7990f156122eb5ccc818719d743698", 0xdd}], 0x2}, 0x0) 1.04334ms ago: executing program 0 (id=7436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x18) setitimer(0x2, 0x0, 0x0) 0s ago: executing program 2 (id=7437): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x3c}}, 0x8000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800000000010800010002000000050009000100000005000c00010000000500080000000000050003003f00000005000d"], 0x90}}, 0x0) kernel console output (not intermixed with test programs): 218][T19278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6373'. [ 272.916161][T19278] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6373'. [ 272.952472][T19285] lo speed is unknown, defaulting to 1000 [ 272.959027][T19285] lo speed is unknown, defaulting to 1000 [ 273.019848][T19288] lo speed is unknown, defaulting to 1000 [ 273.033827][T19288] lo speed is unknown, defaulting to 1000 [ 273.041119][T19292] lo speed is unknown, defaulting to 1000 [ 273.069800][T19292] lo speed is unknown, defaulting to 1000 [ 273.247299][T19301] lo speed is unknown, defaulting to 1000 [ 273.253529][T19301] lo speed is unknown, defaulting to 1000 [ 273.357292][T19308] lo speed is unknown, defaulting to 1000 [ 273.365441][T19308] lo speed is unknown, defaulting to 1000 [ 273.500853][T19312] lo speed is unknown, defaulting to 1000 [ 273.513765][T19312] lo speed is unknown, defaulting to 1000 [ 273.882279][T19332] lo speed is unknown, defaulting to 1000 [ 273.889726][T19332] lo speed is unknown, defaulting to 1000 [ 273.918935][T19335] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 274.003256][T19340] netlink: 'syz.2.6394': attribute type 4 has an invalid length. [ 274.036527][T19342] loop2: detected capacity change from 0 to 128 [ 274.076954][T19342] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 274.180743][T19351] lo speed is unknown, defaulting to 1000 [ 274.187276][T19351] lo speed is unknown, defaulting to 1000 [ 274.232321][T19351] lo speed is unknown, defaulting to 1000 [ 274.238561][T19351] lo speed is unknown, defaulting to 1000 [ 274.568698][T19357] lo speed is unknown, defaulting to 1000 [ 274.575638][T19357] lo speed is unknown, defaulting to 1000 [ 274.642559][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6399'. [ 274.662775][T18125] Bluetooth: hci0: command 0x1003 tx timeout [ 274.702774][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.125903][T19370] netlink: 'syz.1.6405': attribute type 4 has an invalid length. [ 275.229116][T19372] loop2: detected capacity change from 0 to 512 [ 275.324070][T19372] EXT4-fs (loop2): 1 orphan inode deleted [ 275.330500][T19372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.356153][T10894] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:23: Failed to release dquot type 1 [ 275.367961][T19372] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.405339][ T10] hid-generic 0000:0000:0000.0095: hidraw0: HID v8.00 Device [syz0] on syz0 [ 275.592295][T18068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.624455][T19409] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 275.715467][ T1037] hid-generic 0000:0000:0000.0096: hidraw0: HID v8.00 Device [syz0] on syz0 [ 275.879644][T19444] lo speed is unknown, defaulting to 1000 [ 275.885904][T19444] lo speed is unknown, defaulting to 1000 [ 275.888855][T19439] blktrace: Concurrent blktraces are not allowed on sg0 [ 275.902962][T19439] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.6435'. [ 275.939137][T19444] lo speed is unknown, defaulting to 1000 [ 275.945493][T19444] lo speed is unknown, defaulting to 1000 [ 276.080520][T19449] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.191686][T19467] SELinux: Context GPL is not valid (left unmapped). [ 276.227267][T19465] lo speed is unknown, defaulting to 1000 [ 276.234382][T19465] lo speed is unknown, defaulting to 1000 [ 276.315464][ T1037] hid_parser_main: 77 callbacks suppressed [ 276.315486][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.329095][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.336727][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.354861][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.362303][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.369872][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.377377][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.384822][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.392388][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.399935][ T1037] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 276.475973][ T1037] hid-generic 0000:0000:0000.0097: hidraw0: HID v8.00 Device [syz0] on syz0 [ 276.590333][T19490] loop2: detected capacity change from 0 to 128 [ 276.775976][T10901] Bluetooth: hci0: Frame reassembly failed (-84) [ 276.903469][T19515] uprobe: syz.0.6464:19515 failed to unregister, leaking uprobe [ 277.003381][T19519] lo speed is unknown, defaulting to 1000 [ 277.010126][T19519] lo speed is unknown, defaulting to 1000 [ 277.134235][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6465'. [ 277.269600][T19522] 9pnet_fd: Insufficient options for proto=fd [ 277.403772][T19530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'. [ 277.770786][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 277.770803][ T29] audit: type=1326 audit(1761267611.387:42174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33aa845e67 code=0x7ffc0000 [ 277.800804][ T29] audit: type=1326 audit(1761267611.387:42175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33aa7eb099 code=0x7ffc0000 [ 277.824481][ T29] audit: type=1326 audit(1761267611.387:42176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33aa845e67 code=0x7ffc0000 [ 277.848172][ T29] audit: type=1326 audit(1761267611.387:42177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33aa7eb099 code=0x7ffc0000 [ 277.871786][ T29] audit: type=1326 audit(1761267611.387:42178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 277.895455][ T29] audit: type=1326 audit(1761267611.387:42179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 277.930461][ T29] audit: type=1326 audit(1761267611.527:42180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 277.954175][ T29] audit: type=1326 audit(1761267611.527:42181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 277.977829][ T29] audit: type=1326 audit(1761267611.527:42182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.4.6476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 278.010113][T19547] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 278.010165][T19546] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 278.131909][T19553] lo speed is unknown, defaulting to 1000 [ 278.138654][T19553] lo speed is unknown, defaulting to 1000 [ 278.148439][ T29] audit: type=1326 audit(1761267611.777:42183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19548 comm="syz.4.6479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 278.361730][T19572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.474725][T19580] 9pnet_fd: Insufficient options for proto=fd [ 278.491255][T19579] loop3: detected capacity change from 0 to 512 [ 278.530193][T19579] EXT4-fs (loop3): 1 orphan inode deleted [ 278.542375][T19579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.570307][T19579] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.822632][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 278.828821][T18125] Bluetooth: hci0: command 0x1003 tx timeout [ 278.874129][T10916] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 278.886931][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.930353][T19590] lo speed is unknown, defaulting to 1000 [ 278.940463][T19590] lo speed is unknown, defaulting to 1000 [ 279.006233][T19595] lo speed is unknown, defaulting to 1000 [ 279.012693][T19595] lo speed is unknown, defaulting to 1000 [ 279.090344][T19610] gre1: entered allmulticast mode [ 279.220410][T19619] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 279.233921][T19619] bond1 (unregistering): Released all slaves [ 279.329582][T19630] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 279.371297][T19632] loop2: detected capacity change from 0 to 128 [ 279.422077][T19635] 9pnet_fd: Insufficient options for proto=fd [ 279.431916][T19635] loop2: detected capacity change from 0 to 512 [ 279.454710][T19635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.467642][T19635] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.491521][T18068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.522433][T19645] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6517'. [ 279.531633][T19645] netlink: 'syz.4.6517': attribute type 9 has an invalid length. [ 279.539515][T19645] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6517'. [ 279.548644][T19645] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6517'. [ 279.548935][T19647] 9pnet_fd: Insufficient options for proto=fd [ 279.696061][T19656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.185354][T19681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.205644][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 280.236559][T19682] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.395230][T19692] program syz.1.6533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.465987][ T10] hid-generic 0000:0000:0000.0098: hidraw0: HID v8.00 Device [syz0] on syz0 [ 280.602806][T19703] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 280.663022][T19707] FAULT_INJECTION: forcing a failure. [ 280.663022][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 280.675737][T19707] CPU: 0 UID: 0 PID: 19707 Comm: syz.2.6540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.675768][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.675780][T19707] Call Trace: [ 280.675787][T19707] [ 280.675794][T19707] __dump_stack+0x1d/0x30 [ 280.675820][T19707] dump_stack_lvl+0xe8/0x140 [ 280.675846][T19707] dump_stack+0x15/0x1b [ 280.675877][T19707] should_fail_ex+0x265/0x280 [ 280.675916][T19707] should_failslab+0x8c/0xb0 [ 280.675948][T19707] kmem_cache_alloc_noprof+0x50/0x480 [ 280.675981][T19707] ? mas_alloc_nodes+0x1a2/0x210 [ 280.676019][T19707] mas_alloc_nodes+0x1a2/0x210 [ 280.676060][T19707] mas_preallocate+0x2ca/0x510 [ 280.676100][T19707] __split_vma+0x240/0x650 [ 280.676135][T19707] ? mas_find+0x5d5/0x700 [ 280.676158][T19707] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 280.676195][T19707] mmap_region+0x52b/0x1620 [ 280.676226][T19707] ? __rcu_read_unlock+0x4f/0x70 [ 280.676256][T19707] ? mntput_no_expire+0x6f/0x440 [ 280.676310][T19707] do_mmap+0x9b3/0xbe0 [ 280.676337][T19707] vm_mmap_pgoff+0x17a/0x2e0 [ 280.676378][T19707] ksys_mmap_pgoff+0x268/0x310 [ 280.676402][T19707] x64_sys_call+0x14a3/0x3000 [ 280.676428][T19707] do_syscall_64+0xd2/0x200 [ 280.676448][T19707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.676481][T19707] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.676518][T19707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.676542][T19707] RIP: 0033:0x7fbc6051efc9 [ 280.676568][T19707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.676587][T19707] RSP: 002b:00007fbc5ef7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 280.676607][T19707] RAX: ffffffffffffffda RBX: 00007fbc60775fa0 RCX: 00007fbc6051efc9 [ 280.676627][T19707] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 280.676640][T19707] RBP: 00007fbc5ef7f090 R08: 0000000000000003 R09: 0000000000000000 [ 280.676652][T19707] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 280.676665][T19707] R13: 00007fbc60776038 R14: 00007fbc60775fa0 R15: 00007ffea2882dc8 [ 280.676686][T19707] [ 281.085952][T19725] FAULT_INJECTION: forcing a failure. [ 281.085952][T19725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.099183][T19725] CPU: 0 UID: 0 PID: 19725 Comm: syz.4.6547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.099213][T19725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.099230][T19725] Call Trace: [ 281.099237][T19725] [ 281.099247][T19725] __dump_stack+0x1d/0x30 [ 281.099324][T19725] dump_stack_lvl+0xe8/0x140 [ 281.099347][T19725] dump_stack+0x15/0x1b [ 281.099364][T19725] should_fail_ex+0x265/0x280 [ 281.099443][T19725] should_fail+0xb/0x20 [ 281.099461][T19725] should_fail_usercopy+0x1a/0x20 [ 281.099482][T19725] _copy_from_iter+0xd2/0xe80 [ 281.099504][T19725] ? __build_skb_around+0x1ab/0x200 [ 281.099579][T19725] ? __alloc_skb+0x223/0x320 [ 281.099617][T19725] netlink_sendmsg+0x471/0x6b0 [ 281.099643][T19725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.099662][T19725] __sock_sendmsg+0x145/0x180 [ 281.099764][T19725] ____sys_sendmsg+0x31e/0x4e0 [ 281.099803][T19725] ___sys_sendmsg+0x17b/0x1d0 [ 281.099870][T19725] __x64_sys_sendmsg+0xd4/0x160 [ 281.099919][T19725] x64_sys_call+0x191e/0x3000 [ 281.099967][T19725] do_syscall_64+0xd2/0x200 [ 281.100052][T19725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.100095][T19725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.100132][T19725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.100153][T19725] RIP: 0033:0x7f33aa84efc9 [ 281.100199][T19725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.100222][T19725] RSP: 002b:00007f33a92af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.100246][T19725] RAX: ffffffffffffffda RBX: 00007f33aaaa5fa0 RCX: 00007f33aa84efc9 [ 281.100259][T19725] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 281.100270][T19725] RBP: 00007f33a92af090 R08: 0000000000000000 R09: 0000000000000000 [ 281.100282][T19725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.100310][T19725] R13: 00007f33aaaa6038 R14: 00007f33aaaa5fa0 R15: 00007ffe1990d558 [ 281.100341][T19725] [ 281.321317][T19727] loop3: detected capacity change from 0 to 256 [ 281.344569][T19727] blktrace: Concurrent blktraces are not allowed on sg0 [ 281.358850][T19727] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.6549'. [ 281.420394][T19732] lo speed is unknown, defaulting to 1000 [ 281.432952][T19732] lo speed is unknown, defaulting to 1000 [ 281.470587][T19735] netlink: 'syz.1.6552': attribute type 4 has an invalid length. [ 281.538550][T19733] lo speed is unknown, defaulting to 1000 [ 281.567559][T19740] netlink: 'syz.3.6554': attribute type 4 has an invalid length. [ 281.579880][T19733] lo speed is unknown, defaulting to 1000 [ 281.586193][T19738] lo speed is unknown, defaulting to 1000 [ 281.652649][T19738] lo speed is unknown, defaulting to 1000 [ 281.683205][T19741] lo speed is unknown, defaulting to 1000 [ 281.752417][T19747] lo speed is unknown, defaulting to 1000 [ 281.761643][T19741] lo speed is unknown, defaulting to 1000 [ 281.775683][T19747] lo speed is unknown, defaulting to 1000 [ 281.914759][T19753] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 282.001794][T19759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6561'. [ 282.105440][T19776] lo speed is unknown, defaulting to 1000 [ 282.111527][T19776] lo speed is unknown, defaulting to 1000 [ 282.173304][T19779] uprobe: syz.4.6565:19779 failed to unregister, leaking uprobe [ 282.229061][T19788] netlink: 'syz.0.6574': attribute type 4 has an invalid length. [ 282.239058][T19786] lo speed is unknown, defaulting to 1000 [ 282.248681][T19786] lo speed is unknown, defaulting to 1000 [ 282.300405][T19791] lo speed is unknown, defaulting to 1000 [ 282.312613][T19791] lo speed is unknown, defaulting to 1000 [ 282.394442][T19802] loop2: detected capacity change from 0 to 136 [ 282.420435][T18068] rock: directory entry would overflow storage [ 282.426755][T18068] rock: sig=0x4f50, size=4, remaining=3 [ 282.432350][T18068] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 282.442544][T18068] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 282.466709][T19810] loop2: detected capacity change from 0 to 512 [ 282.497498][T19810] EXT4-fs (loop2): 1 orphan inode deleted [ 282.504013][T19810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.526546][T19810] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.526524][T10916] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 282.762512][T18068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.772694][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 282.772712][ T29] audit: type=1400 audit(1761267616.377:42820): avc: denied { mount } for pid=19824 comm="syz.1.6587" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 282.801359][ T29] audit: type=1400 audit(1761267616.377:42821): avc: denied { mounton } for pid=19824 comm="syz.1.6587" path="/85/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 282.828320][ T29] audit: type=1400 audit(1761267616.457:42822): avc: denied { create } for pid=19824 comm="syz.1.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 282.887368][ T29] audit: type=1400 audit(1761267616.497:42823): avc: denied { sys_admin } for pid=19824 comm="syz.1.6587" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 282.926618][ T29] audit: type=1400 audit(1761267616.547:42824): avc: denied { unmount } for pid=18510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 282.954703][ T29] audit: type=1326 audit(1761267616.577:42825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.6591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f958aefc9 code=0x7ffc0000 [ 282.978653][ T29] audit: type=1326 audit(1761267616.577:42826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.6591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f958aefc9 code=0x7ffc0000 [ 283.005928][T19837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6591'. [ 283.024642][ T29] audit: type=1326 audit(1761267616.577:42827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.6591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f958aefc9 code=0x7ffc0000 [ 283.048407][ T29] audit: type=1326 audit(1761267616.577:42828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.6591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f958aefc9 code=0x7ffc0000 [ 283.072336][ T29] audit: type=1326 audit(1761267616.577:42829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.6591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f958aefc9 code=0x7ffc0000 [ 283.150332][T19841] loop3: detected capacity change from 0 to 256 [ 283.160669][T19845] lo speed is unknown, defaulting to 1000 [ 283.166665][T19847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6595'. [ 283.176283][T19845] lo speed is unknown, defaulting to 1000 [ 283.193561][T19841] blktrace: Concurrent blktraces are not allowed on sg0 [ 283.214355][T19841] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.6593'. [ 283.264734][T19848] lo speed is unknown, defaulting to 1000 [ 283.303006][T19848] lo speed is unknown, defaulting to 1000 [ 283.446104][T19855] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 283.495333][T19863] loop3: detected capacity change from 0 to 512 [ 283.515242][T19863] EXT4-fs (loop3): 1 orphan inode deleted [ 283.521443][T19865] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6601'. [ 283.522064][T19863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.543286][T19865] netlink: 'syz.0.6601': attribute type 9 has an invalid length. [ 283.551031][T19865] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6601'. [ 283.560128][T19865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6601'. [ 283.562895][T19863] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.579545][T10916] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 283.622919][T19871] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6602'. [ 283.633228][T19871] netlink: 'syz.0.6602': attribute type 9 has an invalid length. [ 283.641055][T19871] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6602'. [ 283.650141][T19871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6602'. [ 283.686733][T19878] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 283.709927][T19882] netlink: 'syz.2.6608': attribute type 1 has an invalid length. [ 283.723789][T19882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.738072][T19884] blktrace: Concurrent blktraces are not allowed on sg0 [ 283.746500][T19882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.747155][T19884] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.6609'. [ 283.754100][T19882] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 283.773979][T19882] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 283.815220][T19888] lo speed is unknown, defaulting to 1000 [ 283.821394][T19888] lo speed is unknown, defaulting to 1000 [ 283.837214][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.881568][T10916] Bluetooth: hci0: Frame reassembly failed (-84) [ 283.903371][T19895] FAULT_INJECTION: forcing a failure. [ 283.903371][T19895] name failslab, interval 1, probability 0, space 0, times 0 [ 283.908999][T19882] lo speed is unknown, defaulting to 1000 [ 283.916076][T19895] CPU: 0 UID: 0 PID: 19895 Comm: syz.3.6612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.916108][T19895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.916169][T19895] Call Trace: [ 283.916180][T19895] [ 283.916190][T19895] __dump_stack+0x1d/0x30 [ 283.916224][T19895] dump_stack_lvl+0xe8/0x140 [ 283.916253][T19895] dump_stack+0x15/0x1b [ 283.916280][T19895] should_fail_ex+0x265/0x280 [ 283.916351][T19895] ? __pfx_sock_alloc_inode+0x10/0x10 [ 283.916387][T19895] should_failslab+0x8c/0xb0 [ 283.916426][T19895] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 283.916468][T19895] ? sock_alloc_inode+0x34/0xa0 [ 283.916554][T19895] ? __pfx_sock_alloc_inode+0x10/0x10 [ 283.916588][T19895] sock_alloc_inode+0x34/0xa0 [ 283.916620][T19895] alloc_inode+0x40/0x170 [ 283.916657][T19895] do_accept+0xa0/0x3a0 [ 283.916694][T19895] ? vfs_write+0x7e8/0x960 [ 283.916851][T19895] __sys_accept4+0xbf/0x140 [ 283.916890][T19895] __x64_sys_accept+0x42/0x50 [ 283.916968][T19895] x64_sys_call+0x212c/0x3000 [ 283.916999][T19895] do_syscall_64+0xd2/0x200 [ 283.917024][T19895] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.917126][T19895] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 283.917169][T19895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.917198][T19895] RIP: 0033:0x7f3d50c0efc9 [ 283.917221][T19895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.917256][T19895] RSP: 002b:00007f3d4f677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 283.917282][T19895] RAX: ffffffffffffffda RBX: 00007f3d50e65fa0 RCX: 00007f3d50c0efc9 [ 283.917300][T19895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 283.917316][T19895] RBP: 00007f3d4f677090 R08: 0000000000000000 R09: 0000000000000000 [ 283.917333][T19895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.917358][T19895] R13: 00007f3d50e66038 R14: 00007f3d50e65fa0 R15: 00007ffe8076b508 [ 283.917385][T19895] [ 283.985434][T19901] netlink: 'syz.3.6615': attribute type 4 has an invalid length. [ 283.989877][T19882] lo speed is unknown, defaulting to 1000 [ 284.122794][T19908] netlink: 'syz.4.6618': attribute type 9 has an invalid length. [ 284.176442][T19911] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 284.220623][T19915] blktrace: Concurrent blktraces are not allowed on sg0 [ 284.274577][T19927] FAULT_INJECTION: forcing a failure. [ 284.274577][T19927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.284355][T19928] netlink: 'syz.2.6626': attribute type 4 has an invalid length. [ 284.287803][T19927] CPU: 0 UID: 0 PID: 19927 Comm: syz.4.6625 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.287841][T19927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.287859][T19927] Call Trace: [ 284.287868][T19927] [ 284.287877][T19927] __dump_stack+0x1d/0x30 [ 284.287984][T19927] dump_stack_lvl+0xe8/0x140 [ 284.288013][T19927] dump_stack+0x15/0x1b [ 284.288037][T19927] should_fail_ex+0x265/0x280 [ 284.288085][T19927] should_fail+0xb/0x20 [ 284.288133][T19927] should_fail_usercopy+0x1a/0x20 [ 284.288162][T19927] _copy_to_user+0x20/0xa0 [ 284.288266][T19927] simple_read_from_buffer+0xb5/0x130 [ 284.288302][T19927] proc_fail_nth_read+0x10e/0x150 [ 284.288352][T19927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.288437][T19927] vfs_read+0x1a8/0x770 [ 284.288502][T19927] ? __rcu_read_unlock+0x4f/0x70 [ 284.288539][T19927] ? __fget_files+0x184/0x1c0 [ 284.288579][T19927] ksys_read+0xda/0x1a0 [ 284.288615][T19927] __x64_sys_read+0x40/0x50 [ 284.288728][T19927] x64_sys_call+0x27c0/0x3000 [ 284.288759][T19927] do_syscall_64+0xd2/0x200 [ 284.288784][T19927] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 284.288823][T19927] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 284.288896][T19927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.288933][T19927] RIP: 0033:0x7f33aa84d9dc [ 284.288954][T19927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.288988][T19927] RSP: 002b:00007f33a92af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.289012][T19927] RAX: ffffffffffffffda RBX: 00007f33aaaa5fa0 RCX: 00007f33aa84d9dc [ 284.289030][T19927] RDX: 000000000000000f RSI: 00007f33a92af0a0 RDI: 0000000000000004 [ 284.289048][T19927] RBP: 00007f33a92af090 R08: 0000000000000000 R09: 0000000000000000 [ 284.289066][T19927] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 284.289083][T19927] R13: 00007f33aaaa6038 R14: 00007f33aaaa5fa0 R15: 00007ffe1990d558 [ 284.289110][T19927] [ 284.784833][T19942] lo speed is unknown, defaulting to 1000 [ 284.791327][T19942] lo speed is unknown, defaulting to 1000 [ 284.930612][T19945] FAULT_INJECTION: forcing a failure. [ 284.930612][T19945] name failslab, interval 1, probability 0, space 0, times 0 [ 284.943453][T19945] CPU: 0 UID: 0 PID: 19945 Comm: syz.0.6631 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.943487][T19945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.943500][T19945] Call Trace: [ 284.943552][T19945] [ 284.943562][T19945] __dump_stack+0x1d/0x30 [ 284.943588][T19945] dump_stack_lvl+0xe8/0x140 [ 284.943656][T19945] dump_stack+0x15/0x1b [ 284.943674][T19945] should_fail_ex+0x265/0x280 [ 284.943720][T19945] should_failslab+0x8c/0xb0 [ 284.943757][T19945] kmem_cache_alloc_noprof+0x50/0x480 [ 284.943798][T19945] ? audit_log_start+0x342/0x720 [ 284.943826][T19945] audit_log_start+0x342/0x720 [ 284.943855][T19945] audit_seccomp+0x48/0x100 [ 284.943937][T19945] ? __seccomp_filter+0x82d/0x1250 [ 284.943972][T19945] __seccomp_filter+0x83e/0x1250 [ 284.944003][T19945] ? perf_iterate_sb+0x62a/0x650 [ 284.944024][T19945] ? __pfx_perf_event_switch_output+0x10/0x10 [ 284.944056][T19945] ? _raw_spin_unlock+0x26/0x50 [ 284.944103][T19945] __secure_computing+0x82/0x150 [ 284.944129][T19945] syscall_trace_enter+0xcf/0x1e0 [ 284.944208][T19945] do_syscall_64+0xac/0x200 [ 284.944225][T19945] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 284.944260][T19945] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 284.944309][T19945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.944329][T19945] RIP: 0033:0x7fd1bde8d9dc [ 284.944344][T19945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 284.944411][T19945] RSP: 002b:00007fd1bc8ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.944445][T19945] RAX: ffffffffffffffda RBX: 00007fd1be0e5fa0 RCX: 00007fd1bde8d9dc [ 284.944458][T19945] RDX: 000000000000000f RSI: 00007fd1bc8ef0a0 RDI: 0000000000000006 [ 284.944470][T19945] RBP: 00007fd1bc8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 284.944483][T19945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.944557][T19945] R13: 00007fd1be0e6038 R14: 00007fd1be0e5fa0 R15: 00007ffdb49fce08 [ 284.944576][T19945] [ 285.302488][T19955] blktrace: Concurrent blktraces are not allowed on sg0 [ 285.348919][T19957] 9pnet_fd: p9_fd_create_unix (19957): problem connecting socket: ./file0: -2 [ 285.359476][T19957] netlink: 'syz.0.6637': attribute type 4 has an invalid length. [ 285.432138][T19961] loop3: detected capacity change from 0 to 512 [ 285.457823][T19961] EXT4-fs (loop3): 1 orphan inode deleted [ 285.464436][T19961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.477080][T10924] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:53: Failed to release dquot type 1 [ 285.501451][T19961] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.608872][T19981] 9pnet_fd: p9_fd_create_unix (19981): problem connecting socket: ./file0: -2 [ 285.626104][T19981] bridge1: entered promiscuous mode [ 285.763492][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.942682][ T3735] Bluetooth: hci0: command 0x1003 tx timeout [ 285.965712][T18125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 286.021002][ T3396] hid_parser_main: 48 callbacks suppressed [ 286.021061][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.034509][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.041916][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.049649][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.057222][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.064690][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.072151][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.079583][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.087046][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.094528][ T3396] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 286.103268][ T3396] hid-generic 0000:0000:0000.0099: hidraw0: HID v8.00 Device [syz0] on syz0 [ 286.252951][T20007] uprobe: syz.3.6654:20007 failed to unregister, leaking uprobe [ 286.386184][T20013] blktrace: Concurrent blktraces are not allowed on sg0 [ 286.465629][T20017] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 286.479249][T20021] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 286.764182][T20037] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 287.046766][T20060] random: crng reseeded on system resumption [ 287.374855][T20059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.735019][T20079] FAULT_INJECTION: forcing a failure. [ 287.735019][T20079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.748352][T20079] CPU: 1 UID: 0 PID: 20079 Comm: syz.1.6680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.748380][T20079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.748395][T20079] Call Trace: [ 287.748468][T20079] [ 287.748477][T20079] __dump_stack+0x1d/0x30 [ 287.748506][T20079] dump_stack_lvl+0xe8/0x140 [ 287.748526][T20079] dump_stack+0x15/0x1b [ 287.748545][T20079] should_fail_ex+0x265/0x280 [ 287.748671][T20079] should_fail+0xb/0x20 [ 287.748692][T20079] should_fail_usercopy+0x1a/0x20 [ 287.748746][T20079] strncpy_from_user+0x25/0x230 [ 287.748775][T20079] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 287.748827][T20079] __se_sys_memfd_create+0x1ff/0x590 [ 287.748935][T20079] __x64_sys_memfd_create+0x31/0x40 [ 287.749032][T20079] x64_sys_call+0x2ac2/0x3000 [ 287.749124][T20079] do_syscall_64+0xd2/0x200 [ 287.749146][T20079] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.749181][T20079] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 287.749297][T20079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.749318][T20079] RIP: 0033:0x7f6f958aefc9 [ 287.749333][T20079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.749352][T20079] RSP: 002b:00007f6f942cce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 287.749440][T20079] RAX: ffffffffffffffda RBX: 00000000000005a8 RCX: 00007f6f958aefc9 [ 287.749456][T20079] RDX: 00007f6f942ccef0 RSI: 0000000000000000 RDI: 00007f6f95932960 [ 287.749471][T20079] RBP: 0000200000000680 R08: 00007f6f942ccbb7 R09: 00007f6f942cce40 [ 287.749544][T20079] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000600 [ 287.749558][T20079] R13: 00007f6f942ccef0 R14: 00007f6f942cceb0 R15: 0000200000000d80 [ 287.749576][T20079] [ 287.937983][T20067] loop2: detected capacity change from 0 to 512 [ 287.956685][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 287.956699][ T29] audit: type=1326 audit(1761267621.577:43598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 287.986536][ T29] audit: type=1326 audit(1761267621.577:43599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.010113][ T29] audit: type=1326 audit(1761267621.577:43600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.033704][ T29] audit: type=1326 audit(1761267621.577:43601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.057373][ T29] audit: type=1326 audit(1761267621.577:43602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.434713][T20067] EXT4-fs (loop2): 1 orphan inode deleted [ 288.451246][T20067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.456225][ T29] audit: type=1326 audit(1761267621.697:43603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.487477][ T29] audit: type=1326 audit(1761267621.697:43604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.511200][ T29] audit: type=1326 audit(1761267621.697:43605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.534864][ T29] audit: type=1326 audit(1761267621.697:43606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.558487][ T29] audit: type=1326 audit(1761267621.707:43607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20076 comm="syz.4.6681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 288.582460][T10887] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:16: Failed to release dquot type 1 [ 288.594436][T20067] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.608605][T20097] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 288.684647][T20101] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.708762][T20103] __nla_validate_parse: 15 callbacks suppressed [ 288.708780][T20103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6690'. [ 288.818043][T18068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.977700][T20115] lo speed is unknown, defaulting to 1000 [ 288.987761][T20117] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 288.996025][T20117] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.016186][T20118] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 289.024741][T20118] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 289.043882][T20115] lo speed is unknown, defaulting to 1000 [ 289.053076][T20119] lo speed is unknown, defaulting to 1000 [ 289.067143][T20119] lo speed is unknown, defaulting to 1000 [ 289.271309][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6695'. [ 289.462812][T20141] lo speed is unknown, defaulting to 1000 [ 289.469469][T20141] lo speed is unknown, defaulting to 1000 [ 289.529880][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6696'. [ 289.655315][T20143] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 289.798812][T20149] 9pnet_fd: Insufficient options for proto=fd [ 290.029867][T20155] uprobe: syz.2.6703:20155 failed to unregister, leaking uprobe [ 290.171414][T20166] loop3: detected capacity change from 0 to 128 [ 290.182528][T10889] Bluetooth: hci0: Frame reassembly failed (-84) [ 290.223842][T20170] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6711'. [ 290.233423][T20170] validate_nla: 5 callbacks suppressed [ 290.233506][T20170] netlink: 'syz.2.6711': attribute type 9 has an invalid length. [ 290.246820][T20170] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6711'. [ 290.256024][T20170] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6711'. [ 290.269575][T20171] loop3: detected capacity change from 0 to 128 [ 290.275985][T20167] uprobe: syz.1.6707:20167 failed to unregister, leaking uprobe [ 290.427420][T20175] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 290.522817][T20193] loop3: detected capacity change from 0 to 256 [ 290.535128][T20193] blktrace: Concurrent blktraces are not allowed on sg0 [ 290.538669][T20195] loop2: detected capacity change from 0 to 128 [ 290.550344][T20193] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.6720'. [ 290.603168][T20201] netlink: 332 bytes leftover after parsing attributes in process `syz.1.6724'. [ 290.619388][T20201] netlink: 'syz.1.6724': attribute type 9 has an invalid length. [ 290.627267][T20201] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6724'. [ 290.636443][T20201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6724'. [ 290.649668][T20205] loop2: detected capacity change from 0 to 512 [ 290.667444][T20205] EXT4-fs (loop2): 1 orphan inode deleted [ 290.674044][T20210] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 290.684255][T10886] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 1 [ 290.688397][T20205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.726318][T20205] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.927439][T18068] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.273709][T20234] 9pnet_fd: Insufficient options for proto=fd [ 291.335508][T20237] netlink: 'syz.1.6738': attribute type 4 has an invalid length. [ 291.413503][T20243] lo speed is unknown, defaulting to 1000 [ 291.419961][T20243] lo speed is unknown, defaulting to 1000 [ 291.467995][T20243] lo speed is unknown, defaulting to 1000 [ 291.474583][T20243] lo speed is unknown, defaulting to 1000 [ 291.715715][T20259] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 291.928134][T20271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 292.013421][T20281] netlink: 'syz.2.6756': attribute type 9 has an invalid length. [ 292.058484][T20286] netlink: 'syz.2.6758': attribute type 9 has an invalid length. [ 292.105345][T20282] uprobe: syz.3.6754:20282 failed to unregister, leaking uprobe [ 292.183048][T18125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 292.183102][ T3735] Bluetooth: hci0: command 0x1003 tx timeout [ 292.333002][T20307] netlink: 'syz.1.6768': attribute type 9 has an invalid length. [ 292.543507][T20317] lo speed is unknown, defaulting to 1000 [ 292.550562][T20317] lo speed is unknown, defaulting to 1000 [ 292.974950][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 292.974968][ T29] audit: type=1326 audit(1761267626.587:44166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.130284][T20332] lo speed is unknown, defaulting to 1000 [ 293.198210][T20335] netlink: 'syz.2.6779': attribute type 9 has an invalid length. [ 293.215712][ T29] audit: type=1326 audit(1761267626.627:44167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.239535][ T29] audit: type=1326 audit(1761267626.627:44168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.263044][ T29] audit: type=1326 audit(1761267626.627:44169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.286665][ T29] audit: type=1326 audit(1761267626.627:44170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.310404][ T29] audit: type=1326 audit(1761267626.627:44171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.327129][T20332] lo speed is unknown, defaulting to 1000 [ 293.333922][ T29] audit: type=1326 audit(1761267626.627:44172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.340058][T20333] lo speed is unknown, defaulting to 1000 [ 293.363253][ T29] audit: type=1326 audit(1761267626.627:44173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.363302][ T29] audit: type=1326 audit(1761267626.627:44174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.363331][ T29] audit: type=1326 audit(1761267626.627:44175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20329 comm="syz.0.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 293.462235][T20333] lo speed is unknown, defaulting to 1000 [ 293.474522][ T1037] hid_parser_main: 19 callbacks suppressed [ 293.474574][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.487857][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.495443][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.515979][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.523445][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.530866][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.538394][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.545959][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.553387][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.560801][ T1037] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 293.575702][ T1037] hid-generic 0000:0000:0000.009A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 293.787925][T20363] __nla_validate_parse: 13 callbacks suppressed [ 293.787952][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6788'. [ 293.881171][T20369] loop3: detected capacity change from 0 to 512 [ 293.909994][T20369] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.6791: EA inode hash validation failed [ 293.923547][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6791: corrupted inode contents [ 293.958657][T20369] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.6791: mark_inode_dirty error [ 293.970905][T20369] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.6791: corrupted inode contents [ 294.002066][T20369] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.6791: mark_inode_dirty error [ 294.047828][T20369] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.6791: mark inode dirty (error -117) [ 294.060681][T20369] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 294.070163][T20369] EXT4-fs (loop3): 1 orphan inode deleted [ 294.076572][T20369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.125268][T20386] sd 0:0:1:0: device reset [ 294.133170][T20386] xt_hashlimit: max too large, truncated to 1048576 [ 294.173459][T20386] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 294.211741][T20388] ªªªªªª: renamed from lo (while UP) [ 294.227744][T20369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6791'. [ 294.469838][T20405] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 294.483224][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.492566][T20410] loop2: detected capacity change from 0 to 128 [ 294.514490][T20405] bond1 (unregistering): Released all slaves [ 294.588936][T20422] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6813'. [ 294.601177][T20422] netlink: 'syz.2.6813': attribute type 9 has an invalid length. [ 294.609009][T20422] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6813'. [ 294.618102][T20422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6813'. [ 294.630187][T20421] loop3: detected capacity change from 0 to 128 [ 294.728110][T20424] uprobe: syz.1.6814:20424 failed to unregister, leaking uprobe [ 294.766770][T20430] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 294.853715][T20428] uprobe: syz.1.6814:20428 failed to unregister, leaking uprobe [ 294.888739][T20452] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6826'. [ 294.906681][T20446] loop3: detected capacity change from 0 to 256 [ 294.907624][T20452] netlink: 'syz.0.6826': attribute type 9 has an invalid length. [ 294.920900][T20452] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6826'. [ 294.926268][T20446] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 294.930031][T20452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6826'. [ 294.937961][T20446] FAT-fs (loop3): Filesystem has been set read-only [ 294.972106][T20454] loop2: detected capacity change from 0 to 128 [ 294.979305][T20456] FAULT_INJECTION: forcing a failure. [ 294.979305][T20456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.992461][T20456] CPU: 0 UID: 0 PID: 20456 Comm: syz.0.6828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 294.992497][T20456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.992511][T20456] Call Trace: [ 294.992518][T20456] [ 294.992580][T20456] __dump_stack+0x1d/0x30 [ 294.992608][T20456] dump_stack_lvl+0xe8/0x140 [ 294.992658][T20456] dump_stack+0x15/0x1b [ 294.992677][T20456] should_fail_ex+0x265/0x280 [ 294.992714][T20456] should_fail+0xb/0x20 [ 294.992746][T20456] should_fail_usercopy+0x1a/0x20 [ 294.992769][T20456] strncpy_from_user+0x25/0x230 [ 294.992799][T20456] ? kmem_cache_alloc_noprof+0x242/0x480 [ 294.992831][T20456] ? getname_flags+0x80/0x3b0 [ 294.992905][T20456] getname_flags+0xae/0x3b0 [ 294.992938][T20456] getname_uflags+0x21/0x30 [ 294.992973][T20456] __x64_sys_execveat+0x5d/0x90 [ 294.993001][T20456] x64_sys_call+0x1fec/0x3000 [ 294.993052][T20456] do_syscall_64+0xd2/0x200 [ 294.993070][T20456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.993135][T20456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.993178][T20456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.993204][T20456] RIP: 0033:0x7fd1bde8efc9 [ 294.993277][T20456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.993300][T20456] RSP: 002b:00007fd1bc8ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 294.993323][T20456] RAX: ffffffffffffffda RBX: 00007fd1be0e5fa0 RCX: 00007fd1bde8efc9 [ 294.993338][T20456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 294.993366][T20456] RBP: 00007fd1bc8ef090 R08: 0000000000001000 R09: 0000000000000000 [ 294.993382][T20456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.993397][T20456] R13: 00007fd1be0e6038 R14: 00007fd1be0e5fa0 R15: 00007ffdb49fce08 [ 294.993421][T20456] [ 295.264704][T20462] blktrace: Concurrent blktraces are not allowed on sg0 [ 295.273075][T20460] uprobe: syz.2.6830:20460 failed to unregister, leaking uprobe [ 295.283591][T20462] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.6831'. [ 295.366353][T20470] loop3: detected capacity change from 0 to 256 [ 295.376387][T20470] blktrace: Concurrent blktraces are not allowed on sg0 [ 295.390685][T20470] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.6832'. [ 295.402274][T20469] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 295.434580][T20473] FAULT_INJECTION: forcing a failure. [ 295.434580][T20473] name failslab, interval 1, probability 0, space 0, times 0 [ 295.447303][T20473] CPU: 0 UID: 0 PID: 20473 Comm: syz.0.6835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 295.447329][T20473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.447341][T20473] Call Trace: [ 295.447349][T20473] [ 295.447357][T20473] __dump_stack+0x1d/0x30 [ 295.447448][T20473] dump_stack_lvl+0xe8/0x140 [ 295.447489][T20473] dump_stack+0x15/0x1b [ 295.447511][T20473] should_fail_ex+0x265/0x280 [ 295.447613][T20473] should_failslab+0x8c/0xb0 [ 295.447718][T20473] kmem_cache_alloc_noprof+0x50/0x480 [ 295.447749][T20473] ? audit_log_start+0x342/0x720 [ 295.447777][T20473] audit_log_start+0x342/0x720 [ 295.447806][T20473] audit_seccomp+0x48/0x100 [ 295.447919][T20473] ? __seccomp_filter+0x82d/0x1250 [ 295.448005][T20473] __seccomp_filter+0x83e/0x1250 [ 295.448036][T20473] ? do_madvise+0x15f/0x190 [ 295.448151][T20473] __secure_computing+0x82/0x150 [ 295.448185][T20473] syscall_trace_enter+0xcf/0x1e0 [ 295.448264][T20473] do_syscall_64+0xac/0x200 [ 295.448382][T20473] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 295.448410][T20473] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 295.448459][T20473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.448506][T20473] RIP: 0033:0x7fd1bde8d9dc [ 295.448524][T20473] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.448547][T20473] RSP: 002b:00007fd1bc8ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.448571][T20473] RAX: ffffffffffffffda RBX: 00007fd1be0e5fa0 RCX: 00007fd1bde8d9dc [ 295.448610][T20473] RDX: 000000000000000f RSI: 00007fd1bc8ef0a0 RDI: 0000000000000003 [ 295.448621][T20473] RBP: 00007fd1bc8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 295.448635][T20473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.448657][T20473] R13: 00007fd1be0e6038 R14: 00007fd1be0e5fa0 R15: 00007ffdb49fce08 [ 295.448683][T20473] [ 295.788679][T20492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=20492 comm=syz.0.6844 [ 295.801648][T20490] loop3: detected capacity change from 0 to 128 [ 295.894702][T20507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 295.986041][T20505] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 296.054390][T20508] uprobe: syz.2.6847:20508 failed to unregister, leaking uprobe [ 296.167549][T20526] lo speed is unknown, defaulting to 1000 [ 296.174408][T20526] lo speed is unknown, defaulting to 1000 [ 296.288113][T20529] lo speed is unknown, defaulting to 1000 [ 296.294765][T20529] lo speed is unknown, defaulting to 1000 [ 296.582676][ T3735] Bluetooth: hci0: command 0x1003 tx timeout [ 296.591415][T18125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.606358][T20534] netlink: 'syz.3.6862': attribute type 9 has an invalid length. [ 296.878840][T20563] af_packet: tpacket_rcv: packet too big, clamped from 3975 to 3958. macoff=82 [ 296.965121][T20564] lo speed is unknown, defaulting to 1000 [ 296.971384][T20564] lo speed is unknown, defaulting to 1000 [ 297.278656][T20572] netlink: 'syz.2.6875': attribute type 9 has an invalid length. [ 297.452463][T20587] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.513403][T20582] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 297.697001][T20599] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 297.722224][T20600] lo speed is unknown, defaulting to 1000 [ 297.728437][T20600] lo speed is unknown, defaulting to 1000 [ 298.187964][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 298.187981][ T29] audit: type=1326 audit(1761267631.807:45040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.220137][T20623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.277333][ T29] audit: type=1326 audit(1761267631.857:45041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.301008][ T29] audit: type=1326 audit(1761267631.857:45042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.324715][ T29] audit: type=1326 audit(1761267631.857:45043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.348488][ T29] audit: type=1326 audit(1761267631.857:45044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.372129][ T29] audit: type=1326 audit(1761267631.857:45045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.395848][ T29] audit: type=1400 audit(1761267631.887:45046): avc: denied { sys_module } for pid=20621 comm="syz.3.6897" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.447625][ T29] audit: type=1326 audit(1761267632.047:45047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20625 comm="syz.0.6898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 298.471515][ T29] audit: type=1326 audit(1761267632.047:45048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.495274][ T29] audit: type=1326 audit(1761267632.047:45049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20621 comm="syz.3.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d50c0efc9 code=0x7ffc0000 [ 298.601278][T20633] loop3: detected capacity change from 0 to 128 [ 298.772856][T10886] Bluetooth: hci0: Frame reassembly failed (-84) [ 298.803451][T20656] uprobe: syz.4.6905:20656 failed to unregister, leaking uprobe [ 298.963027][T10926] Bluetooth: hci1: Frame reassembly failed (-84) [ 298.969619][T10926] Bluetooth: hci1: Frame reassembly failed (-84) [ 299.076912][T20658] syz.3.6900: attempt to access beyond end of device [ 299.076912][T20658] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 299.090437][T20658] buffer_io_error: 42 callbacks suppressed [ 299.090458][T20658] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 299.105283][T20654] syz.3.6900: attempt to access beyond end of device [ 299.105283][T20654] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 299.118847][T20654] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 299.131079][T20654] syz.3.6900: attempt to access beyond end of device [ 299.131079][T20654] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 299.144538][T20654] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 299.290166][T20691] __nla_validate_parse: 9 callbacks suppressed [ 299.290181][T20691] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6924'. [ 299.305815][T20691] netlink: 'syz.4.6924': attribute type 9 has an invalid length. [ 299.313599][T20691] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6924'. [ 299.322734][T20691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6924'. [ 299.415755][T20697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.515372][T20704] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 300.211842][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'. [ 300.242895][T20723] bridge_slave_1: left allmulticast mode [ 300.248626][T20723] bridge_slave_1: left promiscuous mode [ 300.254353][T20723] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.263250][T20723] bridge_slave_0: left allmulticast mode [ 300.268940][T20723] bridge_slave_0: left promiscuous mode [ 300.274713][T20723] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.822703][T19160] Bluetooth: hci0: command 0x1003 tx timeout [ 300.828800][T18125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 300.982630][ T3735] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 300.982721][T18125] Bluetooth: hci1: command 0x1003 tx timeout [ 301.175546][T20759] blktrace: Concurrent blktraces are not allowed on sg0 [ 301.183922][T20759] netlink: 52083 bytes leftover after parsing attributes in process `syz.2.6950'. [ 301.432999][T20768] uprobe: syz.2.6954:20768 failed to unregister, leaking uprobe [ 301.658376][T20781] lo speed is unknown, defaulting to 1000 [ 301.679994][T20781] lo speed is unknown, defaulting to 1000 [ 301.726532][T20787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20787 comm=syz.2.6962 [ 301.753208][T20788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20788 comm=syz.2.6962 [ 301.825074][T20791] lo speed is unknown, defaulting to 1000 [ 301.864488][T20791] lo speed is unknown, defaulting to 1000 [ 301.864816][T20797] lo speed is unknown, defaulting to 1000 [ 301.932289][T20805] blktrace: Concurrent blktraces are not allowed on sg0 [ 301.940714][T20805] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.6968'. [ 302.022612][T20797] lo speed is unknown, defaulting to 1000 [ 302.058351][T20811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 302.090313][T20815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20815 comm=syz.0.6971 [ 302.199235][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6972'. [ 302.208898][T20828] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 302.332038][T20829] lo speed is unknown, defaulting to 1000 [ 302.338273][T20829] lo speed is unknown, defaulting to 1000 [ 302.421132][T20839] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6980'. [ 302.431332][T20839] netlink: 'syz.3.6980': attribute type 9 has an invalid length. [ 302.439286][T20839] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6980'. [ 302.445432][T20840] blktrace: Concurrent blktraces are not allowed on sg0 [ 302.448519][T20839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6980'. [ 302.549795][ T23] hid_parser_main: 19 callbacks suppressed [ 302.549817][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.563262][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.570674][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.578586][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.586179][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.593720][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.601179][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.608624][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.616108][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.623593][ T23] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 302.632517][ T23] hid-generic 0000:0000:0000.009B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 302.686511][T20851] netlink: 'syz.4.6986': attribute type 13 has an invalid length. [ 302.867350][T20858] netlink: 'syz.4.6988': attribute type 6 has an invalid length. [ 302.867766][T20858] netlink: 'syz.4.6988': attribute type 6 has an invalid length. [ 303.057601][T20864] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 303.074841][T20864] 0ªî{X¹¦: entered allmulticast mode [ 303.075419][T20864] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 303.205259][T20876] netlink: 'syz.2.6997': attribute type 1 has an invalid length. [ 303.214469][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 303.214487][ T29] audit: type=1326 audit(1761267636.837:46098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20870 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 303.214523][ T29] audit: type=1326 audit(1761267636.837:46099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20870 comm="syz.0.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 303.273501][ T29] audit: type=1326 audit(1761267636.897:46100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.274623][ T29] audit: type=1326 audit(1761267636.897:46101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.276583][ T29] audit: type=1326 audit(1761267636.897:46102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.277878][ T29] audit: type=1326 audit(1761267636.897:46103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.278040][ T29] audit: type=1326 audit(1761267636.897:46104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.278336][ T29] audit: type=1326 audit(1761267636.897:46105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.278425][ T29] audit: type=1326 audit(1761267636.897:46106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.278459][ T29] audit: type=1326 audit(1761267636.897:46107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20879 comm="syz.2.7000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6051efc9 code=0x7ffc0000 [ 303.361866][T20894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.440476][T20898] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 303.809899][T20922] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 304.254029][T20928] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 304.572156][T20951] __nla_validate_parse: 6 callbacks suppressed [ 304.572175][T20951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7023'. [ 304.807306][T20974] loop3: detected capacity change from 0 to 512 [ 304.827055][T20974] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.7035: EA inode hash validation failed [ 304.839905][T20974] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.7035: corrupted inode contents [ 304.852108][T20974] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.7035: mark_inode_dirty error [ 304.863774][T20974] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.7035: corrupted inode contents [ 304.876045][T20974] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.7035: mark_inode_dirty error [ 304.889913][T20974] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.7035: mark inode dirty (error -117) [ 304.904450][T20974] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 304.913953][T20974] EXT4-fs (loop3): 1 orphan inode deleted [ 304.920208][T20974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.065725][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.211113][T20999] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.335415][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 305.413743][T21009] uprobe: syz.2.7048:21009 failed to unregister, leaking uprobe [ 305.829020][T21025] FAULT_INJECTION: forcing a failure. [ 305.829020][T21025] name failslab, interval 1, probability 0, space 0, times 0 [ 305.841716][T21025] CPU: 0 UID: 0 PID: 21025 Comm: syz.2.7055 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.841749][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.841765][T21025] Call Trace: [ 305.841774][T21025] [ 305.841782][T21025] __dump_stack+0x1d/0x30 [ 305.841812][T21025] dump_stack_lvl+0xe8/0x140 [ 305.841839][T21025] dump_stack+0x15/0x1b [ 305.841941][T21025] should_fail_ex+0x265/0x280 [ 305.841987][T21025] should_failslab+0x8c/0xb0 [ 305.842024][T21025] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 305.842128][T21025] ? __alloc_skb+0x101/0x320 [ 305.842165][T21025] __alloc_skb+0x101/0x320 [ 305.842198][T21025] netlink_alloc_large_skb+0xbf/0xf0 [ 305.842232][T21025] netlink_sendmsg+0x3cf/0x6b0 [ 305.842323][T21025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.842347][T21025] __sock_sendmsg+0x145/0x180 [ 305.842377][T21025] ____sys_sendmsg+0x31e/0x4e0 [ 305.842422][T21025] ___sys_sendmsg+0x17b/0x1d0 [ 305.842553][T21025] __x64_sys_sendmsg+0xd4/0x160 [ 305.842612][T21025] x64_sys_call+0x191e/0x3000 [ 305.842677][T21025] do_syscall_64+0xd2/0x200 [ 305.842699][T21025] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.842734][T21025] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 305.842772][T21025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.842864][T21025] RIP: 0033:0x7fbc6051efc9 [ 305.842883][T21025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.842904][T21025] RSP: 002b:00007fbc5ef7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.842928][T21025] RAX: ffffffffffffffda RBX: 00007fbc60775fa0 RCX: 00007fbc6051efc9 [ 305.842943][T21025] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 305.842959][T21025] RBP: 00007fbc5ef7f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.843024][T21025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.843037][T21025] R13: 00007fbc60776038 R14: 00007fbc60775fa0 R15: 00007ffea2882dc8 [ 305.843059][T21025] [ 306.063556][T21030] FAULT_INJECTION: forcing a failure. [ 306.063556][T21030] name failslab, interval 1, probability 0, space 0, times 0 [ 306.076257][T21030] CPU: 1 UID: 0 PID: 21030 Comm: syz.4.7057 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.076309][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.076324][T21030] Call Trace: [ 306.076331][T21030] [ 306.076340][T21030] __dump_stack+0x1d/0x30 [ 306.076372][T21030] dump_stack_lvl+0xe8/0x140 [ 306.076473][T21030] dump_stack+0x15/0x1b [ 306.076490][T21030] should_fail_ex+0x265/0x280 [ 306.076566][T21030] ? cgroup_init_fs_context+0x38/0x2b0 [ 306.076635][T21030] should_failslab+0x8c/0xb0 [ 306.076668][T21030] __kmalloc_cache_noprof+0x4c/0x4a0 [ 306.076814][T21030] cgroup_init_fs_context+0x38/0x2b0 [ 306.076840][T21030] alloc_fs_context+0x3ef/0x4e0 [ 306.076874][T21030] fs_context_for_mount+0x22/0x30 [ 306.076904][T21030] do_new_mount+0xea/0x660 [ 306.076950][T21030] ? security_capable+0x83/0x90 [ 306.076993][T21030] path_mount+0x4a5/0xb70 [ 306.077023][T21030] ? user_path_at+0x109/0x130 [ 306.077105][T21030] __se_sys_mount+0x28c/0x2e0 [ 306.077136][T21030] ? fput+0x8f/0xc0 [ 306.077160][T21030] __x64_sys_mount+0x67/0x80 [ 306.077189][T21030] x64_sys_call+0x2b51/0x3000 [ 306.077224][T21030] do_syscall_64+0xd2/0x200 [ 306.077262][T21030] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.077294][T21030] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 306.077334][T21030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.077396][T21030] RIP: 0033:0x7f33aa84efc9 [ 306.077414][T21030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.077432][T21030] RSP: 002b:00007f33a92af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 306.077454][T21030] RAX: ffffffffffffffda RBX: 00007f33aaaa5fa0 RCX: 00007f33aa84efc9 [ 306.077470][T21030] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 306.077513][T21030] RBP: 00007f33a92af090 R08: 0000000000000000 R09: 0000000000000000 [ 306.077530][T21030] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000001 [ 306.077570][T21030] R13: 00007f33aaaa6038 R14: 00007f33aaaa5fa0 R15: 00007ffe1990d558 [ 306.077596][T21030] [ 306.314706][T21031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=21031 comm=syz.2.7058 [ 306.376627][T21031] lo speed is unknown, defaulting to 1000 [ 306.389011][T21031] lo speed is unknown, defaulting to 1000 [ 306.486794][T21054] lo speed is unknown, defaulting to 1000 [ 306.509172][T21054] lo speed is unknown, defaulting to 1000 [ 306.515256][T21060] lo speed is unknown, defaulting to 1000 [ 306.550526][T21060] lo speed is unknown, defaulting to 1000 [ 306.581834][T21065] lo speed is unknown, defaulting to 1000 [ 306.610618][T21066] uprobe: syz.2.7071:21066 failed to unregister, leaking uprobe [ 306.618404][T21065] lo speed is unknown, defaulting to 1000 [ 306.686503][T21070] lo speed is unknown, defaulting to 1000 [ 306.718533][T21070] lo speed is unknown, defaulting to 1000 [ 306.764958][T21083] lo speed is unknown, defaulting to 1000 [ 306.771089][T21083] lo speed is unknown, defaulting to 1000 [ 306.816528][T21087] lo speed is unknown, defaulting to 1000 [ 306.826377][T21087] lo speed is unknown, defaulting to 1000 [ 306.971065][T21103] FAULT_INJECTION: forcing a failure. [ 306.971065][T21103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.984343][T21103] CPU: 1 UID: 0 PID: 21103 Comm: syz.4.7087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.984445][T21103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.984461][T21103] Call Trace: [ 306.984470][T21103] [ 306.984480][T21103] __dump_stack+0x1d/0x30 [ 306.984509][T21103] dump_stack_lvl+0xe8/0x140 [ 306.984531][T21103] dump_stack+0x15/0x1b [ 306.984558][T21103] should_fail_ex+0x265/0x280 [ 306.984603][T21103] should_fail+0xb/0x20 [ 306.984653][T21103] should_fail_usercopy+0x1a/0x20 [ 306.984679][T21103] _copy_from_user+0x1c/0xb0 [ 306.984707][T21103] ip_options_get+0x11a/0x350 [ 306.984778][T21103] do_ip_setsockopt+0x19d4/0x2240 [ 306.984816][T21103] ip_setsockopt+0x58/0x110 [ 306.984871][T21103] tcp_setsockopt+0x98/0xb0 [ 306.984905][T21103] sock_common_setsockopt+0x69/0x80 [ 306.984963][T21103] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.984989][T21103] __sys_setsockopt+0x184/0x200 [ 306.985044][T21103] __x64_sys_setsockopt+0x64/0x80 [ 306.985136][T21103] x64_sys_call+0x20ec/0x3000 [ 306.985159][T21103] do_syscall_64+0xd2/0x200 [ 306.985233][T21103] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.985262][T21103] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 306.985356][T21103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.985378][T21103] RIP: 0033:0x7f33aa84efc9 [ 306.985393][T21103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.985412][T21103] RSP: 002b:00007f33a92af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.985508][T21103] RAX: ffffffffffffffda RBX: 00007f33aaaa5fa0 RCX: 00007f33aa84efc9 [ 306.985521][T21103] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 306.985607][T21103] RBP: 00007f33a92af090 R08: 0000000000000001 R09: 0000000000000000 [ 306.985619][T21103] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.985633][T21103] R13: 00007f33aaaa6038 R14: 00007f33aaaa5fa0 R15: 00007ffe1990d558 [ 306.985652][T21103] [ 307.316291][T18125] Bluetooth: hci0: sending frame failed (-49) [ 307.329371][T21112] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 307.341944][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 307.505637][T21132] blktrace: Concurrent blktraces are not allowed on sg0 [ 307.532371][T21132] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.7096'. [ 307.570624][T21129] lo speed is unknown, defaulting to 1000 [ 307.576725][T21129] lo speed is unknown, defaulting to 1000 [ 307.576851][T21146] loop3: detected capacity change from 0 to 128 [ 307.805496][T21160] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 307.879709][T21166] netlink: 'syz.0.7109': attribute type 21 has an invalid length. [ 307.887611][T21166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7109'. [ 307.899424][T21166] netlink: 'syz.0.7109': attribute type 4 has an invalid length. [ 307.907307][T21166] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7109'. [ 307.908002][T21168] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 308.004215][T21172] loop3: detected capacity change from 0 to 256 [ 308.018630][T21172] blktrace: Concurrent blktraces are not allowed on sg0 [ 308.028105][T21172] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.7112'. [ 308.253358][T21190] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 308.345231][T21200] uprobe: syz.4.7121:21200 failed to unregister, leaking uprobe [ 308.375194][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 308.549849][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 308.549867][ T29] audit: type=1326 audit(1761267642.167:46651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.585022][ T29] audit: type=1326 audit(1761267642.207:46652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.608900][ T29] audit: type=1326 audit(1761267642.207:46653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.632793][ T29] audit: type=1326 audit(1761267642.207:46654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.656440][ T29] audit: type=1326 audit(1761267642.207:46655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.680110][ T29] audit: type=1326 audit(1761267642.207:46656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.703812][ T29] audit: type=1326 audit(1761267642.207:46657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.727393][ T29] audit: type=1326 audit(1761267642.207:46658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.750983][ T29] audit: type=1326 audit(1761267642.207:46659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.774597][ T29] audit: type=1326 audit(1761267642.207:46660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 308.812132][T21224] lo speed is unknown, defaulting to 1000 [ 308.818343][T21224] lo speed is unknown, defaulting to 1000 [ 308.896889][T21232] lo speed is unknown, defaulting to 1000 [ 308.903100][T21232] lo speed is unknown, defaulting to 1000 [ 309.020571][T21246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.026589][T21245] lo speed is unknown, defaulting to 1000 [ 309.036381][T21245] lo speed is unknown, defaulting to 1000 [ 309.072743][T21247] lo speed is unknown, defaulting to 1000 [ 309.086592][T21247] lo speed is unknown, defaulting to 1000 [ 309.428213][T21255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.525686][T21264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7148'. [ 309.534854][T21264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7148'. [ 309.549627][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 309.550472][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7148'. [ 309.620934][T21272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.631800][T21272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.674257][T21277] lo speed is unknown, defaulting to 1000 [ 309.680536][T21277] lo speed is unknown, defaulting to 1000 [ 309.699683][T21272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.710023][T21272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.737089][T21279] lo speed is unknown, defaulting to 1000 [ 309.743768][T21279] lo speed is unknown, defaulting to 1000 [ 309.751978][T21272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.762384][T21272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.816450][T21272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.826877][T21272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.873766][T10933] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.882064][T10933] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.895912][T10933] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.904177][T10933] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.916686][T10933] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.924941][T10933] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.942689][T10933] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.950900][T10933] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.994903][T21289] FAULT_INJECTION: forcing a failure. [ 309.994903][T21289] name failslab, interval 1, probability 0, space 0, times 0 [ 310.007726][T21289] CPU: 1 UID: 0 PID: 21289 Comm: syz.2.7159 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.007821][T21289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.007837][T21289] Call Trace: [ 310.007844][T21289] [ 310.007854][T21289] __dump_stack+0x1d/0x30 [ 310.007882][T21289] dump_stack_lvl+0xe8/0x140 [ 310.007927][T21289] dump_stack+0x15/0x1b [ 310.007950][T21289] should_fail_ex+0x265/0x280 [ 310.007991][T21289] should_failslab+0x8c/0xb0 [ 310.008105][T21289] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 310.008150][T21289] ? __alloc_skb+0x101/0x320 [ 310.008208][T21289] __alloc_skb+0x101/0x320 [ 310.008311][T21289] ? audit_log_start+0x342/0x720 [ 310.008333][T21289] audit_log_start+0x3a0/0x720 [ 310.008429][T21289] ? kstrtouint+0x76/0xc0 [ 310.008523][T21289] audit_seccomp+0x48/0x100 [ 310.008567][T21289] ? __seccomp_filter+0x82d/0x1250 [ 310.008677][T21289] __seccomp_filter+0x83e/0x1250 [ 310.008795][T21289] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 310.008840][T21289] ? vfs_write+0x7e8/0x960 [ 310.008883][T21289] __secure_computing+0x82/0x150 [ 310.008940][T21289] syscall_trace_enter+0xcf/0x1e0 [ 310.008982][T21289] do_syscall_64+0xac/0x200 [ 310.009007][T21289] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 310.009102][T21289] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 310.009268][T21289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.009297][T21289] RIP: 0033:0x7fbc6051efc9 [ 310.009318][T21289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.009343][T21289] RSP: 002b:00007fbc5ef7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000051 [ 310.009397][T21289] RAX: ffffffffffffffda RBX: 00007fbc60775fa0 RCX: 00007fbc6051efc9 [ 310.009415][T21289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d [ 310.009432][T21289] RBP: 00007fbc5ef7f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.009450][T21289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.009468][T21289] R13: 00007fbc60776038 R14: 00007fbc60775fa0 R15: 00007ffea2882dc8 [ 310.009497][T21289] [ 310.057542][T21292] lo speed is unknown, defaulting to 1000 [ 310.057798][T21292] lo speed is unknown, defaulting to 1000 [ 310.140843][T21296] lo speed is unknown, defaulting to 1000 [ 310.141316][T21296] lo speed is unknown, defaulting to 1000 [ 310.470225][T21307] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 310.505167][T21312] netlink: 'syz.2.7166': attribute type 4 has an invalid length. [ 310.557453][T21321] netlink: 'syz.2.7166': attribute type 4 has an invalid length. [ 310.588994][T21324] lo speed is unknown, defaulting to 1000 [ 310.607196][T21324] lo speed is unknown, defaulting to 1000 [ 310.652810][T21323] loop3: detected capacity change from 0 to 256 [ 310.702867][T21323] blktrace: Concurrent blktraces are not allowed on sg0 [ 310.724739][T21323] netlink: 52083 bytes leftover after parsing attributes in process `syz.3.7171'. [ 310.751527][T21312] lo speed is unknown, defaulting to 1000 [ 310.759053][T21312] lo speed is unknown, defaulting to 1000 [ 310.762068][T21336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7175'. [ 310.818770][T21328] lo speed is unknown, defaulting to 1000 [ 310.830319][T21336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7175'. [ 310.843429][T21328] lo speed is unknown, defaulting to 1000 [ 310.849298][T21336] IPVS: Error connecting to the multicast addr [ 311.336700][T21377] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.436427][T21385] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.642463][T21394] lo speed is unknown, defaulting to 1000 [ 311.649288][T21394] lo speed is unknown, defaulting to 1000 [ 311.765564][T21400] FAULT_INJECTION: forcing a failure. [ 311.765564][T21400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.778721][T21400] CPU: 0 UID: 0 PID: 21400 Comm: syz.0.7197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 311.778788][T21400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.778804][T21400] Call Trace: [ 311.778813][T21400] [ 311.778823][T21400] __dump_stack+0x1d/0x30 [ 311.778849][T21400] dump_stack_lvl+0xe8/0x140 [ 311.778876][T21400] dump_stack+0x15/0x1b [ 311.778900][T21400] should_fail_ex+0x265/0x280 [ 311.779011][T21400] should_fail+0xb/0x20 [ 311.779030][T21400] should_fail_usercopy+0x1a/0x20 [ 311.779055][T21400] strncpy_from_user+0x25/0x230 [ 311.779086][T21400] ? kmem_cache_alloc_noprof+0x242/0x480 [ 311.779290][T21400] ? getname_flags+0x80/0x3b0 [ 311.779404][T21400] getname_flags+0xae/0x3b0 [ 311.779441][T21400] path_setxattrat+0x223/0x310 [ 311.779535][T21400] __x64_sys_lsetxattr+0x71/0x90 [ 311.779595][T21400] x64_sys_call+0x287b/0x3000 [ 311.779620][T21400] do_syscall_64+0xd2/0x200 [ 311.779709][T21400] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 311.779738][T21400] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 311.779779][T21400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.779810][T21400] RIP: 0033:0x7fd1bde8efc9 [ 311.779829][T21400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.779931][T21400] RSP: 002b:00007fd1bc8ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 311.779950][T21400] RAX: ffffffffffffffda RBX: 00007fd1be0e5fa0 RCX: 00007fd1bde8efc9 [ 311.779962][T21400] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000000000000000 [ 311.780022][T21400] RBP: 00007fd1bc8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 311.780034][T21400] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 311.780046][T21400] R13: 00007fd1be0e6038 R14: 00007fd1be0e5fa0 R15: 00007ffdb49fce08 [ 311.780065][T21400] [ 311.812400][T21394] lo speed is unknown, defaulting to 1000 [ 311.973241][T21394] lo speed is unknown, defaulting to 1000 [ 312.131397][T21409] siw: device registration error -23 [ 312.302243][T21434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7209'. [ 312.387906][T21447] lo speed is unknown, defaulting to 1000 [ 312.411548][T21447] lo speed is unknown, defaulting to 1000 [ 312.421355][T21452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.509859][T21453] lo speed is unknown, defaulting to 1000 [ 312.516949][T21453] lo speed is unknown, defaulting to 1000 [ 312.528109][T21463] block device autoloading is deprecated and will be removed. [ 312.640160][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'. [ 312.655587][T21472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21472 comm=syz.2.7223 [ 312.688831][T21474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7226'. [ 312.780048][T21482] netlink: 'syz.1.7229': attribute type 1 has an invalid length. [ 312.787954][T21482] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7229'. [ 312.832646][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7229'. [ 312.880507][T21495] FAULT_INJECTION: forcing a failure. [ 312.880507][T21495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.893807][T21495] CPU: 1 UID: 0 PID: 21495 Comm: syz.3.7234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 312.893873][T21495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.893942][T21495] Call Trace: [ 312.893949][T21495] [ 312.893956][T21495] __dump_stack+0x1d/0x30 [ 312.894024][T21495] dump_stack_lvl+0xe8/0x140 [ 312.894051][T21495] dump_stack+0x15/0x1b [ 312.894070][T21495] should_fail_ex+0x265/0x280 [ 312.894160][T21495] should_fail+0xb/0x20 [ 312.894250][T21495] should_fail_usercopy+0x1a/0x20 [ 312.894276][T21495] _copy_from_user+0x1c/0xb0 [ 312.894307][T21495] ___sys_sendmsg+0xc1/0x1d0 [ 312.894364][T21495] __x64_sys_sendmsg+0xd4/0x160 [ 312.894466][T21495] x64_sys_call+0x191e/0x3000 [ 312.894493][T21495] do_syscall_64+0xd2/0x200 [ 312.894516][T21495] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 312.894548][T21495] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 312.894581][T21495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.894602][T21495] RIP: 0033:0x7f3d50c0efc9 [ 312.894619][T21495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.894642][T21495] RSP: 002b:00007f3d4f677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.894739][T21495] RAX: ffffffffffffffda RBX: 00007f3d50e65fa0 RCX: 00007f3d50c0efc9 [ 312.894754][T21495] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 312.894767][T21495] RBP: 00007f3d4f677090 R08: 0000000000000000 R09: 0000000000000000 [ 312.894779][T21495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.894823][T21495] R13: 00007f3d50e66038 R14: 00007f3d50e65fa0 R15: 00007ffe8076b508 [ 312.894847][T21495] [ 313.111576][T21493] blktrace: Concurrent blktraces are not allowed on sg0 [ 313.131645][T21493] netlink: 52083 bytes leftover after parsing attributes in process `syz.0.7233'. [ 313.170720][T21505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7237'. [ 313.239577][ T3370] IPVS: starting estimator thread 0... [ 313.257713][T21510] lo speed is unknown, defaulting to 1000 [ 313.298217][T21510] lo speed is unknown, defaulting to 1000 [ 313.344656][T21514] IPVS: using max 2400 ests per chain, 120000 per kthread [ 313.423489][T21519] lo speed is unknown, defaulting to 1000 [ 313.429741][T21519] lo speed is unknown, defaulting to 1000 [ 313.555201][T21508] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 313.744535][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 313.744553][ T29] audit: type=1326 audit(1761267647.367:47192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd1bde85e67 code=0x7ffc0000 [ 313.774760][ T29] audit: type=1326 audit(1761267647.367:47193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1bde2b099 code=0x7ffc0000 [ 313.798587][ T29] audit: type=1326 audit(1761267647.367:47194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd1bde85e67 code=0x7ffc0000 [ 313.822195][ T29] audit: type=1326 audit(1761267647.367:47195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1bde2b099 code=0x7ffc0000 [ 313.865158][ T29] audit: type=1326 audit(1761267647.467:47196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 313.888904][ T29] audit: type=1326 audit(1761267647.467:47197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 313.903639][ T3370] hid_parser_main: 19 callbacks suppressed [ 313.903664][ T3370] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 313.912772][ T29] audit: type=1326 audit(1761267647.467:47198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd1bde85e67 code=0x7ffc0000 [ 313.949732][ T29] audit: type=1326 audit(1761267647.467:47199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1bde2b099 code=0x7ffc0000 [ 313.973609][ T29] audit: type=1326 audit(1761267647.467:47200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 313.997688][ T29] audit: type=1326 audit(1761267647.467:47201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.0.7249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 314.007201][ T3370] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.338631][T21557] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 314.465726][T21572] xt_policy: too many policy elements [ 314.766750][T21596] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 314.848892][T21613] siw: device registration error -23 [ 314.923199][T21617] FAULT_INJECTION: forcing a failure. [ 314.923199][T21617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.936421][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz.1.7274 Not tainted syzkaller #0 PREEMPT(voluntary) [ 314.936451][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 314.936505][T21617] Call Trace: [ 314.936514][T21617] [ 314.936537][T21617] __dump_stack+0x1d/0x30 [ 314.936567][T21617] dump_stack_lvl+0xe8/0x140 [ 314.936587][T21617] dump_stack+0x15/0x1b [ 314.936607][T21617] should_fail_ex+0x265/0x280 [ 314.936647][T21617] should_fail+0xb/0x20 [ 314.936663][T21617] should_fail_usercopy+0x1a/0x20 [ 314.936690][T21617] _copy_from_user+0x1c/0xb0 [ 314.936721][T21617] ___sys_sendmsg+0xc1/0x1d0 [ 314.936836][T21617] __x64_sys_sendmsg+0xd4/0x160 [ 314.936883][T21617] x64_sys_call+0x191e/0x3000 [ 314.936913][T21617] do_syscall_64+0xd2/0x200 [ 314.936984][T21617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 314.937019][T21617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 314.937056][T21617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.937084][T21617] RIP: 0033:0x7f6f958aefc9 [ 314.937124][T21617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.937148][T21617] RSP: 002b:00007f6f942ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.937172][T21617] RAX: ffffffffffffffda RBX: 00007f6f95b06090 RCX: 00007f6f958aefc9 [ 314.937188][T21617] RDX: 000000002000c094 RSI: 0000200000000b00 RDI: 0000000000000009 [ 314.937204][T21617] RBP: 00007f6f942ee090 R08: 0000000000000000 R09: 0000000000000000 [ 314.937296][T21617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.937312][T21617] R13: 00007f6f95b06128 R14: 00007f6f95b06090 R15: 00007ffe875ff3e8 [ 314.937337][T21617] [ 315.507545][T21645] lo speed is unknown, defaulting to 1000 [ 315.513831][T21645] lo speed is unknown, defaulting to 1000 [ 315.668181][T21647] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 316.139229][T21706] FAULT_INJECTION: forcing a failure. [ 316.139229][T21706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.153405][T21706] CPU: 1 UID: 0 PID: 21706 Comm: syz.4.7304 Not tainted syzkaller #0 PREEMPT(voluntary) [ 316.153438][T21706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.153457][T21706] Call Trace: [ 316.153465][T21706] [ 316.153474][T21706] __dump_stack+0x1d/0x30 [ 316.153499][T21706] dump_stack_lvl+0xe8/0x140 [ 316.153530][T21706] dump_stack+0x15/0x1b [ 316.153547][T21706] should_fail_ex+0x265/0x280 [ 316.153589][T21706] should_fail+0xb/0x20 [ 316.153604][T21706] should_fail_usercopy+0x1a/0x20 [ 316.153769][T21706] _copy_from_user+0x1c/0xb0 [ 316.153798][T21706] __sys_bpf+0x183/0x7c0 [ 316.153830][T21706] __x64_sys_bpf+0x41/0x50 [ 316.153862][T21706] x64_sys_call+0x2aee/0x3000 [ 316.153906][T21706] do_syscall_64+0xd2/0x200 [ 316.153929][T21706] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 316.153969][T21706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.154028][T21706] RIP: 0033:0x7f33aa84efc9 [ 316.154043][T21706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.154060][T21706] RSP: 002b:00007f33a92af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.154078][T21706] RAX: ffffffffffffffda RBX: 00007f33aaaa5fa0 RCX: 00007f33aa84efc9 [ 316.154173][T21706] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 316.154189][T21706] RBP: 00007f33a92af090 R08: 0000000000000000 R09: 0000000000000000 [ 316.154204][T21706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.154220][T21706] R13: 00007f33aaaa6038 R14: 00007f33aaaa5fa0 R15: 00007ffe1990d558 [ 316.154243][T21706] [ 316.398139][T21720] siw: device registration error -23 [ 316.427029][T21726] __nla_validate_parse: 4 callbacks suppressed [ 316.427071][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7312'. [ 316.449093][T21726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.450309][T21729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7313'. [ 316.466508][T21726] macvlan2: entered promiscuous mode [ 316.471811][T21726] macvlan2: entered allmulticast mode [ 316.478407][T21726] bond1: entered promiscuous mode [ 316.484032][T21726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.492715][T21726] bond1: left promiscuous mode [ 316.501388][T21732] FAULT_INJECTION: forcing a failure. [ 316.501388][T21732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.515076][T21732] CPU: 0 UID: 0 PID: 21732 Comm: syz.4.7313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 316.515175][T21732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.515188][T21732] Call Trace: [ 316.515195][T21732] [ 316.515248][T21732] __dump_stack+0x1d/0x30 [ 316.515272][T21732] dump_stack_lvl+0xe8/0x140 [ 316.515295][T21732] dump_stack+0x15/0x1b [ 316.515313][T21732] should_fail_ex+0x265/0x280 [ 316.515348][T21732] should_fail+0xb/0x20 [ 316.515377][T21732] should_fail_usercopy+0x1a/0x20 [ 316.515398][T21732] _copy_from_user+0x1c/0xb0 [ 316.515424][T21732] ___sys_sendmsg+0xc1/0x1d0 [ 316.515474][T21732] __x64_sys_sendmsg+0xd4/0x160 [ 316.515556][T21732] x64_sys_call+0x191e/0x3000 [ 316.515604][T21732] do_syscall_64+0xd2/0x200 [ 316.515622][T21732] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 316.515651][T21732] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 316.515823][T21732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.515847][T21732] RIP: 0033:0x7f33aa84efc9 [ 316.515911][T21732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.515932][T21732] RSP: 002b:00007f33a928e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.515952][T21732] RAX: ffffffffffffffda RBX: 00007f33aaaa6090 RCX: 00007f33aa84efc9 [ 316.515964][T21732] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 316.515981][T21732] RBP: 00007f33a928e090 R08: 0000000000000000 R09: 0000000000000000 [ 316.515993][T21732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.516052][T21732] R13: 00007f33aaaa6128 R14: 00007f33aaaa6090 R15: 00007ffe1990d558 [ 316.516072][T21732] [ 316.696229][T21729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.725023][T21740] netlink: 'syz.4.7316': attribute type 1 has an invalid length. [ 316.732891][T21740] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7316'. [ 316.771956][T10929] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.797728][T21742] bridge0: entered allmulticast mode [ 316.896061][T21758] pimreg: entered allmulticast mode [ 316.901941][T21758] pimreg: left allmulticast mode [ 316.914398][T21759] uprobe: syz.2.7321:21759 failed to unregister, leaking uprobe [ 317.002176][T21761] lo speed is unknown, defaulting to 1000 [ 317.008287][T21761] lo speed is unknown, defaulting to 1000 [ 317.079641][T21766] lo speed is unknown, defaulting to 1000 [ 317.086001][T21766] lo speed is unknown, defaulting to 1000 [ 317.125943][T21768] pimreg: entered allmulticast mode [ 317.131417][T21768] FAULT_INJECTION: forcing a failure. [ 317.131417][T21768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.144868][T21768] CPU: 0 UID: 0 PID: 21768 Comm: syz.2.7327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 317.144903][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.144920][T21768] Call Trace: [ 317.144928][T21768] [ 317.144937][T21768] __dump_stack+0x1d/0x30 [ 317.145020][T21768] dump_stack_lvl+0xe8/0x140 [ 317.145046][T21768] dump_stack+0x15/0x1b [ 317.145068][T21768] should_fail_ex+0x265/0x280 [ 317.145112][T21768] should_fail+0xb/0x20 [ 317.145137][T21768] should_fail_usercopy+0x1a/0x20 [ 317.145157][T21768] _copy_from_user+0x1c/0xb0 [ 317.145254][T21768] copy_from_sockptr+0x48/0x70 [ 317.145285][T21768] ip_mroute_setsockopt+0x4ba/0x960 [ 317.145315][T21768] do_ip_setsockopt+0xcea/0x2240 [ 317.145437][T21768] ip_setsockopt+0x58/0x110 [ 317.145476][T21768] raw_setsockopt+0xbd/0x150 [ 317.145502][T21768] sock_common_setsockopt+0x69/0x80 [ 317.145529][T21768] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 317.145624][T21768] __sys_setsockopt+0x184/0x200 [ 317.145665][T21768] __x64_sys_setsockopt+0x64/0x80 [ 317.145695][T21768] x64_sys_call+0x20ec/0x3000 [ 317.145783][T21768] do_syscall_64+0xd2/0x200 [ 317.145805][T21768] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 317.145838][T21768] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 317.145896][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.145931][T21768] RIP: 0033:0x7fbc6051efc9 [ 317.145949][T21768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.145971][T21768] RSP: 002b:00007fbc5ef7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.145994][T21768] RAX: ffffffffffffffda RBX: 00007fbc60775fa0 RCX: 00007fbc6051efc9 [ 317.146009][T21768] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000005 [ 317.146061][T21768] RBP: 00007fbc5ef7f090 R08: 0000000000000004 R09: 0000000000000000 [ 317.146074][T21768] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 317.146091][T21768] R13: 00007fbc60776038 R14: 00007fbc60775fa0 R15: 00007ffea2882dc8 [ 317.146115][T21768] [ 317.149234][T21766] lo speed is unknown, defaulting to 1000 [ 317.156764][T21767] pimreg: left allmulticast mode [ 317.378848][T21766] lo speed is unknown, defaulting to 1000 [ 317.502334][T21788] loop3: detected capacity change from 0 to 128 [ 317.687987][T21805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.788660][T21811] FAULT_INJECTION: forcing a failure. [ 317.788660][T21811] name failslab, interval 1, probability 0, space 0, times 0 [ 317.801371][T21811] CPU: 1 UID: 0 PID: 21811 Comm: syz.0.7345 Not tainted syzkaller #0 PREEMPT(voluntary) [ 317.801427][T21811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.801443][T21811] Call Trace: [ 317.801450][T21811] [ 317.801457][T21811] __dump_stack+0x1d/0x30 [ 317.801481][T21811] dump_stack_lvl+0xe8/0x140 [ 317.801502][T21811] dump_stack+0x15/0x1b [ 317.801525][T21811] should_fail_ex+0x265/0x280 [ 317.801561][T21811] should_failslab+0x8c/0xb0 [ 317.801590][T21811] kmem_cache_alloc_noprof+0x50/0x480 [ 317.801735][T21811] ? dup_fd+0x3a/0x540 [ 317.801780][T21811] dup_fd+0x3a/0x540 [ 317.801803][T21811] ? __fget_files+0x184/0x1c0 [ 317.801832][T21811] ksys_unshare+0x346/0x6d0 [ 317.801865][T21811] ? ksys_write+0x192/0x1a0 [ 317.801953][T21811] __x64_sys_unshare+0x1f/0x30 [ 317.801986][T21811] x64_sys_call+0x2915/0x3000 [ 317.802009][T21811] do_syscall_64+0xd2/0x200 [ 317.802039][T21811] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 317.802140][T21811] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 317.802172][T21811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.802216][T21811] RIP: 0033:0x7fd1bde8efc9 [ 317.802231][T21811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.802249][T21811] RSP: 002b:00007fd1bc8ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.802268][T21811] RAX: ffffffffffffffda RBX: 00007fd1be0e5fa0 RCX: 00007fd1bde8efc9 [ 317.802333][T21811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 317.802345][T21811] RBP: 00007fd1bc8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 317.802357][T21811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.802435][T21811] R13: 00007fd1be0e6038 R14: 00007fd1be0e5fa0 R15: 00007ffdb49fce08 [ 317.802455][T21811] [ 318.161839][T21837] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 318.212132][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.221219][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.822648][T18125] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.822959][ T3735] Bluetooth: hci0: command 0x1003 tx timeout [ 318.835888][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 318.835906][ T29] audit: type=1326 audit(1761267652.467:47431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21743 comm="syz.4.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 318.866454][ T29] audit: type=1326 audit(1761267652.467:47432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21743 comm="syz.4.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33aa84efc9 code=0x7ffc0000 [ 318.913436][T21846] uprobe: syz.0.7360:21846 failed to unregister, leaking uprobe [ 319.099400][T21854] FAULT_INJECTION: forcing a failure. [ 319.099400][T21854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.112666][T21854] CPU: 0 UID: 0 PID: 21854 Comm: syz.1.7364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 319.112721][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.112736][T21854] Call Trace: [ 319.112762][T21854] [ 319.112772][T21854] __dump_stack+0x1d/0x30 [ 319.112799][T21854] dump_stack_lvl+0xe8/0x140 [ 319.112823][T21854] dump_stack+0x15/0x1b [ 319.112926][T21854] should_fail_ex+0x265/0x280 [ 319.112970][T21854] should_fail+0xb/0x20 [ 319.112990][T21854] should_fail_usercopy+0x1a/0x20 [ 319.113017][T21854] _copy_from_user+0x1c/0xb0 [ 319.113095][T21854] ___sys_sendmsg+0xc1/0x1d0 [ 319.113180][T21854] __sys_sendmmsg+0x178/0x300 [ 319.113237][T21854] __x64_sys_sendmmsg+0x57/0x70 [ 319.113271][T21854] x64_sys_call+0x1c4a/0x3000 [ 319.113297][T21854] do_syscall_64+0xd2/0x200 [ 319.113362][T21854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 319.113399][T21854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 319.113440][T21854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.113469][T21854] RIP: 0033:0x7f6f958aefc9 [ 319.113524][T21854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.113542][T21854] RSP: 002b:00007f6f9430f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.113562][T21854] RAX: ffffffffffffffda RBX: 00007f6f95b05fa0 RCX: 00007f6f958aefc9 [ 319.113578][T21854] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000005 [ 319.113595][T21854] RBP: 00007f6f9430f090 R08: 0000000000000000 R09: 0000000000000000 [ 319.113610][T21854] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000001 [ 319.113626][T21854] R13: 00007f6f95b06038 R14: 00007f6f95b05fa0 R15: 00007ffe875ff3e8 [ 319.113719][T21854] [ 319.121808][ T29] audit: type=1326 audit(1761267652.737:47433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.173255][T21860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21860 comm=syz.1.7367 [ 319.176068][ T29] audit: type=1326 audit(1761267652.767:47434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.183722][T21860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7367'. [ 319.185313][ T29] audit: type=1326 audit(1761267652.767:47435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.189988][T21860] netem: change failed [ 319.194824][ T29] audit: type=1326 audit(1761267652.767:47436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.204828][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7367'. [ 319.210174][ T29] audit: type=1326 audit(1761267652.767:47437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.210210][ T29] audit: type=1326 audit(1761267652.767:47438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.493657][ T29] audit: type=1326 audit(1761267652.767:47439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bde8efc9 code=0x7ffc0000 [ 319.493689][ T29] audit: type=1326 audit(1761267652.767:47440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21855 comm="syz.0.7365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1bde8d810 code=0x7ffc0000 [ 319.631436][T21879] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.645372][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7372'. [ 319.812077][T21896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7379'. [ 319.844937][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7381'. [ 319.854010][T21900] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7381'. [ 319.863096][T21900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7381'. [ 320.090091][T21925] blktrace: Concurrent blktraces are not allowed on sg0 [ 320.352424][T21948] netlink: 'syz.4.7398': attribute type 4 has an invalid length. [ 320.536797][T21963] FAULT_INJECTION: forcing a failure. [ 320.536797][T21963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.550049][T21963] CPU: 1 UID: 0 PID: 21963 Comm: syz.1.7405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 320.550081][T21963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.550093][T21963] Call Trace: [ 320.550124][T21963] [ 320.550130][T21963] __dump_stack+0x1d/0x30 [ 320.550152][T21963] dump_stack_lvl+0xe8/0x140 [ 320.550175][T21963] dump_stack+0x15/0x1b [ 320.550197][T21963] should_fail_ex+0x265/0x280 [ 320.550307][T21963] should_fail+0xb/0x20 [ 320.550327][T21963] should_fail_usercopy+0x1a/0x20 [ 320.550352][T21963] _copy_from_user+0x1c/0xb0 [ 320.550419][T21963] restore_altstack+0x4b/0x2d0 [ 320.550454][T21963] ? __set_task_blocked+0x23a/0x2a0 [ 320.550505][T21963] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 320.550535][T21963] ? _raw_spin_unlock_irq+0x26/0x50 [ 320.550569][T21963] ? signal_setup_done+0x266/0x290 [ 320.550676][T21963] ? xfd_validate_state+0x45/0xf0 [ 320.550698][T21963] ? fpu__clear_user_states+0x63/0x1e0 [ 320.550727][T21963] ? fpregs_mark_activate+0x66/0x140 [ 320.550825][T21963] ? fpu__clear_user_states+0x63/0x1e0 [ 320.550964][T21963] ? arch_do_signal_or_restart+0x2b5/0x440 [ 320.550994][T21963] ? __rcu_read_unlock+0x4f/0x70 [ 320.551049][T21963] x64_sys_call+0x2d4b/0x3000 [ 320.551114][T21963] do_syscall_64+0xd2/0x200 [ 320.551136][T21963] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 320.551171][T21963] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 320.551204][T21963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.551283][T21963] RIP: 0033:0x7f6f9584b099 [ 320.551303][T21963] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 320.551389][T21963] RSP: 002b:00007f6f9430ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 320.551411][T21963] RAX: ffffffffffffffda RBX: 00007f6f95b05fa0 RCX: 00007f6f9584b099 [ 320.551427][T21963] RDX: 00007f6f9430ea80 RSI: 00007f6f9430ebb0 RDI: 0000000000000021 [ 320.551524][T21963] RBP: 00007f6f9430f090 R08: 0000000000000000 R09: 0000000000000000 [ 320.551539][T21963] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 320.551561][T21963] R13: 00007f6f95b06038 R14: 00007f6f95b05fa0 R15: 00007ffe875ff3e8 [ 320.551581][T21963] [ 320.946427][T21993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21993 comm=syz.0.7416 [ 320.973393][T21993] netem: change failed [ 320.996232][T22000] FAULT_INJECTION: forcing a failure. [ 320.996232][T22000] name failslab, interval 1, probability 0, space 0, times 0 [ 321.009006][T22000] CPU: 1 UID: 0 PID: 22000 Comm: syz.1.7418 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.009033][T22000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.009054][T22000] Call Trace: [ 321.009062][T22000] [ 321.009084][T22000] __dump_stack+0x1d/0x30 [ 321.009112][T22000] dump_stack_lvl+0xe8/0x140 [ 321.009153][T22000] dump_stack+0x15/0x1b [ 321.009176][T22000] should_fail_ex+0x265/0x280 [ 321.009215][T22000] should_failslab+0x8c/0xb0 [ 321.009291][T22000] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 321.009333][T22000] ? sidtab_sid2str_get+0xa0/0x130 [ 321.009364][T22000] kmemdup_noprof+0x2b/0x70 [ 321.009389][T22000] sidtab_sid2str_get+0xa0/0x130 [ 321.009486][T22000] security_sid_to_context_core+0x1eb/0x2e0 [ 321.009526][T22000] security_sid_to_context+0x27/0x40 [ 321.009554][T22000] avc_audit_post_callback+0x10f/0x520 [ 321.009656][T22000] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 321.009700][T22000] common_lsm_audit+0x1bb/0x230 [ 321.009727][T22000] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 321.009888][T22000] slow_avc_audit+0x104/0x140 [ 321.009926][T22000] avc_has_perm+0x13a/0x180 [ 321.009953][T22000] selinux_socket_setsockopt+0x17c/0x1e0 [ 321.009990][T22000] security_socket_setsockopt+0x46/0x80 [ 321.010090][T22000] __sys_setsockopt+0x98/0x200 [ 321.010129][T22000] __x64_sys_setsockopt+0x64/0x80 [ 321.010178][T22000] x64_sys_call+0x20ec/0x3000 [ 321.010239][T22000] do_syscall_64+0xd2/0x200 [ 321.010257][T22000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 321.010291][T22000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 321.010385][T22000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.010412][T22000] RIP: 0033:0x7f6f958aefc9 [ 321.010431][T22000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.010483][T22000] RSP: 002b:00007f6f9430f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 321.010507][T22000] RAX: ffffffffffffffda RBX: 00007f6f95b05fa0 RCX: 00007f6f958aefc9 [ 321.010525][T22000] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000007 [ 321.010537][T22000] RBP: 00007f6f9430f090 R08: 0000000000000430 R09: 0000000000000000 [ 321.010693][T22000] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.010709][T22000] R13: 00007f6f95b06038 R14: 00007f6f95b05fa0 R15: 00007ffe875ff3e8 [ 321.010732][T22000] [ 321.256321][T21991] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 321.356390][T22009] loop3: detected capacity change from 0 to 512 [ 321.358302][T22011] netlink: 'syz.0.7422': attribute type 1 has an invalid length. [ 321.388228][T22009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7423: bg 0: block 393: padding at end of block bitmap is not set [ 321.407675][T22009] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 321.416958][T22009] EXT4-fs (loop3): 2 truncates cleaned up [ 321.423335][T22009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.494372][T22021] lo speed is unknown, defaulting to 1000 [ 321.501090][T22021] lo speed is unknown, defaulting to 1000 [ 321.518545][T22027] __nla_validate_parse: 11 callbacks suppressed [ 321.518632][T22027] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7429'. [ 321.560917][T22030] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 321.590254][T22031] lo speed is unknown, defaulting to 1000 [ 321.596430][T22031] lo speed is unknown, defaulting to 1000 [ 321.680315][T22039] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22039 comm=syz.0.7433 [ 321.695816][T22039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7433'. [ 321.705471][T22039] netem: change failed [ 321.717709][T22034] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 321.754360][T22045] netlink: 'syz.0.7435': attribute type 1 has an invalid length. [ 321.762164][T22045] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7435'. [ 321.787795][T22049] ================================================================== [ 321.795939][T22049] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 321.803521][T22049] [ 321.805848][T22049] write to 0xffff88811d8ada28 of 8 bytes by task 22047 on cpu 0: [ 321.813568][T22049] mas_wr_store_entry+0x1192/0x26e0 [ 321.818787][T22049] mas_store_prealloc+0x74d/0xa80 [ 321.823835][T22049] commit_merge+0x6a5/0x730 [ 321.828350][T22049] vma_expand+0x220/0x320 [ 321.832698][T22049] vma_merge_new_range+0x296/0x310 [ 321.837821][T22049] mmap_region+0xa50/0x1620 [ 321.842335][T22049] do_mmap+0x9b3/0xbe0 [ 321.846407][T22049] vm_mmap_pgoff+0x17a/0x2e0 [ 321.851017][T22049] ksys_mmap_pgoff+0xc2/0x310 [ 321.855707][T22049] x64_sys_call+0x14a3/0x3000 [ 321.860395][T22049] do_syscall_64+0xd2/0x200 [ 321.864909][T22049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.870813][T22049] [ 321.873139][T22049] read to 0xffff88811d8ada28 of 8 bytes by task 22049 on cpu 1: [ 321.880769][T22049] mas_state_walk+0x2f5/0x650 [ 321.885465][T22049] mas_walk+0x60/0x150 [ 321.889553][T22049] lock_vma_under_rcu+0x95/0x170 [ 321.894506][T22049] do_user_addr_fault+0x233/0x1080 [ 321.899627][T22049] exc_page_fault+0x62/0xa0 [ 321.904149][T22049] asm_exc_page_fault+0x26/0x30 [ 321.909005][T22049] [ 321.911339][T22049] value changed: 0x00007fbc5ef5efff -> 0x00007fbc5ef3dfff [ 321.918452][T22049] [ 321.920776][T22049] Reported by Kernel Concurrency Sanitizer on: [ 321.926927][T22049] CPU: 1 UID: 0 PID: 22049 Comm: syz.2.7437 Not tainted syzkaller #0 PREEMPT(voluntary) [ 321.936770][T22049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.946837][T22049] ================================================================== [ 321.955698][T22051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7437'. [ 322.204055][T18338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.622690][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 323.622695][T18125] Bluetooth: hci0: command 0x1003 tx timeout