last executing test programs: 4m14.62127704s ago: executing program 1 (id=357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3, 0x0, 0x75ee}, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10000007, 0x20, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 4m13.506201219s ago: executing program 1 (id=368): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc800) 4m13.474359902s ago: executing program 1 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000880)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000440), r2, 0x0, 0x1, 0x4}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) recvmsg(r5, &(0x7f0000000680)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/22, 0x16}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000540)=""/117, 0x75}], 0x3, &(0x7f0000000600)=""/42, 0x2a}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0xffa8) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000900)='FREEZING\x00', 0x9) 4m13.419932418s ago: executing program 1 (id=372): r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x3f, &(0x7f0000001e80)={0x19, 0x200}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r1], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @jmp={0x5, 0x1, 0xe, 0xb, 0x4, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa06}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[r1], &(0x7f0000000340)=[{0x2, 0x5, 0xb, 0xe}, {0x5, 0x5, 0x7, 0x6}], 0x10, 0x10001}, 0x94) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='fscache_relinquish\x00', r2, 0x0, 0x2}, 0x11) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") 4m13.192884569s ago: executing program 1 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 4m13.154396523s ago: executing program 1 (id=378): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09090000000000000000010000d02200000008410000004c00180000006062726f"], 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000970400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x200101}, {0xeb1, 0x198f}, 0x1001, 0x7}) r6 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xfffffffffffffff7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e219f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x4, 0xfffffffe, 0x0}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000970400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x200101}, {0xeb1, 0x198f}, 0x1001, 0x7}) r6 = fsopen(&(0x7f0000000400)='9p\x00', 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r9, 0x0, 0xfffffffffffffff7}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e219f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) r12 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x4, 0xfffffffe, 0x0}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x13, 0x1, 0xb, 0x7, 0x1, 0xffffffffffffffff, 0x200, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000500"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r4}, 0x38) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x7c8e57edab868d16, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = shmget(0x0, 0x2000, 0x2, &(0x7f0000255000/0x2000)=nil) shmat(r9, &(0x7f0000be0000/0x2000)=nil, 0x6000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) 1m53.491465627s ago: executing program 3 (id=2496): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r2, &(0x7f00000008c0)=[{&(0x7f00000000c0)="e1f2974696ca1e80592ea8b56b2e81775424f87e4faf40519cae84d86d15b291baad164be7075a0ac1731c2d627184f5d9b57ba12920c8", 0x37}, {&(0x7f0000000240)="0edecfae55c987915361e6c6f4a45c27aad3de9fa4a6d5511beec97c5dedcd00848c7158e21c2b0f84dc89ecf01c6652ba474f6b08090f1d397a4b651ca94d6f6b5c43c7af49e6467161b2bebe847a27387e14c1c2c021abc2e03828023974e43c77cdb9efec26a95f7fd299aa7fb76c", 0x70}, {&(0x7f00000004c0)="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", 0xfc}, {&(0x7f0000000980)="72c0f5d5a832676b5ab1e329ff81662a6a0d3f57534e58a7dea20b7b2f94c2e281bb0c223ec226bdce89f5ac46d5ec8af9cbf26ca174a6a1d09bb0467d2155ac4ef15902974545c12918d727add5044a3fe2033a5c7b923318d9432bd362c19f6979ab5ac5761834adeed220d24706dd1dbd10b6958a64285a59143d38387db6938b1459cfe1372c062e6b71a4bf758835bb3c8523a31e7fce7a7b2e61752207db7940fb9a900c1fa12c97e7c9330fe03692395b6178772281856449edc262e022592761a4c12d83c9823fde000000000000", 0xd2}, {&(0x7f0000000700)="7319bb62a90953b0c079d951a90b4bb4e3a927936d8f94081e1f9be2346f37205d9c34ad7efaee9647634969421cad6f5a8ecb7cc6b08c70d52ebd252642c29ffde7e7beed430b87ba051c54dc20e52d0ff1574ace497bb9c9b69672174e758dc9a30dfb4b59ea9bf105aa3005f268b023d97b8d0d6fd37f54004cbb8b14176354dec9d3d5252bba9922663ddd7facf7c4185ad3978f93effe001c09f1b37d2d501cac8d5bf2a094ea74df6593e8b17d4c954380bb7f261e07080b6bc52f458fd0d69a5b1816eff6f03eaf527794caa03d08125a15273a6caf7158ad459252848595940fa12bc5cf0f312827accee70868f5449d9a87b0e445", 0xf9}, {&(0x7f0000000800)="91d63f99d229b44506a5ed50f8ced8094b04daf8ee72eb08e9c5755a4bbca393138acffd2d08e1eb7173b20ee7e590bc1571e0ea2c06bb4cf03ff22ec422089a878b0caade976febc4407ca7a79ea5ab9227378cac1f3f5564182b174b581d6df37ab9a74c4754256bba3a38e327f42cf4bc0be8a1aede8d79d3c27e35057d3f4c21ec0fb5abfbcff2d372239cd57fb92c0f2335cfb5de3fded752bf7d0be25b1386b2", 0xa3}, {&(0x7f0000000140)="ca3dfc9710fa1a690e5b614502d6d52fbeb8088a8662776b30ec87d2aad7", 0x1e}, {&(0x7f0000000940)="382c025512a900d3fed766a4eb30a0724ba2963745a23e2f09550ed9106266", 0x1f}], 0x8, 0x7c00, 0x0, 0xe) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) write$RDMA_USER_CM_CMD_SET_OPTION(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) chdir(&(0x7f0000000540)='./cgroup\x00') setresuid(0xee00, 0xee00, 0x0) rename(&(0x7f0000000200)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x0, &(0x7f0000000bc0)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) bind$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @local}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x1) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000600)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000340)={0xc9, 0x5, 0x3c9c, {0x40, 0x8f}, 0x512, 0xa}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m53.45498963s ago: executing program 3 (id=2498): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080)=0x8, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x327, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x8001}]}, 0x10) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x2, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000200)={0xfffffffffffffff7, 0x0, [0x8, 0x5, 0x138, 0x9], &(0x7f0000000180)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) memfd_create(&(0x7f0000000000), 0x6) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'xfrm0\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x9, 0x9a, "680024ea16ca05a0bd2cbd57806987f0e6dfd96cf9eb6c8824a2d5e636855b0cd6d0e9dd59711c47d2adc6808664879820fc241b351518dfe00dba1444843162397deab2b45701a91a3c0877f34a5c9e80fa4f228d921dfaa9435a21b3487019325605e562b91de29dd8a91a1d7746acb4ffdc9be975d9f21aae34bb13db2922c1e5d4cce862f4939db8a0c4ebde565cbe8142322ca9827487d1"}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m52.884010897s ago: executing program 3 (id=2506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f727405616d653d77696e6e742c757466383d312c73686f72746e616d656277696e39352c73686f72746e616d653d6d697865642c636865636b3d7374726963742c00c54b3acb31535ff7892789784769ecffaa91b8cffbd9ed9eefa02f8dc72b2aeef3773771485a86de2951eff6125c0380aaec1b94253f8cab7be4fd5acc03c6e2057e421f3214a2595e4cd1ba600492aba85e154a4016ec8e343f234e2fadc73e56965021f857b43e03e80906698eb69fe71cf3703298d9"], 0x11, 0x315, &(0x7f0000000180)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x2010, r2, 0x5e74b000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000900), 0x280000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000780)='nomand\x00', 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000740)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1060407, &(0x7f0000000a80)={[{@i_version}, {@lazytime}, {@dax}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@nodelalloc}]}, 0x0, 0x5ad, &(0x7f0000000180)="$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") 1m52.85644408s ago: executing program 3 (id=2507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 1m52.788982606s ago: executing program 3 (id=2508): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180)="247da98000000000000000b1ec511507d12fbb8b4e2099d79d596690d0367b2a9bf334170aae3a69e0f10f60ad1ce5b3955d3ea119acf583f73143b71d0800000000000000fb72815b6a7fe6901d722fecd8eaee9c4124c75dbce09c77c996310a5aa3362eb66cc7d2972ceac102b52f1fcf0832c457e5cda3b96cb71ca0674f6d8a073bb0510bb7288f72a04786c79038982afb121c07687052d3e4db0de6a536bfc7fcbbc7afb039bfc4e7bd818f0aa40000000000", 0x3, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m37.575141881s ago: executing program 33 (id=2508): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180)="247da98000000000000000b1ec511507d12fbb8b4e2099d79d596690d0367b2a9bf334170aae3a69e0f10f60ad1ce5b3955d3ea119acf583f73143b71d0800000000000000fb72815b6a7fe6901d722fecd8eaee9c4124c75dbce09c77c996310a5aa3362eb66cc7d2972ceac102b52f1fcf0832c457e5cda3b96cb71ca0674f6d8a073bb0510bb7288f72a04786c79038982afb121c07687052d3e4db0de6a536bfc7fcbbc7afb039bfc4e7bd818f0aa40000000000", 0x3, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 3.033755712s ago: executing program 4 (id=4224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 2.998989996s ago: executing program 4 (id=4226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.964984429s ago: executing program 4 (id=4229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x1e102, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703f2ff07000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket(0x40000000015, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) 1.987387905s ago: executing program 4 (id=4252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1.779817175s ago: executing program 6 (id=4263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x1e102, 0x0) r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703f2ff07000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket(0x40000000015, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1.672841746s ago: executing program 4 (id=4266): r0 = socket$netlink(0x10, 0x3, 0x8000000004) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x6e, 0x734, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xffffffff, 0x6, 0x1, 0x0, 0x6, 0x100000}, 0x1c) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x9, r6, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x28801a136952e138) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/tty/drivers\x00', 0x0, 0x0) 1.458462507s ago: executing program 2 (id=4271): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r2, 0x7) 1.368786896s ago: executing program 2 (id=4274): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x1ff}, 0x1100, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.297840402s ago: executing program 2 (id=4276): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.250697537s ago: executing program 2 (id=4278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x4000814) 1.191896133s ago: executing program 2 (id=4280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x768, 0x0, 0x288, 0x288, 0x128, 0x5c8, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, &(0x7f0000000240), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, [0xffffffff, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff], 'veth0_macvtap\x00', '\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@srh={{0x30}, {0x0, 0x7, 0x1, 0xe8, 0x4, 0x306, 0x608}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x10001, 0x4, 0x0, [0x4, 0x4, 0x5, 0xcfb, 0x1, 0x7, 0x3fbd, 0x89f, 0x1000, 0x9, 0x11, 0x7, 0xfff7, 0x8, 0x1, 0xe], 0xc}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv6=@local, 0x2a, 0xb, 0x31}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x9bf, [0xdf, 0xfff], 0x1, 0x30, 0x7, [@private0, @loopback, @mcast2, @private1, @empty, @private2, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x43}, @local, @local], 0xe}}, @common=@hl={{0x28}, {0x3, 0xe}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x40}, @ipv4=@rand_addr=0x64010102, 0xf, 0x22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5, 0x5, 0x80}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7c8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x2c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x7}, @in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @remote}, 0x5ecd}}, 0x24000, 0x6, 0x1000, 0x8, 0x40, 0x5, 0x1}, 0x9c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0}) 1.02049044s ago: executing program 0 (id=4283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@routing={0x84, 0x2, 0x1, 0x5, 0x0, [@mcast2]}]}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f0000000940)="de3f6342d9661df8b482ec79c636aa7d438d0735a48e9ac1b0f8a3f8559fab1d50884c643a95332daa117f8645ac00d88a381290c7fa262063bf785d57e1d225d3c5cd687ee1fe5ed2fec2de6a3b9a609047db132bafc8dd036e2848510344fbbb9ac8f6321809264eaed412319c6625bab1507de8407b9c491e72ae1e2d0e"}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001040)={0x0, 0x8, @status={[0x3, 0x0, 0x3f6, 0x8e, 0xf, 0x1000]}, [0x2, 0x3, 0x8000, 0x224, 0x6, 0x6, 0x7ff, 0x1, 0x7, 0x8, 0x6, 0x401, 0x0, 0x9, 0x81, 0xffff, 0x4, 0x1, 0x0, 0x6, 0x5, 0x7, 0xfffffffffffffffd, 0xf0cc, 0x9, 0x101, 0xfff, 0x0, 0x3, 0x0, 0xa, 0x4, 0x1, 0x4, 0x2dfa, 0x3, 0x0, 0x101, 0x9, 0x8, 0x7f, 0xdd3, 0xb, 0x82, 0x2, 0x2, 0x9, 0x6b, 0x3, 0x4, 0x40c, 0xf4f, 0xe365, 0xfffffffffffffffd, 0x3, 0x40000, 0xd, 0x7, 0x2, 0x80000001, 0xee, 0xfffffffffffffff7, 0xdf, 0x56a]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a00)=@newtaction={0x280, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x26c, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x94, 0xc, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x168, 0x2, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x30}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @random="8e626b6bfbf7"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}, 0x1}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x1, 0x4}, 0x1}}]}, {0x92, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc0e3261b4596fbfbc0d19da37719c7dae4fc8e453fa633c7fd941086e3a72eaace8b91ccace63675f74944e81a9c807e2e4fbfbfd06a5fa8083ba3da79908908e58145dc1ca9b47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0x0, {{0x22, 0x4, 0x2, 0x1d, 0x88, 0x67, 0x0, 0xd4, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x31}, @lsrr={0x83, 0x1, 0x94, [@rand_addr=0x64010100, @local, @local, @local, @remote, @broadcast, @rand_addr=0x64010100, @loopback]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x0, 0xad, [@multicast1, @broadcast, @empty, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc0}, @loopback, @broadcast]}, @end, @timestamp={0x44, 0x0, 0x9d, 0x0, 0x1, [0x8e]}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "40982b1277ef3f"}]}, @ra={0x94, 0x4, 0x2}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x80, 0x0, 0x401, 0x399, {{0xa, 0x4, 0x1, 0x2f, 0x28, 0x64, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@lsrr={0x83, 0xb, 0xdc, [@multicast1, @multicast1]}, @timestamp={0x44, 0x8, 0x47, 0x0, 0x8, [0x2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0xae, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, &(0x7f0000000680)='GPL\x00', 0x80000001, 0x2f, &(0x7f0000000780)=""/47, 0x40f00, 0x0, '\x00', r11, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12}, 0x94) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0xb8, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 940.680358ms ago: executing program 0 (id=4284): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) 899.091252ms ago: executing program 0 (id=4285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 898.403992ms ago: executing program 0 (id=4286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x40) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$inet6(r1, 0x0, 0x200440c0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 834.714388ms ago: executing program 6 (id=4288): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x8}, 0x808, 0xa88, 0x8406, 0x3, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x7) dup2(r0, r2) unshare(0x2c020400) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) unlink(&(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001480)=""/110, 0x6e}, {&(0x7f0000001500)=""/54, 0x36}, {&(0x7f0000001540)=""/242, 0xf2}], 0x3, 0x0, 0x0, 0x500}, 0x40000000) 678.805584ms ago: executing program 6 (id=4291): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 602.075201ms ago: executing program 4 (id=4292): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x1, 0x400000a2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x146, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x13, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 600.640361ms ago: executing program 6 (id=4294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x141341) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000040300004802c0001800a00410071756f74610000001c0002800c00044000000000000000050c00014000000000000000050900010073799d30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x48) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 560.493015ms ago: executing program 0 (id=4295): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x6}, 0x18) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) 559.552356ms ago: executing program 2 (id=4296): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='kfree\x00'}, 0x18) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x8020a0, &(0x7f00000006c0)=ANY=[], 0x1, 0x3c1, &(0x7f00000008c0)="$eJzs3U2PU9UbAPCnHWgH/v+hLIyJGuMJbnTTDPgFmBhIjJNogBp0YXKRjjZTpqRtxpQYwZVbPwdx6c7E+AVY4N6dOzYuWRiuae8ttAMOvrRU4u+XzNyn95xnzrmveTbTc+/yN9d2dwb1nWwY1bMpqhFRvR9xchIVKuW2OolrMetWvNm4/POrFz/86N2t7e1zF1I6v3XprTMppROv/fD5F9+e+nH4vw++O/F9Pe6c/Pjer2d+ufPinZfuPbj0WWeQOoO01xumLF3p9YbZlW47Xe0Mdpspvd9tZ4N26uwN2v259p1u7/r1Ucr2rm4cv95vDwYp2xul3fYoDXtp2B+l7NOss5eazWbaOB7cfEp76/aFC9lWEa8f0u/sIifFwh05tLXf38rGz3D9sZbW7SVOCgD4lyrr/2ZR/8dfqf9vjX/VDtb/F8vWP1H/T/9SWd8fHceH1P8b6v9Fm63/S5WVTYYlGdf/tfL5nVFX/wMAAAAAAAAAAAAAwPPhfp438jxvTLd5PSIq5f8T53lj1fNjuR67/gd+Vj0/lmvmizvWI7pf77f2W8W2aN/aiU50ox2b0Yjfxq+EqSI+/872uc00UYmNazcn+afuRrRq8/mnoxEnZ/LXJ++XSf7pIj+V+Semczs+m38mGvHCk8fP63P5rYjxthZvvD6T34xG/PRJ9KIbVydDP8r/8nRKb7+3fSC/PukHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9DM029EsW69/utiGOx31or2h91qJQp5fr4xYeH6+tvRjXiyevzb6Z87fH1+Y/Ey0dWdtgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGcwurGbdbvt/tKCtfk90zX/J3tq0+CP0ytF91sHmo7F00a/u9CjqC7qtDzI83xZJ3x9yZdygcHRiMOuYF7eJf98rP9HxCF96hFR7Bnfi8/2JHz1zJ7BvxOs4m0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq/Vo0e/icyUqq54SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzAY3djNut12fzC6UY0yeLjnScFaPL3PfLDqYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHie/B4AAP//hpn9uw==") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x2, 0xff, 0x5, 0x2}, {0x71, 0xe, 0x2}, {0x7, 0xf, 0xbe, 0x2}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000440)='./file0\x00', 0x200080, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x100fb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffe0}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0xb6, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x7800, 0x20, 0xc, 0xbd70, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x65, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x75, 0x3, 0x5}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_setup(0x202, &(0x7f0000000200)) readlinkat(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000001880)=""/4096, 0x1000) 497.048941ms ago: executing program 0 (id=4298): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) tkill(r0, 0x1b) 495.925431ms ago: executing program 6 (id=4299): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x1e102, 0x0) r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703f2ff07000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket(0x40000000015, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 397.177201ms ago: executing program 5 (id=4301): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 361.103945ms ago: executing program 5 (id=4302): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x8}, 0x808, 0xa88, 0x8406, 0x3, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x7) unshare(0x2c020400) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) unlink(&(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001480)=""/110, 0x6e}, {&(0x7f0000001500)=""/54, 0x36}, {&(0x7f0000001540)=""/242, 0xf2}], 0x3, 0x0, 0x0, 0x500}, 0x40000000) 283.130552ms ago: executing program 5 (id=4303): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4000814) 263.611195ms ago: executing program 6 (id=4304): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x24849, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={0x0, 0x2}, 0x10080, 0x3, 0x5, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xc04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080)="e29779d433f9cd32fb61967272", 0x0}, 0x56) sendto$inet(r0, 0x0, 0x0, 0x240047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a40100001600010e28bd7000fedbdf25ac1e0101000000000000000000000000fc01002100044e2400000a00800016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141434000000000000000000000000000004d66c000000640101020000000000000000000000000900000000000000040000000000000006000000000000000f000000000000000400000000000000080000000000000007000000000000000400000000000000fcffffffffffffff07000000000000000600000000000000aefd0c4300000000010400007fffffffb600000029bd7000053500000200030a400000000000000007000000ff7f0000ac00070020010000000000000000000000000000fc0200000000000000000000000000004e20000c4e2400030a00200004000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="050000000000000003000000000000000700000000004e2a429d91d6ebe900000000000000000000fd69ffffffffffff06000000080000000b00000000000000ffffffff000000001400000000000000ff07000000000000060000000000000e08800000bd6b6e00000003030000000048d715ce77abffb1072ce8a2016e05d7304c2041bb907ac4af7c0948d601c703459229881982823713247fe61826574089d6350f778cf1"], 0x1a4}, 0x1, 0x0, 0x0, 0xfa7a31136e36d11}, 0x8000) write$binfmt_elf32(r3, &(0x7f0000000640)=ANY=[@ANYRES8=r2], 0x158) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000796000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x20010, r1, 0xb0bba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x6c) openat(0xffffffffffffff9c, 0x0, 0x141842, 0xe5) syz_open_dev$usbfs(0x0, 0x205, 0x8401) 207.91401ms ago: executing program 5 (id=4305): madvise(&(0x7f0000517000/0x3000)=nil, 0x3000, 0x66) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2e", 0xe}, {&(0x7f0000000080)="00000079cebad5295c38c84e64bae6dd00", 0x11}, {&(0x7f0000000280)="ed50501edfec8b22dbf61fb4885ae70b3c56cadb61301d0913a25cd9df7db64e3790c1a402c8b2036f83b6b38e37f76e38d70047f831f1e316ae21f3814424bf36725ebc587f4a7c03c589b5f98dac23197032da9e183acfcb370a887833c6e5055625099f74822b972f3efa7f", 0x6d}], 0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r7, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) 101.13958ms ago: executing program 5 (id=4306): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRES8=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000a00)=', priority 0 [ 245.443622][T14045] syzkaller0: entered promiscuous mode [ 245.450551][T14045] syzkaller0: entered allmulticast mode [ 245.468699][T14045] tipc: Resetting bearer [ 245.499251][T14045] tipc: Resetting bearer [ 245.515095][T14045] tipc: Disabling bearer [ 245.708978][T14049] x_tables: duplicate underflow at hook 1 [ 245.719506][T14049] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.738102][T14049] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 246.372838][T14077] veth0_to_team: entered promiscuous mode [ 246.523211][T14098] tipc: Started in network mode [ 246.529645][T14098] tipc: Node identity 2d57e396000000000000000000000013, cluster identity 4711 [ 246.540118][T14098] tipc: Enabling of bearer rejected, failed to enable media [ 246.822647][T14113] netlink: 'syz.4.3175': attribute type 1 has an invalid length. [ 246.849912][T14113] serio: Serial port ptm0 [ 247.473621][ T29] kauditd_printk_skb: 1066 callbacks suppressed [ 247.473664][ T29] audit: type=1326 audit(2000000021.287:17673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515228][ T29] audit: type=1400 audit(2000000021.287:17674): avc: denied { ioctl } for pid=14136 comm="syz.6.3185" path="socket:[39425]" dev="sockfs" ino=39425 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.515318][ T29] audit: type=1326 audit(2000000021.327:17675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515348][ T29] audit: type=1326 audit(2000000021.327:17676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515404][ T29] audit: type=1400 audit(2000000021.327:17677): avc: denied { nlmsg_read } for pid=14145 comm="syz.5.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.515441][ T29] audit: type=1326 audit(2000000021.327:17678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515556][ T29] audit: type=1326 audit(2000000021.327:17679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515633][ T29] audit: type=1326 audit(2000000021.327:17680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515698][ T29] audit: type=1326 audit(2000000021.327:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.515731][ T29] audit: type=1326 audit(2000000021.327:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14136 comm="syz.6.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 247.563701][T14149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14149 comm=syz.5.3188 [ 248.260514][T14181] netlink: 'syz.6.3201': attribute type 13 has an invalid length. [ 248.335335][T14181] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.342633][T14181] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.479818][T14181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.509507][T14181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.624403][T11214] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.645176][T11214] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.667444][T11214] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.688593][T11214] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.780310][T14191] netlink: 'syz.6.3205': attribute type 21 has an invalid length. [ 248.859413][T14195] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=14195 comm=syz.6.3206 [ 249.269161][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.277940][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.286035][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.291943][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.500350][T14216] __nla_validate_parse: 24 callbacks suppressed [ 249.500389][T14216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3215'. [ 249.574818][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3209'. [ 249.621932][T14227] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3215'. [ 249.655386][T14229] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3217'. [ 249.703795][T14233] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 249.714861][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3219'. [ 249.838424][T14238] @0: renamed from bond_slave_1 (while UP) [ 249.928519][T14246] FAULT_INJECTION: forcing a failure. [ 249.928519][T14246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.943068][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.6.3224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.943166][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.943180][T14246] Call Trace: [ 249.943185][T14246] [ 249.943193][T14246] __dump_stack+0x1d/0x30 [ 249.943223][T14246] dump_stack_lvl+0xe8/0x140 [ 249.943249][T14246] dump_stack+0x15/0x1b [ 249.943278][T14246] should_fail_ex+0x265/0x280 [ 249.943324][T14246] should_fail+0xb/0x20 [ 249.943406][T14246] should_fail_usercopy+0x1a/0x20 [ 249.943447][T14246] _copy_to_user+0x20/0xa0 [ 249.943473][T14246] simple_read_from_buffer+0xb5/0x130 [ 249.943531][T14246] proc_fail_nth_read+0x10e/0x150 [ 249.943571][T14246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.943652][T14246] vfs_read+0x1a5/0x770 [ 249.943676][T14246] ? __rcu_read_unlock+0x4f/0x70 [ 249.943766][T14246] ? __fget_files+0x184/0x1c0 [ 249.943803][T14246] ksys_read+0xda/0x1a0 [ 249.943835][T14246] __x64_sys_read+0x40/0x50 [ 249.943861][T14246] x64_sys_call+0x27c0/0x3000 [ 249.943883][T14246] do_syscall_64+0xd2/0x200 [ 249.943926][T14246] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 249.943980][T14246] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 249.944010][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.944037][T14246] RIP: 0033:0x7f19cdc5d8dc [ 249.944058][T14246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.944116][T14246] RSP: 002b:00007f19cc6c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.944140][T14246] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5d8dc [ 249.944158][T14246] RDX: 000000000000000f RSI: 00007f19cc6c70a0 RDI: 0000000000000007 [ 249.944175][T14246] RBP: 00007f19cc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 249.944261][T14246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.944278][T14246] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 249.944304][T14246] [ 250.432700][ T1037] IPVS: starting estimator thread 0... [ 250.547552][T14271] IPVS: using max 2352 ests per chain, 117600 per kthread [ 250.594805][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 250.638825][T14287] tmpfs: Bad value for 'mpol' [ 250.651407][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3237'. [ 250.651666][T14287] netlink: 'syz.0.3238': attribute type 21 has an invalid length. [ 250.718636][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3238'. [ 250.729345][T14287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3238'. [ 250.740021][T14289] netlink: 'syz.4.3239': attribute type 12 has an invalid length. [ 250.749637][T14289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3239'. [ 250.958645][T14305] netlink: zone id is out of range [ 250.962586][T14307] netlink: 'syz.4.3245': attribute type 21 has an invalid length. [ 250.963990][T14305] netlink: zone id is out of range [ 250.980172][T14305] netlink: set zone limit has 8 unknown bytes [ 251.701075][T14345] $H: renamed from bond0 (while UP) [ 251.712701][T14345] $H: entered promiscuous mode [ 251.719494][T14345] bond_slave_0: entered promiscuous mode [ 251.725343][T14345] bond_slave_1: entered promiscuous mode [ 252.624395][T14410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14410 comm=syz.2.3288 [ 252.688342][T14417] C: renamed from team_slave_0 [ 252.703044][T14417] netlink: 'syz.6.3290': attribute type 3 has an invalid length. [ 252.712453][T14417] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 252.753365][ T29] kauditd_printk_skb: 1621 callbacks suppressed [ 252.753400][ T29] audit: type=1400 audit(2000000026.567:19304): avc: denied { kexec_image_load } for pid=14416 comm="syz.6.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 252.804328][ T29] audit: type=1326 audit(2000000026.607:19305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.829626][ T29] audit: type=1326 audit(2000000026.607:19306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.854884][ T29] audit: type=1326 audit(2000000026.607:19307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.880548][ T29] audit: type=1326 audit(2000000026.607:19308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.905713][ T29] audit: type=1326 audit(2000000026.607:19309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.930931][ T29] audit: type=1326 audit(2000000026.607:19310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.955973][ T29] audit: type=1326 audit(2000000026.607:19311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 252.980934][ T29] audit: type=1326 audit(2000000026.607:19312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 253.006175][ T29] audit: type=1326 audit(2000000026.607:19313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.4.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 253.039703][ T3386] IPVS: starting estimator thread 0... [ 253.073809][T14435] C: renamed from team_slave_0 (while UP) [ 253.083211][T14435] netlink: 'syz.0.3295': attribute type 3 has an invalid length. [ 253.083229][T14435] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.137424][T14431] IPVS: using max 2352 ests per chain, 117600 per kthread [ 253.231935][T14446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.271144][T14448] dvmrp0: entered allmulticast mode [ 253.278053][T14449] dvmrp0: left allmulticast mode [ 253.395329][T14458] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.602924][T14465] lo speed is unknown, defaulting to 1000 [ 253.699299][T14480] lo speed is unknown, defaulting to 1000 [ 253.852455][T14489] lo speed is unknown, defaulting to 1000 [ 254.415370][T14500] lo speed is unknown, defaulting to 1000 [ 254.670991][T14508] netlink: 'syz.2.3322': attribute type 6 has an invalid length. [ 254.671013][T14508] __nla_validate_parse: 15 callbacks suppressed [ 254.671028][T14508] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3322'. [ 254.787937][T14517] tipc: Enabling of bearer rejected, failed to enable media [ 254.798622][T14486] syz.6.3314 (14486) used greatest stack depth: 6360 bytes left [ 254.953122][T14539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3332'. [ 255.065079][T14539] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14539 comm=syz.4.3332 [ 255.887463][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3348'. [ 255.951062][T14585] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14585 comm=syz.6.3348 [ 256.034899][T14548] syz.0.3335 (14548) used greatest stack depth: 6312 bytes left [ 256.052690][T14590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 256.200168][T14601] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 256.401445][T14610] 9pnet: Could not find request transport: 0xffffffffffffffff [ 256.422064][T14610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3358'. [ 256.423461][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3359'. [ 256.580882][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3361'. [ 256.887697][T14615] vlan2: entered allmulticast mode [ 257.005175][T14630] tmpfs: Bad value for 'mpol' [ 257.083528][T14636] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.3367'. [ 257.395269][T14654] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 257.809295][T14672] lo speed is unknown, defaulting to 1000 [ 258.454500][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'. [ 258.471263][T14688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65524 sclass=netlink_route_socket pid=14688 comm=syz.4.3382 [ 258.498051][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3385'. [ 258.522385][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 258.522404][ T29] audit: type=1326 audit(2000000032.337:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.554879][ T29] audit: type=1326 audit(2000000032.337:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.581966][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'. [ 258.593861][T14688] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 258.605581][T14688] SELinux: failed to load policy [ 258.647657][ T29] audit: type=1326 audit(2000000032.337:19693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.672568][ T29] audit: type=1326 audit(2000000032.337:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.697269][ T29] audit: type=1326 audit(2000000032.337:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.722440][ T29] audit: type=1326 audit(2000000032.337:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.747416][ T29] audit: type=1326 audit(2000000032.337:19697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.772437][ T29] audit: type=1326 audit(2000000032.337:19698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.799004][ T29] audit: type=1326 audit(2000000032.337:19699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.824461][ T29] audit: type=1326 audit(2000000032.337:19700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14689 comm="syz.0.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x50000 [ 258.873740][T14694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14694 comm=syz.4.3386 [ 259.003235][T14700] x_tables: duplicate underflow at hook 2 [ 259.441417][T14724] FAULT_INJECTION: forcing a failure. [ 259.441417][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.456973][T14724] CPU: 1 UID: 0 PID: 14724 Comm: syz.4.3400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.457056][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.457074][T14724] Call Trace: [ 259.457082][T14724] [ 259.457092][T14724] __dump_stack+0x1d/0x30 [ 259.457120][T14724] dump_stack_lvl+0xe8/0x140 [ 259.457145][T14724] dump_stack+0x15/0x1b [ 259.457167][T14724] should_fail_ex+0x265/0x280 [ 259.457235][T14724] should_fail+0xb/0x20 [ 259.457285][T14724] should_fail_usercopy+0x1a/0x20 [ 259.457313][T14724] _copy_from_user+0x1c/0xb0 [ 259.457348][T14724] vmemdup_user+0x5e/0xd0 [ 259.457404][T14724] path_setxattrat+0x1b6/0x310 [ 259.457520][T14724] __x64_sys_lsetxattr+0x71/0x90 [ 259.457554][T14724] x64_sys_call+0x287b/0x3000 [ 259.457583][T14724] do_syscall_64+0xd2/0x200 [ 259.457615][T14724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.457668][T14724] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.457693][T14724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.457718][T14724] RIP: 0033:0x7fbf6152eec9 [ 259.457735][T14724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.457770][T14724] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 259.457823][T14724] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 259.457840][T14724] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900 [ 259.457856][T14724] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.457868][T14724] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 259.457879][T14724] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 259.457900][T14724] [ 259.713966][T14732] __nla_validate_parse: 2 callbacks suppressed [ 259.713981][T14732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3402'. [ 259.723048][T14733] SELinux: Context system_u:object is not valid (left unmapped). [ 259.959531][T14749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3410'. [ 260.591528][T14774] netlink: 'syz.5.3416': attribute type 1 has an invalid length. [ 260.600815][T14774] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3416'. [ 261.138603][T14791] FAULT_INJECTION: forcing a failure. [ 261.138603][T14791] name failslab, interval 1, probability 0, space 0, times 0 [ 261.152846][T14791] CPU: 0 UID: 0 PID: 14791 Comm: syz.5.3423 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.152889][T14791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.152907][T14791] Call Trace: [ 261.152916][T14791] [ 261.152927][T14791] __dump_stack+0x1d/0x30 [ 261.152956][T14791] dump_stack_lvl+0xe8/0x140 [ 261.152982][T14791] dump_stack+0x15/0x1b [ 261.152998][T14791] should_fail_ex+0x265/0x280 [ 261.153057][T14791] should_failslab+0x8c/0xb0 [ 261.153089][T14791] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 261.153127][T14791] ? __alloc_skb+0x101/0x320 [ 261.153197][T14791] __alloc_skb+0x101/0x320 [ 261.153233][T14791] netlink_alloc_large_skb+0xbf/0xf0 [ 261.153260][T14791] netlink_sendmsg+0x3cf/0x6b0 [ 261.153297][T14791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.153332][T14791] __sock_sendmsg+0x145/0x180 [ 261.153429][T14791] ____sys_sendmsg+0x31e/0x4e0 [ 261.153461][T14791] ___sys_sendmsg+0x17b/0x1d0 [ 261.153509][T14791] __x64_sys_sendmsg+0xd4/0x160 [ 261.153597][T14791] x64_sys_call+0x191e/0x3000 [ 261.153619][T14791] do_syscall_64+0xd2/0x200 [ 261.153650][T14791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.153747][T14791] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.153776][T14791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.153800][T14791] RIP: 0033:0x7fef7d91eec9 [ 261.153816][T14791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.153835][T14791] RSP: 002b:00007fef7c387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.153855][T14791] RAX: ffffffffffffffda RBX: 00007fef7db75fa0 RCX: 00007fef7d91eec9 [ 261.153915][T14791] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 261.153929][T14791] RBP: 00007fef7c387090 R08: 0000000000000000 R09: 0000000000000000 [ 261.153947][T14791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.153960][T14791] R13: 00007fef7db76038 R14: 00007fef7db75fa0 R15: 00007ffd8967ef68 [ 261.154046][T14791] [ 261.948725][T14816] Invalid ELF header magic: != ELF [ 261.996392][T14826] FAULT_INJECTION: forcing a failure. [ 261.996392][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 262.010665][T14826] CPU: 0 UID: 0 PID: 14826 Comm: syz.6.3436 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.010710][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.010727][T14826] Call Trace: [ 262.010736][T14826] [ 262.010747][T14826] __dump_stack+0x1d/0x30 [ 262.010774][T14826] dump_stack_lvl+0xe8/0x140 [ 262.010824][T14826] dump_stack+0x15/0x1b [ 262.010842][T14826] should_fail_ex+0x265/0x280 [ 262.010888][T14826] should_failslab+0x8c/0xb0 [ 262.011003][T14826] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 262.011043][T14826] ? __get_vm_area_node+0x106/0x1d0 [ 262.011083][T14826] __get_vm_area_node+0x106/0x1d0 [ 262.011142][T14826] __vmalloc_node_range_noprof+0x28c/0xed0 [ 262.011175][T14826] ? do_replace+0x188/0x320 [ 262.011207][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.011266][T14826] ? avc_has_perm+0xf7/0x180 [ 262.011407][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.011439][T14826] ? avc_has_perm_noaudit+0x1b1/0x200 [ 262.011481][T14826] ? do_replace+0x188/0x320 [ 262.011523][T14826] __vmalloc_noprof+0x83/0xc0 [ 262.011588][T14826] ? do_replace+0x188/0x320 [ 262.011632][T14826] do_replace+0x188/0x320 [ 262.011669][T14826] do_ebt_set_ctl+0x12e/0xac0 [ 262.011754][T14826] ? _parse_integer_limit+0x170/0x190 [ 262.011796][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.011828][T14826] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 262.012028][T14826] ? ip4_datagram_release_cb+0x351/0x380 [ 262.012064][T14826] ? _parse_integer+0x27/0x40 [ 262.012158][T14826] ? lock_sock_nested+0x112/0x140 [ 262.012179][T14826] ? _raw_spin_unlock_bh+0x36/0x40 [ 262.012238][T14826] ? release_sock+0x116/0x150 [ 262.012260][T14826] ? sockopt_release_sock+0x42/0x50 [ 262.012284][T14826] ? do_ip_setsockopt+0x1af3/0x2240 [ 262.012318][T14826] nf_setsockopt+0x199/0x1b0 [ 262.012364][T14826] ip_setsockopt+0x102/0x110 [ 262.012458][T14826] udp_setsockopt+0x99/0xb0 [ 262.012485][T14826] sock_common_setsockopt+0x69/0x80 [ 262.012513][T14826] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.012617][T14826] __sys_setsockopt+0x184/0x200 [ 262.012678][T14826] __x64_sys_setsockopt+0x64/0x80 [ 262.012715][T14826] x64_sys_call+0x20ec/0x3000 [ 262.012741][T14826] do_syscall_64+0xd2/0x200 [ 262.012914][T14826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.012950][T14826] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 262.012979][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.013008][T14826] RIP: 0033:0x7f19cdc5eec9 [ 262.013139][T14826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.013166][T14826] RSP: 002b:00007f19cc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.013192][T14826] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5eec9 [ 262.013209][T14826] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.013226][T14826] RBP: 00007f19cc6c7090 R08: 0000000000000108 R09: 0000000000000000 [ 262.013295][T14826] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 262.013311][T14826] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 262.013336][T14826] [ 262.013346][T14826] syz.6.3436: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 262.391851][T14826] CPU: 0 UID: 0 PID: 14826 Comm: syz.6.3436 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.391884][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.391897][T14826] Call Trace: [ 262.391904][T14826] [ 262.391913][T14826] __dump_stack+0x1d/0x30 [ 262.391940][T14826] dump_stack_lvl+0xe8/0x140 [ 262.391974][T14826] dump_stack+0x15/0x1b [ 262.392052][T14826] warn_alloc+0x12b/0x1a0 [ 262.392089][T14826] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 262.392126][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.392217][T14826] ? avc_has_perm+0xf7/0x180 [ 262.392256][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.392288][T14826] ? avc_has_perm_noaudit+0x1b1/0x200 [ 262.392331][T14826] ? do_replace+0x188/0x320 [ 262.392365][T14826] __vmalloc_noprof+0x83/0xc0 [ 262.392400][T14826] ? do_replace+0x188/0x320 [ 262.392493][T14826] do_replace+0x188/0x320 [ 262.392543][T14826] do_ebt_set_ctl+0x12e/0xac0 [ 262.392636][T14826] ? _parse_integer_limit+0x170/0x190 [ 262.392675][T14826] ? __rcu_read_unlock+0x4f/0x70 [ 262.392750][T14826] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 262.392791][T14826] ? ip4_datagram_release_cb+0x351/0x380 [ 262.392874][T14826] ? _parse_integer+0x27/0x40 [ 262.392916][T14826] ? lock_sock_nested+0x112/0x140 [ 262.392940][T14826] ? _raw_spin_unlock_bh+0x36/0x40 [ 262.392980][T14826] ? release_sock+0x116/0x150 [ 262.393078][T14826] ? sockopt_release_sock+0x42/0x50 [ 262.393104][T14826] ? do_ip_setsockopt+0x1af3/0x2240 [ 262.393139][T14826] nf_setsockopt+0x199/0x1b0 [ 262.393207][T14826] ip_setsockopt+0x102/0x110 [ 262.393241][T14826] udp_setsockopt+0x99/0xb0 [ 262.393271][T14826] sock_common_setsockopt+0x69/0x80 [ 262.393292][T14826] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.393373][T14826] __sys_setsockopt+0x184/0x200 [ 262.393411][T14826] __x64_sys_setsockopt+0x64/0x80 [ 262.393543][T14826] x64_sys_call+0x20ec/0x3000 [ 262.393565][T14826] do_syscall_64+0xd2/0x200 [ 262.393588][T14826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.393656][T14826] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 262.393680][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.393707][T14826] RIP: 0033:0x7f19cdc5eec9 [ 262.393727][T14826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.393751][T14826] RSP: 002b:00007f19cc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.393775][T14826] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5eec9 [ 262.393807][T14826] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 262.393823][T14826] RBP: 00007f19cc6c7090 R08: 0000000000000108 R09: 0000000000000000 [ 262.393838][T14826] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 262.393850][T14826] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 262.393869][T14826] [ 262.393887][T14826] Mem-Info: [ 262.718560][T14826] active_anon:14223 inactive_anon:9065 isolated_anon:0 [ 262.718560][T14826] active_file:12812 inactive_file:12627 isolated_file:0 [ 262.718560][T14826] unevictable:16374 dirty:222 writeback:0 [ 262.718560][T14826] slab_reclaimable:3852 slab_unreclaimable:71975 [ 262.718560][T14826] mapped:39688 shmem:9246 pagetables:1698 [ 262.718560][T14826] sec_pagetables:0 bounce:0 [ 262.718560][T14826] kernel_misc_reclaimable:0 [ 262.718560][T14826] free:1710061 free_pcp:52873 free_cma:0 [ 262.765663][T14826] Node 0 active_anon:56892kB inactive_anon:36260kB active_file:51248kB inactive_file:50508kB unevictable:65496kB isolated(anon):0kB isolated(file):0kB mapped:158752kB dirty:888kB writeback:0kB shmem:36984kB kernel_stack:4640kB pagetables:6792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 262.795015][T14826] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.827303][T14826] lowmem_reserve[]: 0 2883 7862 7862 [ 262.832639][T14826] Node 0 DMA32 free:2949060kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952692kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 262.839114][ T3386] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec [ 262.865602][T14826] lowmem_reserve[]: 0 0 4978 4978 [ 262.882453][T14826] Node 0 Normal free:3875824kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56892kB inactive_anon:36260kB active_file:51248kB inactive_file:50508kB unevictable:65496kB writepending:888kB zspages:0kB present:5242880kB managed:5098240kB mlocked:16kB bounce:0kB free_pcp:207852kB local_pcp:84888kB free_cma:0kB [ 262.917519][T14826] lowmem_reserve[]: 0 0 0 0 [ 262.922078][T14826] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.936190][T14826] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949060kB [ 262.953555][T14826] Node 0 Normal: 1623*4kB (UM) 1478*8kB (UM) 567*16kB (UM) 533*32kB (UME) 233*64kB (UM) 154*128kB (UME) 63*256kB (UM) 26*512kB (UM) 59*1024kB (UM) 44*2048kB (UM) 883*4096kB (UM) = 3875804kB [ 262.973826][T14826] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 262.984586][T14826] 51100 total pagecache pages [ 262.990675][T14826] 48 pages in swap cache [ 262.994978][T14826] Free swap = 94748kB [ 263.000591][T14826] Total swap = 124996kB [ 263.004780][T14826] 2097051 pages RAM [ 263.010356][T14826] 0 pages HighMem/MovableOnly [ 263.015249][T14826] 80478 pages reserved [ 263.058561][T14838] bond1: entered promiscuous mode [ 263.063660][T14838] bond1: entered allmulticast mode [ 263.090038][T14838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.145584][T14838] bond1 (unregistering): Released all slaves [ 263.157893][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.168573][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.360556][T14879] ip6gretap0: entered promiscuous mode [ 263.368562][T14879] vlan2: entered promiscuous mode [ 263.463968][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'. [ 263.513633][T14893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14893 comm=syz.0.3454 [ 263.548395][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 263.548414][ T29] audit: type=1326 audit(2000000037.367:19859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14880 comm="syz.0.3454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc61c43eec9 code=0x0 [ 263.590699][ T29] audit: type=1400 audit(2000000037.407:19860): avc: denied { read } for pid=14898 comm="syz.2.3460" path="socket:[41669]" dev="sockfs" ino=41669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 263.623703][ T29] audit: type=1400 audit(2000000037.437:19861): avc: denied { ioctl } for pid=14902 comm="syz.5.3461" path="socket:[41683]" dev="sockfs" ino=41683 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 263.696240][ T29] audit: type=1400 audit(2000000037.517:19862): avc: denied { name_connect } for pid=14906 comm="syz.5.3462" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 263.788149][ T29] audit: type=1400 audit(2000000037.587:19863): avc: denied { create } for pid=14865 comm="syz.4.3449" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.814449][T14913] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3464'. [ 263.831991][ T29] audit: type=1400 audit(2000000037.647:19864): avc: denied { write } for pid=14865 comm="syz.4.3449" name="file0" dev="tmpfs" ino=500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.863584][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3465'. [ 263.903547][T14920] pim6reg1: entered promiscuous mode [ 263.910453][T14920] pim6reg1: entered allmulticast mode [ 263.921422][T14920] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3466'. [ 263.948211][ T29] audit: type=1326 audit(2000000037.767:19865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14921 comm="syz.4.3467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf6152eec9 code=0x0 [ 264.054279][T14927] netlink: 104 bytes leftover after parsing attributes in process `+}[@'. [ 264.115413][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 264.141038][T14929] ip6tnl0: entered promiscuous mode [ 264.147653][T14929] ip6tnl0: entered allmulticast mode [ 264.198955][T14933] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3471'. [ 264.283145][T14940] lo speed is unknown, defaulting to 1000 [ 264.370301][ T29] audit: type=1400 audit(2000000038.187:19866): avc: denied { name_bind } for pid=14948 comm="syz.5.3477" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 264.393714][T14949] FAULT_INJECTION: forcing a failure. [ 264.393714][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 264.408004][T14949] CPU: 0 UID: 0 PID: 14949 Comm: syz.5.3477 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.408041][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.408130][T14949] Call Trace: [ 264.408138][T14949] [ 264.408192][T14949] __dump_stack+0x1d/0x30 [ 264.408219][T14949] dump_stack_lvl+0xe8/0x140 [ 264.408240][T14949] dump_stack+0x15/0x1b [ 264.408269][T14949] should_fail_ex+0x265/0x280 [ 264.408363][T14949] should_failslab+0x8c/0xb0 [ 264.408409][T14949] kmem_cache_alloc_noprof+0x50/0x480 [ 264.408444][T14949] ? __inet_bhash2_update_saddr+0x128/0xf70 [ 264.408486][T14949] __inet_bhash2_update_saddr+0x128/0xf70 [ 264.408532][T14949] ? xfrm_lookup_route+0xd6/0x110 [ 264.408650][T14949] inet_bhash2_update_saddr+0x25/0x30 [ 264.408687][T14949] tcp_v6_connect+0x8b3/0xc30 [ 264.408776][T14949] __inet_stream_connect+0x169/0x7d0 [ 264.408843][T14949] ? tcp_sendmsg_fastopen+0x172/0x520 [ 264.408874][T14949] ? should_failslab+0x8c/0xb0 [ 264.408908][T14949] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 264.408989][T14949] tcp_sendmsg_fastopen+0x43a/0x520 [ 264.409016][T14949] tcp_sendmsg_locked+0x26e1/0x2c00 [ 264.409117][T14949] ? mntput_no_expire+0x6f/0x440 [ 264.409154][T14949] ? __rcu_read_unlock+0x4f/0x70 [ 264.409185][T14949] ? avc_has_perm_noaudit+0x1b1/0x200 [ 264.409281][T14949] ? avc_has_perm+0xf7/0x180 [ 264.409389][T14949] ? _raw_spin_unlock_bh+0x36/0x40 [ 264.409432][T14949] ? __pfx_tcp_sendmsg+0x10/0x10 [ 264.409463][T14949] tcp_sendmsg+0x2f/0x50 [ 264.409538][T14949] inet6_sendmsg+0x76/0xd0 [ 264.409583][T14949] __sock_sendmsg+0x8b/0x180 [ 264.409610][T14949] __sys_sendto+0x268/0x330 [ 264.409656][T14949] __x64_sys_sendto+0x76/0x90 [ 264.409696][T14949] x64_sys_call+0x2d14/0x3000 [ 264.409736][T14949] do_syscall_64+0xd2/0x200 [ 264.409762][T14949] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 264.409807][T14949] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 264.409836][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.409865][T14949] RIP: 0033:0x7fef7d91eec9 [ 264.409881][T14949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.409900][T14949] RSP: 002b:00007fef7c387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.409972][T14949] RAX: ffffffffffffffda RBX: 00007fef7db75fa0 RCX: 00007fef7d91eec9 [ 264.409990][T14949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 264.410003][T14949] RBP: 00007fef7c387090 R08: 0000200000b63fe4 R09: 000000000000001c [ 264.410015][T14949] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001 [ 264.410027][T14949] R13: 00007fef7db76038 R14: 00007fef7db75fa0 R15: 00007ffd8967ef68 [ 264.410047][T14949] [ 264.714282][T14949] lo speed is unknown, defaulting to 1000 [ 264.770301][T14966] __nla_validate_parse: 9 callbacks suppressed [ 264.770317][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3481'. [ 264.850590][ T29] audit: type=1400 audit(2000000038.667:19867): avc: denied { audit_write } for pid=14977 comm="syz.6.3483" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 264.901425][ T29] audit: type=1107 audit(2000000038.697:19868): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 264.933482][T14979] lo speed is unknown, defaulting to 1000 [ 265.029342][T14986] lo speed is unknown, defaulting to 1000 [ 265.035754][T14995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3489'. [ 265.098732][T14997] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.202238][T14997] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.289942][T14997] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.411821][T14997] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.434838][T15007] syzkaller0: entered promiscuous mode [ 265.440674][T15007] syzkaller0: entered allmulticast mode [ 265.493141][T11209] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.504470][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3499'. [ 265.519369][T11209] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.535996][T11209] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.544321][T11209] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.588206][T15021] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3499'. [ 265.741455][T15044] 9pnet: Could not find request transport: 0xffffffffffffffff [ 265.835530][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3510'. [ 265.868146][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3510'. [ 266.055098][T15065] netlink: '+}[@': attribute type 1 has an invalid length. [ 266.154868][T15084] FAULT_INJECTION: forcing a failure. [ 266.154868][T15084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.169638][T15084] CPU: 0 UID: 0 PID: 15084 Comm: syz.6.3521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.169665][T15084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.169687][T15084] Call Trace: [ 266.169695][T15084] [ 266.169778][T15084] __dump_stack+0x1d/0x30 [ 266.169801][T15084] dump_stack_lvl+0xe8/0x140 [ 266.169821][T15084] dump_stack+0x15/0x1b [ 266.169837][T15084] should_fail_ex+0x265/0x280 [ 266.169956][T15084] should_fail+0xb/0x20 [ 266.170061][T15084] should_fail_usercopy+0x1a/0x20 [ 266.170081][T15084] _copy_from_user+0x1c/0xb0 [ 266.170107][T15084] __copy_msghdr+0x244/0x300 [ 266.170136][T15084] ___sys_sendmsg+0x109/0x1d0 [ 266.170203][T15084] __x64_sys_sendmsg+0xd4/0x160 [ 266.170238][T15084] x64_sys_call+0x191e/0x3000 [ 266.170267][T15084] do_syscall_64+0xd2/0x200 [ 266.170298][T15084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.170379][T15084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.170487][T15084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.170530][T15084] RIP: 0033:0x7f19cdc5eec9 [ 266.170551][T15084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.170649][T15084] RSP: 002b:00007f19cc6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.170681][T15084] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5eec9 [ 266.170697][T15084] RDX: 0000000004000880 RSI: 0000200000000080 RDI: 0000000000000004 [ 266.170714][T15084] RBP: 00007f19cc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.170730][T15084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.170757][T15084] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 266.170781][T15084] [ 266.182159][T15085] lo speed is unknown, defaulting to 1000 [ 266.285184][T15093] netdevsim netdevsim6: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 266.590924][T15103] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 267.081369][T15134] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3537'. [ 267.289261][T15141] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 267.585265][T15119] sch_fq: defrate 4294967295 ignored. [ 267.592192][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3540'. [ 267.602568][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3540'. [ 267.613059][T15147] $H: renamed from bond0 (while UP) [ 267.620723][T15147] $H: entered promiscuous mode [ 267.627476][T15147] bond_slave_0: entered promiscuous mode [ 267.633326][T15147] bond_slave_1: entered promiscuous mode [ 267.872505][T15170] dummy0: entered allmulticast mode [ 267.880331][T15170] dummy0: left allmulticast mode [ 268.013846][T15186] wireguard0: entered promiscuous mode [ 268.021159][T15186] wireguard0: entered allmulticast mode [ 268.265578][T15209] lo speed is unknown, defaulting to 1000 [ 268.304441][T15214] xt_hashlimit: max too large, truncated to 1048576 [ 268.784439][T15237] FAULT_INJECTION: forcing a failure. [ 268.784439][T15237] name failslab, interval 1, probability 0, space 0, times 0 [ 268.800254][T15237] CPU: 1 UID: 0 PID: 15237 Comm: syz.6.3572 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.800288][T15237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.800304][T15237] Call Trace: [ 268.800313][T15237] [ 268.800323][T15237] __dump_stack+0x1d/0x30 [ 268.800398][T15237] dump_stack_lvl+0xe8/0x140 [ 268.800419][T15237] dump_stack+0x15/0x1b [ 268.800521][T15237] should_fail_ex+0x265/0x280 [ 268.800559][T15237] should_failslab+0x8c/0xb0 [ 268.800588][T15237] kmem_cache_alloc_noprof+0x50/0x480 [ 268.800646][T15237] ? inet_bind2_bucket_create+0x2f/0x220 [ 268.800680][T15237] inet_bind2_bucket_create+0x2f/0x220 [ 268.800712][T15237] inet_csk_get_port+0xbca/0x10b0 [ 268.800814][T15237] ? inet_csk_get_port+0x991/0x10b0 [ 268.800852][T15237] ? selinux_capable+0x31/0x40 [ 268.800872][T15237] ? _raw_spin_unlock_bh+0x36/0x40 [ 268.800904][T15237] ? lock_sock_nested+0x112/0x140 [ 268.800924][T15237] ? security_capable+0x83/0x90 [ 268.801076][T15237] __inet6_bind+0x792/0x8b0 [ 268.801174][T15237] inet6_bind+0x98/0xb0 [ 268.801207][T15237] __sys_bind+0x1ce/0x2a0 [ 268.801303][T15237] __x64_sys_bind+0x3f/0x50 [ 268.801326][T15237] x64_sys_call+0x2b72/0x3000 [ 268.801349][T15237] do_syscall_64+0xd2/0x200 [ 268.801431][T15237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.801460][T15237] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.801497][T15237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.801519][T15237] RIP: 0033:0x7f19cdc5eec9 [ 268.801536][T15237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.801607][T15237] RSP: 002b:00007f19cc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 268.801633][T15237] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5eec9 [ 268.801647][T15237] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 268.801660][T15237] RBP: 00007f19cc6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 268.801672][T15237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.801685][T15237] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 268.801706][T15237] [ 269.090974][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 269.090993][ T29] audit: type=1326 audit(2000000042.907:20085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.125640][ T29] audit: type=1326 audit(2000000042.907:20086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.176343][ T29] audit: type=1326 audit(2000000042.967:20087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.201721][ T29] audit: type=1326 audit(2000000042.967:20088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.227032][ T29] audit: type=1326 audit(2000000042.967:20089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.252351][ T29] audit: type=1326 audit(2000000042.967:20090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.278060][ T29] audit: type=1326 audit(2000000042.967:20091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.305224][ T29] audit: type=1326 audit(2000000042.967:20092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.331220][ T29] audit: type=1326 audit(2000000042.967:20093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.359355][ T29] audit: type=1326 audit(2000000042.967:20094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15241 comm="syz.6.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 269.414126][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.491698][T15252] bond1: entered promiscuous mode [ 269.498752][T15252] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.509960][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.520949][T15253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.538551][T15253] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 269.550721][T15253] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 269.565627][T15253] bond1: (slave gre1): making interface the new active one [ 269.574222][T15253] gre1: entered promiscuous mode [ 269.583881][T15253] bond1: (slave gre1): Enslaving as an active interface with an up link [ 269.593958][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.603989][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.623728][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.638164][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.647774][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.655799][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.665405][T15252] netlink: 'syz.5.3575': attribute type 1 has an invalid length. [ 269.789910][T15269] 9pnet_fd: Insufficient options for proto=fd [ 269.914262][T15284] $H: renamed from bond0 (while UP) [ 269.942344][T15284] $H: entered promiscuous mode [ 269.948933][T15284] bond_slave_0: entered promiscuous mode [ 269.954719][T15284] bond_slave_1: entered promiscuous mode [ 269.974676][T15288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.015611][T15288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.092721][T15297] FAULT_INJECTION: forcing a failure. [ 270.092721][T15297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.107371][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.5.3589 Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.107407][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.107496][T15297] Call Trace: [ 270.107504][T15297] [ 270.107511][T15297] __dump_stack+0x1d/0x30 [ 270.107535][T15297] dump_stack_lvl+0xe8/0x140 [ 270.107554][T15297] dump_stack+0x15/0x1b [ 270.107630][T15297] should_fail_ex+0x265/0x280 [ 270.107671][T15297] should_fail+0xb/0x20 [ 270.107712][T15297] should_fail_usercopy+0x1a/0x20 [ 270.107733][T15297] strncpy_from_user+0x25/0x230 [ 270.107770][T15297] strncpy_from_user_nofault+0x68/0xf0 [ 270.107815][T15297] bpf_bprintf_prepare+0x888/0xd20 [ 270.107929][T15297] ? bpf_trace_run2+0xf5/0x1c0 [ 270.107963][T15297] bpf_trace_printk+0x84/0x1c0 [ 270.107987][T15297] ? bpf_trace_run2+0xf5/0x1c0 [ 270.108056][T15297] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 270.108074][T15297] bpf_trace_run2+0x104/0x1c0 [ 270.108103][T15297] ? audit_log_d_path+0xf4/0x150 [ 270.108127][T15297] ? audit_log_d_path+0xf4/0x150 [ 270.108145][T15297] __traceiter_kfree+0x2b/0x50 [ 270.108185][T15297] ? audit_log_d_path+0xf4/0x150 [ 270.108206][T15297] kfree+0x351/0x400 [ 270.108233][T15297] ? audit_log_untrustedstring+0xb6/0xd0 [ 270.108303][T15297] audit_log_d_path+0xf4/0x150 [ 270.108322][T15297] audit_log_lsm_data+0x18c/0xba0 [ 270.108352][T15297] ? audit_log_untrustedstring+0xb6/0xd0 [ 270.108410][T15297] common_lsm_audit+0x19d/0x230 [ 270.108485][T15297] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 270.108528][T15297] slow_avc_audit+0x104/0x140 [ 270.108562][T15297] avc_has_extended_perms+0x6d0/0x940 [ 270.108711][T15297] ioctl_has_perm+0x257/0x2a0 [ 270.108755][T15297] selinux_file_ioctl+0x308/0x3a0 [ 270.108785][T15297] ? __fget_files+0x184/0x1c0 [ 270.108856][T15297] security_file_ioctl+0x48/0x90 [ 270.108882][T15297] __se_sys_ioctl+0x47/0x140 [ 270.108903][T15297] __x64_sys_ioctl+0x43/0x50 [ 270.108926][T15297] x64_sys_call+0x1816/0x3000 [ 270.109021][T15297] do_syscall_64+0xd2/0x200 [ 270.109052][T15297] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.109080][T15297] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.109105][T15297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.109181][T15297] RIP: 0033:0x7fef7d91eec9 [ 270.109196][T15297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.109213][T15297] RSP: 002b:00007fef7c387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.109233][T15297] RAX: ffffffffffffffda RBX: 00007fef7db75fa0 RCX: 00007fef7d91eec9 [ 270.109247][T15297] RDX: 0000000000000000 RSI: 000000000000891b RDI: 0000000000000003 [ 270.109310][T15297] RBP: 00007fef7c387090 R08: 0000000000000000 R09: 0000000000000000 [ 270.109326][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.109342][T15297] R13: 00007fef7db76038 R14: 00007fef7db75fa0 R15: 00007ffd8967ef68 [ 270.109367][T15297] [ 270.634939][T15321] __nla_validate_parse: 6 callbacks suppressed [ 270.634962][T15321] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3597'. [ 270.648442][T15329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3600'. [ 270.803744][T15345] FAULT_INJECTION: forcing a failure. [ 270.803744][T15345] name failslab, interval 1, probability 0, space 0, times 0 [ 270.817802][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.4.3607 Not tainted syzkaller #0 PREEMPT(voluntary) [ 270.817839][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.817854][T15345] Call Trace: [ 270.817861][T15345] [ 270.817873][T15345] __dump_stack+0x1d/0x30 [ 270.817894][T15345] dump_stack_lvl+0xe8/0x140 [ 270.817913][T15345] dump_stack+0x15/0x1b [ 270.817933][T15345] should_fail_ex+0x265/0x280 [ 270.818048][T15345] should_failslab+0x8c/0xb0 [ 270.818145][T15345] __kmalloc_noprof+0xa5/0x570 [ 270.818182][T15345] ? bpf_test_init+0x86/0x140 [ 270.818277][T15345] bpf_test_init+0x86/0x140 [ 270.818304][T15345] bpf_prog_test_run_xdp+0x392/0x970 [ 270.818335][T15345] ? __rcu_read_unlock+0x4f/0x70 [ 270.818374][T15345] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 270.818466][T15345] bpf_prog_test_run+0x22a/0x390 [ 270.818561][T15345] __sys_bpf+0x4c0/0x7c0 [ 270.818612][T15345] __x64_sys_bpf+0x41/0x50 [ 270.818652][T15345] x64_sys_call+0x2aee/0x3000 [ 270.818715][T15345] do_syscall_64+0xd2/0x200 [ 270.818741][T15345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.818772][T15345] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.818830][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.818859][T15345] RIP: 0033:0x7fbf6152eec9 [ 270.818879][T15345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.818933][T15345] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.818952][T15345] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 270.818969][T15345] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 270.818983][T15345] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.818995][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.819018][T15345] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 270.819041][T15345] [ 271.323546][T15357] FAULT_INJECTION: forcing a failure. [ 271.323546][T15357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.338251][T15357] CPU: 0 UID: 0 PID: 15357 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 271.338279][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.338292][T15357] Call Trace: [ 271.338299][T15357] [ 271.338307][T15357] __dump_stack+0x1d/0x30 [ 271.338333][T15357] dump_stack_lvl+0xe8/0x140 [ 271.338359][T15357] dump_stack+0x15/0x1b [ 271.338377][T15357] should_fail_ex+0x265/0x280 [ 271.338417][T15357] should_fail+0xb/0x20 [ 271.338451][T15357] should_fail_usercopy+0x1a/0x20 [ 271.338500][T15357] _copy_from_user+0x1c/0xb0 [ 271.338593][T15357] do_handle_open+0x400/0x6e0 [ 271.338683][T15357] __x64_sys_open_by_handle_at+0x44/0x50 [ 271.338777][T15357] x64_sys_call+0x279f/0x3000 [ 271.338835][T15357] do_syscall_64+0xd2/0x200 [ 271.338862][T15357] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 271.338894][T15357] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 271.338919][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.339060][T15357] RIP: 0033:0x7fef7d91eec9 [ 271.339078][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.339101][T15357] RSP: 002b:00007fef7c387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 271.339123][T15357] RAX: ffffffffffffffda RBX: 00007fef7db75fa0 RCX: 00007fef7d91eec9 [ 271.339138][T15357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 271.339153][T15357] RBP: 00007fef7c387090 R08: 0000000000000000 R09: 0000000000000000 [ 271.339166][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.339199][T15357] R13: 00007fef7db76038 R14: 00007fef7db75fa0 R15: 00007ffd8967ef68 [ 271.339228][T15357] [ 271.834490][T15390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.878406][T15394] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3624'. [ 271.890508][T15397] 9pnet_fd: Insufficient options for proto=fd [ 271.899243][T15388] 9pnet_fd: Insufficient options for proto=fd [ 271.917452][T15390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.919852][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 271.944525][T15396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.983895][T15396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.310432][T15410] bridge_slave_0: left allmulticast mode [ 272.317593][T15410] bridge_slave_0: left promiscuous mode [ 272.323401][T15410] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.335369][T15410] bridge_slave_1: left allmulticast mode [ 272.342532][T15410] bridge_slave_1: left promiscuous mode [ 272.349666][T15410] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.363355][T15410] $H: (slave bond_slave_0): Releasing backup interface [ 272.372639][T15410] bond_slave_0: left promiscuous mode [ 272.381989][T15410] $H: (slave bond_slave_1): Releasing backup interface [ 272.391824][T15410] bond_slave_1: left promiscuous mode [ 272.402964][T15410] team0: Port device team_slave_0 removed [ 272.414694][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 272.430012][T15410] team0: Port device team_slave_1 removed [ 272.439219][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.448192][T15410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.472819][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.481991][T15410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.491827][T15416] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3629'. [ 272.504964][T15410] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.609012][T15425] validate_nla: 24 callbacks suppressed [ 272.609028][T15425] netlink: 'syz.4.3634': attribute type 1 has an invalid length. [ 272.623763][T15425] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3634'. [ 272.768663][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3639'. [ 272.789380][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3639'. [ 273.080372][T15457] serio: Serial port ptm0 [ 273.182773][T15475] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3649'. [ 273.354043][T15486] netlink: 'syz.4.3652': attribute type 29 has an invalid length. [ 273.365065][T15486] netlink: 'syz.4.3652': attribute type 29 has an invalid length. [ 273.375639][T15486] netlink: 'syz.4.3652': attribute type 29 has an invalid length. [ 274.101169][T15515] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 274.615433][ T29] kauditd_printk_skb: 1042 callbacks suppressed [ 274.615455][ T29] audit: type=1326 audit(2000000048.427:21137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 274.634898][T15547] FAULT_INJECTION: forcing a failure. [ 274.634898][T15547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.648150][ T29] audit: type=1326 audit(2000000048.427:21138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 274.663026][T15547] CPU: 0 UID: 0 PID: 15547 Comm: syz.2.3674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.663085][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.663104][T15547] Call Trace: [ 274.663119][T15547] [ 274.663132][T15547] __dump_stack+0x1d/0x30 [ 274.663160][T15547] dump_stack_lvl+0xe8/0x140 [ 274.663190][T15547] dump_stack+0x15/0x1b [ 274.663212][T15547] should_fail_ex+0x265/0x280 [ 274.663292][T15547] should_fail_alloc_page+0xf2/0x100 [ 274.663335][T15547] __alloc_frozen_pages_noprof+0xff/0x360 [ 274.663403][T15547] alloc_pages_mpol+0xb3/0x260 [ 274.663531][T15547] folio_alloc_mpol_noprof+0x39/0x80 [ 274.663583][T15547] shmem_get_folio_gfp+0x3cf/0xd60 [ 274.663749][T15547] shmem_write_begin+0xa8/0x190 [ 274.663798][T15547] generic_perform_write+0x181/0x490 [ 274.663858][T15547] shmem_file_write_iter+0xc5/0xf0 [ 274.663892][T15547] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 274.663938][T15547] vfs_write+0x527/0x960 [ 274.663981][T15547] ksys_write+0xda/0x1a0 [ 274.664015][T15547] __x64_sys_write+0x40/0x50 [ 274.664050][T15547] x64_sys_call+0x2802/0x3000 [ 274.664131][T15547] do_syscall_64+0xd2/0x200 [ 274.664165][T15547] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.664283][T15547] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 274.664315][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.664347][T15547] RIP: 0033:0x7fa83e46eec9 [ 274.664372][T15547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.664401][T15547] RSP: 002b:00007fa83cecf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 274.664459][T15547] RAX: ffffffffffffffda RBX: 00007fa83e6c5fa0 RCX: 00007fa83e46eec9 [ 274.664478][T15547] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 0000000000000003 [ 274.664495][T15547] RBP: 00007fa83cecf090 R08: 0000000000000000 R09: 0000000000000000 [ 274.664513][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.664530][T15547] R13: 00007fa83e6c6038 R14: 00007fa83e6c5fa0 R15: 00007ffe4b8fd158 [ 274.664559][T15547] [ 274.919998][ T29] audit: type=1326 audit(2000000048.427:21139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 274.944061][ T29] audit: type=1326 audit(2000000048.427:21140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 274.969364][ T29] audit: type=1326 audit(2000000048.427:21141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 274.994723][ T29] audit: type=1326 audit(2000000048.427:21142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 275.019692][ T29] audit: type=1326 audit(2000000048.427:21143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 275.044602][ T29] audit: type=1326 audit(2000000048.427:21144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 275.069247][ T29] audit: type=1326 audit(2000000048.427:21145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 275.093930][ T29] audit: type=1326 audit(2000000048.427:21146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.4.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x50000 [ 275.962326][T15594] __nla_validate_parse: 1 callbacks suppressed [ 275.962341][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3689'. [ 275.988338][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3689'. [ 276.051609][T15601] FAULT_INJECTION: forcing a failure. [ 276.051609][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.066315][T15601] CPU: 1 UID: 0 PID: 15601 Comm: syz.2.3692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.066352][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.066367][T15601] Call Trace: [ 276.066375][T15601] [ 276.066385][T15601] __dump_stack+0x1d/0x30 [ 276.066450][T15601] dump_stack_lvl+0xe8/0x140 [ 276.066474][T15601] dump_stack+0x15/0x1b [ 276.066495][T15601] should_fail_ex+0x265/0x280 [ 276.066541][T15601] should_fail+0xb/0x20 [ 276.066650][T15601] should_fail_usercopy+0x1a/0x20 [ 276.066676][T15601] _copy_to_user+0x20/0xa0 [ 276.066710][T15601] simple_read_from_buffer+0xb5/0x130 [ 276.066828][T15601] proc_fail_nth_read+0x10e/0x150 [ 276.066946][T15601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.066985][T15601] vfs_read+0x1a5/0x770 [ 276.067012][T15601] ? __rcu_read_unlock+0x4f/0x70 [ 276.067096][T15601] ? __fget_files+0x184/0x1c0 [ 276.067133][T15601] ksys_read+0xda/0x1a0 [ 276.067163][T15601] __x64_sys_read+0x40/0x50 [ 276.067193][T15601] x64_sys_call+0x27c0/0x3000 [ 276.067265][T15601] do_syscall_64+0xd2/0x200 [ 276.067306][T15601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.067364][T15601] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 276.067393][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.067464][T15601] RIP: 0033:0x7fa83e46d8dc [ 276.067486][T15601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 276.067511][T15601] RSP: 002b:00007fa83cecf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.067537][T15601] RAX: ffffffffffffffda RBX: 00007fa83e6c5fa0 RCX: 00007fa83e46d8dc [ 276.067551][T15601] RDX: 000000000000000f RSI: 00007fa83cecf0a0 RDI: 0000000000000006 [ 276.067563][T15601] RBP: 00007fa83cecf090 R08: 0000000000000000 R09: 0000000000000000 [ 276.067575][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.067587][T15601] R13: 00007fa83e6c6038 R14: 00007fa83e6c5fa0 R15: 00007ffe4b8fd158 [ 276.067656][T15601] [ 277.087370][T15636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3702'. [ 277.098488][T15636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.202619][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3705'. [ 277.273208][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3705'. [ 278.321825][T15686] random: crng reseeded on system resumption [ 278.388519][T15690] Unrecognized hibernate image header format! [ 278.394663][T15690] PM: hibernation: Image mismatch: architecture specific data [ 278.532896][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 278.573928][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 278.733102][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3719'. [ 278.778192][T15708] FAULT_INJECTION: forcing a failure. [ 278.778192][T15708] name failslab, interval 1, probability 0, space 0, times 0 [ 278.792860][T15708] CPU: 1 UID: 0 PID: 15708 Comm: syz.4.3725 Not tainted syzkaller #0 PREEMPT(voluntary) [ 278.792895][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 278.792927][T15708] Call Trace: [ 278.792935][T15708] [ 278.792946][T15708] __dump_stack+0x1d/0x30 [ 278.792973][T15708] dump_stack_lvl+0xe8/0x140 [ 278.792993][T15708] dump_stack+0x15/0x1b [ 278.793011][T15708] should_fail_ex+0x265/0x280 [ 278.793054][T15708] should_failslab+0x8c/0xb0 [ 278.793151][T15708] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 278.793185][T15708] ? __alloc_skb+0x101/0x320 [ 278.793257][T15708] __alloc_skb+0x101/0x320 [ 278.793282][T15708] netlink_alloc_large_skb+0xbf/0xf0 [ 278.793309][T15708] netlink_sendmsg+0x3cf/0x6b0 [ 278.793349][T15708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.793464][T15708] __sock_sendmsg+0x145/0x180 [ 278.793489][T15708] ____sys_sendmsg+0x31e/0x4e0 [ 278.793589][T15708] ___sys_sendmsg+0x17b/0x1d0 [ 278.793698][T15708] __x64_sys_sendmsg+0xd4/0x160 [ 278.793754][T15708] x64_sys_call+0x191e/0x3000 [ 278.793782][T15708] do_syscall_64+0xd2/0x200 [ 278.793818][T15708] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 278.793849][T15708] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 278.793928][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.793951][T15708] RIP: 0033:0x7fbf6152eec9 [ 278.793966][T15708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.794004][T15708] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.794027][T15708] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 278.794043][T15708] RDX: 0000000004008040 RSI: 0000200000000340 RDI: 0000000000000003 [ 278.794091][T15708] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 278.794107][T15708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.794122][T15708] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 278.794148][T15708] [ 279.095222][T15725] tipc: Started in network mode [ 279.101796][T15725] tipc: Node identity 4e5b3998e049, cluster identity 4711 [ 279.110430][T15725] tipc: Enabled bearer , priority 0 [ 279.119086][T15724] tipc: Enabling of bearer rejected, already enabled [ 279.230125][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3737'. [ 279.250373][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3737'. [ 279.481039][T15749] FAULT_INJECTION: forcing a failure. [ 279.481039][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 279.494024][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.4.3741 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.494111][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.494125][T15749] Call Trace: [ 279.494133][T15749] [ 279.494141][T15749] __dump_stack+0x1d/0x30 [ 279.494163][T15749] dump_stack_lvl+0xe8/0x140 [ 279.494263][T15749] dump_stack+0x15/0x1b [ 279.494281][T15749] should_fail_ex+0x265/0x280 [ 279.494387][T15749] should_failslab+0x8c/0xb0 [ 279.494416][T15749] kmem_cache_alloc_noprof+0x50/0x480 [ 279.494446][T15749] ? security_inode_alloc+0x37/0x100 [ 279.494511][T15749] security_inode_alloc+0x37/0x100 [ 279.494531][T15749] inode_init_always_gfp+0x4b7/0x500 [ 279.494559][T15749] ? __pfx_sock_alloc_inode+0x10/0x10 [ 279.494646][T15749] alloc_inode+0x58/0x170 [ 279.494668][T15749] do_accept+0xa0/0x3a0 [ 279.494707][T15749] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 279.494759][T15749] __sys_accept4+0xbf/0x140 [ 279.494785][T15749] __x64_sys_accept4+0x51/0x60 [ 279.494813][T15749] x64_sys_call+0x2ee2/0x3000 [ 279.494840][T15749] do_syscall_64+0xd2/0x200 [ 279.494933][T15749] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.494963][T15749] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.495096][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.495118][T15749] RIP: 0033:0x7fbf6152eec9 [ 279.495134][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.495213][T15749] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 279.495233][T15749] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 279.495246][T15749] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 279.495259][T15749] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 279.495272][T15749] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 279.495284][T15749] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 279.495353][T15749] [ 280.127310][ T2966] tipc: Node number set to 2920429976 [ 280.258841][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 280.258872][ T29] audit: type=1326 audit(2000000054.077:21745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.293350][ T29] audit: type=1326 audit(2000000054.077:21746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.318849][ T29] audit: type=1326 audit(2000000054.117:21747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.347462][ T29] audit: type=1326 audit(2000000054.117:21748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.372743][ T29] audit: type=1326 audit(2000000054.117:21749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.396665][ T29] audit: type=1326 audit(2000000054.137:21750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.421997][ T29] audit: type=1326 audit(2000000054.137:21751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.447194][ T29] audit: type=1326 audit(2000000054.137:21752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.472699][ T29] audit: type=1326 audit(2000000054.137:21753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.496457][ T29] audit: type=1326 audit(2000000054.137:21754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15789 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 280.791768][T15822] vlan2: entered allmulticast mode [ 280.798231][T15822] bridge_slave_0: entered allmulticast mode [ 281.071090][T15836] __nla_validate_parse: 8 callbacks suppressed [ 281.071128][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 281.364774][T15839] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.410330][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 281.589159][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'. [ 281.637356][T15860] FAULT_INJECTION: forcing a failure. [ 281.637356][T15860] name failslab, interval 1, probability 0, space 0, times 0 [ 281.650413][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.4.3783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.650498][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.650515][T15860] Call Trace: [ 281.650522][T15860] [ 281.650529][T15860] __dump_stack+0x1d/0x30 [ 281.650551][T15860] dump_stack_lvl+0xe8/0x140 [ 281.650570][T15860] dump_stack+0x15/0x1b [ 281.650602][T15860] should_fail_ex+0x265/0x280 [ 281.650643][T15860] ? sel_netnode_sid_slow+0x1eb/0x540 [ 281.650674][T15860] should_failslab+0x8c/0xb0 [ 281.650708][T15860] __kmalloc_cache_noprof+0x4c/0x4a0 [ 281.650827][T15860] sel_netnode_sid_slow+0x1eb/0x540 [ 281.650881][T15860] sel_netnode_sid+0x1e3/0x250 [ 281.650913][T15860] selinux_ip_postroute+0xa98/0xb50 [ 281.650996][T15860] ? ip6t_do_table+0xe9/0xbd0 [ 281.651033][T15860] ? csum_and_copy_from_iter_full+0x166/0x1010 [ 281.651074][T15860] ? nf_nat_ipv6_fn+0xa0/0x1c0 [ 281.651136][T15860] ? nf_nat_ipv6_out+0x187/0x230 [ 281.651164][T15860] ? __pfx_selinux_ip_postroute+0x10/0x10 [ 281.651251][T15860] nf_hook_slow+0x78/0x180 [ 281.651309][T15860] ip6_output+0x20a/0x250 [ 281.651338][T15860] ? __pfx_ip6_finish_output+0x10/0x10 [ 281.651371][T15860] ip6_mr_output+0x245/0x790 [ 281.651425][T15860] ? __pfx_ip6t_do_table+0x10/0x10 [ 281.651557][T15860] ? __pfx_dst_output+0x10/0x10 [ 281.651596][T15860] ip6_local_out+0xdb/0xe0 [ 281.651635][T15860] ip6_send_skb+0x5a/0x130 [ 281.651664][T15860] udp_v6_send_skb+0x7a3/0xc70 [ 281.651742][T15860] udpv6_sendmsg+0x151d/0x15b0 [ 281.651795][T15860] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 281.651826][T15860] ? __rcu_read_unlock+0x4f/0x70 [ 281.651872][T15860] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 281.651963][T15860] inet6_sendmsg+0xac/0xd0 [ 281.652006][T15860] __sock_sendmsg+0x8b/0x180 [ 281.652084][T15860] ____sys_sendmsg+0x345/0x4e0 [ 281.652126][T15860] ___sys_sendmsg+0x17b/0x1d0 [ 281.652177][T15860] __sys_sendmmsg+0x178/0x300 [ 281.652291][T15860] __x64_sys_sendmmsg+0x57/0x70 [ 281.652436][T15860] x64_sys_call+0x1c4a/0x3000 [ 281.652459][T15860] do_syscall_64+0xd2/0x200 [ 281.652483][T15860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.652515][T15860] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.652555][T15860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.652593][T15860] RIP: 0033:0x7fbf6152eec9 [ 281.652613][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.652645][T15860] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.652665][T15860] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 281.652679][T15860] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 281.652694][T15860] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.652710][T15860] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.652726][T15860] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 281.652750][T15860] [ 281.964299][T15858] FAULT_INJECTION: forcing a failure. [ 281.964299][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 281.978604][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.2.3782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.978729][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.978742][T15858] Call Trace: [ 281.978751][T15858] [ 281.978758][T15858] __dump_stack+0x1d/0x30 [ 281.978781][T15858] dump_stack_lvl+0xe8/0x140 [ 281.978881][T15858] dump_stack+0x15/0x1b [ 281.978898][T15858] should_fail_ex+0x265/0x280 [ 281.978933][T15858] should_failslab+0x8c/0xb0 [ 281.978967][T15858] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 281.979001][T15858] ? __alloc_skb+0x101/0x320 [ 281.979038][T15858] __alloc_skb+0x101/0x320 [ 281.979067][T15858] audit_log_start+0x3a0/0x720 [ 281.979095][T15858] ? __rcu_read_unlock+0x4f/0x70 [ 281.979130][T15858] audit_seccomp+0x48/0x100 [ 281.979171][T15858] ? __seccomp_filter+0x82d/0x1250 [ 281.979198][T15858] __seccomp_filter+0x83e/0x1250 [ 281.979225][T15858] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 281.979326][T15858] ? vfs_write+0x7e8/0x960 [ 281.979427][T15858] ? __rcu_read_unlock+0x4f/0x70 [ 281.979451][T15858] ? __fget_files+0x184/0x1c0 [ 281.979521][T15858] __secure_computing+0x82/0x150 [ 281.979557][T15858] syscall_trace_enter+0xcf/0x1e0 [ 281.979593][T15858] do_syscall_64+0xac/0x200 [ 281.979617][T15858] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.979721][T15858] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.979751][T15858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.979774][T15858] RIP: 0033:0x7fa83e46d8dc [ 281.979791][T15858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 281.979848][T15858] RSP: 002b:00007fa83cecf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.979874][T15858] RAX: ffffffffffffffda RBX: 00007fa83e6c5fa0 RCX: 00007fa83e46d8dc [ 281.979892][T15858] RDX: 000000000000000f RSI: 00007fa83cecf0a0 RDI: 0000000000000005 [ 281.979905][T15858] RBP: 00007fa83cecf090 R08: 0000000000000000 R09: 0000000000000000 [ 281.979917][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.980047][T15858] R13: 00007fa83e6c6038 R14: 00007fa83e6c5fa0 R15: 00007ffe4b8fd158 [ 281.980069][T15858] [ 281.988749][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'. [ 282.223167][T15876] netlink: 'syz.0.3788': attribute type 2 has an invalid length. [ 282.699317][T15894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.760370][T15894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.832330][T15894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.945264][T15894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.030658][ T6612] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.039309][ T6612] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.054939][ T6612] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.063362][ T6612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.085006][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3803'. [ 283.115324][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3803'. [ 283.324891][T15937] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3811'. [ 283.437843][T15939] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3811'. [ 283.838793][T15956] netlink: 69 bytes leftover after parsing attributes in process `syz.0.3817'. [ 283.861336][T15956] IPVS: set_ctl: invalid protocol: 0 172.20.20.46:20003 [ 283.889744][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3817'. [ 284.487129][T15989] SELinux: ebitmap: truncated map [ 284.495899][T15989] SELinux: failed to load policy [ 284.716515][T16020] vlan3: entered allmulticast mode [ 284.765547][T16024] lo speed is unknown, defaulting to 1000 [ 284.813124][T16030] lo speed is unknown, defaulting to 1000 [ 284.846514][T16036] v: renamed from ip6_vti0 [ 285.352482][ T29] kauditd_printk_skb: 771 callbacks suppressed [ 285.352523][ T29] audit: type=1326 audit(2000000059.108:22524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.441191][ T29] audit: type=1326 audit(2000000059.136:22525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.466574][ T29] audit: type=1326 audit(2000000059.136:22526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.492418][ T29] audit: type=1326 audit(2000000059.155:22527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.516525][ T29] audit: type=1326 audit(2000000059.155:22528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.543825][ T29] audit: type=1326 audit(2000000059.155:22529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.569001][ T29] audit: type=1326 audit(2000000059.155:22530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.594327][ T29] audit: type=1326 audit(2000000059.155:22531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.619696][ T29] audit: type=1326 audit(2000000059.155:22532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 285.645419][ T29] audit: type=1326 audit(2000000059.155:22533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16075 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6152eec9 code=0x7ffc0000 [ 286.014127][T16098] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.259209][T16130] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.350202][T16136] __nla_validate_parse: 3 callbacks suppressed [ 286.350221][T16136] netlink: 7 bytes leftover after parsing attributes in process `wޣ'. [ 286.420091][T16137] netlink: 'syz.6.3880': attribute type 3 has an invalid length. [ 286.635260][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3886'. [ 286.655236][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3886'. [ 286.952175][T16152] hub 8-0:1.0: USB hub found [ 286.957314][T16152] hub 8-0:1.0: 8 ports detected [ 287.126664][T16161] IPv6: NLM_F_CREATE should be specified when creating new route [ 287.268703][T16177] netlink: 'syz.4.3896': attribute type 10 has an invalid length. [ 287.285725][T16175] netlink: 'syz.4.3896': attribute type 10 has an invalid length. [ 287.351140][T16175] team0: Port device dummy0 added [ 287.371960][T16180] SELinux: security_context_str_to_sid (s'ᑻICz<[f~NJqGPn%Cyxph*d_s=h>ћK7@_\n$,&Oe}(?+_͖) failed with errno=-22 [ 287.764402][T16210] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 287.891555][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3912'. [ 288.023187][T16234] nfs4: Bad value for 'source' [ 288.291371][T16244] lo speed is unknown, defaulting to 1000 [ 288.786859][T16249] bridge0: entered promiscuous mode [ 288.804812][T16249] macsec1: entered promiscuous mode [ 288.824352][T16249] bridge0: port 3(macsec1) entered blocking state [ 288.833010][T16249] bridge0: port 3(macsec1) entered disabled state [ 288.843103][T16249] macsec1: entered allmulticast mode [ 288.848643][T16249] bridge0: entered allmulticast mode [ 288.856295][T16258] xt_hashlimit: max too large, truncated to 1048576 [ 288.871150][T16249] macsec1: left allmulticast mode [ 288.878057][T16249] bridge0: left allmulticast mode [ 288.973941][T16249] bridge0: left promiscuous mode [ 289.010609][T16261] tipc: New replicast peer: 255.255.255.255 [ 289.018378][T16261] tipc: Enabled bearer , priority 10 [ 289.099539][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 289.125785][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 289.454778][T16294] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 289.848645][T16303] netlink: 4744 bytes leftover after parsing attributes in process `syz.0.3941'. [ 289.900215][T16303] netlink: 4744 bytes leftover after parsing attributes in process `syz.0.3941'. [ 290.098623][ T3386] tipc: Node number set to 760734597 [ 290.130989][T16318] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3943'. [ 290.191551][T16313] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.244558][T16313] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.299402][T16313] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.351165][T16349] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 290.375990][T16313] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.084835][ T2128] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.109795][ T2128] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.139019][ T2128] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.151644][ T2128] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.175042][T16363] netlink: 7 bytes leftover after parsing attributes in process `wޣ'. [ 291.267376][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.277173][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 291.277191][ T29] audit: type=1400 audit(2000000064.637:22784): avc: denied { bind } for pid=16366 comm="syz.2.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.286384][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.307466][ T29] audit: type=1400 audit(2000000064.637:22785): avc: denied { write } for pid=16366 comm="syz.2.3963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.336256][ T29] audit: type=1400 audit(2000000064.637:22786): avc: denied { ioctl } for pid=16366 comm="syz.2.3963" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.394490][T16385] netlink: 'syz.5.3968': attribute type 21 has an invalid length. [ 291.399517][T16378] SELinux: failed to load policy [ 291.405795][ T29] audit: type=1400 audit(2000000064.759:22787): avc: denied { load_policy } for pid=16373 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 291.486833][ T29] audit: type=1400 audit(2000000064.824:22788): avc: denied { create } for pid=16384 comm="syz.5.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.499434][T16388] x_tables: duplicate underflow at hook 2 [ 291.509193][ T29] audit: type=1400 audit(2000000064.824:22789): avc: denied { connect } for pid=16384 comm="syz.5.3968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 291.548443][ T29] audit: type=1326 audit(2000000064.908:22790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.6.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 291.593053][ T29] audit: type=1326 audit(2000000064.927:22791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.6.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 291.618123][ T29] audit: type=1326 audit(2000000064.927:22792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.6.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 291.641817][ T29] audit: type=1326 audit(2000000064.927:22793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16393 comm="syz.6.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 292.012193][T16433] __nla_validate_parse: 1 callbacks suppressed [ 292.012214][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 292.031848][T16426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3984'. [ 292.150586][T16446] lo speed is unknown, defaulting to 1000 [ 292.206329][T16454] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16454 comm=syz.6.3988 [ 292.439664][T16477] netlink: 4 bytes leftover after parsing attributes in process `wޡ'. [ 292.563097][T16482] bridge1: entered allmulticast mode [ 292.572081][T16482] bridge1: left allmulticast mode [ 292.651480][T16488] tipc: New replicast peer: 255.255.255.255 [ 292.657731][T16488] tipc: Enabled bearer , priority 10 [ 293.016211][T16501] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 293.059611][T16507] netlink: 'syz.2.4014': attribute type 3 has an invalid length. [ 293.113732][T16513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4017'. [ 293.147194][T16519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4009'. [ 293.158003][T16519] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4009'. [ 293.167399][T16519] netlink: 'syz.4.4009': attribute type 2 has an invalid length. [ 293.175241][T16519] netlink: 21 bytes leftover after parsing attributes in process `syz.4.4009'. [ 293.210360][T16496] SELinux: Context : is not valid (left unmapped). [ 293.265067][T16523] netlink: 'syz.2.4020': attribute type 1 has an invalid length. [ 293.274539][T16523] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4020'. [ 293.337229][T16530] lo speed is unknown, defaulting to 1000 [ 293.487397][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4029'. [ 293.539022][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 293.967047][T16575] netlink: 'syz.4.4040': attribute type 15 has an invalid length. [ 294.174120][T16584] FAULT_INJECTION: forcing a failure. [ 294.174120][T16584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.188531][T16584] CPU: 0 UID: 0 PID: 16584 Comm: syz.4.4043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 294.188568][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.188585][T16584] Call Trace: [ 294.188593][T16584] [ 294.188602][T16584] __dump_stack+0x1d/0x30 [ 294.188624][T16584] dump_stack_lvl+0xe8/0x140 [ 294.188657][T16584] dump_stack+0x15/0x1b [ 294.188678][T16584] should_fail_ex+0x265/0x280 [ 294.188785][T16584] should_fail+0xb/0x20 [ 294.188816][T16584] should_fail_usercopy+0x1a/0x20 [ 294.188843][T16584] _copy_from_user+0x1c/0xb0 [ 294.188898][T16584] kstrtouint_from_user+0x69/0xf0 [ 294.188939][T16584] ? 0xffffffff81000000 [ 294.189031][T16584] ? selinux_file_permission+0x1e4/0x320 [ 294.189136][T16584] proc_fail_nth_write+0x50/0x160 [ 294.189172][T16584] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 294.189210][T16584] vfs_write+0x266/0x960 [ 294.189233][T16584] ? vfs_read+0x4e6/0x770 [ 294.189301][T16584] ? __rcu_read_unlock+0x4f/0x70 [ 294.189330][T16584] ? __fget_files+0x184/0x1c0 [ 294.189354][T16584] ? __sys_bind+0xc3/0x2a0 [ 294.189387][T16584] ksys_write+0xda/0x1a0 [ 294.189467][T16584] __x64_sys_write+0x40/0x50 [ 294.189493][T16584] x64_sys_call+0x2802/0x3000 [ 294.189516][T16584] do_syscall_64+0xd2/0x200 [ 294.189647][T16584] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.189683][T16584] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.189710][T16584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.189732][T16584] RIP: 0033:0x7fbf6152d97f [ 294.189750][T16584] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 294.189810][T16584] RSP: 002b:00007fbf5ff6e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 294.189829][T16584] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbf6152d97f [ 294.189924][T16584] RDX: 0000000000000001 RSI: 00007fbf5ff6e0a0 RDI: 0000000000000004 [ 294.189936][T16584] RBP: 00007fbf5ff6e090 R08: 0000000000000000 R09: 0000000000000000 [ 294.189950][T16584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 294.190020][T16584] R13: 00007fbf61786128 R14: 00007fbf61786090 R15: 00007fffc62551e8 [ 294.190041][T16584] [ 295.384515][T16617] bridge1: entered allmulticast mode [ 295.409713][T16617] dvmrp8: entered allmulticast mode [ 295.431162][T16617] bridge1: left allmulticast mode [ 295.441899][T16617] dvmrp8: left allmulticast mode [ 295.933126][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.953093][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.979423][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.004741][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.030015][T16671] vhci_hcd: default hub control req: 0416 v000b i0002 l4 [ 296.060678][T16658] wireguard0: entered promiscuous mode [ 296.066195][T16658] wireguard0: entered allmulticast mode [ 296.753419][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 296.753438][ T29] audit: type=1326 audit(2000000069.782:23202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.851694][ T29] audit: type=1326 audit(2000000069.820:23203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.877077][ T29] audit: type=1326 audit(2000000069.820:23204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.902941][ T29] audit: type=1326 audit(2000000069.820:23205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.927575][ T29] audit: type=1326 audit(2000000069.820:23206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.953584][ T29] audit: type=1326 audit(2000000069.820:23207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 296.979278][ T29] audit: type=1326 audit(2000000069.820:23208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 297.005919][ T29] audit: type=1326 audit(2000000069.820:23209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 297.029971][ T29] audit: type=1326 audit(2000000069.820:23210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 297.055764][ T29] audit: type=1326 audit(2000000069.820:23211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16712 comm="syz.0.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61c43eec9 code=0x7ffc0000 [ 298.362480][T16802] ------------[ cut here ]------------ [ 298.369448][T16802] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 298.388999][T16802] WARNING: CPU: 1 PID: 16802 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 298.400830][T16802] Modules linked in: [ 298.404754][T16802] CPU: 1 UID: 0 PID: 16802 Comm: syz.6.4126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.416043][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.427701][T16802] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 298.435643][T16802] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 f2 01 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 298.456818][T16802] RSP: 0018:ffffc90007a2b408 EFLAGS: 00010282 [ 298.464447][T16802] RAX: 9a1eda2c3b8b1500 RBX: ffff888110e6cae0 RCX: 0000000000080000 [ 298.473912][T16802] RDX: ffffc90019007000 RSI: 0000000000008b21 RDI: 0000000000008b22 [ 298.481954][T16802] RBP: 0000000000000000 R08: 0001c90007a2b257 R09: 0000000000000000 [ 298.491546][T16802] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888110e6caa0 [ 298.501038][T16802] R13: ffff88814e950000 R14: ffff88814e950000 R15: ffff888110e6cad8 [ 298.510619][T16802] FS: 00007f19cc6c76c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 298.520504][T16802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.527418][T16802] CR2: 00002000000010a0 CR3: 00000001167e4000 CR4: 00000000003506f0 [ 298.535605][T16802] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 298.543937][T16802] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 298.553294][T16802] Call Trace: [ 298.556721][T16802] [ 298.561019][T16802] reg_set_min_max+0x215/0x260 [ 298.565863][T16802] check_cond_jmp_op+0x130d/0x19e0 [ 298.572510][T16802] do_check+0x3363/0x8460 [ 298.576917][T16802] do_check_common+0xc5e/0x12b0 [ 298.583421][T16802] bpf_check+0xaaae/0xd9d0 [ 298.587916][T16802] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 298.595481][T16802] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 298.602877][T16802] ? pcpu_block_refresh_hint+0x10b/0x170 [ 298.608633][T16802] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 298.616183][T16802] ? _find_next_zero_bit+0x29/0xa0 [ 298.621403][T16802] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 298.628972][T16802] ? css_rstat_updated+0xb7/0x240 [ 298.635579][T16802] ? __rcu_read_unlock+0x4f/0x70 [ 298.640559][T16802] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 298.647922][T16802] ? bpf_prog_alloc+0x5b/0x150 [ 298.652771][T16802] ? pcpu_alloc_noprof+0xd29/0x1250 [ 298.659379][T16802] ? should_fail_ex+0x30/0x280 [ 298.664222][T16802] ? should_failslab+0x8c/0xb0 [ 298.670445][T16802] ? __kmalloc_noprof+0x2a2/0x570 [ 298.676873][T16802] ? security_bpf_prog_load+0x60/0x140 [ 298.682484][T16802] ? selinux_bpf_prog_load+0xad/0xd0 [ 298.689406][T16802] ? security_bpf_prog_load+0x9e/0x140 [ 298.695001][T16802] bpf_prog_load+0xf6e/0x1100 [ 298.701207][T16802] ? security_bpf+0x2b/0x90 [ 298.705810][T16802] __sys_bpf+0x469/0x7c0 [ 298.711656][T16802] __x64_sys_bpf+0x41/0x50 [ 298.716206][T16802] x64_sys_call+0x2aee/0x3000 [ 298.722401][T16802] do_syscall_64+0xd2/0x200 [ 298.726945][T16802] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.734636][T16802] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.741983][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.748050][T16802] RIP: 0033:0x7f19cdc5eec9 [ 298.753863][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.774988][T16802] RSP: 002b:00007f19cc6c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.784856][T16802] RAX: ffffffffffffffda RBX: 00007f19cdeb5fa0 RCX: 00007f19cdc5eec9 [ 298.794403][T16802] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 298.802515][T16802] RBP: 00007f19cdce1f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.811881][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.821767][T16802] R13: 00007f19cdeb6038 R14: 00007f19cdeb5fa0 R15: 00007fff35aa2188 [ 298.831420][T16802] [ 298.834734][T16802] ---[ end trace 0000000000000000 ]--- [ 299.523202][T16853] netlink: 'syz.5.4143': attribute type 10 has an invalid length. [ 299.534704][T16768] lo speed is unknown, defaulting to 1000 [ 299.652693][T16853] veth0_vlan: entered allmulticast mode [ 299.688096][T16853] veth0_vlan: left promiscuous mode [ 299.698011][T16853] veth0_vlan: entered promiscuous mode [ 299.729220][T16853] team0: Device veth0_vlan failed to register rx_handler [ 300.024165][T16884] FAULT_INJECTION: forcing a failure. [ 300.024165][T16884] name failslab, interval 1, probability 0, space 0, times 0 [ 300.038338][T16884] CPU: 0 UID: 0 PID: 16884 Comm: syz.4.4156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.038458][T16884] Tainted: [W]=WARN [ 300.038468][T16884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.038485][T16884] Call Trace: [ 300.038493][T16884] [ 300.038501][T16884] __dump_stack+0x1d/0x30 [ 300.038526][T16884] dump_stack_lvl+0xe8/0x140 [ 300.038587][T16884] dump_stack+0x15/0x1b [ 300.038649][T16884] should_fail_ex+0x265/0x280 [ 300.038689][T16884] should_failslab+0x8c/0xb0 [ 300.038717][T16884] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 300.038761][T16884] ? __alloc_skb+0x101/0x320 [ 300.038796][T16884] __alloc_skb+0x101/0x320 [ 300.038829][T16884] netlink_alloc_large_skb+0xbf/0xf0 [ 300.038864][T16884] netlink_sendmsg+0x3cf/0x6b0 [ 300.038937][T16884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.038972][T16884] __sock_sendmsg+0x145/0x180 [ 300.039007][T16884] ____sys_sendmsg+0x31e/0x4e0 [ 300.039061][T16884] ___sys_sendmsg+0x17b/0x1d0 [ 300.039160][T16884] __x64_sys_sendmsg+0xd4/0x160 [ 300.039205][T16884] x64_sys_call+0x191e/0x3000 [ 300.039245][T16884] do_syscall_64+0xd2/0x200 [ 300.039274][T16884] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.039347][T16884] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.039378][T16884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.039464][T16884] RIP: 0033:0x7fbf6152eec9 [ 300.039521][T16884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.039598][T16884] RSP: 002b:00007fbf5ff8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.039622][T16884] RAX: ffffffffffffffda RBX: 00007fbf61785fa0 RCX: 00007fbf6152eec9 [ 300.039638][T16884] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 300.039720][T16884] RBP: 00007fbf5ff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.039735][T16884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.039749][T16884] R13: 00007fbf61786038 R14: 00007fbf61785fa0 R15: 00007fffc62551e8 [ 300.039808][T16884] [ 300.462373][T16911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16911 comm=syz.6.4166 [ 300.623803][T16924] SELinux: failed to load policy [ 301.391812][T16953] __nla_validate_parse: 4 callbacks suppressed [ 301.391831][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4173'. [ 302.129208][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 302.129228][ T29] audit: type=1400 audit(2000000074.797:23503): avc: denied { write } for pid=16955 comm="syz.0.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 302.852475][ T29] audit: type=1326 audit(2000000075.480:23504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 302.877546][ T29] audit: type=1326 audit(2000000075.480:23505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 302.907287][ T29] audit: type=1326 audit(2000000075.536:23506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 302.932849][ T29] audit: type=1326 audit(2000000075.536:23507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 302.958135][ T29] audit: type=1326 audit(2000000075.536:23508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 302.983224][ T29] audit: type=1326 audit(2000000075.536:23509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 303.008375][ T29] audit: type=1326 audit(2000000075.536:23510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 303.033532][ T29] audit: type=1326 audit(2000000075.536:23511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 303.058927][ T29] audit: type=1326 audit(2000000075.536:23512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16965 comm="syz.6.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f19cdc5eec9 code=0x7ffc0000 [ 303.158831][T16987] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 303.628835][T17004] lo speed is unknown, defaulting to 1000 [ 304.140019][T17056] SELinux: failed to load policy [ 304.176849][T17061] netem: change failed [ 304.234440][T17072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4225'. [ 304.797586][T17104] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4237'. [ 305.280579][T17137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4253'. [ 305.295408][T17138] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4251'. [ 305.303543][T17137] ip6tnl2: entered allmulticast mode [ 305.486158][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4262'. [ 305.514942][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'. [ 305.597264][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4265'. [ 305.638332][T17172] hsr_slave_1 (unregistering): left promiscuous mode [ 305.684930][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4268'. [ 305.757905][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4270'. [ 306.439026][T17205] x_tables: duplicate underflow at hook 1 [ 306.451690][T17205] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 306.470739][T17205] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 306.509413][T17223] lo speed is unknown, defaulting to 1000 [ 306.696815][T17249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.707603][T17249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.023671][T17272] __nla_validate_parse: 3 callbacks suppressed [ 307.023689][T17272] netlink: 172 bytes leftover after parsing attributes in process `+}[@'. [ 307.243540][T11219] ================================================================== [ 307.251781][T11219] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 307.259919][T11219] [ 307.262258][T11219] write to 0xffff8881047eb720 of 8 bytes by task 17279 on cpu 0: [ 307.269991][T11219] sk_common_release+0xae/0x230 [ 307.274894][T11219] udp_lib_close+0x15/0x20 [ 307.279419][T11219] inet_release+0xce/0xf0 [ 307.283970][T11219] inet6_release+0x3e/0x60 [ 307.288420][T11219] sock_close+0x6b/0x150 [ 307.292692][T11219] __fput+0x29b/0x650 [ 307.296857][T11219] ____fput+0x1c/0x30 [ 307.300877][T11219] task_work_run+0x12e/0x1a0 [ 307.305591][T11219] do_exit+0x483/0x15c0 [ 307.309783][T11219] do_group_exit+0xff/0x140 [ 307.314497][T11219] get_signal+0xe58/0xf70 [ 307.318840][T11219] arch_do_signal_or_restart+0x96/0x440 [ 307.324405][T11219] exit_to_user_mode_loop+0x77/0x110 [ 307.329711][T11219] do_syscall_64+0x1d6/0x200 [ 307.334321][T11219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.340499][T11219] [ 307.342843][T11219] read to 0xffff8881047eb720 of 8 bytes by task 11219 on cpu 1: [ 307.350674][T11219] l2tp_tunnel_del_work+0x2f/0x1a0 [ 307.355828][T11219] process_scheduled_works+0x4cb/0x9d0 [ 307.361455][T11219] worker_thread+0x582/0x770 [ 307.366069][T11219] kthread+0x486/0x510 [ 307.370297][T11219] ret_from_fork+0x122/0x1b0 [ 307.374897][T11219] ret_from_fork_asm+0x1a/0x30 [ 307.379671][T11219] [ 307.381998][T11219] value changed: 0xffff88816549dd40 -> 0x0000000000000000 [ 307.389109][T11219] [ 307.391472][T11219] Reported by Kernel Concurrency Sanitizer on: [ 307.397631][T11219] CPU: 1 UID: 0 PID: 11219 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.409374][T11219] Tainted: [W]=WARN [ 307.413201][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.423269][T11219] Workqueue: l2tp l2tp_tunnel_del_work [ 307.428775][T11219] ================================================================== [ 307.591827][T17283] x_tables: duplicate underflow at hook 1 [ 308.522170][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 308.522189][ T29] audit: type=1400 audit(2000000080.794:24178): avc: denied { egress } for pid=11219 comm="kworker/u8:28" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 308.553884][ T29] audit: type=1400 audit(2000000080.794:24179): avc: denied { sendto } for pid=11219 comm="kworker/u8:28" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1