last executing test programs: 4m20.762009736s ago: executing program 0 (id=2865): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x200000000000010c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) recvmmsg(r5, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/66, 0x42}, 0xd58}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x0) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000190c0), r7) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000019240)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000019200)={&(0x7f0000019140)={0x84, r8, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x19}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xc0}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x15, 0xac, "924b53bbbcb26e769cc484a7507c4c28e0"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x437}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x36, 0x1}, {0x9, 0x1}, {0x5}, {0x30, 0x1}, {0x36, 0x1}, {0x36, 0x1}, {0x1b, 0x1}, {0x0, 0x1}, {0xc}, {0xc, 0x1}, {0xb}, {0x9}, {0x36}, {0x30}, {0x36}, {0x3}, {0x6c}, {0x9, 0x1}, {0x36}, {0x1b}, {0xc, 0x1}, {0x3, 0x1}, {0x60, 0x1}, {0x6, 0x1}, {0x4}, {0x6c}, {0x1}, {0x2}, {0x48, 0x1}, {0x6c}, {0x60}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x13c}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) lseek(r9, 0xd7de, 0x1) getdents64(r9, 0x0, 0x0) 4m20.51067402s ago: executing program 0 (id=2873): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41596ceb3979cb5e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), 0xffffffffffffffff) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0e1ac6e7049b3341959b759a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="05000000000000000000020000000800", @ANYRESOCT=r0, @ANYBLOB="2d000e0080000000ffff"], 0x80}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, 0x0, 0x4080) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_usb_connect(0x2, 0x24, &(0x7f0000000680)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d9d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) 4m19.869849698s ago: executing program 0 (id=2883): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x800, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r4, @ANYBLOB="140002000000000000ee03000000ffff00000000"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) 4m19.70445664s ago: executing program 0 (id=2886): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f2, &(0x7f0000000b00)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf25010000000800030006000000080004000600000038000680050002000900000008000700", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="05010d0006001b0000000500caf90c09f57de62a11bb21d02069b81b276fd4ecf09f037a15ad3becc8bd24c444b27a2897e54c6250619768c856fed50a954464dfa312901f4ffdf5239a0aa1388b0a62eb127fd940cadba0d484f2d5400831276856b560c3d4a800"/115], 0x74}, 0x1, 0x0, 0x0, 0xc008}, 0x48045) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000180)=0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0xc000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x8d99, 0x2000, 0x6, 0x73}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000580)={0x1f, 0x0, @any, 0x8, 0x1}, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r11, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000700)="2f8041c00702326ae567ab29858aab45f99fab7b5e21a7fbc1ea6d50ac87cf3824435a08caf956e60343bedefff600052548e9350e5e8f2257abb648c874396c8fa456947a31e2b53a647f7479ea96f1d0e3bd1f82fda96b55c3c12debc94eebea269b426e1a0dee1164aececf030a96e7d1ae464654f34f5591872f2bcdc29f65f85924df3b04e2ae9d0f9284e4caf8f1303f8908e328e92bf6093061ae5472d8432062812307363c41751c1019fce1661e92b335d85e8bf884ce92e75a66e2602a25efbf3702f785e5df9eaf58ad", &(0x7f0000001500)=""/4096}, 0x20) fsetxattr$security_selinux(r10, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r13}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r12, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x1, 0xc, 0x1, {0x2}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4m19.602746391s ago: executing program 0 (id=2887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000ff0f0000076a0e4d0648fcb95c926aebd57b5b32b2a119e19ebec06c32a2f6ad6ce6cb28763bbaf36a7ff2111d4fa62ca49dfd6ec75ab99e2d95e6ada9f7ceadfdf47c8b23f8a17cbbe5a8ac1bd4538196ac91c41886955eed1824c2d6992864e2cd7b18c8fc9d6d64416b31143b55ae157916f7f68a081fb350097c5cff2cd1302bbc6c53d1864b0d05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRES32=r2], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x40, 0x1, 0x40, 0xfc, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x2, 0xfffffffc}, 0x1100, 0x5dd8, 0x2, 0x1, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r11, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x18) r14 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r14, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) 4m19.256365266s ago: executing program 0 (id=2890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000500000045000008a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xd}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xd}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x89}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c77666483a2b9f63ce16e6f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 4m19.207062197s ago: executing program 32 (id=2890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000500000045000008a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xd}, {0x0, 0xf}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x200, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xd}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x89}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c77666483a2b9f63ce16e6f3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) 3m37.841502333s ago: executing program 1 (id=3469): r0 = socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000e40)="c15bba0b98", 0x5}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kfree\x00', r5, 0x0, 0x69}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtaction={0x194, 0x30, 0x2, 0xfffffffe, 0x0, {}, [{0x180, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x1, 0xffffffffffffffff, 0x2d2f45bf, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x84, 0x2, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0xffff, 0x0, 0x35, 0x401}, {0x5, 0x7f, 0x1, 0x9}, {0xfe00, 0x80, 0xb9, 0x305d00}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x2, 0x6, 0xfe, 0x2}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6554, 0x78, 0x8b, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2fb, 0x2, 0x10000000, 0x0, 0x7fff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0xc33dee1181e99548}}}}]}]}, 0x194}}, 0x0) 3m37.500605757s ago: executing program 1 (id=3475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r7, @ANYBLOB="92010000000000000c0016800800018204000c800a000100aa"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001b00)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x1ab, 0xf9e5, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffff9, 0x1, 0x2, 0x5, 0x8, 0x1, 0x9, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x8001, 0xffc, 0x401, 0x1, 0x6, 0xa, 0x2, 0x4, 0x7f, 0x5, 0xfffffff9, 0x101, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x7fffffff, 0x4, 0x6, 0x7, 0x80, 0x3, 0xe53, 0x0, 0xfffffffc, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x2, 0x9, 0x2, 0x4, 0xb26, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x5, 0xfffffff7, 0x2, 0x400, 0x8, 0x3, 0x7, 0x5, 0x8, 0xa, 0x400, 0x9, 0x100005, 0xdb5, 0x101, 0x6, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0x2, 0x1, 0x6, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x1, 0x4, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0xffffffff, 0x14, 0x7a, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x2, 0xfffffff4, 0x8, 0x3, 0xfff, 0xde94, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x22, 0x10000, 0x8, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x5, 0x4, 0x7, 0x4, 0x7, 0x2, 0x0, 0x1, 0xfffffffb, 0x3, 0xffe, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x81, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x1006, 0x5, 0x2, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x4, 0x345f, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x202, 0x10000000, 0xb, 0x7, 0x8, 0x81, 0x8d1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x6, 0x9, 0x24000000, 0x99dc, 0x80000001, 0xfffff72d, 0x100000, 0x9, 0x1ff, 0x100, 0xfffffffb, 0x9, 0x7fff, 0x5, 0x3, 0x9, 0x5, 0x1ff, 0x8, 0x6dbe, 0x14bf, 0x7fffffff, 0x8001, 0x5, 0x1ff, 0xec26, 0x7, 0x4, 0x7, 0x4, 0x5, 0x40, 0x10000, 0x2, 0xe, 0x7, 0x101, 0x7fffffff, 0x9a, 0x60, 0xffffffff, 0x1, 0x8, 0x8, 0x8d2, 0xc, 0x5, 0x0, 0x6, 0x8, 0x2, 0x7, 0x5, 0x87, 0x9, 0xfffffbff, 0x400, 0x0, 0x0, 0x1ff, 0x0, 0xffff, 0x4, 0xc4, 0x3, 0x8, 0x4, 0x3, 0xff, 0x401, 0x10001, 0x4, 0x3, 0x6, 0x6, 0x9, 0x0, 0x7fffffff, 0x9a, 0x3ff, 0xffff74ee, 0xb8, 0x401, 0x80000001, 0x401, 0x0, 0x4, 0x5, 0x2, 0x3ff, 0x9, 0x100000, 0x80000001, 0x6e8, 0x10001, 0x1, 0x3ae8, 0x9, 0x6c9, 0xf, 0x86ea, 0x1, 0x7, 0x3ff, 0x6, 0x4, 0x3, 0x0, 0x4a, 0x80, 0xb5, 0x57, 0x5d3, 0x9, 0x2, 0x7, 0x3, 0x80000001, 0x5, 0x5, 0x6d5a, 0xe64, 0x4, 0x81, 0x1, 0x5d, 0xfffffffd, 0xfffffffb, 0x3e41a1f4, 0x4, 0x5, 0x3, 0x7, 0x7, 0x9, 0x2, 0x6, 0x7, 0x6, 0x7f, 0x3, 0x9, 0x1, 0x5, 0x2, 0x6, 0xfffffc01, 0x0, 0x6, 0xfffffffe, 0x80000000, 0x80000000, 0x665d, 0x100, 0x5, 0x0, 0xffffffff, 0x100, 0x9, 0x14, 0x200, 0x8, 0x6, 0xffffffff, 0x6, 0x4, 0x2, 0x0, 0x5, 0x7d4, 0x3, 0x3, 0x10, 0x9, 0x8, 0x101, 0xfffff0cb, 0x1, 0x10001, 0x7fffffff, 0x4da3, 0x6, 0x5, 0xca71, 0x7, 0xc00, 0xf1e, 0x3, 0x200, 0x8, 0x5, 0xd, 0x4000000, 0x9, 0xab, 0x9, 0x4, 0x7, 0x10000, 0xff, 0x1, 0x2, 0x166da8c1, 0xe29, 0xc, 0x5, 0xb, 0x8d, 0x3, 0x1, 0xf5, 0x0, 0x5, 0xffffffff, 0xff, 0xffff, 0x2, 0x1ff, 0x6, 0x1, 0x7, 0x9, 0xc9, 0x2, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x0, 0xc, 0xffff157c, 0x8, 0x2, 0xee1, 0xa0, 0x0, 0x0, 0x7fffffff, 0x2, 0x984f, 0x7, 0x7, 0x8, 0x801, 0x4, 0x84ed, 0x3ff, 0x3, 0x4, 0xf0, 0x7e4b, 0x0, 0x61]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 3m37.419870458s ago: executing program 1 (id=3479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x1100046, &(0x7f0000000000)={[], [{@context={'context', 0x3d, 'system_u'}}]}, 0x3, 0x448, &(0x7f0000001400)="$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") 3m36.980185834s ago: executing program 1 (id=3489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800450000280000000000069078ac1414000a01010100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c36cf68d4b30c8d538aa3d27dfd68e700be3dc54ceb780000"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x189081, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) rt_sigtimedwait(&(0x7f0000000340)={[0x2be1]}, &(0x7f00000004c0), &(0x7f0000000380)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r7 = dup(r6) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f00000001c0)={{0xa24c, 0xffffffff}, {0xfffffffffffff278, 0xfffffff9}, 0x9, 0x80000005}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) eventfd(0x9) 3m35.837550059s ago: executing program 1 (id=3506): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000580)='./file0/file1\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x10000000000000) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 3m35.79331783s ago: executing program 1 (id=3508): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x80000000000006, 0x0) dup3(r3, r2, 0x0) 3m20.707149689s ago: executing program 33 (id=3508): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x141601) write(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x80000000000006, 0x0) dup3(r3, r2, 0x0) 1.595785509s ago: executing program 2 (id=8615): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) 1.584257759s ago: executing program 2 (id=8617): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 1.384181221s ago: executing program 4 (id=8623): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0xffffffff, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(r5) 1.383756832s ago: executing program 4 (id=8624): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 1.330034713s ago: executing program 3 (id=8625): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) listen(0xffffffffffffffff, 0xfffffffd) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.329662263s ago: executing program 3 (id=8626): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 1.254115084s ago: executing program 3 (id=8627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 1.253870084s ago: executing program 3 (id=8628): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.087713446s ago: executing program 6 (id=8630): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.052366666s ago: executing program 6 (id=8631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0xa4}}, 0x0) 1.051993356s ago: executing program 6 (id=8632): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x9}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 1.025705286s ago: executing program 2 (id=8633): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="080000000200002010000000000000007b9b7bd0a43ba819c8569151e805903c88d930193e3e2b7ee68cb6ddfe3dd500f5d76148e7bda5901d28b58afdd68312af785813a3e29b0229bac22875e4ed737bddf7d231ed69fc3a2e1da799f2ba3367464956ed6d597f51cf081f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(r1, &(0x7f0000000840)='./file0\x00', 0x8103) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x2}, 0x18) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='befs\x00', 0x10800, &(0x7f0000000740)=')\'+-\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000020000000000000014000000b7030c00000000008500000083000000bf0900000000000055090100000000009500000000000200bf91000000000000b7020000000000008500000085000000b700000fbc0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) statx(r5, &(0x7f0000000a40)='./file0\x00', 0x2000, 0x80, &(0x7f0000000a80)) getgroups(0x1, &(0x7f0000000b80)=[0xee00]) fsetxattr$system_posix_acl(r5, &(0x7f0000000480)='system.posix_acl_default\x00', 0x0, 0x64, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.020337657s ago: executing program 6 (id=8634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000001000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0800000000000000000000c8e924a1af52000004000000000094a566339de5ff19bce82137ef2690d13c33f479388dee025c82d0459e2951198dc2a3081ea594ffa14d3ecff8513be92db95c55b1ba3353e1636806e25e5fd50e345c77ac5474affb7b50f7b31dbc44822bb7ab502459049f2479de", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 994.553956ms ago: executing program 6 (id=8635): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {&(0x7f0000000240)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x20d, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5a}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {0x0, r3}}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 881.819908ms ago: executing program 2 (id=8636): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @empty}, 0x1c) r2 = dup2(r1, r1) write$tun(r2, 0x0, 0x46) 865.383998ms ago: executing program 2 (id=8637): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x60, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2}}}}, @TCA_RATE={0x6, 0x5, {0x3, 0x15}}]}, 0x60}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 843.997289ms ago: executing program 4 (id=8638): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) listen(0xffffffffffffffff, 0xfffffffd) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 823.496599ms ago: executing program 4 (id=8639): syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0xd3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x33, 0x6, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0xe9, 0x1, 0xbc}}]}}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000010) sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 422.226004ms ago: executing program 3 (id=8641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c0001800600"], 0x30}}, 0x0) 359.175565ms ago: executing program 3 (id=8643): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 337.869685ms ago: executing program 5 (id=8644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0xa4}}, 0x0) 322.171005ms ago: executing program 5 (id=8645): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x9}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 296.475466ms ago: executing program 5 (id=8646): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="080000000200002010000000000000007b9b7bd0a43ba819c8569151e805903c88d930193e3e2b7ee68cb6ddfe3dd500f5d76148e7bda5901d28b58afdd68312af785813a3e29b0229bac22875e4ed737bddf7d231ed69fc3a2e1da799f2ba3367464956ed6d597f51cf081f"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(r1, &(0x7f0000000840)='./file0\x00', 0x8103) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0x2}, 0x18) move_mount(r5, 0x0, r4, 0x0, 0x46) close(r4) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='befs\x00', 0x10800, &(0x7f0000000740)=')\'+-\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000020000000000000014000000b7030c00000000008500000083000000bf0900000000000055090100000000009500000000000200bf91000000000000b7020000000000008500000085000000b700000fbc0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) statx(r5, &(0x7f0000000a40)='./file0\x00', 0x2000, 0x80, &(0x7f0000000a80)) getgroups(0x1, &(0x7f0000000b80)=[0xee00]) fsetxattr$system_posix_acl(r5, &(0x7f0000000480)='system.posix_acl_default\x00', 0x0, 0x64, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 260.047036ms ago: executing program 5 (id=8647): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 176.558358ms ago: executing program 5 (id=8648): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103843, 0x0) 176.147988ms ago: executing program 5 (id=8649): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 112.342479ms ago: executing program 6 (id=8650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r5, r6, 0x0, 0x8000002b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1d, 0x8, &(0x7f0000001540)=ANY=[@ANYRES8=r7], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000380), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900080004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="060000b82bba32570000fcffffff000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000080), &(0x7f00000000c0)=r9}, 0x20) r11 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r11, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) 8.03594ms ago: executing program 4 (id=8651): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 7.30985ms ago: executing program 2 (id=8652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setpgid(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabb32860ceba34ba34dfb866ee7bbbbbbbbbb86dd603000bb00082b00fc0200008056cf234e3d7ced000000000000000000000000fe8000000000000000000000000000aa"], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601020095da962f0500c84dbaaf4f61d2000000001f00000a0000010500010007000000b5fbd904cd43d0b70a44c4fc4efb934e05e13869d2e1b32eb0db3e5edc3d2a82ff0be1dbe1f58968f4e5b20e0487ae"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000580)={0x8, 0xff, 0x1}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="29a8887da13e0000000000000800450000240000000000000000e0000001000000000004000000000050"], 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES32=r1, @ANYRESDEC=r9, @ANYRESDEC=r8, @ANYRESOCT=r9, @ANYBLOB="1e0bc6acd80c6520847b7f915830100c0f50944633deb654f696cffbfe6c9da0869af2fc8a44770e6c4756356da86db8a7fd002d4f869aadeae2aa4610e77a54ba29b316583a07fe62892e87d278157cb8923ebc2657e30bb33490a308a70452f5b479157bcda60ab7f6161af5a9b64070da0cfdab1e1661ee0b43344d50d81ae4fd07a23bebc92d7d496e2d8385b4197ae2fab4f91072e40e9de05b4bebf84abc0f846c36611621e11cff55056c265ddf36c96c47ee8c9499e85c7cad6e3bcb749a9d4354fbde1571116cc0cd5496df4b2f21b375aa84cbd801561abc06cbb7d48874013b", @ANYRES8=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r8], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r11}, &(0x7f00000003c0), &(0x7f0000000400)=r12}, 0x20) 0s ago: executing program 4 (id=8653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): 0033:0x7fa058e1e969 [ 374.036961][T22982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.036984][T22982] RSP: 002b:00007fa057487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.037000][T22982] RAX: ffffffffffffffda RBX: 00007fa059045fa0 RCX: 00007fa058e1e969 [ 374.037011][T22982] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 374.037021][T22982] RBP: 00007fa057487090 R08: 0000000000000000 R09: 0000000000000000 [ 374.037032][T22982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.037042][T22982] R13: 0000000000000000 R14: 00007fa059045fa0 R15: 00007ffe6ae8d468 [ 374.037120][T22982] [ 374.369446][T22989] FAULT_INJECTION: forcing a failure. [ 374.369446][T22989] name failslab, interval 1, probability 0, space 0, times 0 [ 374.382185][T22989] CPU: 1 UID: 0 PID: 22989 Comm: syz.6.6712 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 374.382249][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 374.382262][T22989] Call Trace: [ 374.382268][T22989] [ 374.382276][T22989] __dump_stack+0x1d/0x30 [ 374.382326][T22989] dump_stack_lvl+0xe8/0x140 [ 374.382347][T22989] dump_stack+0x15/0x1b [ 374.382366][T22989] should_fail_ex+0x265/0x280 [ 374.382480][T22989] should_failslab+0x8c/0xb0 [ 374.382540][T22989] __kmalloc_noprof+0xa5/0x3e0 [ 374.382562][T22989] ? bm_init+0x4c/0x6f0 [ 374.382595][T22989] bm_init+0x4c/0x6f0 [ 374.382714][T22989] ? pcpu_alloc_area+0x59c/0x5c0 [ 374.382746][T22989] textsearch_prepare+0x192/0x200 [ 374.382790][T22989] string_mt_check+0x119/0x170 [ 374.382844][T22989] xt_check_match+0x2aa/0x4f0 [ 374.382870][T22989] ? strnlen+0x28/0x50 [ 374.382897][T22989] ? xt_find_match+0x1d1/0x210 [ 374.382929][T22989] ? xt_find_match+0x1b5/0x210 [ 374.383035][T22989] translate_table+0xa9c/0xf90 [ 374.383073][T22989] ? _copy_from_user+0x89/0xb0 [ 374.383095][T22989] do_ipt_set_ctl+0x66f/0x820 [ 374.383118][T22989] ? _raw_spin_unlock_bh+0x36/0x40 [ 374.383217][T22989] ? tcp_release_cb+0xf1/0x370 [ 374.383259][T22989] nf_setsockopt+0x196/0x1b0 [ 374.383297][T22989] ip_setsockopt+0x102/0x110 [ 374.383387][T22989] tcp_setsockopt+0x95/0xb0 [ 374.383418][T22989] sock_common_setsockopt+0x66/0x80 [ 374.383445][T22989] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 374.383512][T22989] __sys_setsockopt+0x181/0x200 [ 374.383555][T22989] __x64_sys_setsockopt+0x64/0x80 [ 374.383587][T22989] x64_sys_call+0x2bd5/0x2fb0 [ 374.383653][T22989] do_syscall_64+0xd0/0x1a0 [ 374.383678][T22989] ? clear_bhb_loop+0x25/0x80 [ 374.383698][T22989] ? clear_bhb_loop+0x25/0x80 [ 374.383734][T22989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.383757][T22989] RIP: 0033:0x7fa058e1e969 [ 374.383777][T22989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.383799][T22989] RSP: 002b:00007fa057487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.383822][T22989] RAX: ffffffffffffffda RBX: 00007fa059045fa0 RCX: 00007fa058e1e969 [ 374.383838][T22989] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 374.383854][T22989] RBP: 00007fa057487090 R08: 0000000000000360 R09: 0000000000000000 [ 374.383940][T22989] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 374.383954][T22989] R13: 0000000000000000 R14: 00007fa059045fa0 R15: 00007ffe6ae8d468 [ 374.383977][T22989] [ 374.453217][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6707'. [ 374.751650][T22995] SELinux: failed to load policy [ 374.805762][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6714'. [ 374.920025][T23004] lo speed is unknown, defaulting to 1000 [ 375.643232][T23029] binfmt_misc: register: failed to install interpreter file ./file0 [ 375.945110][T23047] siw: device registration error -23 [ 376.118072][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 376.118165][ T29] audit: type=1400 audit(1746712782.526:23770): avc: denied { ioctl } for pid=23064 comm="syz.2.6738" path="socket:[77296]" dev="sockfs" ino=77296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.119334][T23065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6738'. [ 376.176321][ T29] audit: type=1400 audit(1746712782.586:23771): avc: denied { read write } for pid=23064 comm="syz.2.6738" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.200266][ T29] audit: type=1400 audit(1746712782.586:23772): avc: denied { open } for pid=23064 comm="syz.2.6738" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 376.301753][T23068] binfmt_misc: register: failed to install interpreter file ./file0 [ 376.339877][T23071] syz.2.6740: attempt to access beyond end of device [ 376.339877][T23071] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 376.543671][T23075] syzkaller0: entered promiscuous mode [ 376.549270][T23075] syzkaller0: entered allmulticast mode [ 376.644676][ T29] audit: type=1326 audit(1746712783.056:23773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.715357][T23095] binfmt_misc: register: failed to install interpreter file ./file0 [ 376.721050][ T29] audit: type=1326 audit(1746712783.056:23774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.748506][ T29] audit: type=1326 audit(1746712783.056:23775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.772217][ T29] audit: type=1326 audit(1746712783.056:23776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.795967][ T29] audit: type=1326 audit(1746712783.056:23777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.820132][ T29] audit: type=1326 audit(1746712783.056:23778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.844462][ T29] audit: type=1326 audit(1746712783.056:23779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23072 comm="syz.5.6736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 376.987849][T23103] syz.4.6752: attempt to access beyond end of device [ 376.987849][T23103] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 377.099140][T23115] netem: change failed [ 377.117916][T23111] openvswitch: netlink: Message has 6 unknown bytes. [ 377.206673][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6759'. [ 377.300596][T23133] syz.2.6767: attempt to access beyond end of device [ 377.300596][T23133] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 377.383187][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6765'. [ 377.479026][T23139] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6765'. [ 377.583450][T23151] lo speed is unknown, defaulting to 1000 [ 377.764768][T23152] netem: change failed [ 377.787926][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6773'. [ 377.901869][T23160] netem: change failed [ 378.011300][T23164] netem: change failed [ 378.037234][T23167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6777'. [ 378.135241][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6778'. [ 378.413105][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6779'. [ 378.429240][T23173] siw: device registration error -23 [ 378.556286][T23175] syzkaller0: entered promiscuous mode [ 378.561911][T23175] syzkaller0: entered allmulticast mode [ 378.652367][T23189] netem: change failed [ 378.682183][T23189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6788'. [ 378.683144][T23194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6789'. [ 378.744405][T23194] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6789'. [ 379.447642][T23238] netem: change failed [ 379.575316][T23198] 9pnet_fd: p9_fd_create_tcp (23198): problem connecting socket to 127.0.0.1 [ 380.000933][T23245] lo speed is unknown, defaulting to 1000 [ 380.242019][T23245] chnl_net:caif_netlink_parms(): no params data found [ 380.401623][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.408969][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.416920][T23245] bridge_slave_0: entered allmulticast mode [ 380.423352][T23245] bridge_slave_0: entered promiscuous mode [ 380.433127][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.440386][T23245] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.448130][T23245] bridge_slave_1: entered allmulticast mode [ 380.454660][T23245] bridge_slave_1: entered promiscuous mode [ 380.474769][T23245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.485275][T23245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.517955][T23245] team0: Port device team_slave_0 added [ 380.524647][T23245] team0: Port device team_slave_1 added [ 380.551065][T23245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.558129][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.585082][T23245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.600848][T23245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.607905][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.634093][T23245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.669885][T23245] hsr_slave_0: entered promiscuous mode [ 380.675886][T23245] hsr_slave_1: entered promiscuous mode [ 380.682546][T23245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.690788][T23245] Cannot create hsr debugfs directory [ 380.716259][T23307] netem: change failed [ 380.796559][T15109] dummy0: left allmulticast mode [ 380.801686][T15109] dummy0: left promiscuous mode [ 380.806764][T15109] bridge0: port 3(dummy0) entered disabled state [ 380.818108][T15109] bridge_slave_1: left allmulticast mode [ 380.823868][T15109] bridge_slave_1: left promiscuous mode [ 380.829613][T15109] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.841685][T15109] bridge_slave_0: left allmulticast mode [ 380.847446][T15109] bridge_slave_0: left promiscuous mode [ 380.853204][T15109] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.256364][T15109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.289836][T15109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.304773][T15109] bond0 (unregistering): Released all slaves [ 381.326942][T23320] lo speed is unknown, defaulting to 1000 [ 381.389190][T15109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.401028][T23329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.410114][T15109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.420042][T23329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.462273][T15109] team0 (unregistering): Port device team_slave_1 removed [ 381.473452][T15109] team0 (unregistering): Port device team_slave_0 removed [ 381.573845][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 381.573862][ T29] audit: type=1326 audit(1746712787.976:23816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.621859][T23338] openvswitch: netlink: Message has 6 unknown bytes. [ 381.636296][ T29] audit: type=1326 audit(1746712788.046:23817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.659952][ T29] audit: type=1326 audit(1746712788.046:23818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.683563][ T29] audit: type=1326 audit(1746712788.046:23819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.707204][ T29] audit: type=1326 audit(1746712788.046:23820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.730980][ T29] audit: type=1326 audit(1746712788.046:23821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.754780][ T29] audit: type=1326 audit(1746712788.046:23822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.778687][ T29] audit: type=1326 audit(1746712788.046:23823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.802599][ T29] audit: type=1326 audit(1746712788.186:23824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.826822][ T29] audit: type=1326 audit(1746712788.186:23825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23331 comm="syz.4.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 381.905565][T23343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.942664][T23345] lo speed is unknown, defaulting to 1000 [ 381.980313][T23245] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.000873][T23245] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.027016][T23245] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.046073][T23245] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.120549][T23245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.145803][T15109] IPVS: stop unused estimator thread 0... [ 382.147595][T23245] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.170475][T23358] 9pnet_fd: Insufficient options for proto=fd [ 382.178857][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.185986][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.239853][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.246989][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.327072][T23364] netem: change failed [ 382.342029][T23364] __nla_validate_parse: 6 callbacks suppressed [ 382.342050][T23364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6847'. [ 382.360084][T23369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16412 sclass=netlink_route_socket pid=23369 comm=syz.4.6850 [ 382.408533][T23369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6850'. [ 382.435597][T23245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.546566][T23393] 9pnet_fd: Insufficient options for proto=fd [ 382.693223][T23245] veth0_vlan: entered promiscuous mode [ 382.716482][T23245] veth1_vlan: entered promiscuous mode [ 382.741314][T23245] veth0_macvtap: entered promiscuous mode [ 382.771396][T23245] veth1_macvtap: entered promiscuous mode [ 382.783336][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.794735][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.804745][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.815215][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.825086][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.835654][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.859610][T23245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.871781][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.882387][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.892309][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.902854][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.913482][T23245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.923983][T23245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.936764][T23245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.946942][T23245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.956045][T23245] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.964933][T23245] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.973656][T23245] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.696810][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6899'. [ 384.863862][T23522] binfmt_misc: register: failed to install interpreter file ./file0 [ 384.975462][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6907'. [ 384.994084][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6907'. [ 385.003262][T23530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6907'. [ 385.024433][T23530] netlink: 'syz.6.6907': attribute type 10 has an invalid length. [ 385.045987][T23530] batman_adv: batadv0: Adding interface: team0 [ 385.052311][T23530] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.077659][T23530] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 385.336353][T23548] netlink: 'syz.5.6914': attribute type 1 has an invalid length. [ 385.344449][T23548] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.6914'. [ 385.368534][T23552] binfmt_misc: register: failed to install interpreter file ./file0 [ 385.436562][T23560] netem: change failed [ 385.453151][T23560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6917'. [ 385.496417][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6921'. [ 385.943264][T23610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6937'. [ 386.073243][T23616] netem: change failed [ 386.574342][T23624] team0: entered promiscuous mode [ 386.579482][T23624] team_slave_0: entered promiscuous mode [ 386.585318][T23624] team_slave_1: entered promiscuous mode [ 386.786079][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 386.786097][ T29] audit: type=1326 audit(1746712793.196:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.816388][ T29] audit: type=1326 audit(1746712793.196:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.829336][T23636] vhci_hcd: invalid port number 65 [ 386.845204][T23636] vhci_hcd: invalid port number 65 [ 386.851309][ T29] audit: type=1326 audit(1746712793.196:24112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.875076][ T29] audit: type=1326 audit(1746712793.196:24113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.898872][ T29] audit: type=1326 audit(1746712793.196:24114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.922663][ T29] audit: type=1326 audit(1746712793.196:24115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.946405][ T29] audit: type=1326 audit(1746712793.196:24116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.970231][ T29] audit: type=1326 audit(1746712793.196:24117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 386.993864][ T29] audit: type=1326 audit(1746712793.196:24118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 387.017491][ T29] audit: type=1326 audit(1746712793.196:24119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23635 comm="syz.6.6947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 387.453400][T23620] team0: left promiscuous mode [ 387.458259][T23620] team_slave_0: left promiscuous mode [ 387.463765][T23620] team_slave_1: left promiscuous mode [ 387.602604][T23682] __nla_validate_parse: 2 callbacks suppressed [ 387.602625][T23682] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6966'. [ 387.746415][T23686] veth1_to_bond: entered promiscuous mode [ 387.761407][T23686] veth1_to_bond: left promiscuous mode [ 388.045251][T23712] 9pnet: Could not find request transport: t [ 388.142444][T23720] FAULT_INJECTION: forcing a failure. [ 388.142444][T23720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.155611][T23720] CPU: 1 UID: 0 PID: 23720 Comm: syz.5.6982 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 388.155647][T23720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 388.155661][T23720] Call Trace: [ 388.155667][T23720] [ 388.155676][T23720] __dump_stack+0x1d/0x30 [ 388.155752][T23720] dump_stack_lvl+0xe8/0x140 [ 388.155791][T23720] dump_stack+0x15/0x1b [ 388.155813][T23720] should_fail_ex+0x265/0x280 [ 388.155899][T23720] should_fail+0xb/0x20 [ 388.155936][T23720] should_fail_usercopy+0x1a/0x20 [ 388.155969][T23720] _copy_from_user+0x1c/0xb0 [ 388.155997][T23720] kstrtouint_from_user+0x69/0xf0 [ 388.156076][T23720] ? avc_policy_seqno+0x15/0x30 [ 388.156110][T23720] proc_fail_nth_write+0x50/0x160 [ 388.156137][T23720] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 388.156188][T23720] vfs_write+0x266/0x8d0 [ 388.156272][T23720] ? vfs_read+0x47f/0x6f0 [ 388.156296][T23720] ? security_capable+0x83/0x90 [ 388.156400][T23720] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 388.156437][T23720] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 388.156486][T23720] ksys_write+0xda/0x1a0 [ 388.156517][T23720] __x64_sys_write+0x40/0x50 [ 388.156600][T23720] x64_sys_call+0x2cdd/0x2fb0 [ 388.156626][T23720] do_syscall_64+0xd0/0x1a0 [ 388.156651][T23720] ? clear_bhb_loop+0x25/0x80 [ 388.156678][T23720] ? clear_bhb_loop+0x25/0x80 [ 388.156706][T23720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.156815][T23720] RIP: 0033:0x7f3cf8b2d41f [ 388.156835][T23720] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 388.156857][T23720] RSP: 002b:00007f3cf7197030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 388.156880][T23720] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3cf8b2d41f [ 388.156896][T23720] RDX: 0000000000000001 RSI: 00007f3cf71970a0 RDI: 000000000000000b [ 388.156910][T23720] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000000 [ 388.157003][T23720] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 388.157079][T23720] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 388.157177][T23720] [ 388.420468][T23731] binfmt_misc: register: failed to install interpreter file ./file0 [ 388.440750][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6981'. [ 388.490827][T23739] netem: change failed [ 388.497899][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6988'. [ 388.567180][T23749] syz.5.6993: attempt to access beyond end of device [ 388.567180][T23749] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 388.640838][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6984'. [ 388.653507][T23729] vlan0: entered allmulticast mode [ 388.670721][T23729] netlink: 'syz.4.6984': attribute type 21 has an invalid length. [ 388.682260][T23729] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6984'. [ 388.762033][T23757] C: renamed from team_slave_0 (while UP) [ 388.778002][T23757] netlink: 'syz.6.6997': attribute type 1 has an invalid length. [ 388.785892][T23757] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6997'. [ 388.804494][T23760] binfmt_misc: register: failed to install interpreter file ./file0 [ 388.839003][T23757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.923352][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7002'. [ 388.927035][T23769] SELinux: failed to load policy [ 388.977278][T23778] SELinux: policydb magic number 0x20080522 does not match expected magic number 0xf97cff8c [ 388.988657][T23778] SELinux: failed to load policy [ 389.005600][T23783] netem: change failed [ 389.093588][T23795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7011'. [ 389.113625][T23799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7007'. [ 389.153667][T23801] binfmt_misc: register: failed to install interpreter file ./file0 [ 389.250247][T23808] openvswitch: netlink: Message has 6 unknown bytes. [ 389.265682][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7016'. [ 389.367937][T23820] netlink: 'syz.6.7021': attribute type 13 has an invalid length. [ 389.483189][T23831] binfmt_misc: register: failed to install interpreter file ./file0 [ 389.513615][T23820] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.520933][T23820] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.582457][T23820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.595933][T23820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.637436][T23820] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.646595][T23820] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.655716][T23820] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.664927][T23820] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.820458][T23842] openvswitch: netlink: Message has 6 unknown bytes. [ 389.884419][T23852] syz.2.7035: attempt to access beyond end of device [ 389.884419][T23852] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 390.002062][T23864] FAULT_INJECTION: forcing a failure. [ 390.002062][T23864] name failslab, interval 1, probability 0, space 0, times 0 [ 390.014816][T23864] CPU: 1 UID: 0 PID: 23864 Comm: syz.2.7041 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 390.014849][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.014907][T23864] Call Trace: [ 390.014914][T23864] [ 390.014922][T23864] __dump_stack+0x1d/0x30 [ 390.014950][T23864] dump_stack_lvl+0xe8/0x140 [ 390.014972][T23864] dump_stack+0x15/0x1b [ 390.014993][T23864] should_fail_ex+0x265/0x280 [ 390.015075][T23864] ? create_io_worker+0x5e/0x370 [ 390.015119][T23864] should_failslab+0x8c/0xb0 [ 390.015195][T23864] __kmalloc_cache_noprof+0x4c/0x320 [ 390.015217][T23864] create_io_worker+0x5e/0x370 [ 390.015257][T23864] io_wq_enqueue+0x2e1/0x3c0 [ 390.015291][T23864] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 390.015387][T23864] io_queue_iowq+0x23f/0x350 [ 390.015431][T23864] ? io_queue_sqe_fallback+0x6b/0xc0 [ 390.015455][T23864] io_queue_sqe_fallback+0x73/0xc0 [ 390.015496][T23864] io_submit_sqes+0xb8b/0x1000 [ 390.015540][T23864] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 390.015579][T23864] ? __rcu_read_unlock+0x4f/0x70 [ 390.015601][T23864] ? trie_delete_elem+0x5d/0x5b0 [ 390.015689][T23864] ? proc_fail_nth_write+0x12d/0x160 [ 390.015724][T23864] ? __rcu_read_unlock+0x4f/0x70 [ 390.015794][T23864] ? bpf_trace_run2+0x124/0x1c0 [ 390.015825][T23864] ? __bpf_trace_sys_enter+0x10/0x30 [ 390.015860][T23864] __x64_sys_io_uring_enter+0x78/0x90 [ 390.015964][T23864] x64_sys_call+0x28c8/0x2fb0 [ 390.016042][T23864] do_syscall_64+0xd0/0x1a0 [ 390.016089][T23864] ? clear_bhb_loop+0x25/0x80 [ 390.016115][T23864] ? clear_bhb_loop+0x25/0x80 [ 390.016137][T23864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.016169][T23864] RIP: 0033:0x7fbc6d17e969 [ 390.016202][T23864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.016244][T23864] RSP: 002b:00007fbc6b7e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 390.016262][T23864] RAX: ffffffffffffffda RBX: 00007fbc6d3a5fa0 RCX: 00007fbc6d17e969 [ 390.016274][T23864] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 390.016336][T23864] RBP: 00007fbc6b7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 390.016351][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.016418][T23864] R13: 0000000000000000 R14: 00007fbc6d3a5fa0 R15: 00007ffd57be8218 [ 390.016436][T23864] [ 390.389180][T23850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.398139][T23850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.414284][T23868] netem: change failed [ 390.768142][T23888] syz.2.7046: attempt to access beyond end of device [ 390.768142][T23888] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 391.300849][T23913] 9pnet: Could not find request transport: f1dnoZ ڎV =0x0000000000000009 [ 391.892862][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 391.892883][ T29] audit: type=1326 audit(1746712798.296:24301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 391.922840][ T29] audit: type=1326 audit(1746712798.296:24302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 391.946555][ T29] audit: type=1326 audit(1746712798.296:24303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 391.970321][ T29] audit: type=1326 audit(1746712798.296:24304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 391.994087][ T29] audit: type=1326 audit(1746712798.296:24305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.017789][ T29] audit: type=1326 audit(1746712798.296:24306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.041514][ T29] audit: type=1326 audit(1746712798.296:24307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.065189][ T29] audit: type=1326 audit(1746712798.296:24308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.101789][ T29] audit: type=1326 audit(1746712798.296:24309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.125661][ T29] audit: type=1326 audit(1746712798.296:24310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23954 comm="syz.4.7074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 392.204596][T23973] netem: change failed [ 392.300150][T23990] FAULT_INJECTION: forcing a failure. [ 392.300150][T23990] name failslab, interval 1, probability 0, space 0, times 0 [ 392.312905][T23990] CPU: 0 UID: 0 PID: 23990 Comm: syz.4.7088 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 392.312943][T23990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 392.312960][T23990] Call Trace: [ 392.313004][T23990] [ 392.313015][T23990] __dump_stack+0x1d/0x30 [ 392.313091][T23990] dump_stack_lvl+0xe8/0x140 [ 392.313116][T23990] dump_stack+0x15/0x1b [ 392.313137][T23990] should_fail_ex+0x265/0x280 [ 392.313193][T23990] should_failslab+0x8c/0xb0 [ 392.313231][T23990] kmem_cache_alloc_node_noprof+0x57/0x320 [ 392.313319][T23990] ? __alloc_skb+0x101/0x320 [ 392.313416][T23990] __alloc_skb+0x101/0x320 [ 392.313453][T23990] netlink_alloc_large_skb+0xba/0xf0 [ 392.313491][T23990] netlink_sendmsg+0x3cf/0x6b0 [ 392.313590][T23990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.313632][T23990] __sock_sendmsg+0x142/0x180 [ 392.313705][T23990] ____sys_sendmsg+0x31e/0x4e0 [ 392.313728][T23990] ___sys_sendmsg+0x17b/0x1d0 [ 392.313762][T23990] __x64_sys_sendmsg+0xd4/0x160 [ 392.313786][T23990] x64_sys_call+0x2999/0x2fb0 [ 392.313826][T23990] do_syscall_64+0xd0/0x1a0 [ 392.313848][T23990] ? clear_bhb_loop+0x25/0x80 [ 392.313870][T23990] ? clear_bhb_loop+0x25/0x80 [ 392.313908][T23990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.313934][T23990] RIP: 0033:0x7f29b86be969 [ 392.314015][T23990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.314034][T23990] RSP: 002b:00007f29b6d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.314053][T23990] RAX: ffffffffffffffda RBX: 00007f29b88e5fa0 RCX: 00007f29b86be969 [ 392.314065][T23990] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 392.314078][T23990] RBP: 00007f29b6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 392.314090][T23990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.314102][T23990] R13: 0000000000000000 R14: 00007f29b88e5fa0 R15: 00007ffc13b663b8 [ 392.314133][T23990] [ 392.566524][T23985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.577486][T23985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.587807][T23985] bond0 (unregistering): Released all slaves [ 392.633293][T24011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.643913][T24011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.726168][T24023] __nla_validate_parse: 6 callbacks suppressed [ 392.726257][T24023] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7099'. [ 392.728522][T24022] netem: change failed [ 392.806906][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7103'. [ 392.824312][T24030] siw: device registration error -23 [ 392.824348][T24035] FAULT_INJECTION: forcing a failure. [ 392.824348][T24035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.842920][T24035] CPU: 1 UID: 0 PID: 24035 Comm: syz.4.7104 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 392.842950][T24035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 392.842965][T24035] Call Trace: [ 392.842972][T24035] [ 392.842980][T24035] __dump_stack+0x1d/0x30 [ 392.843003][T24035] dump_stack_lvl+0xe8/0x140 [ 392.843053][T24035] dump_stack+0x15/0x1b [ 392.843069][T24035] should_fail_ex+0x265/0x280 [ 392.843104][T24035] should_fail+0xb/0x20 [ 392.843215][T24035] should_fail_usercopy+0x1a/0x20 [ 392.843234][T24035] _copy_from_user+0x1c/0xb0 [ 392.843256][T24035] __sys_bpf+0x178/0x790 [ 392.843303][T24035] __x64_sys_bpf+0x41/0x50 [ 392.843328][T24035] x64_sys_call+0x2478/0x2fb0 [ 392.843406][T24035] do_syscall_64+0xd0/0x1a0 [ 392.843428][T24035] ? clear_bhb_loop+0x25/0x80 [ 392.843504][T24035] ? clear_bhb_loop+0x25/0x80 [ 392.843577][T24035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.843599][T24035] RIP: 0033:0x7f29b86be969 [ 392.843664][T24035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.843682][T24035] RSP: 002b:00007f29b6d27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.843701][T24035] RAX: ffffffffffffffda RBX: 00007f29b88e5fa0 RCX: 00007f29b86be969 [ 392.843714][T24035] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000001 [ 392.843726][T24035] RBP: 00007f29b6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 392.843771][T24035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.843829][T24035] R13: 0000000000000000 R14: 00007f29b88e5fa0 R15: 00007ffc13b663b8 [ 392.843848][T24035] [ 393.024664][T24033] syz.6.7108: attempt to access beyond end of device [ 393.024664][T24033] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 393.082663][T24043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7112'. [ 393.178246][T24057] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7118'. [ 393.200598][T24061] syz.5.7120: attempt to access beyond end of device [ 393.200598][T24061] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 393.203157][T24059] binfmt_misc: register: failed to install interpreter file ./file0 [ 393.255100][T24065] netem: change failed [ 393.286804][T24067] siw: device registration error -23 [ 393.371117][T24080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7123'. [ 393.506086][T24103] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.506862][T24097] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7133'. [ 393.525678][T24101] FAULT_INJECTION: forcing a failure. [ 393.525678][T24101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.538887][T24101] CPU: 1 UID: 0 PID: 24101 Comm: syz.4.7131 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 393.538924][T24101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 393.538941][T24101] Call Trace: [ 393.538950][T24101] [ 393.539048][T24101] __dump_stack+0x1d/0x30 [ 393.539069][T24101] dump_stack_lvl+0xe8/0x140 [ 393.539087][T24101] dump_stack+0x15/0x1b [ 393.539106][T24101] should_fail_ex+0x265/0x280 [ 393.539147][T24101] should_fail+0xb/0x20 [ 393.539206][T24101] should_fail_usercopy+0x1a/0x20 [ 393.539246][T24101] _copy_to_user+0x20/0xa0 [ 393.539299][T24101] simple_read_from_buffer+0xb5/0x130 [ 393.539324][T24101] proc_fail_nth_read+0x100/0x140 [ 393.539350][T24101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.539443][T24101] vfs_read+0x19d/0x6f0 [ 393.539472][T24101] ? __rcu_read_unlock+0x4f/0x70 [ 393.539565][T24101] ? __rcu_read_unlock+0x4f/0x70 [ 393.539591][T24101] ? __fget_files+0x184/0x1c0 [ 393.539637][T24101] ksys_read+0xda/0x1a0 [ 393.539670][T24101] __x64_sys_read+0x40/0x50 [ 393.539700][T24101] x64_sys_call+0x2d77/0x2fb0 [ 393.539720][T24101] do_syscall_64+0xd0/0x1a0 [ 393.539743][T24101] ? clear_bhb_loop+0x25/0x80 [ 393.539825][T24101] ? clear_bhb_loop+0x25/0x80 [ 393.539848][T24101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.539880][T24101] RIP: 0033:0x7f29b86bd37c [ 393.539899][T24101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.539984][T24101] RSP: 002b:00007f29b6d27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.540007][T24101] RAX: ffffffffffffffda RBX: 00007f29b88e5fa0 RCX: 00007f29b86bd37c [ 393.540019][T24101] RDX: 000000000000000f RSI: 00007f29b6d270a0 RDI: 0000000000000006 [ 393.540031][T24101] RBP: 00007f29b6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 393.540043][T24101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.540126][T24101] R13: 0000000000000000 R14: 00007f29b88e5fa0 R15: 00007ffc13b663b8 [ 393.540151][T24101] [ 393.829364][T24114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.838853][T24114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.887229][T24118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7140'. [ 394.042263][T24132] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7147'. [ 394.108509][T24130] batadv1: entered allmulticast mode [ 394.114347][T24130] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.178726][T24140] ref_ctr_offset mismatch. inode: 0x5b7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 394.275861][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7154'. [ 394.423985][T24158] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7158'. [ 394.669870][T24186] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 394.681739][T24186] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 394.734295][T24190] FAULT_INJECTION: forcing a failure. [ 394.734295][T24190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.747504][T24190] CPU: 1 UID: 0 PID: 24190 Comm: syz.6.7172 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 394.747595][T24190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 394.747607][T24190] Call Trace: [ 394.747612][T24190] [ 394.747704][T24190] __dump_stack+0x1d/0x30 [ 394.747724][T24190] dump_stack_lvl+0xe8/0x140 [ 394.747740][T24190] dump_stack+0x15/0x1b [ 394.747754][T24190] should_fail_ex+0x265/0x280 [ 394.747851][T24190] should_fail+0xb/0x20 [ 394.747949][T24190] should_fail_usercopy+0x1a/0x20 [ 394.747965][T24190] _copy_from_user+0x1c/0xb0 [ 394.747986][T24190] kstrtouint_from_user+0x69/0xf0 [ 394.748026][T24190] ? avc_policy_seqno+0x15/0x30 [ 394.748129][T24190] proc_fail_nth_write+0x50/0x160 [ 394.748153][T24190] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.748229][T24190] vfs_write+0x266/0x8d0 [ 394.748277][T24190] ? vfs_read+0x47f/0x6f0 [ 394.748298][T24190] ? __rcu_read_unlock+0x4f/0x70 [ 394.748317][T24190] ? __fget_files+0x184/0x1c0 [ 394.748343][T24190] ksys_write+0xda/0x1a0 [ 394.748367][T24190] __x64_sys_write+0x40/0x50 [ 394.748456][T24190] x64_sys_call+0x2cdd/0x2fb0 [ 394.748486][T24190] do_syscall_64+0xd0/0x1a0 [ 394.748588][T24190] ? clear_bhb_loop+0x25/0x80 [ 394.748608][T24190] ? clear_bhb_loop+0x25/0x80 [ 394.748626][T24190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.748644][T24190] RIP: 0033:0x7f2764ddd41f [ 394.748657][T24190] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 394.748719][T24190] RSP: 002b:00007f2763447030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 394.748736][T24190] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2764ddd41f [ 394.748748][T24190] RDX: 0000000000000001 RSI: 00007f27634470a0 RDI: 0000000000000004 [ 394.748779][T24190] RBP: 00007f2763447090 R08: 0000000000000000 R09: 0000000000000000 [ 394.748789][T24190] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 394.748800][T24190] R13: 0000000000000000 R14: 00007f2765005fa0 R15: 00007ffd3723bde8 [ 394.748819][T24190] [ 395.176228][T24214] IPv6: NLM_F_CREATE should be specified when creating new route [ 395.666922][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810f7f8c00: rx timeout, send abort [ 395.675300][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810f7f8c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 395.897521][T24247] sd 0:0:1:0: device reset [ 396.103069][T24254] random: crng reseeded on system resumption [ 396.447427][T24272] openvswitch: netlink: Message has 6 unknown bytes. [ 396.568421][T24280] openvswitch: netlink: Message has 6 unknown bytes. [ 396.892028][T24305] netem: change failed [ 396.925147][T24311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.938287][T24311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.123832][T24327] syz.4.7233: attempt to access beyond end of device [ 397.123832][T24327] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 397.220995][T24335] openvswitch: netlink: Message has 6 unknown bytes. [ 397.249135][T24339] netem: change failed [ 397.253201][T24342] 9pnet_fd: Insufficient options for proto=fd [ 398.177711][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 398.177729][ T29] audit: type=1400 audit(1746712804.586:24499): avc: denied { ioctl } for pid=24357 comm="syz.5.7246" path="socket:[81869]" dev="sockfs" ino=81869 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 398.235388][T24361] lo speed is unknown, defaulting to 1000 [ 398.247843][T24366] openvswitch: netlink: Message has 6 unknown bytes. [ 398.342846][T24384] netem: change failed [ 398.381681][T24388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.390693][T24388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.399612][T24391] __nla_validate_parse: 11 callbacks suppressed [ 398.399630][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7259'. [ 398.426944][T24390] sd 0:0:1:0: device reset [ 398.550879][T24403] xt_connbytes: Forcing CT accounting to be enabled [ 398.558308][T24403] Cannot find add_set index 0 as target [ 398.673452][ T29] audit: type=1400 audit(1746712805.076:24500): avc: denied { read } for pid=24398 comm="syz.5.7265" name="file0" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 398.696202][ T29] audit: type=1400 audit(1746712805.076:24501): avc: denied { open } for pid=24398 comm="syz.5.7265" path="/229/file0" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 398.721247][T24422] block device autoloading is deprecated and will be removed. [ 398.737325][T24421] netem: change failed [ 398.861781][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7276'. [ 398.910365][ T29] audit: type=1326 audit(1746712805.316:24502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24438 comm="syz.3.7281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d291fe969 code=0x0 [ 399.161805][T24456] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7287'. [ 399.242832][ T29] audit: type=1400 audit(1746712805.646:24503): avc: denied { relabelfrom } for pid=24462 comm="syz.5.7290" name="" dev="pipefs" ino=82449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 399.339649][T24472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.348345][T24472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.582853][T24478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24478 comm=syz.5.7296 [ 399.603050][T24478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7296'. [ 399.612337][T24478] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7296'. [ 399.633518][T24477] siw: device registration error -23 [ 399.643674][T24480] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7297'. [ 399.740126][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 400.026530][T24507] siw: device registration error -23 [ 400.066766][T24513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7309'. [ 400.119248][T24518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7313'. [ 400.285984][T24531] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7319'. [ 400.338517][T24534] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.397320][ T29] audit: type=1326 audit(1746712806.806:24504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 400.432209][ T29] audit: type=1326 audit(1746712806.806:24505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 400.455899][ T29] audit: type=1326 audit(1746712806.836:24506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3cf8b2e969 code=0x7ffc0000 [ 400.479547][ T29] audit: type=1326 audit(1746712806.836:24507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3cf8b2e9a3 code=0x7ffc0000 [ 400.503445][ T29] audit: type=1326 audit(1746712806.836:24508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24528 comm="syz.5.7318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3cf8b2d41f code=0x7ffc0000 [ 400.553905][T24534] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.626455][T24534] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.723812][T24534] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.800628][T24534] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.820811][T24534] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.864475][T24534] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.881521][T24534] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.666090][T24582] siw: device registration error -23 [ 401.852195][T24594] openvswitch: netlink: Message has 6 unknown bytes. [ 401.959544][T24605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24605 comm=syz.5.7351 [ 402.388096][T24612] openvswitch: netlink: Message has 6 unknown bytes. [ 402.427208][T24616] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 402.443009][T24617] bond1: entered promiscuous mode [ 402.448198][T24617] bond1: entered allmulticast mode [ 402.454029][T24616] SELinux: failed to load policy [ 402.460050][T24617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.472098][T24617] bond1 (unregistering): Released all slaves [ 402.709239][T24643] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 402.871607][T24653] FAULT_INJECTION: forcing a failure. [ 402.871607][T24653] name failslab, interval 1, probability 0, space 0, times 0 [ 402.884399][T24653] CPU: 1 UID: 0 PID: 24653 Comm: syz.2.7372 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 402.884436][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.884449][T24653] Call Trace: [ 402.884457][T24653] [ 402.884466][T24653] __dump_stack+0x1d/0x30 [ 402.884540][T24653] dump_stack_lvl+0xe8/0x140 [ 402.884565][T24653] dump_stack+0x15/0x1b [ 402.884587][T24653] should_fail_ex+0x265/0x280 [ 402.884624][T24653] ? snd_seq_port_connect+0x4d/0x250 [ 402.884728][T24653] should_failslab+0x8c/0xb0 [ 402.884763][T24653] __kmalloc_cache_noprof+0x4c/0x320 [ 402.884791][T24653] snd_seq_port_connect+0x4d/0x250 [ 402.884829][T24653] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 402.884865][T24653] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 402.884948][T24653] snd_seq_ioctl_subscribe_port+0x22b/0x3b0 [ 402.884985][T24653] snd_seq_ioctl+0x17a/0x2e0 [ 402.885017][T24653] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 402.885070][T24653] __se_sys_ioctl+0xcb/0x140 [ 402.885098][T24653] __x64_sys_ioctl+0x43/0x50 [ 402.885148][T24653] x64_sys_call+0x19a8/0x2fb0 [ 402.885176][T24653] do_syscall_64+0xd0/0x1a0 [ 402.885203][T24653] ? clear_bhb_loop+0x25/0x80 [ 402.885230][T24653] ? clear_bhb_loop+0x25/0x80 [ 402.885257][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.885283][T24653] RIP: 0033:0x7fbc6d17e969 [ 402.885298][T24653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.885315][T24653] RSP: 002b:00007fbc6b7e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.885341][T24653] RAX: ffffffffffffffda RBX: 00007fbc6d3a5fa0 RCX: 00007fbc6d17e969 [ 402.885377][T24653] RDX: 0000200000000300 RSI: 0000000040505330 RDI: 0000000000000006 [ 402.885393][T24653] RBP: 00007fbc6b7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.885409][T24653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.885425][T24653] R13: 0000000000000000 R14: 00007fbc6d3a5fa0 R15: 00007ffd57be8218 [ 402.885450][T24653] [ 403.177600][T24666] lo speed is unknown, defaulting to 1000 [ 403.426876][T24691] siw: device registration error -23 [ 403.451049][T24699] __nla_validate_parse: 17 callbacks suppressed [ 403.451070][T24699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7391'. [ 403.548502][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 403.548522][ T29] audit: type=1326 audit(1746712809.956:24588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.597621][ T29] audit: type=1326 audit(1746712809.956:24589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.621425][ T29] audit: type=1326 audit(1746712809.956:24590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.645045][ T29] audit: type=1326 audit(1746712809.956:24591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.668718][ T29] audit: type=1326 audit(1746712809.956:24592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.692552][ T29] audit: type=1326 audit(1746712809.986:24593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.716555][ T29] audit: type=1326 audit(1746712809.986:24594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.740156][ T29] audit: type=1326 audit(1746712809.986:24595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.763820][ T29] audit: type=1326 audit(1746712809.986:24596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.787565][ T29] audit: type=1326 audit(1746712809.986:24597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24709 comm="syz.4.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b86be969 code=0x7ffc0000 [ 403.903373][T24721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7400'. [ 403.941907][T24726] FAULT_INJECTION: forcing a failure. [ 403.941907][T24726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.955083][T24726] CPU: 0 UID: 0 PID: 24726 Comm: syz.4.7402 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 403.955118][T24726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 403.955172][T24726] Call Trace: [ 403.955179][T24726] [ 403.955187][T24726] __dump_stack+0x1d/0x30 [ 403.955221][T24726] dump_stack_lvl+0xe8/0x140 [ 403.955244][T24726] dump_stack+0x15/0x1b [ 403.955262][T24726] should_fail_ex+0x265/0x280 [ 403.955293][T24726] should_fail+0xb/0x20 [ 403.955404][T24726] should_fail_usercopy+0x1a/0x20 [ 403.955427][T24726] strncpy_from_user+0x25/0x230 [ 403.955514][T24726] strncpy_from_user_nofault+0x68/0xf0 [ 403.955544][T24726] bpf_probe_read_compat_str+0xb4/0x130 [ 403.955594][T24726] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 403.955610][T24726] bpf_trace_run3+0x10c/0x1d0 [ 403.955632][T24726] ? __kfree_skb+0x109/0x150 [ 403.955718][T24726] ? __kfree_skb+0x109/0x150 [ 403.955756][T24726] __traceiter_kmem_cache_free+0x35/0x60 [ 403.955791][T24726] ? __kfree_skb+0x109/0x150 [ 403.955849][T24726] kmem_cache_free+0x246/0x2f0 [ 403.955872][T24726] __kfree_skb+0x109/0x150 [ 403.955904][T24726] ? nlmon_xmit+0x4f/0x60 [ 403.955928][T24726] consume_skb+0x49/0x150 [ 403.956028][T24726] nlmon_xmit+0x4f/0x60 [ 403.956049][T24726] dev_hard_start_xmit+0x12c/0x3d0 [ 403.956095][T24726] __dev_queue_xmit+0x10b9/0x1fb0 [ 403.956117][T24726] ? __dev_queue_xmit+0x182/0x1fb0 [ 403.956139][T24726] ? __rcu_read_unlock+0x4f/0x70 [ 403.956239][T24726] ? __skb_clone+0x2a6/0x2d0 [ 403.956268][T24726] __netlink_deliver_tap+0x3c3/0x500 [ 403.956311][T24726] netlink_unicast+0x64c/0x670 [ 403.956388][T24726] netlink_sendmsg+0x58b/0x6b0 [ 403.956424][T24726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.956483][T24726] __sock_sendmsg+0x142/0x180 [ 403.956511][T24726] ____sys_sendmsg+0x31e/0x4e0 [ 403.956532][T24726] ___sys_sendmsg+0x17b/0x1d0 [ 403.956651][T24726] __x64_sys_sendmsg+0xd4/0x160 [ 403.956676][T24726] x64_sys_call+0x2999/0x2fb0 [ 403.956744][T24726] do_syscall_64+0xd0/0x1a0 [ 403.956769][T24726] ? clear_bhb_loop+0x25/0x80 [ 403.956852][T24726] ? clear_bhb_loop+0x25/0x80 [ 403.956873][T24726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.956897][T24726] RIP: 0033:0x7f29b86be969 [ 403.956916][T24726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.956935][T24726] RSP: 002b:00007f29b6d27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.957028][T24726] RAX: ffffffffffffffda RBX: 00007f29b88e5fa0 RCX: 00007f29b86be969 [ 403.957040][T24726] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 403.957055][T24726] RBP: 00007f29b6d27090 R08: 0000000000000000 R09: 0000000000000000 [ 403.957071][T24726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.957085][T24726] R13: 0000000000000000 R14: 00007f29b88e5fa0 R15: 00007ffc13b663b8 [ 403.957104][T24726] [ 404.283800][T24730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7404'. [ 404.557260][T24746] openvswitch: netlink: Message has 6 unknown bytes. [ 404.625450][T24751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7412'. [ 404.784184][T24762] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7417'. [ 405.110702][T24781] bridge0: port 3(vlan2) entered blocking state [ 405.117268][T24781] bridge0: port 3(vlan2) entered disabled state [ 405.159343][T24781] vlan2: entered allmulticast mode [ 405.164584][T24781] bridge0: entered allmulticast mode [ 405.207673][T24781] vlan2: left allmulticast mode [ 405.212610][T24781] bridge0: left allmulticast mode [ 405.263471][T24784] SELinux: policydb magic number 0x7cfff016 does not match expected magic number 0xf97cff8c [ 405.275754][T24784] SELinux: failed to load policy [ 405.285073][T24784] IPv6: Can't replace route, no match found [ 405.347213][T24788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7425'. [ 405.361173][T24790] FAULT_INJECTION: forcing a failure. [ 405.361173][T24790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.374356][T24790] CPU: 0 UID: 0 PID: 24790 Comm: syz.5.7426 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 405.374430][T24790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 405.374442][T24790] Call Trace: [ 405.374450][T24790] [ 405.374460][T24790] __dump_stack+0x1d/0x30 [ 405.374488][T24790] dump_stack_lvl+0xe8/0x140 [ 405.374545][T24790] dump_stack+0x15/0x1b [ 405.374560][T24790] should_fail_ex+0x265/0x280 [ 405.374648][T24790] should_fail+0xb/0x20 [ 405.374677][T24790] should_fail_usercopy+0x1a/0x20 [ 405.374722][T24790] _copy_from_user+0x1c/0xb0 [ 405.374750][T24790] kstrtouint_from_user+0x69/0xf0 [ 405.374822][T24790] ? avc_policy_seqno+0x15/0x30 [ 405.374865][T24790] proc_fail_nth_write+0x50/0x160 [ 405.374898][T24790] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 405.375007][T24790] vfs_write+0x266/0x8d0 [ 405.375049][T24790] ? vfs_read+0x47f/0x6f0 [ 405.375137][T24790] ? __rcu_read_unlock+0x4f/0x70 [ 405.375159][T24790] ? __fget_files+0x184/0x1c0 [ 405.375189][T24790] ksys_write+0xda/0x1a0 [ 405.375217][T24790] __x64_sys_write+0x40/0x50 [ 405.375241][T24790] x64_sys_call+0x2cdd/0x2fb0 [ 405.375276][T24790] do_syscall_64+0xd0/0x1a0 [ 405.375304][T24790] ? clear_bhb_loop+0x25/0x80 [ 405.375325][T24790] ? clear_bhb_loop+0x25/0x80 [ 405.375345][T24790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.375410][T24790] RIP: 0033:0x7f3cf8b2d41f [ 405.375428][T24790] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 405.375451][T24790] RSP: 002b:00007f3cf7197030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 405.375475][T24790] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3cf8b2d41f [ 405.375491][T24790] RDX: 0000000000000001 RSI: 00007f3cf71970a0 RDI: 0000000000000007 [ 405.375573][T24790] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000000 [ 405.375585][T24790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 405.375601][T24790] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 405.375626][T24790] [ 405.674007][T24798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7430'. [ 405.791796][T24808] 9pnet_fd: Insufficient options for proto=fd [ 406.742455][T24832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7444'. [ 406.792266][T24836] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7442'. [ 406.886817][T24848] 9pnet_fd: Insufficient options for proto=fd [ 406.969839][T24853] smc: net device bond0 erased user defined pnetid SYZ0 [ 406.978899][T24856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 408.192744][T24911] netlink: 'syz.2.7473': attribute type 6 has an invalid length. [ 408.200925][T24911] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.258869][T24914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.284272][T24914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.306664][T24914] bond0 (unregistering): Released all slaves [ 408.479097][T24929] __nla_validate_parse: 5 callbacks suppressed [ 408.479117][T24929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7477'. [ 408.805620][T24949] FAULT_INJECTION: forcing a failure. [ 408.805620][T24949] name failslab, interval 1, probability 0, space 0, times 0 [ 408.818655][T24949] CPU: 1 UID: 0 PID: 24949 Comm: syz.5.7484 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 408.818769][T24949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 408.818785][T24949] Call Trace: [ 408.818793][T24949] [ 408.818801][T24949] __dump_stack+0x1d/0x30 [ 408.818866][T24949] dump_stack_lvl+0xe8/0x140 [ 408.818888][T24949] dump_stack+0x15/0x1b [ 408.818984][T24949] should_fail_ex+0x265/0x280 [ 408.819022][T24949] should_failslab+0x8c/0xb0 [ 408.819067][T24949] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 408.819095][T24949] ? sidtab_sid2str_get+0xa0/0x130 [ 408.819133][T24949] kmemdup_noprof+0x2b/0x70 [ 408.819157][T24949] sidtab_sid2str_get+0xa0/0x130 [ 408.819214][T24949] security_sid_to_context_core+0x1eb/0x2e0 [ 408.819261][T24949] security_sid_to_context+0x27/0x40 [ 408.819309][T24949] avc_audit_post_callback+0x10f/0x520 [ 408.819351][T24949] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 408.819459][T24949] common_lsm_audit+0x1b8/0x230 [ 408.819483][T24949] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 408.819549][T24949] ? avc_denied+0xe4/0x100 [ 408.819587][T24949] slow_avc_audit+0x104/0x140 [ 408.819629][T24949] selinux_capable+0x1a2/0x270 [ 408.819653][T24949] security_capable+0x83/0x90 [ 408.819796][T24949] file_ns_capable+0x45/0x70 [ 408.819882][T24949] netlink_capable+0x6b/0xa0 [ 408.819954][T24949] audit_receive+0x375/0x2180 [ 408.820035][T24949] ? avc_has_perm+0xd3/0x150 [ 408.820072][T24949] ? __netlink_deliver_tap+0x4f5/0x500 [ 408.820159][T24949] ? __netlink_lookup+0x266/0x2a0 [ 408.820184][T24949] netlink_unicast+0x59e/0x670 [ 408.820221][T24949] netlink_sendmsg+0x58b/0x6b0 [ 408.820335][T24949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.820372][T24949] __sock_sendmsg+0x142/0x180 [ 408.820435][T24949] ____sys_sendmsg+0x31e/0x4e0 [ 408.820457][T24949] ___sys_sendmsg+0x17b/0x1d0 [ 408.820544][T24949] __x64_sys_sendmsg+0xd4/0x160 [ 408.820573][T24949] x64_sys_call+0x2999/0x2fb0 [ 408.820600][T24949] do_syscall_64+0xd0/0x1a0 [ 408.820626][T24949] ? clear_bhb_loop+0x25/0x80 [ 408.820715][T24949] ? clear_bhb_loop+0x25/0x80 [ 408.820741][T24949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.820770][T24949] RIP: 0033:0x7f3cf8b2e969 [ 408.820788][T24949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.820874][T24949] RSP: 002b:00007f3cf7197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.820892][T24949] RAX: ffffffffffffffda RBX: 00007f3cf8d55fa0 RCX: 00007f3cf8b2e969 [ 408.820904][T24949] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 408.820923][T24949] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000000 [ 408.820938][T24949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.820952][T24949] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 408.820976][T24949] [ 409.126162][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 409.126184][ T29] audit: type=1400 audit(1746712815.216:24734): avc: denied { audit_write } for pid=24948 comm="syz.5.7484" capability=29 scontext=root:sysadm_r:sysadm_t tsid=137 tclass=capability permissive=1 [ 409.152048][ T29] audit: type=1107 audit(1746712815.526:24735): pid=24948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 409.178018][T24946] sd 0:0:1:0: device reset [ 409.215885][T24957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7489'. [ 409.229365][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7488'. [ 409.510662][T24987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7503'. [ 409.517639][ T29] audit: type=1326 audit(1746712815.916:24736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.544411][T24988] FAULT_INJECTION: forcing a failure. [ 409.544411][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 409.557123][T24988] CPU: 0 UID: 0 PID: 24988 Comm: syz.5.7501 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 409.557158][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 409.557342][T24988] Call Trace: [ 409.557352][T24988] [ 409.557362][T24988] __dump_stack+0x1d/0x30 [ 409.557387][T24988] dump_stack_lvl+0xe8/0x140 [ 409.557412][T24988] dump_stack+0x15/0x1b [ 409.557437][T24988] should_fail_ex+0x265/0x280 [ 409.557550][T24988] should_failslab+0x8c/0xb0 [ 409.557587][T24988] __kmalloc_noprof+0xa5/0x3e0 [ 409.557630][T24988] ? security_prepare_creds+0x52/0x120 [ 409.557669][T24988] security_prepare_creds+0x52/0x120 [ 409.557730][T24988] prepare_creds+0x34a/0x4c0 [ 409.557767][T24988] copy_creds+0x8f/0x3f0 [ 409.557827][T24988] copy_process+0x658/0x1f90 [ 409.557863][T24988] ? copy_clone_args_from_user+0x3ce/0x490 [ 409.557907][T24988] kernel_clone+0x16c/0x5b0 [ 409.557945][T24988] __se_sys_clone3+0x1c2/0x200 [ 409.557989][T24988] ? fpregs_assert_state_consistent+0x84/0xa0 [ 409.558029][T24988] __x64_sys_clone3+0x31/0x40 [ 409.558124][T24988] x64_sys_call+0x10c9/0x2fb0 [ 409.558145][T24988] do_syscall_64+0xd0/0x1a0 [ 409.558171][T24988] ? clear_bhb_loop+0x25/0x80 [ 409.558272][T24988] ? clear_bhb_loop+0x25/0x80 [ 409.558297][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.558332][T24988] RIP: 0033:0x7f3cf8b2e969 [ 409.558347][T24988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.558366][T24988] RSP: 002b:00007f3cf7196f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 409.558389][T24988] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3cf8b2e969 [ 409.558406][T24988] RDX: 00007f3cf7196f20 RSI: 0000000000000058 RDI: 00007f3cf7196f20 [ 409.558488][T24988] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000058 [ 409.558504][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.558545][T24988] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 409.558570][T24988] [ 409.740486][ T29] audit: type=1326 audit(1746712815.956:24737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.794532][ T29] audit: type=1326 audit(1746712815.956:24738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.798229][T24991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7502'. [ 409.818317][ T29] audit: type=1326 audit(1746712815.956:24739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.818353][ T29] audit: type=1326 audit(1746712815.956:24740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.818380][ T29] audit: type=1326 audit(1746712815.956:24741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.827374][T24991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7502'. [ 409.850953][ T29] audit: type=1326 audit(1746712815.956:24742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 409.930988][ T29] audit: type=1326 audit(1746712815.956:24743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24966 comm="syz.2.7494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbc6d17e969 code=0x7ffc0000 [ 410.036071][T24997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7505'. [ 410.092873][T25002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7508'. [ 410.181944][T25008] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7511'. [ 410.376673][T25027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7516'. [ 410.999685][T25057] siw: device registration error -23 [ 411.457947][T25107] FAULT_INJECTION: forcing a failure. [ 411.457947][T25107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.471150][T25107] CPU: 1 UID: 0 PID: 25107 Comm: syz.6.7552 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 411.471185][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 411.471199][T25107] Call Trace: [ 411.471207][T25107] [ 411.471215][T25107] __dump_stack+0x1d/0x30 [ 411.471240][T25107] dump_stack_lvl+0xe8/0x140 [ 411.471302][T25107] dump_stack+0x15/0x1b [ 411.471317][T25107] should_fail_ex+0x265/0x280 [ 411.471374][T25107] should_fail+0xb/0x20 [ 411.471408][T25107] should_fail_usercopy+0x1a/0x20 [ 411.471432][T25107] _copy_from_iter+0xcf/0xdd0 [ 411.471460][T25107] hci_sock_sendmsg+0x36d/0x900 [ 411.471484][T25107] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 411.471532][T25107] __sock_sendmsg+0x142/0x180 [ 411.471592][T25107] sock_write_iter+0x165/0x1b0 [ 411.471619][T25107] aio_write+0x2e2/0x410 [ 411.471749][T25107] io_submit_one+0xac8/0x11b0 [ 411.471781][T25107] __se_sys_io_submit+0xfb/0x280 [ 411.471807][T25107] __x64_sys_io_submit+0x43/0x50 [ 411.471829][T25107] x64_sys_call+0xfc4/0x2fb0 [ 411.471855][T25107] do_syscall_64+0xd0/0x1a0 [ 411.471928][T25107] ? clear_bhb_loop+0x25/0x80 [ 411.472003][T25107] ? clear_bhb_loop+0x25/0x80 [ 411.472023][T25107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.472044][T25107] RIP: 0033:0x7f2764dde969 [ 411.472063][T25107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.472112][T25107] RSP: 002b:00007f2763447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 411.472183][T25107] RAX: ffffffffffffffda RBX: 00007f2765005fa0 RCX: 00007f2764dde969 [ 411.472199][T25107] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f2765b3e000 [ 411.472215][T25107] RBP: 00007f2763447090 R08: 0000000000000000 R09: 0000000000000000 [ 411.472231][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.472246][T25107] R13: 0000000000000000 R14: 00007f2765005fa0 R15: 00007ffd3723bde8 [ 411.472269][T25107] [ 411.698009][T25111] $H: renamed from bond0 (while UP) [ 411.706729][T25111] $H: entered promiscuous mode [ 411.711829][T25111] bond_slave_0: entered promiscuous mode [ 411.717875][T25111] bond_slave_1: entered promiscuous mode [ 411.746641][T25118] 9pnet_fd: Insufficient options for proto=fd [ 411.774805][T25123] 9pnet_fd: Insufficient options for proto=fd [ 411.898995][T25139] syzkaller0: entered promiscuous mode [ 411.904740][T25139] syzkaller0: entered allmulticast mode [ 412.011478][T25149] 9pnet_fd: Insufficient options for proto=fd [ 412.019305][T25147] 9pnet_fd: Insufficient options for proto=fd [ 412.050605][T25153] FAULT_INJECTION: forcing a failure. [ 412.050605][T25153] name failslab, interval 1, probability 0, space 0, times 0 [ 412.063336][T25153] CPU: 1 UID: 0 PID: 25153 Comm: syz.5.7573 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 412.063370][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.063386][T25153] Call Trace: [ 412.063395][T25153] [ 412.063459][T25153] __dump_stack+0x1d/0x30 [ 412.063487][T25153] dump_stack_lvl+0xe8/0x140 [ 412.063539][T25153] dump_stack+0x15/0x1b [ 412.063560][T25153] should_fail_ex+0x265/0x280 [ 412.063634][T25153] should_failslab+0x8c/0xb0 [ 412.063772][T25153] kmem_cache_alloc_node_noprof+0x57/0x320 [ 412.063851][T25153] ? __alloc_skb+0x101/0x320 [ 412.063890][T25153] __alloc_skb+0x101/0x320 [ 412.063954][T25153] netlink_alloc_large_skb+0xba/0xf0 [ 412.063991][T25153] netlink_sendmsg+0x3cf/0x6b0 [ 412.064151][T25153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.064269][T25153] __sock_sendmsg+0x142/0x180 [ 412.064302][T25153] ____sys_sendmsg+0x345/0x4e0 [ 412.064338][T25153] ___sys_sendmsg+0x17b/0x1d0 [ 412.064378][T25153] __sys_sendmmsg+0x178/0x300 [ 412.064416][T25153] __x64_sys_sendmmsg+0x57/0x70 [ 412.064440][T25153] x64_sys_call+0x2f2f/0x2fb0 [ 412.064467][T25153] do_syscall_64+0xd0/0x1a0 [ 412.064494][T25153] ? clear_bhb_loop+0x25/0x80 [ 412.064560][T25153] ? clear_bhb_loop+0x25/0x80 [ 412.064649][T25153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.064676][T25153] RIP: 0033:0x7f3cf8b2e969 [ 412.064695][T25153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.064719][T25153] RSP: 002b:00007f3cf7197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.064809][T25153] RAX: ffffffffffffffda RBX: 00007f3cf8d55fa0 RCX: 00007f3cf8b2e969 [ 412.064826][T25153] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 412.064842][T25153] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000000 [ 412.064883][T25153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.064899][T25153] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 412.064923][T25153] [ 412.456968][T25182] 9pnet_fd: Insufficient options for proto=fd [ 412.507072][T25186] sd 0:0:1:0: device reset [ 412.672021][T25208] 9pnet_fd: Insufficient options for proto=fd [ 412.687899][T25210] FAULT_INJECTION: forcing a failure. [ 412.687899][T25210] name failslab, interval 1, probability 0, space 0, times 0 [ 412.700724][T25210] CPU: 1 UID: 0 PID: 25210 Comm: syz.5.7595 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 412.700765][T25210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.700780][T25210] Call Trace: [ 412.700789][T25210] [ 412.700797][T25210] __dump_stack+0x1d/0x30 [ 412.700818][T25210] dump_stack_lvl+0xe8/0x140 [ 412.700879][T25210] dump_stack+0x15/0x1b [ 412.700900][T25210] should_fail_ex+0x265/0x280 [ 412.701011][T25210] should_failslab+0x8c/0xb0 [ 412.701065][T25210] __kmalloc_noprof+0xa5/0x3e0 [ 412.701088][T25210] ? skcipher_next_slow+0x95/0x130 [ 412.701125][T25210] skcipher_next_slow+0x95/0x130 [ 412.701223][T25210] skcipher_walk_next+0x376/0x430 [ 412.701284][T25210] skcipher_walk_done+0x212/0x3c0 [ 412.701354][T25210] ? crypto_inc+0xe4/0x170 [ 412.701397][T25210] crypto_ctr_crypt+0x20c/0x330 [ 412.701434][T25210] ? __pfx_crypto_aes_encrypt+0x10/0x10 [ 412.701481][T25210] crypto_skcipher_encrypt+0x96/0xb0 [ 412.701539][T25210] crypto_gcm_encrypt+0x1bb/0x200 [ 412.701581][T25210] crypto_aead_encrypt+0x60/0x80 [ 412.701610][T25210] tls_push_record+0x121f/0x16a0 [ 412.701649][T25210] bpf_exec_tx_verdict+0x689/0xac0 [ 412.701676][T25210] ? inet6_sendmsg+0xc2/0xd0 [ 412.701752][T25210] tls_sw_splice_eof+0xd9/0x2b0 [ 412.701796][T25210] ? __pfx_tls_sw_splice_eof+0x10/0x10 [ 412.701905][T25210] sock_splice_eof+0x4f/0x70 [ 412.701935][T25210] ? __pfx_sock_splice_eof+0x10/0x10 [ 412.702046][T25210] direct_file_splice_eof+0x4f/0x70 [ 412.702078][T25210] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 412.702189][T25210] ? shmem_mmap+0x50/0xb0 [ 412.702303][T25210] splice_direct_to_actor+0x65a/0x680 [ 412.702332][T25210] ? __pfx_direct_splice_actor+0x10/0x10 [ 412.702392][T25210] do_splice_direct+0xda/0x150 [ 412.702508][T25210] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 412.702543][T25210] do_sendfile+0x380/0x640 [ 412.702616][T25210] __x64_sys_sendfile64+0xb8/0x150 [ 412.702655][T25210] x64_sys_call+0xb39/0x2fb0 [ 412.702683][T25210] do_syscall_64+0xd0/0x1a0 [ 412.702762][T25210] ? clear_bhb_loop+0x25/0x80 [ 412.702839][T25210] ? clear_bhb_loop+0x25/0x80 [ 412.702866][T25210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.702955][T25210] RIP: 0033:0x7f3cf8b2e969 [ 412.703035][T25210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.703057][T25210] RSP: 002b:00007f3cf7197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.703080][T25210] RAX: ffffffffffffffda RBX: 00007f3cf8d55fa0 RCX: 00007f3cf8b2e969 [ 412.703096][T25210] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000003 [ 412.703111][T25210] RBP: 00007f3cf7197090 R08: 0000000000000000 R09: 0000000000000000 [ 412.703170][T25210] R10: 0100000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 412.703183][T25210] R13: 0000000000000000 R14: 00007f3cf8d55fa0 R15: 00007ffe1a331b38 [ 412.703206][T25210] [ 413.293113][T25246] FAULT_INJECTION: forcing a failure. [ 413.293113][T25246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.306505][T25246] CPU: 0 UID: 0 PID: 25246 Comm: syz.6.7611 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 413.306563][T25246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 413.306576][T25246] Call Trace: [ 413.306581][T25246] [ 413.306589][T25246] __dump_stack+0x1d/0x30 [ 413.306612][T25246] dump_stack_lvl+0xe8/0x140 [ 413.306633][T25246] dump_stack+0x15/0x1b [ 413.306651][T25246] should_fail_ex+0x265/0x280 [ 413.306757][T25246] should_fail+0xb/0x20 [ 413.306789][T25246] should_fail_usercopy+0x1a/0x20 [ 413.306811][T25246] _copy_from_iter+0xcf/0xdd0 [ 413.306835][T25246] ? __build_skb_around+0x1a0/0x200 [ 413.307016][T25246] ? __alloc_skb+0x223/0x320 [ 413.307055][T25246] netlink_sendmsg+0x471/0x6b0 [ 413.307093][T25246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.307248][T25246] __sock_sendmsg+0x142/0x180 [ 413.307280][T25246] ____sys_sendmsg+0x345/0x4e0 [ 413.307306][T25246] ___sys_sendmsg+0x17b/0x1d0 [ 413.307345][T25246] __sys_sendmmsg+0x178/0x300 [ 413.307406][T25246] __x64_sys_sendmmsg+0x57/0x70 [ 413.307475][T25246] x64_sys_call+0x2f2f/0x2fb0 [ 413.307495][T25246] do_syscall_64+0xd0/0x1a0 [ 413.307538][T25246] ? clear_bhb_loop+0x25/0x80 [ 413.307559][T25246] ? clear_bhb_loop+0x25/0x80 [ 413.307579][T25246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.307603][T25246] RIP: 0033:0x7f2764dde969 [ 413.307623][T25246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.307644][T25246] RSP: 002b:00007f2763447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.307662][T25246] RAX: ffffffffffffffda RBX: 00007f2765005fa0 RCX: 00007f2764dde969 [ 413.307674][T25246] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000011 [ 413.307686][T25246] RBP: 00007f2763447090 R08: 0000000000000000 R09: 0000000000000000 [ 413.307698][T25246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.307728][T25246] R13: 0000000000000000 R14: 00007f2765005fa0 R15: 00007ffd3723bde8 [ 413.307750][T25246] [ 413.537563][T25250] 9pnet_fd: Insufficient options for proto=fd [ 413.567277][T25253] sd 0:0:1:0: device reset [ 413.637638][T25258] __nla_validate_parse: 11 callbacks suppressed [ 413.637661][T25258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7616'. [ 413.762075][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7617'. [ 413.905197][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7620'. [ 413.993858][T25281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7627'. [ 414.012284][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7626'. [ 414.025872][T25278] siw: device registration error -23 [ 414.054111][T25286] FAULT_INJECTION: forcing a failure. [ 414.054111][T25286] name failslab, interval 1, probability 0, space 0, times 0 [ 414.066949][T25286] CPU: 1 UID: 0 PID: 25286 Comm: syz.2.7629 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 414.066986][T25286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 414.067003][T25286] Call Trace: [ 414.067011][T25286] [ 414.067021][T25286] __dump_stack+0x1d/0x30 [ 414.067047][T25286] dump_stack_lvl+0xe8/0x140 [ 414.067069][T25286] dump_stack+0x15/0x1b [ 414.067093][T25286] should_fail_ex+0x265/0x280 [ 414.067131][T25286] should_failslab+0x8c/0xb0 [ 414.067201][T25286] __kvmalloc_node_noprof+0x126/0x4d0 [ 414.067224][T25286] ? alloc_netdev_mqs+0x5ac/0xab0 [ 414.067316][T25286] alloc_netdev_mqs+0x5ac/0xab0 [ 414.067417][T25286] rtnl_create_link+0x239/0x710 [ 414.067500][T25286] rtnl_newlink_create+0x151/0x630 [ 414.067528][T25286] ? security_capable+0x83/0x90 [ 414.067573][T25286] rtnl_newlink+0xf29/0x12d0 [ 414.067615][T25286] ? __rcu_read_unlock+0x4f/0x70 [ 414.067713][T25286] ? xa_load+0xb1/0xe0 [ 414.067741][T25286] ? __kfree_skb+0x109/0x150 [ 414.067777][T25286] ? __rcu_read_unlock+0x4f/0x70 [ 414.067798][T25286] ? avc_has_perm_noaudit+0x1b1/0x200 [ 414.067910][T25286] ? selinux_capable+0x1f9/0x270 [ 414.067945][T25286] ? security_capable+0x83/0x90 [ 414.067985][T25286] ? ns_capable+0x7d/0xb0 [ 414.068078][T25286] ? __pfx_rtnl_newlink+0x10/0x10 [ 414.068171][T25286] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 414.068236][T25286] netlink_rcv_skb+0x120/0x220 [ 414.068319][T25286] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.068354][T25286] rtnetlink_rcv+0x1c/0x30 [ 414.068379][T25286] netlink_unicast+0x59e/0x670 [ 414.068423][T25286] netlink_sendmsg+0x58b/0x6b0 [ 414.068510][T25286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.068607][T25286] __sock_sendmsg+0x142/0x180 [ 414.068639][T25286] ____sys_sendmsg+0x31e/0x4e0 [ 414.068667][T25286] ___sys_sendmsg+0x17b/0x1d0 [ 414.068730][T25286] __x64_sys_sendmsg+0xd4/0x160 [ 414.068757][T25286] x64_sys_call+0x2999/0x2fb0 [ 414.068789][T25286] do_syscall_64+0xd0/0x1a0 [ 414.068815][T25286] ? clear_bhb_loop+0x25/0x80 [ 414.068841][T25286] ? clear_bhb_loop+0x25/0x80 [ 414.068867][T25286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.068945][T25286] RIP: 0033:0x7fbc6d17e969 [ 414.068962][T25286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.068983][T25286] RSP: 002b:00007fbc6b7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.069004][T25286] RAX: ffffffffffffffda RBX: 00007fbc6d3a5fa0 RCX: 00007fbc6d17e969 [ 414.069018][T25286] RDX: 0000000024040040 RSI: 0000200000000080 RDI: 0000000000000003 [ 414.069029][T25286] RBP: 00007fbc6b7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 414.069041][T25286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.069122][T25286] R13: 0000000000000000 R14: 00007fbc6d3a5fa0 R15: 00007ffd57be8218 [ 414.069146][T25286] [ 414.077512][T25288] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7630'. [ 414.365479][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7632'. [ 414.659967][T25319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7639'. [ 414.735311][T25323] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7642'. [ 414.797464][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7646'. [ 414.898579][T25340] sd 0:0:1:0: device reset [ 415.155657][T25355] lo speed is unknown, defaulting to 1000 [ 415.478595][T25386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.488181][T25386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.634758][T25403] syz_tun: entered allmulticast mode [ 415.640468][T25403] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 415.649096][T25403] mroute: pending queue full, dropping entries [ 415.656672][T25403] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 415.665305][T25403] mroute: pending queue full, dropping entries [ 415.689564][T25402] syz_tun: left allmulticast mode [ 416.396844][T25426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.424575][T25426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.914697][T25439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.931092][T25439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.945984][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 416.946001][ T29] audit: type=1400 audit(1746712823.356:24950): avc: denied { read } for pid=25448 comm="syz.3.7693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 416.974665][T25451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.983799][T25451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.440401][ T29] audit: type=1400 audit(1746712823.846:24951): avc: denied { setopt } for pid=25474 comm="syz.3.7702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 417.616429][ T29] audit: type=1400 audit(1746712824.026:24952): avc: denied { create } for pid=25500 comm="syz.4.7714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.637455][ T29] audit: type=1400 audit(1746712824.026:24953): avc: denied { bind } for pid=25500 comm="syz.4.7714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.656989][ T29] audit: type=1400 audit(1746712824.026:24954): avc: denied { listen } for pid=25500 comm="syz.4.7714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.676625][ T29] audit: type=1400 audit(1746712824.026:24955): avc: denied { accept } for pid=25500 comm="syz.4.7714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.724697][ T29] audit: type=1400 audit(1746712824.136:24956): avc: denied { read } for pid=25504 comm="syz.6.7716" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 417.757862][ T29] audit: type=1400 audit(1746712824.136:24957): avc: denied { open } for pid=25504 comm="syz.6.7716" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 417.791890][T25508] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 417.791890][T25508] program syz.6.7716 not setting count and/or reply_len properly [ 418.102676][ T29] audit: type=1400 audit(1746712824.496:24958): avc: denied { read } for pid=25513 comm="syz.5.7719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 419.145216][T25542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=25542 comm=syz.3.7725 [ 419.458133][ T29] audit: type=1400 audit(1746712825.866:24959): avc: denied { map } for pid=25543 comm="syz.5.7731" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 419.686484][T25576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.713307][T25576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.920963][T25592] netlink: 'syz.3.7753': attribute type 39 has an invalid length. [ 420.301368][ T3394] IPVS: starting estimator thread 0... [ 420.404789][T25625] IPVS: using max 2016 ests per chain, 100800 per kthread [ 420.537721][T25640] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 420.537721][T25640] program syz.4.7771 not setting count and/or reply_len properly [ 421.091669][T25656] syz_tun: entered allmulticast mode [ 421.108208][T25656] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 421.116829][T25656] mroute: pending queue full, dropping entries [ 421.124786][T25654] syz_tun: left allmulticast mode [ 421.263739][T25678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.295271][T25678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.412121][T25698] Invalid option length (1047378) for dns_resolver key [ 421.428563][T25702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.438216][T25702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.548920][T25716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.557893][T25716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.068160][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 422.068175][ T29] audit: type=1400 audit(1746712828.476:24963): avc: denied { create } for pid=25729 comm="syz.5.7811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 422.194121][ T29] audit: type=1400 audit(1746712828.546:24964): avc: denied { read } for pid=25729 comm="syz.5.7811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.380929][T25747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.393185][T25747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.130169][T25746] Set syz1 is full, maxelem 65536 reached [ 424.450961][T25813] geneve2: entered promiscuous mode [ 424.456416][T25813] geneve2: entered allmulticast mode [ 424.611556][T25819] netlink: 'syz.5.7846': attribute type 1 has an invalid length. [ 424.792682][T25827] netlink: 'syz.5.7850': attribute type 1 has an invalid length. [ 424.907036][T25827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.030140][T25840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.050206][T25840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.334405][T25847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.344759][T25847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.416554][ T29] audit: type=1326 audit(1746712831.826:24965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm="syz.6.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 425.458562][ T29] audit: type=1326 audit(1746712831.846:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm="syz.6.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 425.482258][ T29] audit: type=1326 audit(1746712831.846:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm="syz.6.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 425.506072][ T29] audit: type=1326 audit(1746712831.846:24968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25849 comm="syz.6.7857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 425.544910][T25858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.553542][T25858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.569257][T25862] tmpfs: Unknown parameter 'usrquota' [ 426.300788][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.309631][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.471017][T25907] smc: net device bond0 applied user defined pnetid SYZ2 [ 426.492798][T25907] smc: net device bond0 erased user defined pnetid SYZ2 [ 426.699684][ T29] audit: type=1400 audit(1746712833.106:24969): avc: denied { accept } for pid=25919 comm="syz.4.7888" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 426.720613][ T29] audit: type=1400 audit(1746712833.106:24970): avc: denied { write } for pid=25919 comm="syz.4.7888" laddr=::1 lport=20000 faddr=::1 fport=33442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 426.782803][T25923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.793873][T25923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.803670][T25924] tmpfs: Unknown parameter 'quota' [ 426.983044][T25928] 9pnet: p9_errstr2errno: server reported unknown error @ [ 427.497750][T25946] netem: change failed [ 427.588914][T25949] __nla_validate_parse: 6 callbacks suppressed [ 427.588930][T25949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7899'. [ 427.616849][T25948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.675889][T25948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.779457][T25955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 427.786059][T25955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.793786][T25955] vhci_hcd vhci_hcd.0: Device attached [ 427.870112][T25956] vhci_hcd: connection closed [ 427.870384][ T31] vhci_hcd: stop threads [ 427.879483][ T31] vhci_hcd: release socket [ 427.883938][ T31] vhci_hcd: disconnect device [ 428.128368][T25967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.137052][T25967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.470810][T25986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.479451][T25986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.576696][ T3394] IPVS: starting estimator thread 0... [ 428.673580][T25993] IPVS: using max 2400 ests per chain, 120000 per kthread [ 429.245510][ T29] audit: type=1400 audit(1746712835.656:24971): avc: denied { map } for pid=26014 comm="syz.2.7927" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 429.271129][T26018] vhci_hcd: invalid port number 96 [ 429.276296][T26018] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 429.883996][ T29] audit: type=1400 audit(1746712836.276:24972): avc: denied { bind } for pid=26028 comm="syz.5.7932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 429.903869][ T29] audit: type=1400 audit(1746712836.276:24973): avc: denied { node_bind } for pid=26028 comm="syz.5.7932" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 429.926500][T26030] syzkaller1: entered promiscuous mode [ 429.932022][T26030] syzkaller1: entered allmulticast mode [ 430.284082][ T29] audit: type=1400 audit(1746712836.686:24974): avc: denied { bind } for pid=26054 comm="syz.5.7945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.303834][ T29] audit: type=1400 audit(1746712836.686:24975): avc: denied { listen } for pid=26054 comm="syz.5.7945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.323693][ T29] audit: type=1400 audit(1746712836.686:24976): avc: denied { write } for pid=26054 comm="syz.5.7945" path="socket:[88023]" dev="sockfs" ino=88023 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 430.347431][ T29] audit: type=1400 audit(1746712836.686:24977): avc: denied { accept } for pid=26054 comm="syz.5.7945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 431.760698][ T29] audit: type=1400 audit(1746712837.716:24978): avc: denied { create } for pid=26070 comm="syz.5.7953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.781130][ T29] audit: type=1400 audit(1746712837.716:24979): avc: denied { bind } for pid=26070 comm="syz.5.7953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 431.971737][ T3394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.158772][ T29] audit: type=1400 audit(1746712838.566:24980): avc: denied { getopt } for pid=26101 comm="syz.5.7965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.809046][T26131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.848632][T26131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.105930][T26139] netlink: 'syz.5.7982': attribute type 10 has an invalid length. [ 434.296445][T26171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.358010][T26171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.580312][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 435.589399][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 435.739211][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 435.876411][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 435.885511][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 435.904237][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 436.029013][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 436.038040][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 436.068165][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8010'. [ 437.546832][T26280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.559659][T26280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.562815][ T29] audit: type=1400 audit(1746712843.966:24981): avc: denied { unmount } for pid=20794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 437.616646][T26287] ipip0: entered promiscuous mode [ 437.621816][T26287] ipip0: entered allmulticast mode [ 437.797882][T26307] netlink: 'syz.4.8049': attribute type 1 has an invalid length. [ 437.806014][T26307] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8049'. [ 437.815145][T26307] NCSI netlink: No device for ifindex 255 [ 438.678775][T26349] lo speed is unknown, defaulting to 1000 [ 439.227448][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.236231][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.780477][T26383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.789147][T26383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.140461][T26430] __nla_validate_parse: 3 callbacks suppressed [ 441.140482][T26430] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8092'. [ 441.871967][ T3372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.205123][T26446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.234130][T26446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.304998][ T29] audit: type=1400 audit(1746712848.716:24982): avc: denied { ioctl } for pid=26456 comm="syz.5.8102" path="socket:[88857]" dev="sockfs" ino=88857 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 442.350851][ T3372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.656632][T26583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.666655][T26583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.214058][ T29] audit: type=1400 audit(1746712852.606:24983): avc: denied { setopt } for pid=26634 comm="syz.6.8178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 446.245670][ T29] audit: type=1400 audit(1746712852.656:24984): avc: denied { accept } for pid=26639 comm="syz.6.8180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 446.283831][T26646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.355229][T26646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.133854][T26674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15450 sclass=netlink_route_socket pid=26674 comm=syz.2.8192 [ 448.783067][T26699] tipc: Started in network mode [ 448.788324][T26699] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 448.795637][T26699] tipc: Enabled bearer , priority 14 [ 448.808073][ T29] audit: type=1400 audit(1746712855.216:24985): avc: denied { write } for pid=26700 comm="syz.2.8204" name="file0" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.841717][ T29] audit: type=1400 audit(1746712855.236:24986): avc: denied { ioctl } for pid=26700 comm="syz.2.8204" path="/470/file0" dev="tmpfs" ino=2508 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 448.966757][T26717] siw: device registration error -23 [ 448.976190][T26715] openvswitch: netlink: Message has 6 unknown bytes. [ 449.012366][T26719] 9pnet_fd: Insufficient options for proto=fd [ 449.161644][T26741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8222'. [ 449.220104][T26743] openvswitch: netlink: Message has 6 unknown bytes. [ 449.272679][T26746] netem: change failed [ 449.342145][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8224'. [ 449.351886][T26748] siw: device registration error -23 [ 449.976611][T26770] openvswitch: netlink: Message has 6 unknown bytes. [ 450.127645][ T10] tipc: Node number set to 10136234 [ 450.905123][ T29] audit: type=1326 audit(1746712857.316:24987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.044191][ T3394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.097444][ T29] audit: type=1326 audit(1746712857.336:24988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.121130][ T29] audit: type=1326 audit(1746712857.336:24989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.144778][ T29] audit: type=1326 audit(1746712857.336:24990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.168516][ T29] audit: type=1326 audit(1746712857.336:24991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.192148][ T29] audit: type=1326 audit(1746712857.336:24992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26774 comm="syz.6.8236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 451.523772][T26818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8253'. [ 451.590634][T26810] openvswitch: netlink: Message has 6 unknown bytes. [ 451.790961][T26829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8257'. [ 451.800993][T26823] siw: device registration error -23 [ 453.109285][T26849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8264'. [ 453.290425][T26860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8268'. [ 453.451254][T26865] 9pnet: Could not find request transport: fd0x0000000000000003 [ 453.758488][T26877] siw: device registration error -23 [ 454.115742][T26894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.126951][T26894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.193726][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8285'. [ 454.287770][T26911] netem: change failed [ 454.414752][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8290'. [ 454.475480][T26925] 9pnet: Could not find request transport: fd0x0000000000000003 [ 454.583031][T26939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8300'. [ 455.328691][T26969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8312'. [ 455.356523][T26971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.365165][T26971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.799931][T27013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8328'. [ 456.830522][T27017] 9pnet_fd: Insufficient options for proto=fd [ 457.771431][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.903126][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.918450][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 457.918469][ T29] audit: type=1326 audit(1746712864.316:25022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 457.948489][ T29] audit: type=1326 audit(1746712864.316:25023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 457.972173][ T29] audit: type=1326 audit(1746712864.316:25024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 457.995928][ T29] audit: type=1326 audit(1746712864.326:25025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.019662][ T29] audit: type=1326 audit(1746712864.326:25026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.043252][ T29] audit: type=1326 audit(1746712864.326:25027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.066780][ T29] audit: type=1326 audit(1746712864.326:25028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.090528][ T29] audit: type=1326 audit(1746712864.326:25029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.114156][ T29] audit: type=1326 audit(1746712864.326:25030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.137772][ T29] audit: type=1326 audit(1746712864.326:25031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27032 comm="syz.3.8336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d291fe969 code=0x7ffc0000 [ 458.170211][T27040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.195756][T27040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.302285][T27046] openvswitch: netlink: Message has 6 unknown bytes. [ 458.361421][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8344'. [ 458.818856][T27069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8351'. [ 459.415969][T27095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.434163][T27095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.566971][T27105] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8367'. [ 459.758702][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 460.426868][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8379'. [ 460.543349][T27142] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8381'. [ 460.629723][T27146] siw: device registration error -23 [ 460.645185][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.177361][T27207] netem: change failed [ 461.229560][T27218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8418'. [ 461.285668][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8413'. [ 461.513716][T27254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8433'. [ 461.518147][T27256] netem: change failed [ 461.631592][T27261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8436'. [ 461.831694][T27296] netem: change failed [ 461.924185][ T3394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.942683][T27314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8454'. [ 462.007135][T27318] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8464'. [ 462.038924][T27324] syzkaller1: entered promiscuous mode [ 462.044557][T27324] syzkaller1: entered allmulticast mode [ 462.769707][T27355] netem: change failed [ 462.873006][T27360] syzkaller0: entered promiscuous mode [ 462.878595][T27360] syzkaller0: entered allmulticast mode [ 463.022929][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 463.022949][ T29] audit: type=1326 audit(1746712869.416:25036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.052834][ T29] audit: type=1326 audit(1746712869.416:25037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.076568][ T29] audit: type=1326 audit(1746712869.416:25038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.100215][ T29] audit: type=1326 audit(1746712869.416:25039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.123811][ T29] audit: type=1326 audit(1746712869.416:25040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.147460][ T29] audit: type=1326 audit(1746712869.416:25041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.170966][ T29] audit: type=1326 audit(1746712869.416:25042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.194664][ T29] audit: type=1326 audit(1746712869.416:25043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.218256][ T29] audit: type=1326 audit(1746712869.416:25044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.241867][ T29] audit: type=1326 audit(1746712869.416:25045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27359 comm="syz.6.8479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 463.740858][T27393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.762614][T27393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.186626][T27410] netem: change failed [ 464.495539][T27430] siw: device registration error -23 [ 464.729692][T27452] netem: change failed [ 464.921253][T27462] __nla_validate_parse: 6 callbacks suppressed [ 464.921334][T27462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8514'. [ 466.676905][T27477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8527'. [ 466.839219][T27492] netem: change failed [ 466.948572][T27507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8533'. [ 467.018355][T27512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8540'. [ 467.210317][T27529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8548'. [ 467.527428][T27563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.564093][T27563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.843520][T27602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.870026][T27602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.882433][T27604] netem: change failed [ 467.991301][T27613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8584'. [ 468.303133][T27639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8597'. [ 468.403090][T27645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.411775][T27645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.048173][T27669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.058532][T27669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.142127][T27681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.150813][T27681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.342238][T27696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.351990][T27696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.591179][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8629'. [ 469.676949][T27713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8632'. [ 469.705636][T27715] sd 0:0:1:0: device reset [ 469.900501][T27728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.910389][T27728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.244732][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8640'. [ 470.254049][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.303383][T27735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8641'. [ 470.312568][T27735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8641'. [ 470.344148][T27737] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8642'. [ 470.402235][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8645'. [ 470.634282][T27755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.642807][T27755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.736604][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8653'. [ 470.736729][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 470.736744][ T29] audit: type=1326 audit(1746712877.146:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.745616][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8653'. [ 470.829171][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8653'. [ 470.854126][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8652'. [ 470.865181][ T29] audit: type=1326 audit(1746712877.156:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.889623][ T29] audit: type=1326 audit(1746712877.156:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.889751][T27760] ================================================================== [ 470.913361][ T29] audit: type=1326 audit(1746712877.156:25086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.921427][T27760] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 470.944960][ T29] audit: type=1326 audit(1746712877.156:25087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.951854][T27760] [ 470.951881][T27760] write to 0xffffffff868881a0 of 8 bytes by task 29 on cpu 0: [ 470.975394][ T29] audit: type=1326 audit(1746712877.156:25088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 470.977690][T27760] data_alloc+0x271/0x2b0 [ 470.977722][T27760] prb_reserve+0x808/0xaf0 [ 470.977749][T27760] vprintk_store+0x56d/0x860 [ 470.985292][ T29] audit: type=1326 audit(1746712877.156:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 471.008787][T27760] vprintk_emit+0x178/0x650 [ 471.008811][T27760] vprintk_default+0x26/0x30 [ 471.008831][T27760] vprintk+0x1d/0x30 [ 471.008856][T27760] _printk+0x79/0xa0 [ 471.008888][T27760] kauditd_hold_skb+0x1b1/0x1c0 [ 471.008920][T27760] kauditd_send_queue+0x270/0x2c0 [ 471.008949][T27760] kauditd_thread+0x421/0x630 [ 471.013287][ T29] audit: type=1326 audit(1746712877.156:25090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 471.017682][T27760] kthread+0x486/0x510 [ 471.022269][ T29] audit: type=1326 audit(1746712877.156:25091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 471.045869][T27760] ret_from_fork+0x4b/0x60 [ 471.045894][T27760] ret_from_fork_asm+0x1a/0x30 [ 471.050465][ T29] audit: type=1326 audit(1746712877.156:25092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.6.8650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2764dde969 code=0x7ffc0000 [ 471.055034][T27760] [ 471.055042][T27760] read to 0xffffffff868881a0 of 16 bytes by task 27760 on cpu 1: [ 471.171512][T27760] _prb_read_valid+0x1bc/0x920 [ 471.176300][T27760] prb_read_valid+0x3c/0x60 [ 471.180825][T27760] console_unlock+0x164/0x330 [ 471.185509][T27760] con_install+0x269/0x2a0 [ 471.189946][T27760] tty_init_dev+0x79/0x330 [ 471.194379][T27760] tty_open+0x6cc/0xaf0 [ 471.198552][T27760] chrdev_open+0x2e8/0x3a0 [ 471.202987][T27760] do_dentry_open+0x646/0xa20 [ 471.207686][T27760] vfs_open+0x37/0x1e0 [ 471.211759][T27760] path_openat+0x1c5e/0x2170 [ 471.216362][T27760] do_filp_open+0x109/0x230 [ 471.220873][T27760] do_sys_openat2+0xa6/0x110 [ 471.225470][T27760] __x64_sys_openat+0xf2/0x120 [ 471.230237][T27760] x64_sys_call+0x1af/0x2fb0 [ 471.234836][T27760] do_syscall_64+0xd0/0x1a0 [ 471.239348][T27760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.245254][T27760] [ 471.247576][T27760] Reported by Kernel Concurrency Sanitizer on: [ 471.253731][T27760] CPU: 1 UID: 0 PID: 27760 Comm: syz.2.8652 Not tainted 6.15.0-rc5-syzkaller-00043-gd76bb1ebb558 #0 PREEMPT(voluntary) [ 471.266234][T27760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 471.276298][T27760] ================================================================== [ 479.846039][ T3394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration