last executing test programs: 2m37.693191906s ago: executing program 2 (id=417): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r1, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) fcntl$notify(r0, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xcb4a}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffb}, @in={0x2, 0x4e23, @broadcast}], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES64, @ANYRES16=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fchdir(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x24040010) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x3, 0x5}, {0xf, 0xc}, {0xb, 0xffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 2m36.581880183s ago: executing program 2 (id=435): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x100, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x1ff, 0x0, 0xf, 0x0, 0x4, 0x1}, {0x1, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in=@empty, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) close(0x4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @local}, 0x1c3, 0x0, 0x0, 0x0, 0xc, 0x0, 0xffffffffe3bc332e, 0x7e72, 0x4}) socket$can_raw(0x1d, 0x3, 0x1) socket(0x2a, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m36.335338557s ago: executing program 2 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) 2m36.273372648s ago: executing program 2 (id=440): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x100, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x1ff, 0x0, 0xf, 0x0, 0x4, 0x1}, {0x1, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in=@empty, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2m36.124785671s ago: executing program 2 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a311000000084000000030a0104000000000000000001000001580008800c00024000000000000000000c00014000000000000080000c00024000000000000000040c00024000000000000000050c00024000000000000002000c00024000000000000000060c0001400000000000000a0a0c00024000000000000000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8002}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) 2m35.976057383s ago: executing program 2 (id=445): pipe2(&(0x7f0000000040), 0x80800) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x8001) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 2m30.48942358s ago: executing program 0 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x40002002) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x19, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) 2m30.375150891s ago: executing program 0 (id=517): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0xb8, 0x7ffc0002}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x9, 0xfffffffffffffffd, 0x80, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) setitimer(0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)=0x0) getpgid(r8) 2m30.166923105s ago: executing program 0 (id=518): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') mq_timedreceive(r0, &(0x7f0000000100)=""/143, 0x8f, 0x3092, &(0x7f00000001c0)={0x0, 0x3938700}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000008c0)={0x38, 0x1403, 0x821, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xffa8) 2m29.976570688s ago: executing program 0 (id=519): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x3b00, 0x0, 0x8}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200000000000000020000000000a000000095000000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000000a0101000000000073797a30000000002f000000020a01080000000000000000030000001400000aa37cad01000001000000000002000000140000001100010000000000000000000000000a91097746061dcf0d7183877cca15e0d07a9654c9c734fa40d9bfee2edd0bc95c13e44cd0d445fffa606ecded88cf931a8d7745eb55198e9d59466bb25882ba6a695571c366fdda4a7909b4dc9ff974c66fb221671a6c39422fb300"/202], 0x70}, 0x1, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x1320, 0xffffffff, 0x3, 0x5, 0x8, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) chdir(&(0x7f0000000540)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file2/file0\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r4, @ANYRES32=r8, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2652e24eb5448f23, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r10, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) 2m29.720152542s ago: executing program 0 (id=521): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='mnt\x00', 0x3a0c412, &(0x7f0000000b00)={[{@unhide}, {}, {@map_normal}, {@block={'block', 0x3d, 0x800}}, {@hide}, {}, {@check_strict}, {@hide}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp950'}}], [], 0x2c}, 0xff, 0x9be, &(0x7f0000000e00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) getcwd(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r1 = syz_io_uring_setup(0x3c03, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x160}, &(0x7f0000000780)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x1d69, 0x0, 0x2, 0x0, 0x0) 2m29.707631332s ago: executing program 0 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r2], 0x1c}}, 0x2000c0c0) 2m29.691666912s ago: executing program 32 (id=522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r2], 0x1c}}, 0x2000c0c0) 2m20.94448693s ago: executing program 33 (id=445): pipe2(&(0x7f0000000040), 0x80800) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4, @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x8001) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 2.398075841s ago: executing program 5 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.298528353s ago: executing program 6 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) listen(0xffffffffffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="4046c677e4ffbba1743b3cffb072f03a0a40e7fa158323dddb54a73356b20b8bea3e6348c2533e984ec4782b26122d17661df1566e25ea3d3195e16cc1f4e7a8438225d3a6e0878240e5c57cf13d40e16b6b3c600f74e3bea158f8903dc06402bc787d04cd6bf8fa3df3903e72ac6c501ff28325fc5a5aa5fb1432782222901861589ea73a637e80277a01035b29b7f27cfe84b60a968519f9b00230a3238e2f71aa26275d3b639805aa9b2dd4bc3d16479e019ac55a2d552f392fc2e5da0ac10425361baca7e9a644cf66e874e223c9391bc31ccc28f409be8100b6135a8a5d", 0xe0}, {&(0x7f0000000040)="42493e60e47546cd6147c0fdfbe16fa5a0d2755b7e16db05c7ff99ab8711f0bc4f569733e9d03bf2d7364a7fc958edc026fc8bdd647fa49f54d9393b79", 0x3d}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], 0x13a0}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@dioread_lock}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x8, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.222444514s ago: executing program 5 (id=3313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 2.147308075s ago: executing program 5 (id=3314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="687be000", @ANYRES16], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 2.146262805s ago: executing program 5 (id=3315): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0], 0x1c}}, 0x4000054) 2.106407366s ago: executing program 3 (id=3316): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000007f000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000020000008520000001000000bf91000000000000b7020000000000008500000084000000b70000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x10000, 0xa5, &(0x7f0000000740)=""/165, 0x1e00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0x10, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xf8, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fcntl$setpipe(r2, 0x407, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r0, r1, 0x25, 0x6, @void}, 0x10) socket$kcm(0x10, 0x0, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$phonet_pipe(0x23, 0x5, 0x2) 2.030134247s ago: executing program 4 (id=3317): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011"], 0x129) socket(0x400000000010, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x2, 0xffffffff, 0x6, 0x6, 0x90, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r4, 0x11) 1.984016978s ago: executing program 5 (id=3318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x1, 0x4) 1.914034399s ago: executing program 5 (id=3319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r2 = open(0x0, 0x14927e, 0x0) r3 = open(0x0, 0x60142, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000000201005) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r5 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r5, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r8, r9) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400, 0x3, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x204500, 0x0, 0x1}, &(0x7f00000002c0)='./file1\x00', 0x18, 0x0, 0x31713, {0x0, r12}}) tkill(r7, 0x13) 1.864322049s ago: executing program 4 (id=3320): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r2, &(0x7f00000008c0)=[{{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x4000000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb0100180000000000000044000080440000000c000000000000000100000d00000000020000007485c2a15338f813ba2c8e0912cd6d0100000000000000000000030000000001000000030000000b000000000000000000000203000000060000000000000c0100000000273f67ff443b302e613030"], &(0x7f0000000b00)=""/133, 0x68, 0x85, 0x0, 0xc47e, 0x10000, @value=r0}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050000000c0000000a0000000100000000000000", @ANYRES32=r0, @ANYBLOB="09000000fdffffffffffffff0000000000000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffdd) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) pwrite64(r7, &(0x7f0000000280)="bd", 0x1, 0x200) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000340)=ANY=[], 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/154, 0x9a}, 0x800004}], 0x1, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000300)=0x80000001, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000c40)={0x0, 0x0}) wait4(r9, &(0x7f0000000cc0), 0x1, &(0x7f0000000d00)) close_range(r0, r0, 0x2) r10 = gettid() rt_sigqueueinfo(r10, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x80}) 1.81239931s ago: executing program 3 (id=3323): statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x7ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file1\x00', 0x67) r1 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x20) write$cgroup_type(r1, &(0x7f00000008c0), 0x23) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000a00)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4204, 0x0, 0x3, &(0x7f0000000bc0)={&(0x7f0000000ac0)=""/252, 0xfc}) recvmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/152, 0x98}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/237, 0xed}], 0x3}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5125e84243b8a0b32702af29edc1d47f4432e39c8f089923294c99350f6cd918dc5b4d95642834f76459e58a7b1d1af334973c702594ad65f7a730b1a51725a7dc94b40c7d979a42a333b61b501ccf5ae71dc539bc6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073790001000000000000000000030000ee00000000000000000000004248628774dbba8aad47c03e547c361bcbd7044abdf346da80c27086bd51e8d7f6fe6bc21633610ca85cdb48d214014780d5b58f55d11196af6974b26b45f4748759b52fe32d008d2f7ee522a90a1015"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="020a0600060000002abd7000ffdbdf25040017"], 0x30}}, 0x44880) 1.416790507s ago: executing program 6 (id=3327): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x320, 0xffffffff, 0x0, 0xf0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x17, @ipv4=@loopback, @ipv6=@empty, @port=0x4e24, @gre_key=0x3cc}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @remote, [0x0, 0xff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x7, 0x4, 0x41}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x6, 0xf8, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private0, @private2, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff, 0xffffff00], 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x3c, 0x36, 0x2, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x8, 0xfffffffd, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e20, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 1.401185817s ago: executing program 6 (id=3328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0], 0x1c}}, 0x4000054) 1.364028967s ago: executing program 6 (id=3329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x24}, 0x1, 0x0, 0x0, 0x8040041}, 0x4008855) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYRES32=r2], 0x448}, 0x1, 0x0, 0x0, 0xc081}, 0x408c1) unshare(0x20000400) r3 = gettid() r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000580)={0xa000000a}) finit_module(r5, 0x0, 0x0) tkill(r3, 0x7) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r7 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xab0441, &(0x7f0000000640)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10001}}, {@dioread_lock}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@grpquota}, {@grpquota}, {@orlov}, {@user_xattr}, {@bh}, {@test_dummy_encryption_v1}], [{@euid_lt={'euid<', 0xffffffffffffffff}}]}, 0x1, 0x55d, &(0x7f0000001580)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x42043, 0x2) pwrite64(r9, &(0x7f0000000140)='2', 0x1, 0x8000c61) r10 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r11 = fsopen(&(0x7f0000000040)='vfat\x00', 0x1) readv(r11, &(0x7f0000000180)=[{&(0x7f0000000240)=""/247, 0xf7}, {0x0}], 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105002, 0x1db) writev(r12, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) fallocate(r10, 0x20, 0x0, 0x7000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="35ffffff", @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf251400000008000300", @ANYRES32=r8, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="46d7eb32fdce10dc8888425472e072b7326c15d5f27b8856c63d1ae8dbc872d01c53d512e61ebf8385a7fb23cd1a759482ec0e4996f7249deb581d3bd450393388a7e70a6307bbf4273e6fac3ef6385472320ac1611e60dd"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kcmp(r1, r7, 0x3, r0, r0) 1.257403499s ago: executing program 6 (id=3330): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_NAME(0xf, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r1, 0x0, 0xeffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) listen(0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 1.257036409s ago: executing program 4 (id=3331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 1.254533749s ago: executing program 4 (id=3332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000640)={0x0, 0xfe98, 0x0, 0x0, 0x335}, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x14}) io_uring_enter(r2, 0x47bc, 0x0, 0x60, 0x0, 0x0) 1.23997621s ago: executing program 4 (id=3333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "ddbcbb82b4cee959", "d039a0e2b9ecdf681fb5ab4ed5f472d6", "ddc25cec", "ec5a83768eed1ca7"}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x3, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x20}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6b605fa3b248b49a6c29f0f4d81ded60bc947c4fb2823a0189e2d13f0e89870e6de36bf806e1f24dd9708e1256f5359b9574b85f30850ea43c8aea5cfa9fc035e2fab6b1898ac3ce73911bf349d294", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x58}, 0x0) 1.17976688s ago: executing program 4 (id=3334): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000007f000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000020000008520000001000000bf91000000000000b7020000000000008500000084000000b70000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x10000, 0xa5, &(0x7f0000000740)=""/165, 0x1e00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0x10, 0x6, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xf8, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) fcntl$setpipe(r2, 0x407, 0x100000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r0, r1, 0x25, 0x6, @void}, 0x10) socket$kcm(0x10, 0x0, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000001c0), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$phonet_pipe(0x23, 0x5, 0x2) 959.264254ms ago: executing program 3 (id=3336): r0 = syz_open_procfs(0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/143, 0x8f, 0x3092, &(0x7f00000001c0)={0x0, 0x3938700}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x11, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) 895.353325ms ago: executing program 3 (id=3337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 871.059685ms ago: executing program 3 (id=3338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) listen(0xffffffffffffffff, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="4046c677e4ffbba1743b3cffb072f03a0a40e7fa158323dddb54a73356b20b8bea3e6348c2533e984ec4782b26122d17661df1566e25ea3d3195e16cc1f4e7a8438225d3a6e0878240e5c57cf13d40e16b6b3c600f74e3bea158f8903dc06402bc787d04cd6bf8fa3df3903e72ac6c501ff28325fc5a5aa5fb1432782222901861589ea73a637e80277a01035b29b7f27cfe84b60a968519f9b00230a3238e2f71aa26275d3b639805aa9b2dd4bc3d16479e019ac55a2d552f392fc2e5da0ac10425361baca7e9a644cf66e874e223c9391bc31ccc28f409be8100b6135a8a5d", 0xe0}, {&(0x7f0000000040)="42493e60e47546cd6147c0fdfbe16fa5a0d2755b7e16db05c7ff99ab8711f0bc4f569733e9d03bf2d7364a7fc958edc026fc8bdd647fa49f54d9393b79", 0x3d}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB="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"], 0x13a0}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x47, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@dioread_lock}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x8, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 706.921818ms ago: executing program 1 (id=3339): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0xf0, 0x320, 0xffffffff, 0x0, 0xf0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x17, @ipv4=@loopback, @ipv6=@empty, @port=0x4e24, @gre_key=0x3cc}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @remote, [0x0, 0xff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'ip6gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x88, 0x7, 0x4, 0x41}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x6, 0xf8, 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private0, @private2, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff, 0xffffff00], 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x3c, 0x36, 0x2, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x8, 0xfffffffd, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e20, @port=0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 643.965589ms ago: executing program 1 (id=3340): quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, 0x0) (fail_nth: 5) 643.364939ms ago: executing program 1 (id=3341): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000480)='!sel\x87U\xb9\x10\n\xe9[b\xd7\\P\xc1\xde.\x1dml(:\xb7o\xb2O\xcb]0y', 0x6e93ebbbcc0884f2, 0x184, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000003c0)={0x62, 0xa, '\x00', [@calipso={0x7, 0x50, {0x1, 0x12, 0x6d, 0x6, [0xa3c, 0x4, 0x1, 0x4, 0x8a, 0x8, 0x7, 0x4, 0x5]}}, @enc_lim={0x4, 0x1, 0x24}]}, 0x60) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x48}}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) process_vm_writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000001c0)=""/98, 0x62}], 0x2, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/199, 0xc7}], 0x1, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0xfffc, 0x0, @dev, 0x2020000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r10}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r11, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x9e6cde9d90809ac1}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r12, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x5f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 395.469833ms ago: executing program 6 (id=3342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$kcm(0x10, 0x2, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/190, 0xbe}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'vlan0\x00', 0x7}) gettid() timer_create(0x2, &(0x7f0000000080)={0x0, 0x7, 0x0, @thr={&(0x7f00000001c0)="d69ee1b4062bfba90b10482cd61099cbdbd9e427c04100983fd1d2b60a5274a6d5738f3c94e50a7117a71e15b51853a86dc944bbed5330146bd3e79fab85baf75af5fe46d8eafb6a02c2e4193dea5ea373be39d6bc03889599fdc574edf5", &(0x7f0000000300)="0b0f1986b2fd2a0916bb2930bf4ee27ce4145b1001d0f4f541882ea4ab36983c81eeda8148b4598ea35430f7ab4dfe13eb73d0d23caa47a3d4b5ba82b04c60b7647088d430b96059a066da19480fe6da0e8211d74dd515779522"}}, &(0x7f0000044000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x4c, &(0x7f0000000100)={[{@bh}, {@init_itable}, {@stripe}, {@grpid}]}, 0x3, 0x467, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvzLZFBGxFVEBU/BWJP1oKqBw4qNHEAyYmetBj0xaCLNTQmgghCsbgyRgT78aj/4Je9GKMJ6NXvRsSYrgAntbMzgzsbneXst2ylf18kum+Nz/2vW/fvN0383Y3gKG1O/uTRGyOiD8jYjzPNu+wO3+4evns7LXLZ2eTqNXe/iep73fl8tnZctfyuE1FZk8akX6WxENtyl08feb4TLU6f6rITy2d+GBq8fSZ54+dmDk6f3T+5L6DBw/sn37pxX0v9CXOrE5Xdn68sGvHG+999ebhL5rib4lj1bZvaHzqtp6q1fpW3HqwpSGdjAywItySSkRkzTVa7//jUYkbjTcer3860MoBa6pWq9U2dd58rgbcwZJozuvyMCzKN/rs+rdcWgcBL6/d8GPgLr2SXwBlcV8tlnzLSKRRppqvb/tpd0T67rl/v8mW6Pd9CACANn7Mxj/PtRv/pfFA8Vgaj4iJiLg3IrZGxH0RsS0i7o+o7/tgRGy/xfJbJ0mWj3/Siz0FtkLZ+O9QMbfVPP67HvdEpchtqcc/mhw5Vp3fGxH3RMSeGN2Q5ae7lPHTa3982WlbFn85/suWrPxyLFjU4+LIhuZj5maWZlYTc6NL5yN2jrSLP7k+E5BExI6I2NljGcee+W5Xp203j7+LPswz1b6NeDpv/3PREn8p6T4/OXVXVOf3TpVnxXK//nbhrU7lryr+Psja/+62538Sh/LzbiJpnK9dvPUyLvz1ecdrml7P/7HknXp6rFj30czS0qnpiLHkcF7pxvX7bhxb5sv9f/g9X9+u/2+N8j8R9Tns7CR+OCIeiYhHi7o/FhGPR8QTXeL/5dUn3+89/rWVtf9ch/YvtLT/jcRYtK5pn6gc//n7pkInlsV/rXv7H6in9hRrVvL6t5J69XY2AwAAwP9PWv9kfJJOFvc4N0eaTk7mn5ffFpFWFxaXnj2y8OHJufw7AhMxmpZ3usYb7odOF5f1ef58ROQfLSi37y/uG39d2VjPT84uVOcGHTwMuU31Pr+8/2f+rgy6dsCa830tGF76Pwwv/R+Gl/4Pw6tN/984iHoAt1+79/9PBlAP4PZr6f+m/WCIuP6H4dWx/7f+8k+69nUBbi/v/zCUFjfGzb8k3zVRPlOPh9+xiRhdF9VYfaKWtG3cSLscteLfX5BYr4nBvi4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0y38BAAD//wyV4A8=") munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) timer_create(0x2, 0x0, &(0x7f0000001140)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0xf, 0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0x8) bind$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) 109.429627ms ago: executing program 1 (id=3343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000640)={0x0, 0xfe98, 0x0, 0x0, 0x335}, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x14}) io_uring_enter(r2, 0x47bc, 0x0, 0x60, 0x0, 0x0) 77.391388ms ago: executing program 1 (id=3344): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) 60.904368ms ago: executing program 1 (id=3345): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x20008800) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) add_key(&(0x7f0000000880)='id_resolver\x00', 0x0, &(0x7f0000000900), 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 0s ago: executing program 3 (id=3346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ogle Compute Engine, BIOS Google 02/12/2025 [ 172.224249][ T9942] Call Trace: [ 172.224256][ T9942] [ 172.224265][ T9942] dump_stack_lvl+0xf6/0x150 [ 172.224373][ T9942] dump_stack+0x15/0x1a [ 172.224450][ T9942] should_fail_ex+0x261/0x270 [ 172.224479][ T9942] should_failslab+0x8f/0xb0 [ 172.224505][ T9942] __kmalloc_cache_noprof+0x55/0x320 [ 172.224540][ T9942] ? selinux_bpf_map_create+0x35/0xd0 [ 172.224562][ T9942] ? bpf_map_alloc_percpu+0x17e/0x210 [ 172.224640][ T9942] selinux_bpf_map_create+0x35/0xd0 [ 172.224661][ T9942] security_bpf_map_create+0x52/0x90 [ 172.224693][ T9942] map_create+0xafe/0xba0 [ 172.224735][ T9942] __sys_bpf+0x6ac/0x800 [ 172.224776][ T9942] __x64_sys_bpf+0x43/0x50 [ 172.224852][ T9942] x64_sys_call+0x23da/0x2e10 [ 172.224872][ T9942] do_syscall_64+0xc9/0x1a0 [ 172.224896][ T9942] ? clear_bhb_loop+0x25/0x80 [ 172.224921][ T9942] ? clear_bhb_loop+0x25/0x80 [ 172.224947][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.225038][ T9942] RIP: 0033:0x7ff60b23e169 [ 172.225052][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.225069][ T9942] RSP: 002b:00007ff6098a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.225086][ T9942] RAX: ffffffffffffffda RBX: 00007ff60b465fa0 RCX: 00007ff60b23e169 [ 172.225098][ T9942] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 172.225109][ T9942] RBP: 00007ff6098a7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.225124][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.225202][ T9942] R13: 0000000000000000 R14: 00007ff60b465fa0 R15: 00007ffd450001e8 [ 172.225228][ T9942] [ 172.419214][ T9943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.495050][ T9945] 9pnet_fd: Insufficient options for proto=fd [ 172.823975][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 172.823992][ T29] audit: type=1326 audit(1745205561.476:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c43be169 code=0x7ffc0000 [ 172.878124][ T29] audit: type=1326 audit(1745205561.506:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f56c43be169 code=0x7ffc0000 [ 172.902128][ T29] audit: type=1326 audit(1745205561.506:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9950 comm="syz.1.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c43be169 code=0x7ffc0000 [ 172.928574][ T9956] syzkaller1: entered promiscuous mode [ 172.934094][ T9956] syzkaller1: entered allmulticast mode [ 172.964730][ T29] audit: type=1326 audit(1745205561.616:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c43be169 code=0x7ffc0000 [ 172.988903][ T29] audit: type=1326 audit(1745205561.616:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c43be169 code=0x7ffc0000 [ 173.173303][ T9969] SELinux: ebitmap: truncated map [ 173.184856][ T9969] sel_write_load: 4 callbacks suppressed [ 173.184875][ T9969] SELinux: failed to load policy [ 173.269303][ T29] audit: type=1326 audit(1745205561.926:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9980 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 173.293812][ T29] audit: type=1326 audit(1745205561.926:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9980 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 173.323152][ T29] audit: type=1326 audit(1745205561.946:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9980 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 173.347350][ T29] audit: type=1326 audit(1745205561.946:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9980 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 173.370992][ T29] audit: type=1326 audit(1745205561.946:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9980 comm="syz.3.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 173.458190][ T9989] syzkaller1: entered promiscuous mode [ 173.463766][ T9989] syzkaller1: entered allmulticast mode [ 173.661088][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.663703][T10002] SELinux: ebitmap: truncated map [ 173.670346][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.681437][T10002] SELinux: failed to load policy [ 173.813311][T10009] ref_ctr_offset mismatch. inode: 0xa89 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 173.948233][T10019] syzkaller1: entered promiscuous mode [ 173.953771][T10019] syzkaller1: entered allmulticast mode [ 173.959521][T10017] SELinux: ebitmap: truncated map [ 173.968409][T10017] SELinux: failed to load policy [ 174.145637][T10030] SELinux: ebitmap: truncated map [ 174.154829][T10030] SELinux: failed to load policy [ 174.213475][T10033] SELinux: ebitmap: truncated map [ 174.222979][T10033] SELinux: failed to load policy [ 174.296321][T10039] ref_ctr_offset mismatch. inode: 0xaa4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 174.450701][T10042] ref_ctr_offset mismatch. inode: 0x7a7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 174.473935][T10052] syzkaller1: entered promiscuous mode [ 174.479513][T10052] syzkaller1: entered allmulticast mode [ 174.491721][T10054] 9pnet_fd: Insufficient options for proto=fd [ 174.728952][T10065] __nla_validate_parse: 8 callbacks suppressed [ 174.728990][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 174.737956][T10063] SELinux: ebitmap: truncated map [ 174.771037][T10063] SELinux: failed to load policy [ 174.803295][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2509'. [ 174.898715][T10082] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 174.909445][T10082] SELinux: failed to load policy [ 174.936721][T10086] syzkaller1: entered promiscuous mode [ 174.942276][T10086] syzkaller1: entered allmulticast mode [ 175.043696][T10084] ref_ctr_offset mismatch. inode: 0x82d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 175.101159][T10090] SELinux: ebitmap: truncated map [ 175.128894][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 175.165409][T10090] SELinux: failed to load policy [ 175.257981][T10092] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.466209][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.476272][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.578928][T10119] syzkaller1: entered promiscuous mode [ 175.584438][T10119] syzkaller1: entered allmulticast mode [ 175.637942][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 175.683909][T10123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.692422][T10123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.702524][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2534'. [ 175.711588][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2534'. [ 175.760645][T10125] ref_ctr_offset mismatch. inode: 0xaf4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 175.939147][T10131] FAULT_INJECTION: forcing a failure. [ 175.939147][T10131] name failslab, interval 1, probability 0, space 0, times 0 [ 175.951943][T10131] CPU: 1 UID: 0 PID: 10131 Comm: syz.1.2538 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 175.951976][T10131] Tainted: [W]=WARN [ 175.951986][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.952000][T10131] Call Trace: [ 175.952008][T10131] [ 175.952016][T10131] dump_stack_lvl+0xf6/0x150 [ 175.952041][T10131] dump_stack+0x15/0x1a [ 175.952056][T10131] should_fail_ex+0x261/0x270 [ 175.952166][T10131] should_failslab+0x8f/0xb0 [ 175.952221][T10131] __kmalloc_cache_noprof+0x55/0x320 [ 175.952257][T10131] ? audit_log_d_path+0x8e/0x150 [ 175.952373][T10131] audit_log_d_path+0x8e/0x150 [ 175.952407][T10131] audit_log_d_path_exe+0x42/0x70 [ 175.952444][T10131] audit_log_task+0x1f1/0x250 [ 175.952489][T10131] audit_seccomp+0x62/0x100 [ 175.952515][T10131] __seccomp_filter+0x694/0x10e0 [ 175.952614][T10131] ? __perf_event_task_sched_out+0x13c/0xf00 [ 175.952649][T10131] ? _raw_spin_unlock+0x26/0x50 [ 175.952691][T10131] __secure_computing+0x7e/0x150 [ 175.952722][T10131] syscall_trace_enter+0xcf/0x1f0 [ 175.952747][T10131] do_syscall_64+0xaa/0x1a0 [ 175.952777][T10131] ? clear_bhb_loop+0x25/0x80 [ 175.952821][T10131] ? clear_bhb_loop+0x25/0x80 [ 175.952848][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.952867][T10131] RIP: 0033:0x7f56c43bcb7c [ 175.952881][T10131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.952934][T10131] RSP: 002b:00007f56c2a27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.952956][T10131] RAX: ffffffffffffffda RBX: 00007f56c45e5fa0 RCX: 00007f56c43bcb7c [ 175.952970][T10131] RDX: 000000000000000f RSI: 00007f56c2a270a0 RDI: 0000000000000006 [ 175.952984][T10131] RBP: 00007f56c2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 175.952998][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.953012][T10131] R13: 0000000000000000 R14: 00007f56c45e5fa0 R15: 00007ffe9cc8b1c8 [ 175.953035][T10131] [ 176.373205][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'. [ 176.428168][T10149] SELinux: ebitmap: truncated map [ 176.437601][T10149] SELinux: failed to load policy [ 176.486900][T10153] ref_ctr_offset mismatch. inode: 0x7c1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 176.527695][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.535130][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.542715][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.550875][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.558353][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.565923][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.573475][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.581784][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.589376][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.596975][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.604413][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.612942][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.620492][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.627946][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.636158][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.643605][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.651055][ T3383] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 176.660653][ T3383] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 176.841368][T10163] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.850887][T10163] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.859767][T10163] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.868595][T10163] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 176.878229][T10163] geneve3: entered promiscuous mode [ 176.883546][T10163] geneve3: entered allmulticast mode [ 176.981065][T10174] syzkaller1: entered promiscuous mode [ 176.986618][T10174] syzkaller1: entered allmulticast mode [ 177.126024][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 177.310668][T10209] syzkaller1: entered promiscuous mode [ 177.316274][T10209] syzkaller1: entered allmulticast mode [ 177.350802][T10214] SELinux: ebitmap: truncated map [ 177.363963][T10214] SELinux: failed to load policy [ 177.374562][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 177.494534][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2576'. [ 177.516010][T10228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 177.532691][T10229] SELinux: ebitmap: truncated map [ 178.420404][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 178.420472][ T29] audit: type=1326 audit(1745205567.076:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.5.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7fc00000 [ 178.621161][T10273] ref_ctr_offset mismatch. inode: 0xb9a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 178.653915][T10271] FAULT_INJECTION: forcing a failure. [ 178.653915][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 178.667313][T10271] CPU: 1 UID: 0 PID: 10271 Comm: syz.6.2595 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 178.667387][T10271] Tainted: [W]=WARN [ 178.667395][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.667410][T10271] Call Trace: [ 178.667418][T10271] [ 178.667426][T10271] dump_stack_lvl+0xf6/0x150 [ 178.667449][T10271] dump_stack+0x15/0x1a [ 178.667464][T10271] should_fail_ex+0x261/0x270 [ 178.667525][T10271] should_failslab+0x8f/0xb0 [ 178.667546][T10271] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 178.667579][T10271] ? __alloc_skb+0x10d/0x320 [ 178.667605][T10271] __alloc_skb+0x10d/0x320 [ 178.667707][T10271] tipc_msg_create+0x47/0x220 [ 178.667735][T10271] ? tipc_node_remove_conn+0x1b9/0x270 [ 178.667801][T10271] __tipc_shutdown+0xb5b/0xc00 [ 178.667891][T10271] ? __pfx_woken_wake_function+0x10/0x10 [ 178.667993][T10271] tipc_release+0x6a/0xa70 [ 178.668021][T10271] ? __sys_recvmsg+0x21b/0x270 [ 178.668049][T10271] sock_close+0x68/0x150 [ 178.668076][T10271] ? __pfx_sock_close+0x10/0x10 [ 178.668104][T10271] __fput+0x2ac/0x640 [ 178.668212][T10271] ____fput+0x1c/0x30 [ 178.668240][T10271] task_work_run+0x13c/0x1b0 [ 178.668265][T10271] syscall_exit_to_user_mode+0xa8/0x120 [ 178.668295][T10271] do_syscall_64+0xd6/0x1a0 [ 178.668332][T10271] ? clear_bhb_loop+0x25/0x80 [ 178.668424][T10271] ? clear_bhb_loop+0x25/0x80 [ 178.668448][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.668474][T10271] RIP: 0033:0x7f82dcaae169 [ 178.668492][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.668513][T10271] RSP: 002b:00007f82db117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 178.668535][T10271] RAX: 00000000000000f9 RBX: 00007f82dccd5fa0 RCX: 00007f82dcaae169 [ 178.668567][T10271] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 178.668578][T10271] RBP: 00007f82db117090 R08: 0000000000000000 R09: 0000000000000000 [ 178.668592][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.668606][T10271] R13: 0000000000000000 R14: 00007f82dccd5fa0 R15: 00007ffdbd72feb8 [ 178.668629][T10271] [ 178.917289][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.926850][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.224334][T10285] netlink: 'syz.4.2599': attribute type 11 has an invalid length. [ 179.232890][T10285] netlink: 'syz.4.2599': attribute type 13 has an invalid length. [ 179.322242][T10290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.560275][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.568459][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.575877][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.583299][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.590806][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.598905][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.606411][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.613904][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.621361][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.629473][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.636905][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.644361][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.651840][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.659955][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.667431][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.674828][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.682282][ T3357] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 179.695468][ T3357] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 180.137082][T10310] SELinux: ebitmap: truncated map [ 180.145495][T10310] sel_write_load: 1 callbacks suppressed [ 180.145513][T10310] SELinux: failed to load policy [ 180.155898][T10312] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.163690][T10312] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 180.265561][T10323] SELinux: ebitmap: truncated map [ 180.275423][T10323] SELinux: failed to load policy [ 180.305170][T10325] syzkaller1: entered promiscuous mode [ 180.310859][T10325] syzkaller1: entered allmulticast mode [ 180.593109][T10341] __nla_validate_parse: 6 callbacks suppressed [ 180.593163][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2622'. [ 180.611525][T10342] 9pnet: p9_errstr2errno: server reported unknown error [ 180.612416][T10341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 180.645816][T10342] FAULT_INJECTION: forcing a failure. [ 180.645816][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 180.658728][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.5.2624 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 180.658840][T10342] Tainted: [W]=WARN [ 180.658849][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.658935][T10342] Call Trace: [ 180.658943][T10342] [ 180.658950][T10342] dump_stack_lvl+0xf6/0x150 [ 180.658982][T10342] dump_stack+0x15/0x1a [ 180.658997][T10342] should_fail_ex+0x261/0x270 [ 180.659026][T10342] should_failslab+0x8f/0xb0 [ 180.659050][T10342] __kmalloc_cache_noprof+0x55/0x320 [ 180.659098][T10342] ? __se_sys_mount+0xf9/0x2e0 [ 180.659170][T10342] ? memdup_user+0xa6/0xd0 [ 180.659225][T10342] __se_sys_mount+0xf9/0x2e0 [ 180.659246][T10342] ? fput+0x99/0xd0 [ 180.659276][T10342] ? ksys_write+0x180/0x1b0 [ 180.659297][T10342] __x64_sys_mount+0x67/0x80 [ 180.659315][T10342] x64_sys_call+0xd11/0x2e10 [ 180.659415][T10342] do_syscall_64+0xc9/0x1a0 [ 180.659447][T10342] ? clear_bhb_loop+0x25/0x80 [ 180.659472][T10342] ? clear_bhb_loop+0x25/0x80 [ 180.659558][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.659584][T10342] RIP: 0033:0x7ff60b23e169 [ 180.659602][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.659622][T10342] RSP: 002b:00007ff6098a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.659699][T10342] RAX: ffffffffffffffda RBX: 00007ff60b465fa0 RCX: 00007ff60b23e169 [ 180.659714][T10342] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 180.659729][T10342] RBP: 00007ff6098a7090 R08: 0000200000000080 R09: 0000000000000000 [ 180.659743][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.659755][T10342] R13: 0000000000000000 R14: 00007ff60b465fa0 R15: 00007ffd450001e8 [ 180.659773][T10342] [ 180.664060][T10344] 9pnet: p9_errstr2errno: server reported unknown error [ 180.904898][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 180.919486][T10347] SELinux: ebitmap: truncated map [ 180.945387][T10347] SELinux: failed to load policy [ 181.736027][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 181.744999][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 181.753944][T10380] netlink: 'syz.1.2640': attribute type 11 has an invalid length. [ 181.761809][T10380] netlink: 'syz.1.2640': attribute type 13 has an invalid length. [ 181.826613][T10383] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.833960][T10383] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 181.895413][T10385] SELinux: ebitmap: truncated map [ 181.905304][T10385] SELinux: failed to load policy [ 182.406022][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'. [ 182.569216][T10403] SELinux: ebitmap: truncated map [ 182.578903][T10403] SELinux: failed to load policy [ 183.331823][T10417] SELinux: ebitmap: truncated map [ 183.341000][T10417] SELinux: failed to load policy [ 183.463404][ T29] audit: type=1326 audit(1745205572.116:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.473703][T10426] kernel profiling enabled (shift: 17) [ 183.501273][ T29] audit: type=1326 audit(1745205572.116:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.524872][ T29] audit: type=1326 audit(1745205572.116:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.549193][ T29] audit: type=1326 audit(1745205572.116:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff60b240087 code=0x7ffc0000 [ 183.572626][ T29] audit: type=1326 audit(1745205572.116:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff60b23fffc code=0x7ffc0000 [ 183.597340][ T29] audit: type=1326 audit(1745205572.116:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff60b23ff34 code=0x7ffc0000 [ 183.620816][ T29] audit: type=1326 audit(1745205572.116:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff60b23cdca code=0x7ffc0000 [ 183.644980][ T29] audit: type=1326 audit(1745205572.116:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.669319][ T29] audit: type=1326 audit(1745205572.116:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.692830][ T29] audit: type=1326 audit(1745205572.126:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 183.699377][T10431] FAULT_INJECTION: forcing a failure. [ 183.699377][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.729573][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.5.2660 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 183.729610][T10431] Tainted: [W]=WARN [ 183.729618][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.729632][T10431] Call Trace: [ 183.729639][T10431] [ 183.729664][T10431] dump_stack_lvl+0xf6/0x150 [ 183.729687][T10431] dump_stack+0x15/0x1a [ 183.729703][T10431] should_fail_ex+0x261/0x270 [ 183.729728][T10431] should_fail+0xb/0x10 [ 183.729770][T10431] should_fail_usercopy+0x1a/0x20 [ 183.729795][T10431] _copy_from_user+0x1c/0xa0 [ 183.729822][T10431] io_submit_one+0x56/0x1230 [ 183.729851][T10431] ? __rcu_read_unlock+0x4e/0x70 [ 183.729925][T10431] __se_sys_io_submit+0xf7/0x280 [ 183.729962][T10431] __x64_sys_io_submit+0x43/0x50 [ 183.729997][T10431] x64_sys_call+0xa8b/0x2e10 [ 183.730018][T10431] do_syscall_64+0xc9/0x1a0 [ 183.730042][T10431] ? clear_bhb_loop+0x25/0x80 [ 183.730088][T10431] ? clear_bhb_loop+0x25/0x80 [ 183.730108][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.730135][T10431] RIP: 0033:0x7ff60b23e169 [ 183.730149][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.730166][T10431] RSP: 002b:00007ff6098a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 183.730184][T10431] RAX: ffffffffffffffda RBX: 00007ff60b465fa0 RCX: 00007ff60b23e169 [ 183.730211][T10431] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007ff60bfa1000 [ 183.730275][T10431] RBP: 00007ff6098a7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.730287][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.730298][T10431] R13: 0000000000000000 R14: 00007ff60b465fa0 R15: 00007ffd450001e8 [ 183.730317][T10431] [ 183.977481][T10433] SELinux: ebitmap: truncated map [ 183.986977][T10433] SELinux: failed to load policy [ 184.014241][T10441] netlink: 'syz.4.2665': attribute type 10 has an invalid length. [ 184.025204][T10441] team0: Device hsr_slave_0 failed to register rx_handler [ 184.042713][T10441] netlink: 'syz.4.2665': attribute type 21 has an invalid length. [ 184.697323][T10470] SELinux: ebitmap: truncated map [ 184.705869][T10470] SELinux: failed to load policy [ 185.020157][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2685'. [ 185.029298][T10491] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.140770][T10508] FAULT_INJECTION: forcing a failure. [ 185.140770][T10508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.154015][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.1.2693 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 185.154046][T10508] Tainted: [W]=WARN [ 185.154052][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.154090][T10508] Call Trace: [ 185.154096][T10508] [ 185.154103][T10508] dump_stack_lvl+0xf6/0x150 [ 185.154129][T10508] dump_stack+0x15/0x1a [ 185.154147][T10508] should_fail_ex+0x261/0x270 [ 185.154170][T10508] should_fail+0xb/0x10 [ 185.154269][T10508] should_fail_usercopy+0x1a/0x20 [ 185.154297][T10508] _copy_from_user+0x1c/0xa0 [ 185.154326][T10508] io_submit_one+0x56/0x1230 [ 185.154352][T10508] ? __rcu_read_unlock+0x4e/0x70 [ 185.154412][T10508] __se_sys_io_submit+0xf7/0x280 [ 185.154466][T10508] __x64_sys_io_submit+0x43/0x50 [ 185.154549][T10508] x64_sys_call+0xa8b/0x2e10 [ 185.154569][T10508] do_syscall_64+0xc9/0x1a0 [ 185.154595][T10508] ? clear_bhb_loop+0x25/0x80 [ 185.154619][T10508] ? clear_bhb_loop+0x25/0x80 [ 185.154696][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.154716][T10508] RIP: 0033:0x7f56c43be169 [ 185.154827][T10508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.154844][T10508] RSP: 002b:00007f56c2a27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 185.154861][T10508] RAX: ffffffffffffffda RBX: 00007f56c45e5fa0 RCX: 00007f56c43be169 [ 185.154872][T10508] RDX: 0000200000000600 RSI: 0000000000000002 RDI: 00007f56c29fe000 [ 185.154886][T10508] RBP: 00007f56c2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 185.154899][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.154971][T10508] R13: 0000000000000000 R14: 00007f56c45e5fa0 R15: 00007ffe9cc8b1c8 [ 185.155001][T10508] [ 185.546259][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'. [ 185.547198][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.555511][T10518] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 185.563913][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.585053][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2698'. [ 185.594386][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2698'. [ 185.903516][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2705'. [ 185.961024][T10539] SELinux: ebitmap: truncated map [ 185.970674][T10539] SELinux: failed to load policy [ 186.220501][ T58] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.257546][ T58] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.308370][ T58] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.329157][T10563] lo speed is unknown, defaulting to 1000 [ 186.345173][T10577] FAULT_INJECTION: forcing a failure. [ 186.345173][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.358585][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.6.2721 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 186.358637][T10577] Tainted: [W]=WARN [ 186.358646][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.358661][T10577] Call Trace: [ 186.358669][T10577] [ 186.358678][T10577] dump_stack_lvl+0xf6/0x150 [ 186.358703][T10577] dump_stack+0x15/0x1a [ 186.358718][T10577] should_fail_ex+0x261/0x270 [ 186.358811][T10577] should_fail+0xb/0x10 [ 186.358830][T10577] should_fail_usercopy+0x1a/0x20 [ 186.358871][T10577] _copy_from_user+0x1c/0xa0 [ 186.358905][T10577] copy_msghdr_from_user+0x54/0x2b0 [ 186.358946][T10577] ? __fget_files+0x186/0x1c0 [ 186.358997][T10577] __sys_sendmsg+0x141/0x240 [ 186.359047][T10577] __x64_sys_sendmsg+0x46/0x50 [ 186.359123][T10577] x64_sys_call+0x26f3/0x2e10 [ 186.359150][T10577] do_syscall_64+0xc9/0x1a0 [ 186.359181][T10577] ? clear_bhb_loop+0x25/0x80 [ 186.359206][T10577] ? clear_bhb_loop+0x25/0x80 [ 186.359233][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.359258][T10577] RIP: 0033:0x7f82dcaae169 [ 186.359343][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.359458][T10577] RSP: 002b:00007f82db117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.359481][T10577] RAX: ffffffffffffffda RBX: 00007f82dccd5fa0 RCX: 00007f82dcaae169 [ 186.359508][T10577] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 186.359522][T10577] RBP: 00007f82db117090 R08: 0000000000000000 R09: 0000000000000000 [ 186.359535][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.359549][T10577] R13: 0000000000000000 R14: 00007f82dccd5fa0 R15: 00007ffdbd72feb8 [ 186.359589][T10577] [ 186.596050][ T58] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.619664][T10563] chnl_net:caif_netlink_parms(): no params data found [ 186.680108][T10563] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.687357][T10563] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.694807][T10563] bridge_slave_0: entered allmulticast mode [ 186.704230][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2725'. [ 186.714741][T10563] bridge_slave_0: entered promiscuous mode [ 186.724286][T10563] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.726167][T10590] netlink: 'syz.6.2725': attribute type 4 has an invalid length. [ 186.731515][T10563] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.746479][T10563] bridge_slave_1: entered allmulticast mode [ 186.753077][T10563] bridge_slave_1: entered promiscuous mode [ 186.917689][ T58]  (unregistering): Released all slaves [ 186.928721][T10563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.939987][T10563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.962371][T10563] team0: Port device team_slave_0 added [ 186.969508][T10563] team0: Port device team_slave_1 added [ 186.996393][T10563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.003486][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.030232][T10563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.044352][T10563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.051411][T10563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.077980][T10563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.096311][ T58] batadv0: left promiscuous mode [ 187.102407][ T58] team0: left promiscuous mode [ 187.116860][ T58] veth1_macvtap: left promiscuous mode [ 187.124054][ T58] veth0_macvtap: left promiscuous mode [ 187.133772][ T58] veth1_vlan: left promiscuous mode [ 187.155311][ T58] veth0_vlan: left promiscuous mode [ 187.335062][ T58] vcan0 (unregistering): left allmulticast mode [ 187.364963][ T3383] infiniband syz1: ib_query_port failed (-19) [ 187.375145][ T3357] lo speed is unknown, defaulting to 1000 [ 187.378208][T10604] ref_ctr_offset mismatch. inode: 0x882 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 187.381404][ T3357] infiniband syz2: ib_query_port failed (-19) [ 187.394568][T10563] hsr_slave_0: entered promiscuous mode [ 187.406984][T10563] hsr_slave_1: entered promiscuous mode [ 187.608179][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.615697][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.623221][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.631362][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.638958][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.646407][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.653917][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.662083][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.669656][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.677430][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.684848][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.693088][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.700618][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.708164][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.715604][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.723017][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.731446][ T3357] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 187.740936][ T3357] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 187.953856][T10563] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.966169][T10563] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.996683][T10563] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.029258][T10563] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.113973][T10563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.142354][T10563] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.156617][ T6818] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.163735][ T6818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.227441][ T6818] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.234569][ T6818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.262841][T10643] netlink: 'syz.3.2747': attribute type 10 has an invalid length. [ 188.267916][T10563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.281154][T10563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.311207][T10643] hsr_slave_0: entered promiscuous mode [ 188.318043][T10643] team0: Port device hsr_slave_0 added [ 188.345684][T10643] netlink: 'syz.3.2747': attribute type 21 has an invalid length. [ 188.462529][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.490467][T10651] SELinux: ebitmap: truncated map [ 188.532441][T10651] SELinux: failed to load policy [ 188.599994][T10563] veth0_vlan: entered promiscuous mode [ 188.609857][T10563] veth1_vlan: entered promiscuous mode [ 188.618024][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.625521][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.633046][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.640765][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.648235][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.655706][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.663101][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.670631][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.678084][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.685507][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.692903][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.700372][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.707794][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.715489][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.722896][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.730573][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.738053][ T10] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 188.750231][ T10] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 188.769610][T10563] veth0_macvtap: entered promiscuous mode [ 188.777290][T10563] veth1_macvtap: entered promiscuous mode [ 188.787919][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.798450][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.808455][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.818996][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.829877][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.841088][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.852353][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.862312][T10563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.872897][T10563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.887345][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.897461][T10563] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.907038][T10563] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.915937][T10563] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.924635][T10563] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.394114][T10695] ref_ctr_offset mismatch. inode: 0x8b1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 189.504813][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.512305][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.520522][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.528019][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.535496][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.542983][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.551016][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.558466][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.565899][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.573273][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.581292][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.589202][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.596747][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.604162][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.612280][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.619725][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.627191][ T3383] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 189.638210][ T3383] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.651590][T10713] netlink: 'syz.6.2766': attribute type 21 has an invalid length. [ 189.772109][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 189.772126][ T29] audit: type=1400 audit(1745205578.426:5922): avc: denied { accept } for pid=10719 comm="syz.6.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 189.975361][T10732] SELinux: ebitmap: truncated map [ 189.986583][T10732] SELinux: failed to load policy [ 189.990278][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.001205][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.010926][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'. [ 190.020034][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'. [ 190.114872][T10745] SELinux: ebitmap: truncated map [ 190.125523][T10745] SELinux: failed to load policy [ 190.210126][T10754] netlink: 'syz.3.2784': attribute type 21 has an invalid length. [ 190.244593][T10759] netlink: 'syz.3.2786': attribute type 21 has an invalid length. [ 190.326330][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 190.334306][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.347229][ T29] audit: type=1326 audit(1745205579.006:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10705 comm="syz.5.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7fc00000 [ 190.399521][ T29] audit: type=1400 audit(1745205579.056:5924): avc: denied { mounton } for pid=10767 comm="syz.6.2790" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 190.452350][ T29] audit: type=1326 audit(1745205579.086:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452390][ T29] audit: type=1326 audit(1745205579.086:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452423][ T29] audit: type=1326 audit(1745205579.086:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452495][ T29] audit: type=1326 audit(1745205579.086:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452554][ T29] audit: type=1326 audit(1745205579.086:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452591][ T29] audit: type=1326 audit(1745205579.086:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.452635][ T29] audit: type=1326 audit(1745205579.086:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10771 comm="syz.5.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 190.539067][T10778] SELinux: ebitmap: truncated map [ 190.543186][T10778] SELinux: failed to load policy [ 190.743695][T10788] netlink: 'syz.4.2797': attribute type 10 has an invalid length. [ 190.751934][T10788] team0: Device hsr_slave_0 failed to register rx_handler [ 191.025009][T10817] SELinux: ebitmap: truncated map [ 191.042366][T10817] SELinux: failed to load policy [ 191.070508][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2807'. [ 191.081271][T10824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 191.199602][T10831] netlink: 'syz.5.2809': attribute type 10 has an invalid length. [ 191.227784][T10831] team0: Port device hsr_slave_0 added [ 191.278158][T10831] netlink: 'syz.5.2809': attribute type 21 has an invalid length. [ 191.669702][T10854] SELinux: ebitmap: truncated map [ 191.767075][T10854] SELinux: failed to load policy [ 191.839969][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2821'. [ 191.849249][T10860] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 191.922479][T10868] netlink: 'syz.5.2822': attribute type 10 has an invalid length. [ 191.942750][T10868] netlink: 'syz.5.2822': attribute type 21 has an invalid length. [ 191.990510][T10875] netlink: 'syz.5.2834': attribute type 10 has an invalid length. [ 192.001027][T10875] netlink: 'syz.5.2834': attribute type 21 has an invalid length. [ 192.176858][T10881] ref_ctr_offset mismatch. inode: 0x99a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 192.234272][T10878] ref_ctr_offset mismatch. inode: 0x907 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 192.711743][T10895] FAULT_INJECTION: forcing a failure. [ 192.711743][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 192.724532][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.1.2832 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 192.724575][T10895] Tainted: [W]=WARN [ 192.724582][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.724594][T10895] Call Trace: [ 192.724601][T10895] [ 192.724608][T10895] dump_stack_lvl+0xf6/0x150 [ 192.724703][T10895] dump_stack+0x15/0x1a [ 192.724723][T10895] should_fail_ex+0x261/0x270 [ 192.724753][T10895] should_failslab+0x8f/0xb0 [ 192.724779][T10895] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 192.724816][T10895] ? sidtab_sid2str_get+0xb8/0x140 [ 192.724847][T10895] ? vsnprintf+0x84d/0x8a0 [ 192.724886][T10895] kmemdup_noprof+0x2b/0x70 [ 192.724922][T10895] sidtab_sid2str_get+0xb8/0x140 [ 192.724961][T10895] security_sid_to_context_core+0x1eb/0x2f0 [ 192.725006][T10895] security_sid_to_context+0x27/0x30 [ 192.725046][T10895] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 192.725091][T10895] security_lsmprop_to_secctx+0x40/0x80 [ 192.725125][T10895] audit_log_task_context+0x7a/0x180 [ 192.725165][T10895] audit_log_task+0xfb/0x250 [ 192.725223][T10895] ? kstrtouint+0x7b/0xc0 [ 192.725313][T10895] audit_seccomp+0x62/0x100 [ 192.725345][T10895] __seccomp_filter+0x694/0x10e0 [ 192.725376][T10895] ? vfs_write+0x669/0x950 [ 192.725396][T10895] ? putname+0xe1/0x100 [ 192.725425][T10895] __secure_computing+0x7e/0x150 [ 192.725449][T10895] syscall_trace_enter+0xcf/0x1f0 [ 192.725476][T10895] ? fpregs_assert_state_consistent+0x83/0xa0 [ 192.725514][T10895] do_syscall_64+0xaa/0x1a0 [ 192.725574][T10895] ? clear_bhb_loop+0x25/0x80 [ 192.725594][T10895] ? clear_bhb_loop+0x25/0x80 [ 192.725631][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.725651][T10895] RIP: 0033:0x7f254a6ce169 [ 192.725665][T10895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.725682][T10895] RSP: 002b:00007f2548d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac [ 192.725705][T10895] RAX: ffffffffffffffda RBX: 00007f254a8f5fa0 RCX: 00007f254a6ce169 [ 192.725719][T10895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 192.725734][T10895] RBP: 00007f2548d37090 R08: 0000000000000000 R09: 0000000000000000 [ 192.725755][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.725769][T10895] R13: 0000000000000000 R14: 00007f254a8f5fa0 R15: 00007ffcb3219b78 [ 192.725791][T10895] [ 193.048054][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2833'. [ 193.065480][T10898] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.221399][T10906] SELinux: ebitmap: truncated map [ 193.243884][T10906] SELinux: failed to load policy [ 193.279546][T10912] FAULT_INJECTION: forcing a failure. [ 193.279546][T10912] name failslab, interval 1, probability 0, space 0, times 0 [ 193.292303][T10912] CPU: 0 UID: 0 PID: 10912 Comm: syz.4.2841 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 193.292373][T10912] Tainted: [W]=WARN [ 193.292379][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.292392][T10912] Call Trace: [ 193.292397][T10912] [ 193.292404][T10912] dump_stack_lvl+0xf6/0x150 [ 193.292434][T10912] dump_stack+0x15/0x1a [ 193.292454][T10912] should_fail_ex+0x261/0x270 [ 193.292534][T10912] should_failslab+0x8f/0xb0 [ 193.292583][T10912] __kmalloc_cache_noprof+0x55/0x320 [ 193.292620][T10912] ? audit_log_d_path+0x8e/0x150 [ 193.292653][T10912] audit_log_d_path+0x8e/0x150 [ 193.292758][T10912] audit_log_d_path_exe+0x42/0x70 [ 193.292794][T10912] audit_log_task+0x1f1/0x250 [ 193.292856][T10912] audit_seccomp+0x62/0x100 [ 193.292888][T10912] __seccomp_filter+0x694/0x10e0 [ 193.292910][T10912] ? putname+0xe1/0x100 [ 193.292967][T10912] ? read_tsc+0x9/0x20 [ 193.293000][T10912] ? timespec64_add_safe+0x10b/0x150 [ 193.293046][T10912] __secure_computing+0x7e/0x150 [ 193.293152][T10912] syscall_trace_enter+0xcf/0x1f0 [ 193.293179][T10912] ? fpregs_assert_state_consistent+0x83/0xa0 [ 193.293217][T10912] do_syscall_64+0xaa/0x1a0 [ 193.293268][T10912] ? clear_bhb_loop+0x25/0x80 [ 193.293291][T10912] ? clear_bhb_loop+0x25/0x80 [ 193.293346][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.293372][T10912] RIP: 0033:0x7ff6c8e3cb7c [ 193.293390][T10912] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 193.293411][T10912] RSP: 002b:00007ff6c74a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.293515][T10912] RAX: ffffffffffffffda RBX: 00007ff6c9065fa0 RCX: 00007ff6c8e3cb7c [ 193.293530][T10912] RDX: 000000000000000f RSI: 00007ff6c74a70a0 RDI: 0000000000000006 [ 193.293543][T10912] RBP: 00007ff6c74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.293557][T10912] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 193.293571][T10912] R13: 0000000000000000 R14: 00007ff6c9065fa0 R15: 00007ffcf0762028 [ 193.293594][T10912] [ 193.538103][T10908] ref_ctr_offset mismatch. inode: 0x928 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 193.751072][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 193.773393][T10938] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 193.866810][T10950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.875478][T10950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.884134][T10952] netlink: 'syz.6.2853': attribute type 21 has an invalid length. [ 193.885884][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2852'. [ 193.901094][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2852'. [ 193.937122][T10955] netlink: 'syz.6.2854': attribute type 10 has an invalid length. [ 193.957729][T10955] team0: Device hsr_slave_0 failed to register rx_handler [ 193.967687][T10955] netlink: 'syz.6.2854': attribute type 21 has an invalid length. [ 194.123203][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.131339][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.138768][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.146240][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.153893][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.161927][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.169347][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.176804][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.184313][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.192605][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.200039][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.207466][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.214865][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.222895][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.230506][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.238404][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.246529][ T3357] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 194.264830][ T3357] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 194.541335][T10982] FAULT_INJECTION: forcing a failure. [ 194.541335][T10982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.554670][T10982] CPU: 0 UID: 0 PID: 10982 Comm: syz.6.2862 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 194.554710][T10982] Tainted: [W]=WARN [ 194.554719][T10982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.554739][T10982] Call Trace: [ 194.554748][T10982] [ 194.554758][T10982] dump_stack_lvl+0xf6/0x150 [ 194.554782][T10982] dump_stack+0x15/0x1a [ 194.554797][T10982] should_fail_ex+0x261/0x270 [ 194.554821][T10982] should_fail_alloc_page+0xfd/0x110 [ 194.554847][T10982] __alloc_frozen_pages_noprof+0x11d/0x360 [ 194.554877][T10982] alloc_pages_mpol+0xb6/0x260 [ 194.554907][T10982] vma_alloc_folio_noprof+0x19c/0x300 [ 194.554948][T10982] handle_mm_fault+0xdda/0x2e80 [ 194.555009][T10982] ? mas_walk+0x204/0x320 [ 194.555062][T10982] ? __rcu_read_unlock+0x4e/0x70 [ 194.555091][T10982] exc_page_fault+0x3b9/0x6a0 [ 194.555124][T10982] asm_exc_page_fault+0x26/0x30 [ 194.555148][T10982] RIP: 0033:0x7f82dc970c90 [ 194.555165][T10982] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 194.555187][T10982] RSP: 002b:00007f82db1164a0 EFLAGS: 00010202 [ 194.555205][T10982] RAX: 0000000000004000 RBX: 00007f82db116540 RCX: 0000000000000004 [ 194.555223][T10982] RDX: 0000000000000077 RSI: 0000000000000028 RDI: 00007f82db1165e0 [ 194.555238][T10982] RBP: 000000000000000b R08: 00007f82d2cf7000 R09: 0000000000000019 [ 194.555249][T10982] R10: 0000200000000342 R11: 0000000000000438 R12: 0000000000000021 [ 194.555304][T10982] R13: 00007f82dcb4bf40 R14: 000000000000000a R15: 00007f82db1165e0 [ 194.555322][T10982] [ 194.721857][T10982] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 194.861632][T10993] netlink: 'syz.6.2865': attribute type 21 has an invalid length. [ 194.934010][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 194.934092][ T29] audit: type=1326 audit(1745205583.586:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 194.978004][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 194.985564][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 194.992993][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.000422][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.007920][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.015363][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.020936][ T29] audit: type=1326 audit(1745205583.586:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 195.022743][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.046968][ T29] audit: type=1326 audit(1745205583.586:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 195.053640][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.077154][ T29] audit: type=1326 audit(1745205583.586:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f148bf60087 code=0x7ffc0000 [ 195.077226][ T29] audit: type=1326 audit(1745205583.586:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f148bf5fffc code=0x7ffc0000 [ 195.077256][ T29] audit: type=1326 audit(1745205583.586:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f148bf5ff34 code=0x7ffc0000 [ 195.077287][ T29] audit: type=1326 audit(1745205583.586:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f148bf5cdca code=0x7ffc0000 [ 195.077311][ T29] audit: type=1326 audit(1745205583.586:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 195.077355][ T29] audit: type=1326 audit(1745205583.596:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 195.077387][ T29] audit: type=1326 audit(1745205583.596:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.3.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148bf5e169 code=0x7ffc0000 [ 195.084758][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.256439][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.264094][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.271599][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.279083][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.286529][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.293963][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.301470][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.308891][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 195.321626][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.499466][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 195.509643][T11019] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 195.597955][T11011] ref_ctr_offset mismatch. inode: 0x9e8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 195.609581][T11014] ref_ctr_offset mismatch. inode: 0x94c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 195.791885][T11031] netlink: 'syz.6.2879': attribute type 21 has an invalid length. [ 195.900843][T11039] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 195.911625][T11039] SELinux: failed to load policy [ 195.963889][T11036] SELinux: ebitmap: truncated map [ 195.991043][T11036] SELinux: failed to load policy [ 196.238566][T11055] ref_ctr_offset mismatch. inode: 0x7d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 196.400033][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.408627][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.418836][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'. [ 196.427893][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2899'. [ 196.670980][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2901'. [ 196.683112][T11082] vlan2: entered promiscuous mode [ 196.688340][T11082] team0: entered promiscuous mode [ 196.693390][T11082] team_slave_0: entered promiscuous mode [ 196.699826][T11082] team_slave_1: entered promiscuous mode [ 196.772540][T11084] netlink: 'syz.6.2902': attribute type 21 has an invalid length. [ 197.054833][T11099] SELinux: ebitmap: truncated map [ 197.068188][T11099] SELinux: failed to load policy [ 197.684327][T11107] ref_ctr_offset mismatch. inode: 0x92 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 197.947263][T11129] netlink: 'syz.6.2915': attribute type 21 has an invalid length. [ 198.092040][T11137] netlink: 'syz.1.2918': attribute type 21 has an invalid length. [ 198.436323][T11142] ref_ctr_offset mismatch. inode: 0xa4c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 198.516476][T11150] SELinux: ebitmap: truncated map [ 198.524873][T11150] SELinux: failed to load policy [ 198.762609][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 198.774459][T11176] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.443126][T11194] SELinux: ebitmap: truncated map [ 199.451607][T11194] SELinux: failed to load policy [ 199.476702][T11196] netlink: 'syz.3.2936': attribute type 10 has an invalid length. [ 199.488741][T11196] netlink: 'syz.3.2936': attribute type 21 has an invalid length. [ 199.676482][ T6818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.687020][ T6818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.699722][T11214] FAULT_INJECTION: forcing a failure. [ 199.699722][T11214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.712876][T11214] CPU: 0 UID: 0 PID: 11214 Comm: syz.1.2940 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 199.712912][T11214] Tainted: [W]=WARN [ 199.712919][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.712930][T11214] Call Trace: [ 199.712935][T11214] [ 199.712942][T11214] dump_stack_lvl+0xf6/0x150 [ 199.712993][T11214] dump_stack+0x15/0x1a [ 199.713012][T11214] should_fail_ex+0x261/0x270 [ 199.713041][T11214] should_fail+0xb/0x10 [ 199.713065][T11214] should_fail_usercopy+0x1a/0x20 [ 199.713090][T11214] _copy_from_user+0x1c/0xa0 [ 199.713188][T11214] copy_msghdr_from_user+0x54/0x2b0 [ 199.713273][T11214] ? __fget_files+0x186/0x1c0 [ 199.713317][T11214] __sys_sendmsg+0x141/0x240 [ 199.713354][T11214] __x64_sys_sendmsg+0x46/0x50 [ 199.713376][T11214] x64_sys_call+0x26f3/0x2e10 [ 199.713398][T11214] do_syscall_64+0xc9/0x1a0 [ 199.713427][T11214] ? clear_bhb_loop+0x25/0x80 [ 199.713501][T11214] ? clear_bhb_loop+0x25/0x80 [ 199.713604][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.713623][T11214] RIP: 0033:0x7f254a6ce169 [ 199.713637][T11214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.713656][T11214] RSP: 002b:00007f2548d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.713673][T11214] RAX: ffffffffffffffda RBX: 00007f254a8f5fa0 RCX: 00007f254a6ce169 [ 199.713761][T11214] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000003 [ 199.713773][T11214] RBP: 00007f2548d37090 R08: 0000000000000000 R09: 0000000000000000 [ 199.713858][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.713870][T11214] R13: 0000000000000000 R14: 00007f254a8f5fa0 R15: 00007ffcb3219b78 [ 199.713887][T11214] [ 199.911854][T11204] chnl_net:caif_netlink_parms(): no params data found [ 199.926397][ T6818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.936790][ T6818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 199.955555][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 199.955572][ T29] audit: type=1326 audit(1745205588.606:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.5.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 199.986075][ T29] audit: type=1326 audit(1745205588.606:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.5.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 200.009656][ T29] audit: type=1326 audit(1745205588.606:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.5.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 200.028103][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2944'. [ 200.034025][ T29] audit: type=1326 audit(1745205588.606:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.5.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 200.066195][ T29] audit: type=1326 audit(1745205588.606:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11218 comm="syz.5.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 200.092774][T11223] netlink: 'syz.1.2943': attribute type 21 has an invalid length. [ 200.109099][T11225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.123161][T11228] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2945'. [ 200.133195][ T6818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.143556][ T6818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.198554][T11232] SELinux: ebitmap: truncated map [ 200.207246][T11232] SELinux: failed to load policy [ 200.222491][ T6818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.223832][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.232900][ T6818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.240886][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.257940][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.266216][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.273627][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.281179][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.288640][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.296718][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.299786][T11204] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.304113][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.311449][T11204] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.318840][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.329677][T11204] bridge_slave_0: entered allmulticast mode [ 200.333905][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.340557][T11204] bridge_slave_0: entered promiscuous mode [ 200.347247][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.347276][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.368753][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.368781][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.368827][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.368853][ T3383] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 200.393622][T11204] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.393661][T11204] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.393733][T11204] bridge_slave_1: entered allmulticast mode [ 200.394299][T11204] bridge_slave_1: entered promiscuous mode [ 200.402904][ T3383] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 200.491055][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.511345][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.544480][T11204] team0: Port device team_slave_0 added [ 200.554954][ T6818] bridge_slave_1: left allmulticast mode [ 200.560734][ T6818] bridge_slave_1: left promiscuous mode [ 200.566541][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.584276][ T6818] bridge_slave_0: left allmulticast mode [ 200.590043][ T6818] bridge_slave_0: left promiscuous mode [ 200.595762][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.617171][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2956'. [ 200.667923][ T6818]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.677420][ T6818]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.686946][ T6818]  (unregistering): Released all slaves [ 200.697224][ T6818] bond0 (unregistering): Released all slaves [ 200.707378][T11204] team0: Port device team_slave_1 added [ 200.713651][T11272] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.757646][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.764774][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.791507][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.820132][T11281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.820170][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.831057][T11281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.835496][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.869805][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.878334][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2958'. [ 200.889455][T11281] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2958'. [ 200.894157][T11284] FAULT_INJECTION: forcing a failure. [ 200.894157][T11284] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.912634][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.1.2959 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 200.912798][T11284] Tainted: [W]=WARN [ 200.912807][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.912822][T11284] Call Trace: [ 200.912832][T11284] [ 200.912846][T11284] dump_stack_lvl+0xf6/0x150 [ 200.912887][T11284] dump_stack+0x15/0x1a [ 200.912907][T11284] should_fail_ex+0x261/0x270 [ 200.912987][T11284] should_fail_alloc_page+0xfd/0x110 [ 200.913016][T11284] __alloc_frozen_pages_noprof+0x11d/0x360 [ 200.913047][T11284] alloc_pages_mpol+0xb6/0x260 [ 200.913143][T11284] folio_alloc_mpol_noprof+0x36/0x80 [ 200.913173][T11284] shmem_get_folio_gfp+0x3c1/0xd30 [ 200.913216][T11284] shmem_write_begin+0xa7/0x190 [ 200.913324][T11284] generic_perform_write+0x189/0x4b0 [ 200.913367][T11284] shmem_file_write_iter+0xc2/0xe0 [ 200.913403][T11284] vfs_write+0x79b/0x950 [ 200.913502][T11284] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 200.913546][T11284] ksys_write+0xeb/0x1b0 [ 200.913572][T11284] __x64_sys_write+0x42/0x50 [ 200.913595][T11284] x64_sys_call+0x2a45/0x2e10 [ 200.913651][T11284] do_syscall_64+0xc9/0x1a0 [ 200.913677][T11284] ? clear_bhb_loop+0x25/0x80 [ 200.913703][T11284] ? clear_bhb_loop+0x25/0x80 [ 200.913729][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.913754][T11284] RIP: 0033:0x7f254a6ce169 [ 200.913772][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.913832][T11284] RSP: 002b:00007f2548d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.913854][T11284] RAX: ffffffffffffffda RBX: 00007f254a8f5fa0 RCX: 00007f254a6ce169 [ 200.913868][T11284] RDX: 0000000000002400 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.913883][T11284] RBP: 00007f2548d37090 R08: 0000000000000000 R09: 0000000000000000 [ 200.913897][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.913910][T11284] R13: 0000000000000000 R14: 00007f254a8f5fa0 R15: 00007ffcb3219b78 [ 200.913936][T11284] [ 201.124064][ T6818] batadv0: left promiscuous mode [ 201.135288][ T6818] team0: left promiscuous mode [ 201.140240][ T6818] team_slave_0: left promiscuous mode [ 201.146512][ T6818] team_slave_1: left promiscuous mode [ 201.152055][ T6818] hsr_slave_0: left promiscuous mode [ 201.160565][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.168217][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.213669][ T6818] team0 (unregistering): Port device hsr_slave_0 removed [ 201.230723][ T6818] team0 (unregistering): Port device team_slave_1 removed [ 201.242658][ T6818] team0 (unregistering): Port device team_slave_0 removed [ 201.321091][T11290] ref_ctr_offset mismatch. inode: 0xdd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 201.338182][T11204] hsr_slave_0: entered promiscuous mode [ 201.344339][T11204] hsr_slave_1: entered promiscuous mode [ 201.350476][T11204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.358733][T11204] Cannot create hsr debugfs directory [ 201.449260][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.456822][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.464245][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.471760][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.479387][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.487058][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.494619][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.502037][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.509488][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.516929][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.524486][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.531949][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.539489][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.546884][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.554381][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.561810][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.569263][ T3379] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 201.577301][ T3379] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 201.688891][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'. [ 201.699657][T11319] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.757284][ T29] audit: type=1400 audit(1745205590.416:6331): avc: denied { setopt } for pid=11323 comm="syz.1.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.804198][T11204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.813143][T11204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.822282][T11204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.840950][T11204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 201.879503][T11204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.892498][T11204] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.904540][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.911873][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.927311][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.934464][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.958801][T11204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.969296][T11204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.039748][T11341] SELinux: ebitmap: truncated map [ 202.048689][T11341] SELinux: failed to load policy [ 202.077442][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.161453][T11204] veth0_vlan: entered promiscuous mode [ 202.173304][T11204] veth1_vlan: entered promiscuous mode [ 202.195500][T11204] veth0_macvtap: entered promiscuous mode [ 202.204732][T11204] veth1_macvtap: entered promiscuous mode [ 202.227558][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.238896][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.248789][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.259352][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.269899][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.280413][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.288433][T11371] SELinux: ebitmap: truncated map [ 202.291314][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.304685][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.315345][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.325933][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.336387][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.346221][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.348798][T11371] SELinux: failed to load policy [ 202.356705][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.361116][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.397390][T11204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.406208][T11204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.415016][T11204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.423823][T11204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.535970][ T29] audit: type=1400 audit(1745205591.186:6332): avc: denied { read } for pid=11381 comm="syz.5.2982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.639319][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.648788][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.657962][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2984'. [ 202.667105][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2984'. [ 202.787345][T11394] SELinux: ebitmap: truncated map [ 202.793929][T11394] SELinux: failed to load policy [ 202.862139][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.870412][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.877912][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.885531][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.892954][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.901118][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.908855][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.916508][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.924022][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.931546][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.939591][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.947010][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.954482][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.961958][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.969959][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.977372][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.984793][ T36] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 202.993012][ T36] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.326800][ T29] audit: type=1326 audit(1745205591.986:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 203.375102][ T29] audit: type=1326 audit(1745205592.006:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 203.398980][ T29] audit: type=1326 audit(1745205592.006:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11449 comm="syz.6.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 203.644847][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.654859][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.664148][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3014'. [ 203.673839][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3014'. [ 204.291962][T11496] netlink: 'syz.3.3022': attribute type 10 has an invalid length. [ 204.302622][T11496] team0: Device hsr_slave_0 failed to register rx_handler [ 204.383957][T11507] netlink: 'syz.3.3024': attribute type 10 has an invalid length. [ 204.402382][T11507] team0: Device hsr_slave_0 failed to register rx_handler [ 204.468300][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3025'. [ 204.489763][T11513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.561709][T11518] netlink: 'syz.6.3027': attribute type 21 has an invalid length. [ 204.575074][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 204.608348][T11520] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.886098][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3039'. [ 204.925543][T11545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.988886][T11551] netlink: 'syz.5.3042': attribute type 21 has an invalid length. [ 205.057223][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 205.067124][T11556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.182217][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 205.182235][ T29] audit: type=1400 audit(1745205593.836:6359): avc: denied { connect } for pid=11558 comm="#." scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.233880][T11569] netlink: 'syz.5.3049': attribute type 10 has an invalid length. [ 205.249814][ T29] audit: type=1326 audit(1745205593.906:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.296360][ T29] audit: type=1326 audit(1745205593.906:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.320811][ T29] audit: type=1326 audit(1745205593.906:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.344372][ T29] audit: type=1326 audit(1745205593.906:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.368832][ T29] audit: type=1326 audit(1745205593.906:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.392385][ T29] audit: type=1326 audit(1745205593.906:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.416710][ T29] audit: type=1326 audit(1745205593.906:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.440137][ T29] audit: type=1326 audit(1745205593.906:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.464416][ T29] audit: type=1326 audit(1745205593.906:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11568 comm="syz.5.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60b23e169 code=0x7ffc0000 [ 205.600449][T11574] SELinux: ebitmap: truncated map [ 205.608977][T11574] SELinux: failed to load policy [ 205.624449][T11576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3052'. [ 205.683599][T11576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.703994][T11580] SELinux: ebitmap: truncated map [ 205.712520][T11580] SELinux: failed to load policy [ 205.975013][T11622] netlink: 'syz.6.3066': attribute type 21 has an invalid length. [ 206.232486][T11630] netlink: 'syz.1.3068': attribute type 10 has an invalid length. [ 206.243942][T11630] team0: Device hsr_slave_0 failed to register rx_handler [ 206.654773][T11641] netlink: 'syz.5.3073': attribute type 10 has an invalid length. [ 206.697022][T11645] netlink: 'syz.5.3075': attribute type 10 has an invalid length. [ 206.727451][T11647] __nla_validate_parse: 1 callbacks suppressed [ 206.727524][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 206.771295][T11653] netlink: 'syz.5.3079': attribute type 21 has an invalid length. [ 207.032061][T11670] team0: Device hsr_slave_0 failed to register rx_handler [ 207.180557][T11688] FAULT_INJECTION: forcing a failure. [ 207.180557][T11688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.193951][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.1.3089 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 207.193993][T11688] Tainted: [W]=WARN [ 207.194002][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.194017][T11688] Call Trace: [ 207.194025][T11688] [ 207.194034][T11688] dump_stack_lvl+0xf6/0x150 [ 207.194062][T11688] dump_stack+0x15/0x1a [ 207.194082][T11688] should_fail_ex+0x261/0x270 [ 207.194149][T11688] should_fail_alloc_page+0xfd/0x110 [ 207.194185][T11688] __alloc_frozen_pages_noprof+0x11d/0x360 [ 207.194400][T11688] alloc_pages_mpol+0xb6/0x260 [ 207.194434][T11688] vma_alloc_folio_noprof+0x19c/0x300 [ 207.194471][T11688] handle_mm_fault+0xdda/0x2e80 [ 207.194506][T11688] ? mas_walk+0x204/0x320 [ 207.194533][T11688] ? __rcu_read_unlock+0x4e/0x70 [ 207.194566][T11688] exc_page_fault+0x3b9/0x6a0 [ 207.194600][T11688] asm_exc_page_fault+0x26/0x30 [ 207.194618][T11688] RIP: 0033:0x7f254a590be3 [ 207.194631][T11688] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 207.194654][T11688] RSP: 002b:00007f2548d364a0 EFLAGS: 00010206 [ 207.194671][T11688] RAX: 0000000000002000 RBX: 00007f2548d36540 RCX: 00007f2540917000 [ 207.194686][T11688] RDX: 00007f2548d366e0 RSI: 000000000000000f RDI: 00007f2548d365e0 [ 207.194738][T11688] RBP: 00000000000000cc R08: 0000000000000007 R09: 0000000000000042 [ 207.194794][T11688] R10: 000000000000004c R11: 00007f2548d36540 R12: 0000000000000001 [ 207.194805][T11688] R13: 00007f254a76bf40 R14: 00000000000000ff R15: 00007f2548d365e0 [ 207.194823][T11688] [ 207.194831][T11688] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 207.396686][T11698] IPv4: Oversized IP packet from 127.202.26.0 [ 207.457698][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 207.467521][T11705] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.514376][T11707] SELinux: ebitmap: truncated map [ 207.523245][T11707] SELinux: failed to load policy [ 207.584457][T11714] xt_hashlimit: size too large, truncated to 1048576 [ 207.591311][T11714] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 207.613732][T11714] x_tables: duplicate underflow at hook 1 [ 207.824860][T11748] cgroup: No subsys list or none specified [ 208.574708][T11779] team0: Device hsr_slave_0 failed to register rx_handler [ 208.679552][T11794] SELinux: ebitmap: truncated map [ 208.707773][T11794] SELinux: failed to load policy [ 208.787502][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.798022][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.826409][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3124'. [ 208.835607][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3124'. [ 208.873158][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 209.004701][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.012476][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.020661][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.028138][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.035618][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.043151][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.051243][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.058783][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.066337][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.073742][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.081856][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.089361][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.096875][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.104347][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.113394][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.121050][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.128478][ T3383] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 209.137555][ T3383] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 209.289989][T11869] xt_hashlimit: size too large, truncated to 1048576 [ 209.297029][T11869] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 209.316734][T11869] x_tables: duplicate underflow at hook 1 [ 209.323037][T11875] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3141'. [ 209.350240][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3144'. [ 209.359815][T11878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.437752][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3147'. [ 209.578503][T11909] validate_nla: 7 callbacks suppressed [ 209.578519][T11909] netlink: 'syz.4.3152': attribute type 21 has an invalid length. [ 209.696583][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.705048][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.717439][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 209.726547][T11922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3158'. [ 210.487314][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 210.487332][ T29] audit: type=1326 audit(1745205599.146:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.1.3156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7fc00000 [ 210.534978][ T29] audit: type=1326 audit(1745205599.186:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.558867][ T29] audit: type=1326 audit(1745205599.186:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.582658][ T29] audit: type=1326 audit(1745205599.186:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.606397][ T29] audit: type=1326 audit(1745205599.186:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.630061][ T29] audit: type=1326 audit(1745205599.186:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.664925][ T29] audit: type=1326 audit(1745205599.186:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.688430][ T29] audit: type=1326 audit(1745205599.196:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.712366][ T29] audit: type=1326 audit(1745205599.196:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.735862][ T29] audit: type=1326 audit(1745205599.196:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254a6ce169 code=0x7ffc0000 [ 210.794935][T11951] netlink: 'syz.5.3169': attribute type 21 has an invalid length. [ 210.829282][T11954] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.022973][T11975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11975 comm=syz.3.3176 [ 212.220381][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.227922][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.235377][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.242851][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.250823][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.258403][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.265849][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.274030][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.281941][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.289661][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.297262][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.304879][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.312303][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.319830][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.327380][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.335492][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.342896][ T1053] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 212.367309][ T1053] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.078803][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.086364][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.093768][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.101341][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.108839][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.116389][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.123975][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.131419][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.139175][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.146809][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.154244][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.161893][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.169380][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.177141][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.184747][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.192216][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.199730][ T1053] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 213.213899][ T1053] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.248850][T12087] __nla_validate_parse: 6 callbacks suppressed [ 213.248879][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3211'. [ 213.284892][T12090] 9pnet_fd: Insufficient options for proto=fd [ 213.548945][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'. [ 213.568328][T12110] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 213.682402][T12117] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 213.859666][T12134] SELinux: ebitmap: truncated map [ 213.879810][T12134] SELinux: failed to load policy [ 214.120667][T12162] FAULT_INJECTION: forcing a failure. [ 214.120667][T12162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.134884][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.4.3238 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 214.134996][T12162] Tainted: [W]=WARN [ 214.135004][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.135019][T12162] Call Trace: [ 214.135025][T12162] [ 214.135110][T12162] dump_stack_lvl+0xf6/0x150 [ 214.135137][T12162] dump_stack+0x15/0x1a [ 214.135157][T12162] should_fail_ex+0x261/0x270 [ 214.135187][T12162] should_fail_alloc_page+0xfd/0x110 [ 214.135221][T12162] __alloc_frozen_pages_noprof+0x11d/0x360 [ 214.135282][T12162] alloc_pages_mpol+0xb6/0x260 [ 214.135321][T12162] vma_alloc_folio_noprof+0x19c/0x300 [ 214.135362][T12162] handle_mm_fault+0xdda/0x2e80 [ 214.135392][T12162] ? mas_walk+0x204/0x320 [ 214.135556][T12162] ? __rcu_read_unlock+0x4e/0x70 [ 214.135587][T12162] exc_page_fault+0x3b9/0x6a0 [ 214.135606][T12162] ? do_syscall_64+0xd6/0x1a0 [ 214.135631][T12162] asm_exc_page_fault+0x26/0x30 [ 214.135656][T12162] RIP: 0033:0x7ff6c8deb78b [ 214.135743][T12162] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 214.135766][T12162] RSP: 002b:00007ff6c74a4e10 EFLAGS: 00010246 [ 214.135792][T12162] RAX: 00007ff6c74a6f30 RBX: 00007ff6c9033620 RCX: 0000000000000000 [ 214.135803][T12162] RDX: 00007ff6c74a6f78 RSI: 00007ff6c8e9dbd8 RDI: 00007ff6c74a4e30 [ 214.135814][T12162] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 214.135826][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.135840][T12162] R13: 0000000000000000 R14: 00007ff6c9065fa0 R15: 00007ffcf0762028 [ 214.135896][T12162] [ 214.310050][T12162] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 214.665385][T12177] x_tables: duplicate underflow at hook 1 [ 214.781019][T12179] SELinux: ebitmap: truncated map [ 214.832547][T12179] SELinux: failed to load policy [ 215.468100][T12230] FAULT_INJECTION: forcing a failure. [ 215.468100][T12230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.481336][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.4.3260 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 215.481393][T12230] Tainted: [W]=WARN [ 215.481401][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.481417][T12230] Call Trace: [ 215.481435][T12230] [ 215.481443][T12230] dump_stack_lvl+0xf6/0x150 [ 215.481471][T12230] dump_stack+0x15/0x1a [ 215.481491][T12230] should_fail_ex+0x261/0x270 [ 215.481553][T12230] should_fail+0xb/0x10 [ 215.481618][T12230] should_fail_usercopy+0x1a/0x20 [ 215.481643][T12230] _copy_from_user+0x1c/0xa0 [ 215.481672][T12230] copy_msghdr_from_user+0x54/0x2b0 [ 215.481703][T12230] ? __fget_files+0x186/0x1c0 [ 215.481740][T12230] __sys_sendmsg+0x141/0x240 [ 215.481780][T12230] __x64_sys_sendmsg+0x46/0x50 [ 215.481803][T12230] x64_sys_call+0x26f3/0x2e10 [ 215.481843][T12230] do_syscall_64+0xc9/0x1a0 [ 215.481868][T12230] ? clear_bhb_loop+0x25/0x80 [ 215.481961][T12230] ? clear_bhb_loop+0x25/0x80 [ 215.481982][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.482002][T12230] RIP: 0033:0x7ff6c8e3e169 [ 215.482038][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.482056][T12230] RSP: 002b:00007ff6c74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.482073][T12230] RAX: ffffffffffffffda RBX: 00007ff6c9065fa0 RCX: 00007ff6c8e3e169 [ 215.482085][T12230] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 215.482124][T12230] RBP: 00007ff6c74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.482135][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.482147][T12230] R13: 0000000000000000 R14: 00007ff6c9065fa0 R15: 00007ffcf0762028 [ 215.482165][T12230] [ 215.719247][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 215.719261][ T29] audit: type=1326 audit(1745205604.376:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.6.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.749405][ T29] audit: type=1326 audit(1745205604.376:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.6.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.783993][ T29] audit: type=1326 audit(1745205604.436:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.6.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.808034][ T29] audit: type=1326 audit(1745205604.436:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12238 comm="syz.6.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.865407][ T29] audit: type=1326 audit(1745205604.516:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.889073][ T29] audit: type=1326 audit(1745205604.516:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.912830][ T29] audit: type=1326 audit(1745205604.516:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.936711][ T29] audit: type=1326 audit(1745205604.516:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.960363][ T29] audit: type=1326 audit(1745205604.516:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 215.984614][ T29] audit: type=1326 audit(1745205604.516:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12245 comm="syz.6.3265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82dcaae169 code=0x7ffc0000 [ 216.127170][T12258] SELinux: ebitmap: truncated map [ 216.160395][T12258] SELinux: failed to load policy [ 217.103718][T12294] Cannot find add_set index 0 as target [ 217.264136][T12311] SELinux: ebitmap: truncated map [ 217.289741][T12311] SELinux: failed to load policy [ 217.332412][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.339960][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.347385][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.354885][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.362385][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.370027][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.377469][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.383680][T12319] netlink: 'syz.1.3285': attribute type 4 has an invalid length. [ 217.385046][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.401180][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.408680][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.416297][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.423718][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.431288][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.438807][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.446285][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.453869][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.461486][ T3379] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 217.605692][ T3379] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.688428][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'. [ 217.697890][T12335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.928943][T12349] SELinux: ebitmap: truncated map [ 217.947847][T12349] SELinux: failed to load policy [ 218.013459][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.021286][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.028880][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.036324][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.043742][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.051460][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.058971][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.066481][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.073915][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.081409][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.088840][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.096303][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.103831][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.111396][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.119179][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.126622][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.134294][ T3379] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 218.142513][ T3379] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.168398][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 218.177575][T12374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.203977][T12376] FAULT_INJECTION: forcing a failure. [ 218.203977][T12376] name failslab, interval 1, probability 0, space 0, times 0 [ 218.216697][T12376] CPU: 1 UID: 0 PID: 12376 Comm: syz.1.3305 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 218.216737][T12376] Tainted: [W]=WARN [ 218.216787][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.216802][T12376] Call Trace: [ 218.216810][T12376] [ 218.216819][T12376] dump_stack_lvl+0xf6/0x150 [ 218.216849][T12376] dump_stack+0x15/0x1a [ 218.216869][T12376] should_fail_ex+0x261/0x270 [ 218.216898][T12376] should_failslab+0x8f/0xb0 [ 218.216924][T12376] __kmalloc_noprof+0xad/0x410 [ 218.217037][T12376] ? security_prepare_creds+0x53/0x120 [ 218.217063][T12376] security_prepare_creds+0x53/0x120 [ 218.217088][T12376] prepare_creds+0x368/0x4e0 [ 218.217165][T12376] __sys_setfsuid+0x93/0x210 [ 218.217194][T12376] __x64_sys_setfsuid+0x1e/0x30 [ 218.217220][T12376] x64_sys_call+0x27c5/0x2e10 [ 218.217238][T12376] do_syscall_64+0xc9/0x1a0 [ 218.217319][T12376] ? clear_bhb_loop+0x25/0x80 [ 218.217336][T12376] ? clear_bhb_loop+0x25/0x80 [ 218.217354][T12376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.217372][T12376] RIP: 0033:0x7f254a6ce169 [ 218.217384][T12376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.217449][T12376] RSP: 002b:00007f2548d37038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 218.217465][T12376] RAX: ffffffffffffffda RBX: 00007f254a8f5fa0 RCX: 00007f254a6ce169 [ 218.217476][T12376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 218.217486][T12376] RBP: 00007f2548d37090 R08: 0000000000000000 R09: 0000000000000000 [ 218.217496][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.217506][T12376] R13: 0000000000000000 R14: 00007f254a8f5fa0 R15: 00007ffcb3219b78 [ 218.217594][T12376] [ 218.448926][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.456505][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.464285][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.472472][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.479976][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.487590][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.495173][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.503516][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.511073][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.518553][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.526672][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.534111][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.541581][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.549103][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.557430][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.565412][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.573231][ T36] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 218.653672][T12395] netlink: 'syz.5.3314': attribute type 21 has an invalid length. [ 218.687113][ T36] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.696643][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3315'. [ 218.707260][T12398] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 218.748933][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.756723][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.764342][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.771971][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.779484][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.787024][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.794540][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.802428][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.810235][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.817842][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.825605][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.833255][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.840891][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.848601][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.856231][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.863719][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.871293][ T3379] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 218.880078][ T3379] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 218.970301][T12410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.980118][T12410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.190992][T12425] Cannot find add_set index 0 as target [ 219.438658][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3328'. [ 219.448390][T12432] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 219.802556][T11739] syz_tun (unregistering): left promiscuous mode [ 219.901082][T12459] SELinux: ebitmap: truncated map [ 219.919618][T12459] SELinux: failed to load policy [ 219.944083][T12462] Cannot find add_set index 0 as target [ 219.968235][T12449] chnl_net:caif_netlink_parms(): no params data found [ 219.989952][ T6818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.018826][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.026218][T12449] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.033678][T12449] bridge_slave_0: entered allmulticast mode [ 220.040437][T12449] bridge_slave_0: entered promiscuous mode [ 220.049873][ T6818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.062455][T12449] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.069665][T12449] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.077093][T12449] bridge_slave_1: entered allmulticast mode [ 220.083748][T12449] bridge_slave_1: entered promiscuous mode [ 220.102626][T12449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.115055][ T6818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.128323][T12449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.145669][T12473] FAULT_INJECTION: forcing a failure. [ 220.145669][T12473] name failslab, interval 1, probability 0, space 0, times 0 [ 220.158591][T12473] CPU: 0 UID: 0 PID: 12473 Comm: syz.1.3340 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 220.158632][T12473] Tainted: [W]=WARN [ 220.158640][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.158653][T12473] Call Trace: [ 220.158659][T12473] [ 220.158667][T12473] dump_stack_lvl+0xf6/0x150 [ 220.158709][T12473] dump_stack+0x15/0x1a [ 220.158729][T12473] should_fail_ex+0x261/0x270 [ 220.158787][T12473] should_failslab+0x8f/0xb0 [ 220.158806][T12473] kmem_cache_alloc_noprof+0x59/0x340 [ 220.158875][T12473] ? getname_kernel+0x3d/0x1f0 [ 220.158897][T12473] getname_kernel+0x3d/0x1f0 [ 220.158919][T12473] kern_path+0x21/0x130 [ 220.158942][T12473] lookup_bdev+0x66/0x140 [ 220.158984][T12473] __se_sys_quotactl+0x1a6/0x650 [ 220.159067][T12473] __x64_sys_quotactl+0x55/0x70 [ 220.159090][T12473] x64_sys_call+0x265d/0x2e10 [ 220.159109][T12473] do_syscall_64+0xc9/0x1a0 [ 220.159130][T12473] ? clear_bhb_loop+0x25/0x80 [ 220.159202][T12473] ? clear_bhb_loop+0x25/0x80 [ 220.159220][T12473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.159238][T12473] RIP: 0033:0x7f254a6ce169 [ 220.159251][T12473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.159267][T12473] RSP: 002b:00007f2548d37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 220.159284][T12473] RAX: ffffffffffffffda RBX: 00007f254a8f5fa0 RCX: 00007f254a6ce169 [ 220.159347][T12473] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000202 [ 220.159357][T12473] RBP: 00007f2548d37090 R08: 0000000000000000 R09: 0000000000000000 [ 220.159368][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.159378][T12473] R13: 0000000000000001 R14: 00007f254a8f5fa0 R15: 00007ffcb3219b78 [ 220.159394][T12473] [ 220.160829][T12449] team0: Port device team_slave_0 added [ 220.360667][ T6818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.374651][T12449] team0: Port device team_slave_1 added [ 220.392702][T12475] netlink: 'syz.1.3341': attribute type 39 has an invalid length. [ 220.392823][T12449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.407771][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.433799][T12449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.446507][T12449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.453468][T12449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.480169][T12449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.517579][T12449] hsr_slave_0: entered promiscuous mode [ 220.523782][T12449] hsr_slave_1: entered promiscuous mode [ 220.529784][T12449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.537544][T12449] Cannot create hsr debugfs directory [ 220.545631][T12479] pimreg: entered allmulticast mode [ 220.554189][T12479] pimreg: left allmulticast mode [ 220.666584][ T6818]  (unregistering): Released all slaves [ 220.741910][ T6818] batadv_slave_1: left promiscuous mode [ 220.749898][ T6818] batadv0: left promiscuous mode [ 220.757707][ T6818] team0: left promiscuous mode [ 220.764311][ T6818] hsr_slave_0: left promiscuous mode [ 220.770067][ T6818] hsr_slave_1: left promiscuous mode [ 220.780069][ T6818] veth1_macvtap: left promiscuous mode [ 220.787355][T12487] Cannot find add_set index 0 as target [ 220.787382][ T6818] veth0_macvtap: left promiscuous mode [ 220.787438][ T6818] veth1_vlan: left promiscuous mode [ 220.787494][T12487] ================================================================== [ 220.787478][ T6818] veth0_vlan: left promiscuous mode [ 220.787533][T12487] BUG: KCSAN: data-race in data_push_tail / string [ 220.787581][T12487] [ 220.787591][T12487] write to 0xffffffff88e3f7b8 of 1 bytes by task 6818 on cpu 1: [ 220.787612][T12487] string+0x17d/0x210 [ 220.787649][T12487] vsnprintf+0x539/0x8a0 [ 220.787686][T12487] vscnprintf+0x42/0x90 [ 220.787723][T12487] printk_sprint+0x30/0x2d0 [ 220.787762][T12487] vprintk_store+0x583/0x860 [ 220.787799][T12487] vprintk_emit+0x1a0/0x6c0 [ 220.787834][T12487] vprintk_default+0x26/0x30 [ 220.787850][T12487] vprintk+0x1d/0x30 [ 220.787870][T12487] _printk+0x7f/0xb0 [ 220.787889][T12487] __netdev_printk+0x2d1/0x3e0 [ 220.787911][T12487] netdev_info+0x9e/0xd0 [ 220.787941][T12487] __dev_set_promiscuity+0x164/0x340 [ 220.787972][T12487] __dev_set_rx_mode+0x128/0x180 [ 220.788002][T12487] dev_uc_del+0x82/0xa0 [ 220.788019][T12487] macvlan_stop+0x1af/0x260 [ 220.788043][T12487] __dev_close_many+0x1ea/0x440 [ 220.788071][T12487] dev_close_many+0x105/0x250 [ 220.788097][T12487] unregister_netdevice_many_notify+0x454/0x16a0 [ 220.788122][T12487] default_device_exit_batch+0x500/0x560 [ 220.788152][T12487] cleanup_net+0x4f0/0x8a0 [ 220.788188][T12487] process_scheduled_works+0x4de/0xa20 [ 220.788215][T12487] worker_thread+0x52c/0x710 [ 220.788240][T12487] kthread+0x4b7/0x540 [ 220.788256][T12487] ret_from_fork+0x4b/0x60 [ 220.788272][T12487] ret_from_fork_asm+0x1a/0x30 [ 220.788293][T12487] [ 220.788300][T12487] read to 0xffffffff88e3f7b8 of 8 bytes by task 12487 on cpu 0: [ 220.788315][T12487] data_push_tail+0x107/0x440 [ 220.788343][T12487] data_alloc+0xbd/0x2c0 [ 220.788367][T12487] prb_reserve+0x86a/0xb80 [ 220.788400][T12487] vprintk_store+0x552/0x860 [ 220.788434][T12487] vprintk_emit+0x1a0/0x6c0 [ 220.788474][T12487] vprintk_default+0x26/0x30 [ 220.788495][T12487] vprintk+0x1d/0x30 [ 220.788517][T12487] _printk+0x7f/0xb0 [ 220.788545][T12487] set_target_v1_checkentry+0x2b8/0x2e0 [ 220.788577][T12487] xt_check_target+0x27e/0x4b0 [ 220.788706][T12487] translate_table+0xd2e/0x10b0 [ 220.788837][T12487] do_ip6t_set_ctl+0x663/0x840 [ 220.788863][T12487] nf_setsockopt+0x195/0x1b0 [ 220.788883][T12487] ipv6_setsockopt+0x10f/0x130 [ 220.788905][T12487] tcp_setsockopt+0x93/0xb0 [ 220.788936][T12487] sock_common_setsockopt+0x64/0x80 [ 220.788970][T12487] __sys_setsockopt+0x187/0x200 [ 220.788991][T12487] __x64_sys_setsockopt+0x66/0x80 [ 220.789012][T12487] x64_sys_call+0x2a09/0x2e10 [ 220.789033][T12487] do_syscall_64+0xc9/0x1a0 [ 220.789057][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.789077][T12487] [ 220.789082][T12487] value changed: 0x00000000fffff069 -> 0x616d5f3068746576 [ 220.789094][T12487] [ 220.789100][T12487] Reported by Kernel Concurrency Sanitizer on: [ 220.789114][T12487] CPU: 0 UID: 0 PID: 12487 Comm: syz.1.3345 Tainted: G W 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(voluntary) [ 220.789144][T12487] Tainted: [W]=WARN [ 220.789152][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.789165][T12487] ================================================================== [ 221.490859][T12449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.499445][T12449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.507928][T12449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.517966][T12449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.555167][T12449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.567695][T12449] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.577237][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.584341][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.595639][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.602777][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.660179][T12449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.750736][T12449] veth0_vlan: entered promiscuous mode [ 221.758896][T12449] veth1_vlan: entered promiscuous mode [ 221.773607][T12449] veth0_macvtap: entered promiscuous mode [ 221.781032][T12449] veth1_macvtap: entered promiscuous mode [ 221.791117][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.802194][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.812203][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.823217][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.833764][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.844290][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.854227][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.865401][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.875798][T12449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.886430][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.897537][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.907423][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.918432][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.929027][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.939673][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.949629][T12449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.960789][T12449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.971464][T12449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.983320][T12449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.992819][T12449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.001728][T12449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.010623][T12449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0