last executing test programs: 11m33.352372811s ago: executing program 3 (id=3173): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 11m33.266114735s ago: executing program 3 (id=3174): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x0, 0x0) 11m33.186157268s ago: executing program 3 (id=3176): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0x604aa59d) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x840, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0xfffc, 0xae2}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={r2, 0x38, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}]}, &(0x7f0000000740)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x8, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x8818) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x10000001}, 0x18) splice(r6, 0x0, r7, 0x0, 0x4ffe6, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020041a1fefbc064493bcc2f0014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000850000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r5, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r10, 0xc0c0583b, &(0x7f0000001740)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x9, 0x700, 0x7}, {0xffffffff, 0x1, 0x1, 0xfefffffffffffffc, 0x0, 0x40000000000000}], ['\x00']}) 11m32.321157655s ago: executing program 3 (id=3184): io_setup(0x9, &(0x7f0000000b80)=0x0) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x5, 0x0, 0x7}]) 11m32.228262078s ago: executing program 3 (id=3187): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 11m32.207826279s ago: executing program 3 (id=3189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='timer_start\x00', r0, 0x0, 0x6}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 11m17.138204724s ago: executing program 32 (id=3189): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='timer_start\x00', r0, 0x0, 0x6}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 8m0.410962215s ago: executing program 4 (id=6960): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000005c0), 0x0}, 0x20) 8m0.408857485s ago: executing program 4 (id=6962): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x8, 0x3, 0x4, 0x0, 0x0, 0xc000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x20080}, 0x0, 0x3, 0xffffffffffffffff, 0xa) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='contention_end\x00', r1, 0x0, 0x3}, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000003c0)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 8m0.04229111s ago: executing program 4 (id=6970): r0 = syz_open_dev$loop(0x0, 0x9, 0x4000) dup2(r0, 0xffffffffffffffff) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)=ANY=[@ANYRES32=r1, @ANYBLOB="feffffff000000000000", @ANYBLOB], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x18, 0x229, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800001400000000000000000000000018010000f0d9de49f5a7f1ec39fd05527b0ee61f8c59f320b8baeef74e0dbc80da50ad4e0738e9f73c3b6894b54eabc1a6a4b39a613622055f07606567a836d573bd6e731670403383b07ff440f49a17b03c7a06a1a1ecdfb3eade51238346a3d5138539577a6843713956badc1f7f715d46110bc20fceb3dd1cc9e55d000000800000000052f2653b2898a4afe90cd713138d1c7db8d418864a430fcb9471771496bf8d6736b3a48f584e2cd4b5", @ANYRESOCT, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xf) unshare(0x20000400) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 8m0.035791601s ago: executing program 4 (id=6971): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) (async) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x100000001f, 0x0, 0xfffffffffffffffe, 0x3, 0x10}, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180)={[{@quota}, {@bsdgroups}, {@nouid32}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) waitid(0x3, r2, &(0x7f0000000240), 0x8, &(0x7f00000002c0)) (async) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 7m59.866162078s ago: executing program 4 (id=6975): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000f2e6c3"], 0x14}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x90}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r3, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f000000ab40), 0x22c, 0x2201, 0x0) futex(&(0x7f0000000340)=0xfff, 0x9, 0x2, 0x0, &(0x7f00000000c0)=0x55, 0x80000002) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x81, 0x4) r8 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x2, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x101}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) 7m59.35825202s ago: executing program 4 (id=6980): getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) setns(0xffffffffffffffff, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000a00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}}) 7m59.35797346s ago: executing program 33 (id=6980): getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) setns(0xffffffffffffffff, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000a00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@seclabel}]}}) 4m43.3341086s ago: executing program 5 (id=9839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_pidfd_open(0x0, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x22, 0x37, 0x2, {0x1, 0x2, 0xffffffffffff9dc0, 0x0, 0x4, '(\'@/'}}, 0x22) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 4m43.249575054s ago: executing program 5 (id=9841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 4m43.230732784s ago: executing program 5 (id=9844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x1, 0x0}, 0x8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x80) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e1e, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r5}, 0x20) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000", @ANYRESOCT=0x0, @ANYRES64=r0, @ANYBLOB="0b5f01b036de5719ac1696b90f10ab"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kvm_ioapic_set_irq\x00', r8, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f00000004c0), &(0x7f0000000300)=r8}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpgrp(0xffffffffffffffff) 4m43.204040826s ago: executing program 5 (id=9845): r0 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709004003000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x80000000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8342, 0x148) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84a00803}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}}, 0x20000880) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x2, 0x1, 0x4, 0xe0c, r3}) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0xc01, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200), 0x1, 0x257, &(0x7f0000000ac0)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709004003000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) wait4(r3, 0x0, 0x80000000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x8342, 0x148) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r6) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r6) (async) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84a00803}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}}, 0x20000880) (async) fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x2, 0x1, 0x4, 0xe0c, r3}) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r6) (async) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0xc01, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) 4m43.070939181s ago: executing program 5 (id=9848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x7e, "70ce97cc7e00871060a124bba5eaaa27fc84ac3b756efbc10a1a855def5cf3d42634b492dd90d54dc786c7e59ca0d6a88deb9196a4defe9ffe189ca2212d98d392acf01f7fd5516c6334cccd83fe0e70307f55fe95472c42f6e746012b61b3d5e8df2266ec1429bb6e96df659d62853ae5eaf568985efdc943a3cfa44158"}, &(0x7f00000000c0)=0xa2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000100)="3a38c9c1770e78b8a3c7fff95a8f34edbbd4f1b1077a881a3639d2722fd0293a264a5b5d786b62690fe772291c2119f7290f6390151e0c111a9f248b0dc48705d59ccee89d50b8e6a87fc24579a39cfb418236eab1a6f6a4f594373564f9b2f13922a7cf9c6d344bceb7ef15bb1839b6752f25b07def3cb76d151eed7a86b0cfa78e19328b10a6680d79447b1c1935fc393e2b19df3bc954fec0514b29e08b078ea1190b89", &(0x7f00000001c0)=""/194, &(0x7f00000002c0)="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", &(0x7f00000003c0)="7d7a76b16a12c1e90e25351e2ba106b776daa19c0666a2136fea0fa3c5c5aa0bce9cc4458795f444e9c4c7b62c351bc27d", 0x6, r1}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x24, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x40, 0x5, 0x6}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x8, 0x4, 0x4, 0xffffffffffffffe0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5d0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000780)='GPL\x00', 0x80000000, 0x0, &(0x7f00000007c0), 0x41000, 0x74, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x1000, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f99}, 0x94) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000b00)={0x60, 0x1, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9, &(0x7f0000000a40)=[{0x1, 0x4, 0xee38}, {0x0, 0xc}, {0xd, 0xf5d, 0xffffffffffffff7c}, {0x9, 0x6, 0x5}, {0x0, 0x5, 0x2}, {0x5, 0x7, 0xfffffffffffffff9}, {0x10000, 0xe8, 0xe8}], 0x7, 0xffff, 0x12, 0xc, 0x21, 0x2a}) r7 = accept4(r6, 0x0, &(0x7f0000000b80), 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000c80)={'sit0\x00', &(0x7f0000000bc0)={@broadcast, 0x1}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000cc0)={0x7f, {0x20, 0xffffffffffffffff, 0x6, 0xf3d, 0x80}}) syz_emit_ethernet(0x2182, &(0x7f0000000d00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @random="6b6d25b96370", @void, {@mpls_uc={0x8847, {[{0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv6=@gre_packet={0x3, 0x6, "031aac", 0x2144, 0x2f, 0x0, @mcast2, @loopback, {[@hopopts={0x2e, 0x1fd, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0xd}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x400}, @generic={0xf, 0x33, "9ee3daf6ab72b6637509d410f6554c9ec8e09d78be1056c692a89f0b471144b47890e7f80b11ecf06c5309f8c3b9da6705689c"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xe7, 0xfa0, "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"}]}, @srh={0x3a, 0x0, 0x4, 0x0, 0x5, 0x0, 0xff}, @fragment={0x2, 0x0, 0x0, 0x0, 0x0, 0x18, 0x66}, @hopopts={0x0, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x0], "839ffbddf700c4be8c767ba1e74e1b1995763a67b2203364f9861e7a11d9abd265f46a2210"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0x4], "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"}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x9, 0x1, 0x1, 0x0, 0x4, 0xcf}, 0x1, {0x4e}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0xac, 0x1, 0x0, 0x0, 0x0, 0xc}, 0x2, {0x3, 0x3, 0x2, 0x0, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x0, "3ede0d0299d5ebb7a2cb7eea62f8e5e2227402de2492640c61496f3818ca5d53523ec91f33c364e4e0357fdb21a18afe2bd5f109ed2fe4e4ec389ab45f57b1bf5a89fbfaf9b6d3243e0629692186405f21bf5f34d775730a3a4bc5079a1332efe54f7101328b9682e2ddb184bf142a758bbe5ecc4671064041ffe64f5bc761b97807acff3083226e26ce467d62d175476372c57943b2262bc09e930c663ab24a364d7ceaf72aaf98a340c5159c4b9b4c5bbb2a6694b1066dc926a91548"}}}}}}}}, &(0x7f0000005040)={0x0, 0x4, [0xd8e, 0x85f, 0x119, 0x5e5]}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000005200)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000051c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4004) sendmsg$802154_dgram(r7, &(0x7f0000005340)={&(0x7f0000005240)={0x24, @long={0x3, 0x1, {0x200}}}, 0x14, &(0x7f0000005300)={&(0x7f0000005280)="e82d7584e7e944e1d74bc6fe549fb3c304c6fe0e2e73eb5efa28433211c60596a548b66691c3ee3bfe4548dc83d8948c5a46b32284585c577ce505def78fb0009e8612bc5425508d35b955852358f78769efa5f024e39cd5db8be1f9c154f3b2e9793e55a327", 0x66}}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000005380), &(0x7f00000053c0)=0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000005400)={'syz_tun\x00', 0x500}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000005640)={r2, &(0x7f0000005440)="e6fe50027af14d613f23fe058413b7493b3fb0ead25b10c2a293a6a4f21c4c1d1b4e660d9e7f9132a75ef05ff051d05f321da3e16491d9439dbab882fb54f7bdf66212e41cb662c152bc4b77b3ae24655cd9fa4bf29ab35b113ac1a22b042f06b40e72fa4de9c482aa4b19e7aa0f96012ef02bb0367cc74a7bf504d45c1271db6a4ae5051ed4068ef526e766bf24df1368dd4793ef8bbbcdab94d66c383fade8fce0a47b954e24d4bd23de927f8f61c87c0199507544a037b75934b6123a5b4e2ad2c4e47e99f31412b69213a5ab4eb14955bf8ddb07a5ea25210e5f4a8b910f61ea3b", &(0x7f0000005540)=""/222}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000056c0)=@o_path={&(0x7f0000005680)='./file0\x00', 0x0, 0x4010, r5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000005880)={'wg1\x00', 0x0}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005c00)={0x11, 0xc, &(0x7f0000005980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x678}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x1, 0x8, 0x3, 0x4, 0x4}, @ldst={0x0, 0x0, 0x0, 0x0, 0x6, 0xc, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000005a00)='syzkaller\x00', 0x8, 0xd5, &(0x7f0000005a40)=""/213, 0x40f00, 0x4, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000005b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000005b80)={0x0, 0x1, 0x2d0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000005bc0)=[r1, r1, r8, r8, r3, r8, r3, r8], 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005d40)={0x8, 0x4, &(0x7f0000005700)=@raw=[@alu={0x7, 0x1, 0x7, 0x8, 0xdd2cb5d49e1fb0a5, 0xc, 0x1}, @generic={0xfa, 0x1, 0x8, 0x7fff, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}], &(0x7f0000005740)='syzkaller\x00', 0x6, 0xf0, &(0x7f0000005780)=""/240, 0x41000, 0x14, '\x00', r9, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000005900)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000005940)={0x3, 0xf, 0x8, 0x1}, 0x10, 0xffffffffffffffff, r10, 0x3, &(0x7f0000005cc0)=[r1, r2, r3, r8], &(0x7f0000005d00)=[{0x0, 0x4, 0xc, 0x331127a19ed69c7d}, {0x5, 0x5, 0x5, 0xf}, {0x2, 0x1, 0x7, 0xa}], 0x10, 0xb}, 0x94) readahead(r7, 0xff, 0x56) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000005e40), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000005f00)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x34, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="19a5a170a55d"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x7fffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 4m42.754358855s ago: executing program 5 (id=9860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m42.714427577s ago: executing program 34 (id=9860): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.866227967s ago: executing program 6 (id=14889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.978349585s ago: executing program 2 (id=14905): r0 = socket(0x3, 0xa, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0xfffffffc}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x7, 0x7, 0x64, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8, 0x711e, 0xff}}) lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r6, 0x15b4}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) write$selinux_validatetrans(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x190, 0x24, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xe, 0xfff4}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1b}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1e}]}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xa, 0x1, 0x6, 0x2, 0x5, 0x7, 0x8}}, {0x14, 0x2, [0x3ff, 0x3, 0x0, 0x5, 0x5, 0x1ae9, 0x920d, 0xa]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1bb, 0x400, 0x1, 0xffffffff, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x4, 0x9, 0xffffffff, 0x0, 0x1031, 0x10, 0x6}}, {0x10, 0x2, [0xe47, 0x7fff, 0x9, 0x80, 0x3, 0x5]}}, {{0x1c, 0x1, {0x4, 0xd4, 0x8, 0x6, 0x1, 0x0, 0xa90, 0x5}}, {0xe, 0x2, [0x9, 0x7, 0xa, 0x3, 0x3]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x80, 0x6, 0x0, 0xa00, 0x6, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0xfc92, 0x2, 0x1, 0xffff, 0xaf64]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x6, 0x1, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0xb]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x4, 0xfffc, 0x1, 0x1, 0x3, 0x10000, 0xa}}, {0x18, 0x2, [0x3, 0x1, 0x5, 0x0, 0xbed2, 0x200, 0x1, 0x8, 0xff97, 0x2]}}]}]}, 0x190}}, 0x0) 1.87020473s ago: executing program 2 (id=14910): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00006003ffffffffffffbbbbbbbbbbbb88a8010081004c0008004500001c0067000003"], 0x36) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) io_uring_setup(0x2e41, &(0x7f00000004c0)={0x0, 0x9332, 0x8000, 0x0, 0x7c}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000eeff00e40941c5e25fb418fe96f45d0010cdb6f4e2"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x240, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) sendmsg$rds(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x20044091) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r5, @ANYRES32=r7, @ANYBLOB="7939a5007cd1b74368b95a42568d010115bb35230a520a0f96f45c3c014403e0907ea9c6b5ced8e061db5db99449886e0c9546a68dd75d381824d4657a45e258a37241d6905b5e7de3ec60f2d1b48f10034fb62194badd7068a4302a14b767172262ad684c16bcf408e376cf6b7ae11922f72e08"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 1.687043398s ago: executing program 2 (id=14916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) 1.597537051s ago: executing program 2 (id=14918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f121173fb9462d3589e6ffe950cfed21fcad7ff0fbcb566a0982f893020052dd8d39af14c31e7c40d59342308cf000", 0x27}, 0xffffffffffffff05, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1500000000000000000001000000100002800c00018008000100030000000c00018008000100", @ANYRES32=r4], 0x30}}, 0x0) 1.597001591s ago: executing program 2 (id=14919): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.460891468s ago: executing program 2 (id=14922): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xa) 972.234038ms ago: executing program 1 (id=14933): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=r9, @ANYRES32=r3], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r5, @ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=r6, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x2, 0x1, 0x7fffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r14, @ANYRESHEX=r15, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRESDEC, @ANYRES8=r11, @ANYRES32, @ANYBLOB, @ANYRES64=r15], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r12, @ANYRES32=r10, @ANYRES64=r14, @ANYRES32, @ANYRESDEC=r13, @ANYRES32=r8, @ANYRESOCT=r15, @ANYRES64=r15], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d2df0266b9c65d8b82fd14baac41136d53c2c36f09ea82666ed1f5e54e62a9f4ae9a5510055a815832ae381055fd", @ANYRES64=0x0], 0x20) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$GIO_UNIMAP(r16, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r17}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) 941.3036ms ago: executing program 1 (id=14934): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 829.621794ms ago: executing program 1 (id=14936): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=""/114, 0x31, 0x72, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0x2f, &(0x7f00000004c0)="fba1248448607a66ae08e10d451107b96e8b8eff0d4b15cc06cb66ba919feee9a2b223a021acea5d5311539ef3bb93", 0xf2, 0x0, &(0x7f00000007c0)="8cc4221311f0b27e7a53bb0b6ddc58c0157af07bceeb770bf02b41dec45478f0d1e8bed6ac90dfc7599e49f2b03983a3a007e38c75cbc2be27eb639caa271996bb2b03e8462e57f9d91591eb1aba96218a6ef9de0f2757f6ea407f06ca0ae896a5eddc6bd2ba8a073cda03a20af084ffb5ba903f51c192d27ab5db28f73863270efd2d0e8afe793fd97a369694ea51df1dd2031395cf9ddbe95c72131f98126c7d81d149717bbcd9767d92f9396146293ca508c045ffa5f5fedf972c8f60e38e3584a876cecb7a0a16f86809b256a735cb330da033747d66f38692d805619bd548ee5ae5bea19ee3721e8f4d069e7132cdc7"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, 0x0}, 0x2}, {{&(0x7f0000000700)=@xdp, 0x80, 0x0}, 0x8}], 0x2, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 822.162155ms ago: executing program 0 (id=14937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) 801.351006ms ago: executing program 6 (id=14938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 788.329067ms ago: executing program 1 (id=14939): r0 = socket(0x3, 0xa, 0x18) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0xfffffffc}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x7, 0x7, 0x64, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x8, 0x711e, 0xff}}) lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r6, 0x15b4}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) write$selinux_validatetrans(r4, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x190, 0x24, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0xe, 0xfff4}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1b}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1e}]}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xa, 0x1, 0x6, 0x2, 0x5, 0x7, 0x8}}, {0x14, 0x2, [0x3ff, 0x3, 0x0, 0x5, 0x5, 0x1ae9, 0x920d, 0xa]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1bb, 0x400, 0x1, 0xffffffff, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x4, 0x9, 0xffffffff, 0x0, 0x1031, 0x10, 0x6}}, {0x10, 0x2, [0xe47, 0x7fff, 0x9, 0x80, 0x3, 0x5]}}, {{0x1c, 0x1, {0x4, 0xd4, 0x8, 0x6, 0x1, 0x0, 0xa90, 0x5}}, {0xe, 0x2, [0x9, 0x7, 0xa, 0x3, 0x3]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x80, 0x6, 0x0, 0xa00, 0x6, 0x7}}, {0x12, 0x2, [0x8, 0x9, 0xfc92, 0x2, 0x1, 0xffff, 0xaf64]}}, {{0x1c, 0x1, {0x2, 0x0, 0x9, 0x6, 0x1, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0xb]}}]}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x4, 0xfffc, 0x1, 0x1, 0x3, 0x10000, 0xa}}, {0x18, 0x2, [0x3, 0x1, 0x5, 0x0, 0xbed2, 0x200, 0x1, 0x8, 0xff97, 0x2]}}]}]}, 0x190}}, 0x0) 776.425977ms ago: executing program 6 (id=14940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 753.068378ms ago: executing program 6 (id=14941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) 736.072059ms ago: executing program 6 (id=14942): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004ffffffff000000000200000000000000000000000000000604"], 0x0, 0x3e}, 0x28) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000006d00000426bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000005000080000008000f000700000008001b00000000000a000200aaaaaaaaaa2400000800200002000000600016805c0001800c000900ff0f0000010400000c000900ea030000100000000c000900e0000000060000002800010007000000aaaaaaaaaa0c00000000000000000000000000000000000000000000000000000c000300fcffffff050000000a000200694dbe2a8c10000008001c00", @ANYRES32, @ANYBLOB="2b28a631d3f599043d7a216981ff29e4317c7351f05facd830ee5315cc69b487137e469859006ce3ec97a7d3653974547037673b1bf5ef41068b478ffb4018be4e08411657b4dbc93bdcd8d6974ce9c813320000000000000000000000000000675cb9f18410f5d97d85a4f54fe4d9ba5f123c99ad18227db669e29bbc50a372e315f774d2b481a67c6ba755acc6a61703580a5cb43a8264c18bf65b9dca2420240d1763a9a9edf38fc59f47acf46783bb333b624e2ffdf6898dc3d369ca"], 0xb8}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e26, 0xb1, @mcast2, 0x6}]}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800b040f01ed876efa538ab31ebe82f00001039042abd050000000000000003e4007b01940b0c915beb6584db", @ANYRES32=0x0, @ANYBLOB="03000000c31006003800128008000100736974002c00028006000e000010000008000300ac1414bb08000200ac14142d08000c00ee0000000800140001000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000fcdbdf2502000000080001", @ANYRES32=r4, @ANYBLOB="71d212ae"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0xfff8, 0x4, 0x0, 0x6}, {0x3, 0x4, 0x7f, 0x16640}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0x9}, 0x18) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x9, 0x0, 0xa0, 0x0, 0x2, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xffffffffffffffde}, 0x2000, 0x37, 0x7, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x40000c0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="61030204010103133308e71a8bc224292f88bc3afc7c0b9a52b9c152"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r11, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3a, 0x3) 705.31835ms ago: executing program 6 (id=14943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007b, 0x0) pread64(r5, 0x0, 0x0, 0x12) 669.885111ms ago: executing program 0 (id=14944): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=r9, @ANYRES32=r3], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r5, @ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=r6, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x2, 0x1, 0x7fffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r14, @ANYRESHEX=r15, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRESDEC, @ANYRES8=r11, @ANYRES32, @ANYBLOB, @ANYRES64=r15], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r12, @ANYRES32=r10, @ANYRES64=r14, @ANYRES32, @ANYRESDEC=r13, @ANYRES32=r8, @ANYRESOCT=r15, @ANYRES64=r15], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d2df0266b9c65d8b82fd14baac41136d53c2c36f09ea82666ed1f5e54e62a9f4ae9a5510055a815832ae381055fd", @ANYRES64=0x0], 0x20) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$GIO_UNIMAP(r16, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r17}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) 667.615311ms ago: executing program 1 (id=14945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 649.563202ms ago: executing program 1 (id=14946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r4, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r4, @ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=r5, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x2, 0x1, 0x7fffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r11, @ANYRESHEX=r12, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRESDEC, @ANYRES8=r8, @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r9, @ANYRES32, @ANYRES64=r11, @ANYRES32, @ANYRESDEC=r10, @ANYRES32=r7, @ANYRESOCT=r12, @ANYRES64=r12], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="d2df0266b9c65d8b82fd14baac41136d53c2c36f09ea82666ed1f5e54e62a9f4ae9a5510055a815832ae381055fd", @ANYRES64=0x0], 0x20) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$GIO_UNIMAP(r13, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) 625.094163ms ago: executing program 0 (id=14947): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000200), &(0x7f0000000300)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 361.865115ms ago: executing program 0 (id=14949): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000200)=""/114, 0x31, 0x72, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000500)={0x1, 0x3, 0x1000, 0x2f, &(0x7f00000004c0)="fba1248448607a66ae08e10d451107b96e8b8eff0d4b15cc06cb66ba919feee9a2b223a021acea5d5311539ef3bb93", 0xf2, 0x0, &(0x7f00000007c0)="8cc4221311f0b27e7a53bb0b6ddc58c0157af07bceeb770bf02b41dec45478f0d1e8bed6ac90dfc7599e49f2b03983a3a007e38c75cbc2be27eb639caa271996bb2b03e8462e57f9d91591eb1aba96218a6ef9de0f2757f6ea407f06ca0ae896a5eddc6bd2ba8a073cda03a20af084ffb5ba903f51c192d27ab5db28f73863270efd2d0e8afe793fd97a369694ea51df1dd2031395cf9ddbe95c72131f98126c7d81d149717bbcd9767d92f9396146293ca508c045ffa5f5fedf972c8f60e38e3584a876cecb7a0a16f86809b256a735cb330da033747d66f38692d805619bd548ee5ae5bea19ee3721e8f4d069e7132cdc7"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000340)=@x25={0x9, @remote}, 0x80, 0x0}, 0x2}, {{&(0x7f0000000700)=@xdp, 0x80, 0x0}, 0x8}], 0x2, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4000010) 313.706177ms ago: executing program 7 (id=14950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 157.142164ms ago: executing program 7 (id=14951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 144.783224ms ago: executing program 0 (id=14952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) chown(&(0x7f0000000280)='./file0\x00', 0xee01, 0xffffffffffffffff) 127.240205ms ago: executing program 7 (id=14953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004ffffffff000000000200000000000000000000000000000604"], 0x0, 0x3e}, 0x28) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000006d00000426bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000005000080000008000f000700000008001b00000000000a000200aaaaaaaaaa2400000800200002000000600016805c0001800c000900ff0f0000010400000c000900ea030000100000000c000900e0000000060000002800010007000000aaaaaaaaaa0c00000000000000000000000000000000000000000000000000000c000300fcffffff050000000a000200694dbe2a8c10000008001c00", @ANYRES32, @ANYBLOB="2b28a631d3f599043d7a216981ff29e4317c7351f05facd830ee5315cc69b487137e469859006ce3ec97a7d3653974547037673b1bf5ef41068b478ffb4018be4e08411657b4dbc93bdcd8d6974ce9c813320000000000000000000000000000675cb9f18410f5d97d85a4f54fe4d9ba5f123c99ad18227db669e29bbc50a372e315f774d2b481a67c6ba755acc6a61703580a5cb43a8264c18bf65b9dca2420240d1763a9a9edf38fc59f47acf46783bb333b624e2ffdf6898dc3d369ca"], 0xb8}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e26, 0xb1, @mcast2, 0x6}]}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800b040f01ed876efa538ab31ebe82f00001039042abd050000000000000003e4007b01940b0c915beb6584db", @ANYRES32=0x0, @ANYBLOB="03000000c31006003800128008000100736974002c00028006000e000010000008000300ac1414bb08000200ac14142d08000c00ee0000000800140001000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="71d212ae"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0xfff8, 0x4, 0x0, 0x6}, {0x3, 0x4, 0x7f, 0x16640}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r7, 0x0, 0x9}, 0x18) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x9, 0x0, 0xa0, 0x0, 0x2, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xffffffffffffffde}, 0x2000, 0x37, 0x7, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x7}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x40000c0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="61030204010103133308e71a8bc224292f88bc3afc7c0b9a52b9c152"], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r10, &(0x7f0000000040)=[{&(0x7f0000002240)=""/13, 0xd}], 0x1, 0x3a, 0x3) 117.182725ms ago: executing program 0 (id=14954): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x4]}, &(0x7f00000001c0), &(0x7f0000000400)={r3, r4+60000000}, 0x8) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1f}}}, @IFLA_LINK={0x8}, @IFLA_IFALIASn={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='pimreg1\x00') r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x10) fsetxattr$security_selinux(r8, &(0x7f0000000080), &(0x7f0000000000)='system_u:object_r:ld_so_cache_t:s0\x00', 0x23, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 90.651916ms ago: executing program 7 (id=14955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {}, {0xc, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0xffffffff, 0xf761, 0x10000, {0xff, 0x2, 0x6f83, 0x57e, 0x5}, {0x1, 0x1, 0x1000, 0x280, 0x8, 0x2}, 0x2, 0xfffffdde, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x200008e2) 16.838659ms ago: executing program 7 (id=14956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 7 (id=14957): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000a40)='kfree\x00', r5, 0x0, 0x2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000085000000070000001801000020756c2500000000002020207b1af8fefffffff5bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRESDEC=r9, @ANYRES32=r3], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES8=r5, @ANYBLOB, @ANYRESDEC=r1, @ANYRESDEC=r6, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r1, 0x2, 0x1, 0x7fffffff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r14, @ANYRESHEX=r15, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRESDEC, @ANYRES8=r11, @ANYRES32, @ANYBLOB, @ANYRES64=r15], 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r12, @ANYRES32=r10, @ANYRES64=r14, @ANYRES32, @ANYRESDEC=r13, @ANYRES32=r8, @ANYRESOCT=r15, @ANYRES64=r15], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d2df0266b9c65d8b82fd14baac41136d53c2c36f09ea82666ed1f5e54e62a9f4ae9a5510055a815832ae381055fd", @ANYRES64=0x0], 0x20) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$GIO_UNIMAP(r16, 0x4b66, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{}, {}]}) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r17}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) kernel console output (not intermixed with test programs): 412816][ T29] audit: type=1326 audit(915.273:94575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f082e6b6357 code=0x7ffc0000 [ 915.435959][ T29] audit: type=1326 audit(915.273:94574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f082e6b6c47 code=0x7ffc0000 [ 915.458848][ T29] audit: type=1326 audit(915.273:94576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f082e6b63b6 code=0x7ffc0000 [ 915.481816][ T29] audit: type=1326 audit(915.273:94578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4299 comm="syz.0.13829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f082e6ff34b code=0x7ffc0000 [ 915.518637][ T7871] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 915.527952][ T7871] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 915.545636][ T4347] __nla_validate_parse: 13 callbacks suppressed [ 915.545652][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13830'. [ 915.561275][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13830'. [ 915.714121][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13834'. [ 915.729497][ T4349] dummy0: entered promiscuous mode [ 915.735774][ T4349] bond_slave_0: entered promiscuous mode [ 915.741706][ T4349] bond_slave_0: left promiscuous mode [ 915.747465][ T4349] dummy0: left promiscuous mode [ 915.829123][ T4381] netlink: '+}[@': attribute type 1 has an invalid length. [ 915.836407][ T4381] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 915.866401][ T4384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13842'. [ 916.026781][ T4385] lo speed is unknown, defaulting to 1000 [ 916.073961][ T4385] lo speed is unknown, defaulting to 1000 [ 916.158762][T30545] Bluetooth: hci0: command 0x1003 tx timeout [ 916.164901][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 916.348900][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13847'. [ 916.414060][ T4446] netlink: 'syz.0.13849': attribute type 1 has an invalid length. [ 916.421960][ T4446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13849'. [ 916.447445][T27542] hid_parser_main: 5 callbacks suppressed [ 916.447462][T27542] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x4 [ 916.460958][T27542] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x2 [ 916.469514][T27542] hid-generic 0000:3000000:0000.005F: unknown main item tag 0x3 [ 916.478449][T27542] hid-generic 0000:3000000:0000.005F: hidraw0: HID v0.00 Device [sy] on syz0 [ 916.511338][ T4459] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 916.522316][ T4459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.557728][ T4469] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 916.568427][ T4471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13854'. [ 916.595437][ T7848] Bluetooth: hci0: Frame reassembly failed (-84) [ 916.602274][ T4475] Bluetooth: hci0: Frame reassembly failed (-90) [ 916.631978][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13858'. [ 916.642233][ T4481] batadv0 (unregistering): left allmulticast mode [ 916.648736][ T4481] batadv0 (unregistering): left promiscuous mode [ 916.655195][ T4481] bridge0: port 3(batadv0) entered disabled state [ 916.854343][T27542] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x4 [ 916.862148][T27542] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x2 [ 916.883168][T27542] hid-generic 0000:3000000:0000.0060: unknown main item tag 0x3 [ 916.883741][ T4490] dummy0: entered promiscuous mode [ 916.892439][T27542] hid-generic 0000:3000000:0000.0060: hidraw0: HID v0.00 Device [sy] on syz0 [ 916.897400][ T4490] bond_slave_0: entered promiscuous mode [ 916.909818][ T4496] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 916.911826][ T4490] bond_slave_0: left promiscuous mode [ 916.926589][ T4496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.934724][ T4490] dummy0: left promiscuous mode [ 916.963638][ T4512] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13866'. [ 916.991254][ T1036] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x4 [ 916.999234][ T1036] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x2 [ 917.007040][ T1036] hid-generic 0000:3000000:0000.0061: unknown main item tag 0x3 [ 917.015729][ T1036] hid-generic 0000:3000000:0000.0061: hidraw0: HID v0.00 Device [sy] on syz0 [ 917.092993][ T7864] Bluetooth: hci1: Frame reassembly failed (-84) [ 917.127601][ T4540] netdevsim netdevsim6: Direct firmware load for þ failed with error -2 [ 917.147309][ T4528] lo speed is unknown, defaulting to 1000 [ 917.156825][ T4528] lo speed is unknown, defaulting to 1000 [ 917.270868][T27542] hid-generic 0000:3000000:0000.0062: unknown main item tag 0x4 [ 917.279514][T27542] hid-generic 0000:3000000:0000.0062: hidraw0: HID v0.00 Device [sy] on syz0 [ 917.294006][ T4570] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 917.304847][ T4570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.649003][ T1036] hid-generic 0000:3000000:0000.0063: hidraw0: HID v0.00 Device [sy] on syz0 [ 917.661827][ T4608] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 917.672965][ T4608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.734696][ T4624] siw: device registration error -23 [ 917.767317][ T4627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 918.025727][ T4637] netdevsim netdevsim6: Direct firmware load for ÿÿÿÿ failed with error -2 [ 918.150450][ T4639] dummy0: entered promiscuous mode [ 918.157081][ T4639] bond_slave_0: entered promiscuous mode [ 918.163495][ T4639] bond_slave_0: left promiscuous mode [ 918.169411][ T4639] dummy0: left promiscuous mode [ 918.293208][ T4632] syz.2.13896 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 918.307393][ T4632] CPU: 0 UID: 0 PID: 4632 Comm: syz.2.13896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 918.307427][ T4632] Tainted: [W]=WARN [ 918.307434][ T4632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 918.307445][ T4632] Call Trace: [ 918.307486][ T4632] [ 918.307495][ T4632] __dump_stack+0x1d/0x30 [ 918.307523][ T4632] dump_stack_lvl+0xe8/0x140 [ 918.307545][ T4632] dump_stack+0x15/0x1b [ 918.307562][ T4632] dump_header+0x81/0x220 [ 918.307580][ T4632] oom_kill_process+0x342/0x400 [ 918.307616][ T4632] out_of_memory+0x979/0xb80 [ 918.307651][ T4632] try_charge_memcg+0x610/0xa10 [ 918.307689][ T4632] obj_cgroup_charge_pages+0xa6/0x150 [ 918.307722][ T4632] __memcg_kmem_charge_page+0x9f/0x170 [ 918.307780][ T4632] __alloc_frozen_pages_noprof+0x188/0x360 [ 918.307823][ T4632] alloc_pages_mpol+0xb3/0x260 [ 918.307850][ T4632] ? alloc_pages_noprof+0x61/0x130 [ 918.307871][ T4632] alloc_pages_noprof+0x90/0x130 [ 918.307891][ T4632] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 918.307979][ T4632] __kvmalloc_node_noprof+0x483/0x670 [ 918.308012][ T4632] ? ip_set_alloc+0x24/0x30 [ 918.308040][ T4632] ? ip_set_alloc+0x24/0x30 [ 918.308066][ T4632] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 918.308136][ T4632] ip_set_alloc+0x24/0x30 [ 918.308197][ T4632] hash_netiface_create+0x282/0x740 [ 918.308237][ T4632] ? __pfx_hash_netiface_create+0x10/0x10 [ 918.308312][ T4632] ip_set_create+0x3cc/0x970 [ 918.308341][ T4632] ? __nla_parse+0x40/0x60 [ 918.308389][ T4632] nfnetlink_rcv_msg+0x4c6/0x590 [ 918.308467][ T4632] netlink_rcv_skb+0x123/0x220 [ 918.308514][ T4632] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 918.308554][ T4632] nfnetlink_rcv+0x167/0x16c0 [ 918.308583][ T4632] ? kmem_cache_free+0xe4/0x3d0 [ 918.308626][ T4632] ? __kfree_skb+0x109/0x150 [ 918.308686][ T4632] ? nlmon_xmit+0x4f/0x60 [ 918.308731][ T4632] ? consume_skb+0x49/0x150 [ 918.308930][ T4632] ? nlmon_xmit+0x4f/0x60 [ 918.308964][ T4632] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 918.309003][ T4632] ? __dev_queue_xmit+0x1200/0x2000 [ 918.309055][ T4632] ? __dev_queue_xmit+0x182/0x2000 [ 918.309075][ T4632] ? ref_tracker_free+0x37d/0x3e0 [ 918.309178][ T4632] ? __netlink_deliver_tap+0x4dc/0x500 [ 918.309201][ T4632] netlink_unicast+0x5c0/0x690 [ 918.309248][ T4632] netlink_sendmsg+0x58b/0x6b0 [ 918.309272][ T4632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.309296][ T4632] __sock_sendmsg+0x145/0x180 [ 918.309327][ T4632] ____sys_sendmsg+0x31e/0x4e0 [ 918.309387][ T4632] ___sys_sendmsg+0x17b/0x1d0 [ 918.309423][ T4632] __x64_sys_sendmsg+0xd4/0x160 [ 918.309444][ T4632] x64_sys_call+0x191e/0x3000 [ 918.309513][ T4632] do_syscall_64+0xd2/0x200 [ 918.309533][ T4632] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 918.309558][ T4632] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 918.309645][ T4632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.309671][ T4632] RIP: 0033:0x7fe7a91cf749 [ 918.309692][ T4632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.309715][ T4632] RSP: 002b:00007fe7a7c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.309739][ T4632] RAX: ffffffffffffffda RBX: 00007fe7a9425fa0 RCX: 00007fe7a91cf749 [ 918.309753][ T4632] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 918.309765][ T4632] RBP: 00007fe7a9253f91 R08: 0000000000000000 R09: 0000000000000000 [ 918.309821][ T4632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.309837][ T4632] R13: 00007fe7a9426038 R14: 00007fe7a9425fa0 R15: 00007fff64d411a8 [ 918.309859][ T4632] [ 918.659121][ T4632] memory: usage 307200kB, limit 307200kB, failcnt 3217 [ 918.666040][ T4632] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 918.673985][ T4632] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 918.681313][ T4632] Memory cgroup stats for /syz2: [ 918.682049][T30427] Bluetooth: hci0: command 0x1003 tx timeout [ 918.693256][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 918.694674][ T4632] cache 0 [ 918.702374][ T4632] rss 28672 [ 918.705507][ T4632] shmem 0 [ 918.708452][ T4632] mapped_file 0 [ 918.712104][ T4632] dirty 0 [ 918.715278][ T4632] writeback 0 [ 918.718720][ T4632] workingset_refault_anon 650 [ 918.723787][ T4632] workingset_refault_file 3711 [ 918.728702][ T4632] swap 176128 [ 918.732071][ T4632] swapcached 28672 [ 918.735795][ T4632] pgpgin 1331525 [ 918.739540][ T4632] pgpgout 1331518 [ 918.743183][ T4632] pgfault 1406157 [ 918.747010][ T4632] pgmajfault 260 [ 918.750750][ T4632] inactive_anon 28672 [ 918.754854][ T4632] active_anon 0 [ 918.758320][ T4632] inactive_file 0 [ 918.762181][ T4632] active_file 0 [ 918.765653][ T4632] unevictable 0 [ 918.769281][ T4632] hierarchical_memory_limit 314572800 [ 918.774743][ T4632] hierarchical_memsw_limit 9223372036854771712 [ 918.781018][ T4632] total_cache 0 [ 918.784487][ T4632] total_rss 28672 [ 918.788129][ T4632] total_shmem 0 [ 918.791656][ T4632] total_mapped_file 0 [ 918.795646][ T4632] total_dirty 0 [ 918.799390][ T4632] total_writeback 0 [ 918.803210][ T4632] total_workingset_refault_anon 650 [ 918.808495][ T4632] total_workingset_refault_file 3711 [ 918.813829][ T4632] total_swap 176128 [ 918.817639][ T4632] total_swapcached 28672 [ 918.821909][ T4632] total_pgpgin 1331525 [ 918.825983][ T4632] total_pgpgout 1331518 [ 918.830264][ T4632] total_pgfault 1406157 [ 918.834466][ T4632] total_pgmajfault 260 [ 918.838534][ T4632] total_inactive_anon 28672 [ 918.843083][ T4632] total_active_anon 0 [ 918.847333][ T4632] total_inactive_file 0 [ 918.851728][ T4632] total_active_file 0 [ 918.855789][ T4632] total_unevictable 0 [ 918.859804][ T4632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13896,pid=4631,uid=0 [ 918.874646][ T4632] Memory cgroup out of memory: Killed process 4631 (syz.2.13896) total-vm:93836kB, anon-rss:1268kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 918.922945][ T4661] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 919.022203][ T4673] loop0: detected capacity change from 0 to 512 [ 919.028962][ T4673] EXT4-fs: Ignoring removed mblk_io_submit option [ 919.035513][ T4673] EXT4-fs: dax option not supported [ 919.074129][ T4681] netlink: 'syz.0.13908': attribute type 1 has an invalid length. [ 919.118809][ T3556] Bluetooth: hci1: command 0x1003 tx timeout [ 919.118900][T30545] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 919.166852][T27542] hid-generic 0000:3000000:0000.0064: hidraw0: HID v0.00 Device [sy] on syz0 [ 919.166865][ T7848] Bluetooth: hci0: Frame reassembly failed (-90) [ 919.764506][ T4718] dummy0: entered promiscuous mode [ 919.771033][ T4718] bond_slave_0: entered promiscuous mode [ 919.776778][ T4718] bond_slave_0: left promiscuous mode [ 919.782593][ T4718] dummy0: left promiscuous mode [ 920.000252][ T4732] syz.2.13919 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 920.014322][ T4732] CPU: 1 UID: 0 PID: 4732 Comm: syz.2.13919 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 920.014362][ T4732] Tainted: [W]=WARN [ 920.014371][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 920.014384][ T4732] Call Trace: [ 920.014462][ T4732] [ 920.014470][ T4732] __dump_stack+0x1d/0x30 [ 920.014496][ T4732] dump_stack_lvl+0xe8/0x140 [ 920.014516][ T4732] dump_stack+0x15/0x1b [ 920.014533][ T4732] dump_header+0x81/0x220 [ 920.014553][ T4732] oom_kill_process+0x342/0x400 [ 920.014627][ T4732] out_of_memory+0x979/0xb80 [ 920.014734][ T4732] try_charge_memcg+0x610/0xa10 [ 920.014820][ T4732] obj_cgroup_charge_pages+0xa6/0x150 [ 920.014842][ T4732] __memcg_kmem_charge_page+0x9f/0x170 [ 920.014866][ T4732] __alloc_frozen_pages_noprof+0x188/0x360 [ 920.014949][ T4732] alloc_pages_mpol+0xb3/0x260 [ 920.014972][ T4732] alloc_pages_noprof+0x90/0x130 [ 920.014992][ T4732] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 920.015076][ T4732] __kvmalloc_node_noprof+0x483/0x670 [ 920.015112][ T4732] ? ip_set_alloc+0x24/0x30 [ 920.015147][ T4732] ? ip_set_alloc+0x24/0x30 [ 920.015262][ T4732] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 920.015365][ T4732] ip_set_alloc+0x24/0x30 [ 920.015392][ T4732] hash_netiface_create+0x282/0x740 [ 920.015423][ T4732] ? __pfx_hash_netiface_create+0x10/0x10 [ 920.015523][ T4732] ip_set_create+0x3cc/0x970 [ 920.015549][ T4732] ? __nla_parse+0x40/0x60 [ 920.015572][ T4732] nfnetlink_rcv_msg+0x4c6/0x590 [ 920.015626][ T4732] netlink_rcv_skb+0x123/0x220 [ 920.015680][ T4732] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 920.015714][ T4732] nfnetlink_rcv+0x167/0x16c0 [ 920.015742][ T4732] ? kmem_cache_free+0xe4/0x3d0 [ 920.015778][ T4732] ? __kfree_skb+0x109/0x150 [ 920.015826][ T4732] ? nlmon_xmit+0x4f/0x60 [ 920.015854][ T4732] ? consume_skb+0x49/0x150 [ 920.015884][ T4732] ? nlmon_xmit+0x4f/0x60 [ 920.015911][ T4732] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 920.016090][ T4732] ? __dev_queue_xmit+0x1200/0x2000 [ 920.016111][ T4732] ? __dev_queue_xmit+0x182/0x2000 [ 920.016191][ T4732] ? ref_tracker_free+0x37d/0x3e0 [ 920.016230][ T4732] ? __netlink_deliver_tap+0x4dc/0x500 [ 920.016257][ T4732] netlink_unicast+0x5c0/0x690 [ 920.016295][ T4732] netlink_sendmsg+0x58b/0x6b0 [ 920.016319][ T4732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.016399][ T4732] __sock_sendmsg+0x145/0x180 [ 920.016499][ T4732] ____sys_sendmsg+0x31e/0x4e0 [ 920.016526][ T4732] ___sys_sendmsg+0x17b/0x1d0 [ 920.016556][ T4732] __x64_sys_sendmsg+0xd4/0x160 [ 920.016584][ T4732] x64_sys_call+0x191e/0x3000 [ 920.016664][ T4732] do_syscall_64+0xd2/0x200 [ 920.016706][ T4732] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 920.016741][ T4732] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 920.016804][ T4732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.016825][ T4732] RIP: 0033:0x7fe7a91cf749 [ 920.016844][ T4732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.016927][ T4732] RSP: 002b:00007fe7a7c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.016952][ T4732] RAX: ffffffffffffffda RBX: 00007fe7a9425fa0 RCX: 00007fe7a91cf749 [ 920.016968][ T4732] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 920.016984][ T4732] RBP: 00007fe7a9253f91 R08: 0000000000000000 R09: 0000000000000000 [ 920.017000][ T4732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.017014][ T4732] R13: 00007fe7a9426038 R14: 00007fe7a9425fa0 R15: 00007fff64d411a8 [ 920.017032][ T4732] [ 920.017040][ T4732] memory: usage 307200kB, limit 307200kB, failcnt 3500 [ 920.369338][ T4732] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 920.377231][ T4732] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 920.384577][ T4732] Memory cgroup stats for /syz2: [ 920.384740][ T4732] cache 0 [ 920.392591][ T4732] rss 0 [ 920.395343][ T4732] shmem 0 [ 920.398267][ T4732] mapped_file 0 [ 920.401788][ T4732] dirty 0 [ 920.404721][ T4732] writeback 0 [ 920.408001][ T4732] workingset_refault_anon 678 [ 920.412778][ T4732] workingset_refault_file 3712 [ 920.417555][ T4732] swap 204800 [ 920.421039][ T4732] swapcached 0 [ 920.424427][ T4732] pgpgin 1331778 [ 920.427961][ T4732] pgpgout 1331778 [ 920.431607][ T4732] pgfault 1406651 [ 920.435265][ T4732] pgmajfault 277 [ 920.438842][ T4732] inactive_anon 0 [ 920.442479][ T4732] active_anon 0 [ 920.445965][ T4732] inactive_file 0 [ 920.449597][ T4732] active_file 0 [ 920.453044][ T4732] unevictable 0 [ 920.456554][ T4732] hierarchical_memory_limit 314572800 [ 920.461922][ T4732] hierarchical_memsw_limit 9223372036854771712 [ 920.468154][ T4732] total_cache 0 [ 920.471635][ T4732] total_rss 0 [ 920.474907][ T4732] total_shmem 0 [ 920.478416][ T4732] total_mapped_file 0 [ 920.482431][ T4732] total_dirty 0 [ 920.485907][ T4732] total_writeback 0 [ 920.489724][ T4732] total_workingset_refault_anon 678 [ 920.494908][ T4732] total_workingset_refault_file 3712 [ 920.500232][ T4732] total_swap 204800 [ 920.504027][ T4732] total_swapcached 0 [ 920.507905][ T4732] total_pgpgin 1331778 [ 920.511976][ T4732] total_pgpgout 1331778 [ 920.516120][ T4732] total_pgfault 1406651 [ 920.520273][ T4732] total_pgmajfault 277 [ 920.524328][ T4732] total_inactive_anon 0 [ 920.528469][ T4732] total_active_anon 0 [ 920.532464][ T4732] total_inactive_file 0 [ 920.536607][ T4732] total_active_file 0 [ 920.540598][ T4732] total_unevictable 0 [ 920.544565][ T4732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13919,pid=4731,uid=0 [ 920.559275][ T4732] Memory cgroup out of memory: Killed process 4731 (syz.2.13919) total-vm:93836kB, anon-rss:1184kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 920.606615][ T29] kauditd_printk_skb: 782 callbacks suppressed [ 920.606633][ T29] audit: type=1326 audit(920.583:95360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.6.13922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 920.636169][ T29] audit: type=1326 audit(920.583:95361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.6.13922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 920.724767][ T3416] hid-generic 0000:3000000:0000.0065: hidraw0: HID v0.00 Device [sy] on syz0 [ 920.791292][ T4777] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 920.794419][ T4768] __nla_validate_parse: 5 callbacks suppressed [ 920.794436][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13925'. [ 920.835431][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13929'. [ 920.837696][ T29] audit: type=1326 audit(920.813:95362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.867769][ T29] audit: type=1326 audit(920.813:95363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.891123][ T29] audit: type=1326 audit(920.813:95364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.914179][ T29] audit: type=1326 audit(920.813:95365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.937144][ T29] audit: type=1326 audit(920.813:95366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.960271][ T29] audit: type=1326 audit(920.813:95367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 920.983286][ T29] audit: type=1326 audit(920.813:95368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 921.006761][ T29] audit: type=1326 audit(920.813:95369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4780 comm="syz.2.13929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a91cf749 code=0x7ffc0000 [ 921.035621][ T4791] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 921.100901][ T4799] netlink: 'syz.6.13937': attribute type 1 has an invalid length. [ 921.108871][ T4799] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13937'. [ 921.198826][T30545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 921.201333][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 921.344703][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13943'. [ 921.473591][ T4826] bridge9: entered promiscuous mode [ 921.481539][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13945'. [ 921.685861][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13948'. [ 921.695110][ T4845] netlink: 15 bytes leftover after parsing attributes in process `syz.0.13948'. [ 921.743231][ T4855] siw: device registration error -23 [ 921.837694][ T4869] loop7: detected capacity change from 0 to 512 [ 921.845314][ T4869] EXT4-fs: Ignoring removed mblk_io_submit option [ 921.851881][ T4869] EXT4-fs: dax option not supported [ 921.868893][ T4858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13955'. [ 921.886376][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13956'. [ 921.895557][ T4873] netlink: 15 bytes leftover after parsing attributes in process `syz.2.13956'. [ 921.913433][ T4877] netlink: '+}[@': attribute type 1 has an invalid length. [ 921.976878][ T4889] hub 5-0:1.0: USB hub found [ 921.982124][ T4889] hub 5-0:1.0: 8 ports detected [ 922.009275][ T4807] syz.6.13939 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 922.023610][ T4807] CPU: 0 UID: 0 PID: 4807 Comm: syz.6.13939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 922.023682][ T4807] Tainted: [W]=WARN [ 922.023690][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 922.023704][ T4807] Call Trace: [ 922.023711][ T4807] [ 922.023719][ T4807] __dump_stack+0x1d/0x30 [ 922.023742][ T4807] dump_stack_lvl+0xe8/0x140 [ 922.023762][ T4807] dump_stack+0x15/0x1b [ 922.023829][ T4807] dump_header+0x81/0x220 [ 922.023851][ T4807] oom_kill_process+0x342/0x400 [ 922.023888][ T4807] out_of_memory+0x979/0xb80 [ 922.023965][ T4807] try_charge_memcg+0x610/0xa10 [ 922.024020][ T4807] obj_cgroup_charge_pages+0xa6/0x150 [ 922.024046][ T4807] __memcg_kmem_charge_page+0x9f/0x170 [ 922.024096][ T4807] __alloc_frozen_pages_noprof+0x188/0x360 [ 922.024187][ T4807] alloc_pages_mpol+0xb3/0x260 [ 922.024214][ T4807] alloc_pages_noprof+0x90/0x130 [ 922.024240][ T4807] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 922.024321][ T4807] __kvmalloc_node_noprof+0x483/0x670 [ 922.024357][ T4807] ? ip_set_alloc+0x24/0x30 [ 922.024391][ T4807] ? ip_set_alloc+0x24/0x30 [ 922.024460][ T4807] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 922.024545][ T4807] ip_set_alloc+0x24/0x30 [ 922.024634][ T4807] hash_netiface_create+0x282/0x740 [ 922.024664][ T4807] ? __pfx_hash_netiface_create+0x10/0x10 [ 922.024696][ T4807] ip_set_create+0x3cc/0x970 [ 922.024725][ T4807] ? __nla_parse+0x40/0x60 [ 922.024763][ T4807] nfnetlink_rcv_msg+0x4c6/0x590 [ 922.024808][ T4807] netlink_rcv_skb+0x123/0x220 [ 922.024895][ T4807] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 922.024931][ T4807] nfnetlink_rcv+0x167/0x16c0 [ 922.024955][ T4807] ? kmem_cache_free+0xe4/0x3d0 [ 922.024998][ T4807] ? __kfree_skb+0x109/0x150 [ 922.025084][ T4807] ? nlmon_xmit+0x4f/0x60 [ 922.025109][ T4807] ? consume_skb+0x49/0x150 [ 922.025141][ T4807] ? nlmon_xmit+0x4f/0x60 [ 922.025238][ T4807] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 922.025275][ T4807] ? __dev_queue_xmit+0x1200/0x2000 [ 922.025293][ T4807] ? __dev_queue_xmit+0x182/0x2000 [ 922.025331][ T4807] ? ref_tracker_free+0x37d/0x3e0 [ 922.025376][ T4807] ? __netlink_deliver_tap+0x4dc/0x500 [ 922.025397][ T4807] netlink_unicast+0x5c0/0x690 [ 922.025503][ T4807] netlink_sendmsg+0x58b/0x6b0 [ 922.025529][ T4807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.025581][ T4807] __sock_sendmsg+0x145/0x180 [ 922.025604][ T4807] ____sys_sendmsg+0x31e/0x4e0 [ 922.025624][ T4807] ___sys_sendmsg+0x17b/0x1d0 [ 922.025729][ T4807] __x64_sys_sendmsg+0xd4/0x160 [ 922.025752][ T4807] x64_sys_call+0x191e/0x3000 [ 922.025804][ T4807] do_syscall_64+0xd2/0x200 [ 922.025826][ T4807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 922.025856][ T4807] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 922.025912][ T4807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.025934][ T4807] RIP: 0033:0x7ffb4eb4f749 [ 922.025955][ T4807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.025977][ T4807] RSP: 002b:00007ffb4d5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.026003][ T4807] RAX: ffffffffffffffda RBX: 00007ffb4eda5fa0 RCX: 00007ffb4eb4f749 [ 922.026018][ T4807] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 922.026086][ T4807] RBP: 00007ffb4ebd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 922.026098][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.026110][ T4807] R13: 00007ffb4eda6038 R14: 00007ffb4eda5fa0 R15: 00007ffd0013af78 [ 922.026128][ T4807] [ 922.026171][ T4807] memory: usage 307200kB, limit 307200kB, failcnt 912 [ 922.095030][ T4898] loop7: detected capacity change from 0 to 512 [ 922.095961][ T4807] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 922.095981][ T4807] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 922.131795][ T4898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 922.132785][ T4807] Memory cgroup stats for [ 922.150604][ T4898] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 922.152424][ T4807] /syz6: [ 922.426913][ T4807] cache 0 [ 922.432924][ T4807] rss 4096 [ 922.436080][ T4807] shmem 0 [ 922.439134][ T4807] mapped_file 0 [ 922.442699][ T4807] dirty 0 [ 922.445623][ T4807] writeback 0 [ 922.449219][ T4807] workingset_refault_anon 217 [ 922.453953][ T4807] workingset_refault_file 7887 [ 922.458942][ T4807] swap 167936 [ 922.462241][ T4807] swapcached 28672 [ 922.465972][ T4807] pgpgin 665364 [ 922.469502][ T4807] pgpgout 665357 [ 922.473066][ T4807] pgfault 681825 [ 922.476613][ T4807] pgmajfault 135 [ 922.480305][ T4807] inactive_anon 28672 [ 922.484306][ T4807] active_anon 0 [ 922.487787][ T4807] inactive_file 0 [ 922.491447][ T4807] active_file 0 [ 922.494916][ T4807] unevictable 0 [ 922.498368][ T4807] hierarchical_memory_limit 314572800 [ 922.503747][ T4807] hierarchical_memsw_limit 9223372036854771712 [ 922.510020][ T4807] total_cache 0 [ 922.513482][ T4807] total_rss 4096 [ 922.517049][ T4807] total_shmem 0 [ 922.520578][ T4807] total_mapped_file 0 [ 922.524562][ T4807] total_dirty 0 [ 922.528008][ T4807] total_writeback 0 [ 922.531825][ T4807] total_workingset_refault_anon 217 [ 922.537014][ T4807] total_workingset_refault_file 7887 [ 922.542377][ T4807] total_swap 167936 [ 922.546174][ T4807] total_swapcached 28672 [ 922.550502][ T4807] total_pgpgin 665364 [ 922.554528][ T4807] total_pgpgout 665357 [ 922.558649][ T4807] total_pgfault 681825 [ 922.562708][ T4807] total_pgmajfault 135 [ 922.566759][ T4807] total_inactive_anon 28672 [ 922.571270][ T4807] total_active_anon 0 [ 922.575241][ T4807] total_inactive_file 0 [ 922.579499][ T4807] total_active_file 0 [ 922.583541][ T4807] total_unevictable 0 [ 922.587604][ T4807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13939,pid=4806,uid=0 [ 922.602318][ T4807] Memory cgroup out of memory: Killed process 4806 (syz.6.13939) total-vm:93836kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 922.757980][ T4832] Can't find ip_set type hash:net,por [ 922.818810][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 922.967014][ T4930] siw: device registration error -23 [ 923.023580][ T4932] loop0: detected capacity change from 0 to 2048 [ 923.082339][ T4932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.406938][ T4948] hub 5-0:1.0: USB hub found [ 923.431395][ T4948] hub 5-0:1.0: 8 ports detected [ 923.812887][ T4924] siw: device registration error -23 [ 924.087881][ T4969] netlink: '+}[@': attribute type 1 has an invalid length. [ 924.185657][ T36] hid_parser_main: 11 callbacks suppressed [ 924.185678][ T36] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x4 [ 924.199417][ T36] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x2 [ 924.207630][ T36] hid-generic 0000:3000000:0000.0066: unknown main item tag 0x3 [ 924.217092][ T36] hid-generic 0000:3000000:0000.0066: hidraw0: HID v0.00 Device [sy] on syz0 [ 924.235357][ T4984] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 924.247325][ T4988] netlink: 'syz.1.13986': attribute type 1 has an invalid length. [ 924.265918][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.276268][ T4984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 924.359835][ T7864] Bluetooth: hci0: Frame reassembly failed (-90) [ 924.406349][ T5007] loop7: detected capacity change from 0 to 512 [ 924.482721][ T5007] EXT4-fs: Ignoring removed mblk_io_submit option [ 924.489282][ T5007] EXT4-fs: dax option not supported [ 924.608927][ T7885] Bluetooth: hci1: Frame reassembly failed (-84) [ 924.676411][ T5039] siw: device registration error -23 [ 925.162676][ T5043] syz.7.14001 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 925.177235][ T5043] CPU: 0 UID: 0 PID: 5043 Comm: syz.7.14001 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 925.177272][ T5043] Tainted: [W]=WARN [ 925.177280][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 925.177323][ T5043] Call Trace: [ 925.177330][ T5043] [ 925.177338][ T5043] __dump_stack+0x1d/0x30 [ 925.177364][ T5043] dump_stack_lvl+0xe8/0x140 [ 925.177443][ T5043] dump_stack+0x15/0x1b [ 925.177463][ T5043] dump_header+0x81/0x220 [ 925.177581][ T5043] oom_kill_process+0x342/0x400 [ 925.177617][ T5043] out_of_memory+0x979/0xb80 [ 925.177652][ T5043] try_charge_memcg+0x610/0xa10 [ 925.177688][ T5043] obj_cgroup_charge_pages+0xa6/0x150 [ 925.177734][ T5043] __memcg_kmem_charge_page+0x9f/0x170 [ 925.177760][ T5043] __alloc_frozen_pages_noprof+0x188/0x360 [ 925.177851][ T5043] alloc_pages_mpol+0xb3/0x260 [ 925.177878][ T5043] alloc_pages_noprof+0x90/0x130 [ 925.177901][ T5043] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 925.178038][ T5043] __kvmalloc_node_noprof+0x483/0x670 [ 925.178077][ T5043] ? ip_set_alloc+0x24/0x30 [ 925.178105][ T5043] ? ip_set_alloc+0x24/0x30 [ 925.178157][ T5043] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 925.178235][ T5043] ip_set_alloc+0x24/0x30 [ 925.178265][ T5043] hash_netiface_create+0x282/0x740 [ 925.178299][ T5043] ? __pfx_hash_netiface_create+0x10/0x10 [ 925.178340][ T5043] ip_set_create+0x3cc/0x970 [ 925.178373][ T5043] nfnetlink_rcv_msg+0x4c6/0x590 [ 925.178499][ T5043] netlink_rcv_skb+0x123/0x220 [ 925.178533][ T5043] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 925.178623][ T5043] nfnetlink_rcv+0x167/0x16c0 [ 925.178647][ T5043] ? kmem_cache_free+0xe4/0x3d0 [ 925.178682][ T5043] ? __kfree_skb+0x109/0x150 [ 925.178712][ T5043] ? nlmon_xmit+0x4f/0x60 [ 925.178798][ T5043] ? consume_skb+0x49/0x150 [ 925.178824][ T5043] ? nlmon_xmit+0x4f/0x60 [ 925.178850][ T5043] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 925.178899][ T5043] ? __dev_queue_xmit+0x1200/0x2000 [ 925.178918][ T5043] ? __dev_queue_xmit+0x182/0x2000 [ 925.178985][ T5043] ? ref_tracker_free+0x37d/0x3e0 [ 925.179026][ T5043] ? __netlink_deliver_tap+0x4dc/0x500 [ 925.179064][ T5043] netlink_unicast+0x5c0/0x690 [ 925.179100][ T5043] netlink_sendmsg+0x58b/0x6b0 [ 925.179121][ T5043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.179207][ T5043] __sock_sendmsg+0x145/0x180 [ 925.179236][ T5043] ____sys_sendmsg+0x31e/0x4e0 [ 925.179260][ T5043] ___sys_sendmsg+0x17b/0x1d0 [ 925.179294][ T5043] __x64_sys_sendmsg+0xd4/0x160 [ 925.179392][ T5043] x64_sys_call+0x191e/0x3000 [ 925.179418][ T5043] do_syscall_64+0xd2/0x200 [ 925.179439][ T5043] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 925.179465][ T5043] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 925.179519][ T5043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.179544][ T5043] RIP: 0033:0x7f8514bff749 [ 925.179563][ T5043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.179584][ T5043] RSP: 002b:00007f8513667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.179606][ T5043] RAX: ffffffffffffffda RBX: 00007f8514e55fa0 RCX: 00007f8514bff749 [ 925.179637][ T5043] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 925.179650][ T5043] RBP: 00007f8514c83f91 R08: 0000000000000000 R09: 0000000000000000 [ 925.179661][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.179674][ T5043] R13: 00007f8514e56038 R14: 00007f8514e55fa0 R15: 00007fff8fbf0298 [ 925.179695][ T5043] [ 925.181597][ T5048] netlink: '+}[@': attribute type 1 has an invalid length. [ 925.191166][ T5043] memory: usage 306976kB, limit 307200kB, failcnt 497 [ 925.191183][ T5043] memory+swap: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 925.191197][ T5043] kmem: usage 306944kB, limit 9007199254740988kB, failcnt 0 [ 925.552485][ T5043] Memory cgroup stats for /syz7: [ 925.553532][ T5043] cache 0 [ 925.561556][ T5043] rss 32768 [ 925.564701][ T5043] shmem 0 [ 925.567644][ T5043] mapped_file 0 [ 925.571150][ T5043] dirty 0 [ 925.574158][ T5043] writeback 0 [ 925.577451][ T5043] workingset_refault_anon 119 [ 925.582200][ T5043] workingset_refault_file 0 [ 925.586717][ T5043] swap 163840 [ 925.590040][ T5043] swapcached 0 [ 925.593470][ T5043] pgpgin 245780 [ 925.596932][ T5043] pgpgout 245772 [ 925.600533][ T5043] pgfault 305652 [ 925.604149][ T5043] pgmajfault 62 [ 925.607687][ T5043] inactive_anon 32768 [ 925.611778][ T5043] active_anon 0 [ 925.615336][ T5043] inactive_file 0 [ 925.619096][ T5043] active_file 0 [ 925.622606][ T5043] unevictable 0 [ 925.625274][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 925.625289][ T29] audit: type=1400 audit(925.603:95764): avc: denied { prog_load } for pid=5061 comm="syz.6.14006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 925.626103][ T5043] hierarchical_memory_limit 314572800 [ 925.632270][ T29] audit: type=1400 audit(925.603:95765): avc: denied { bpf } for pid=5061 comm="syz.6.14006" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.650859][ T5043] hierarchical_memsw_limit 9223372036854771712 [ 925.650873][ T5043] total_cache 0 [ 925.650904][ T5043] total_rss 32768 [ 925.650913][ T5043] total_shmem 0 [ 925.650921][ T5043] total_mapped_file 0 [ 925.650930][ T5043] total_dirty 0 [ 925.650939][ T5043] total_writeback 0 [ 925.656317][ T29] audit: type=1400 audit(925.603:95766): avc: denied { perfmon } for pid=5061 comm="syz.6.14006" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 925.676468][ T5043] total_workingset_refault_anon 119 [ 925.676481][ T5043] total_workingset_refault_file 0 [ 925.682673][ T29] audit: type=1400 audit(925.603:95767): avc: denied { prog_run } for pid=5061 comm="syz.6.14006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 925.686150][ T5043] total_swap 163840 [ 925.686160][ T5043] total_swapcached 0 [ 925.686167][ T5043] total_pgpgin 245780 [ 925.686174][ T5043] total_pgpgout 245772 [ 925.686182][ T5043] total_pgfault 305652 [ 925.774193][ T5043] total_pgmajfault 62 [ 925.778262][ T5043] total_inactive_anon 32768 [ 925.782785][ T5043] total_active_anon 0 [ 925.786783][ T5043] total_inactive_file 0 [ 925.790987][ T5043] total_active_file 0 [ 925.794979][ T5043] total_unevictable 0 [ 925.798970][ T5043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.14001,pid=5042,uid=0 [ 925.813686][ T5043] Memory cgroup out of memory: Killed process 5043 (syz.7.14001) total-vm:93836kB, anon-rss:1120kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 925.832991][ T29] audit: type=1400 audit(925.813:95768): avc: denied { write } for pid=5061 comm="syz.6.14006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 925.854196][ T29] audit: type=1400 audit(925.813:95769): avc: denied { read } for pid=5061 comm="syz.6.14006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 925.874178][ T29] audit: type=1400 audit(925.813:95770): avc: denied { create } for pid=5061 comm="syz.6.14006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 925.893507][ T29] audit: type=1400 audit(925.813:95771): avc: denied { connect } for pid=5061 comm="syz.6.14006" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 925.913570][ T29] audit: type=1400 audit(925.813:95772): avc: denied { write } for pid=5061 comm="syz.6.14006" laddr=fe80::13 lport=60 faddr=fe80::bb fport=19970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 925.937104][ T29] audit: type=1400 audit(925.833:95773): avc: denied { egress } for pid=36 comm="kworker/1:1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 926.025623][ T5069] __nla_validate_parse: 8 callbacks suppressed [ 926.025640][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14008'. [ 926.086421][ T5078] pim6reg1: entered promiscuous mode [ 926.091954][ T5078] pim6reg1: entered allmulticast mode [ 926.398641][T30427] Bluetooth: hci0: command 0x1003 tx timeout [ 926.439624][T30545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 926.457157][ T5131] dummy0: entered promiscuous mode [ 926.463672][ T5131] bond_slave_0: entered promiscuous mode [ 926.469510][ T5131] bond_slave_0: left promiscuous mode [ 926.476653][ T5131] dummy0: left promiscuous mode [ 926.496482][ T5146] pim6reg1: entered promiscuous mode [ 926.502121][ T5146] pim6reg1: entered allmulticast mode [ 926.524859][ T5150] siw: device registration error -23 [ 926.579057][ T5158] bridge19: entered promiscuous mode [ 926.638645][T30545] Bluetooth: hci1: command 0x1003 tx timeout [ 926.639460][ T3556] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 926.793587][ T5182] siw: device registration error -23 [ 926.874273][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14051'. [ 926.949153][ T5204] netlink: 'syz.6.14056': attribute type 1 has an invalid length. [ 926.957036][ T5204] netlink: 224 bytes leftover after parsing attributes in process `syz.6.14056'. [ 927.030373][ T5211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.038838][ T5211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.219665][ T5247] netlink: '+}[@': attribute type 1 has an invalid length. [ 927.227117][ T5247] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 927.423713][ T5264] pim6reg1: entered promiscuous mode [ 927.429145][ T5264] pim6reg1: entered allmulticast mode [ 927.850366][ T5291] netlink: '+}[@': attribute type 1 has an invalid length. [ 927.850688][ T5289] siw: device registration error -23 [ 927.857636][ T5291] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 927.871989][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14078'. [ 927.917845][ T5305] netlink: '+}[@': attribute type 1 has an invalid length. [ 927.925223][ T5305] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 927.981155][ T5314] bridge20: entered promiscuous mode [ 927.996449][ T5318] netlink: '+}[@': attribute type 1 has an invalid length. [ 928.003818][ T5318] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 928.272378][ T5353] siw: device registration error -23 [ 928.303128][ T5355] siw: device registration error -23 [ 928.462389][ T5348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.470906][ T5348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.519304][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14095'. [ 928.607147][ T5390] siw: device registration error -23 [ 929.083846][T27542] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x4 [ 929.091594][T27542] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x2 [ 929.099530][T27542] hid-generic 0000:3000000:0000.0067: unknown main item tag 0x3 [ 929.108150][T27542] hid-generic 0000:3000000:0000.0067: hidraw0: HID v0.00 Device [sy] on syz0 [ 929.134287][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14112'. [ 929.159514][ T5418] loop7: detected capacity change from 0 to 512 [ 929.168112][ T5418] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.14113: corrupted xattr block 95: invalid header [ 929.183584][ T5418] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.14113: bg 0: block 7: invalid block bitmap [ 929.196364][ T5418] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 929.205424][ T5418] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.14113: corrupted xattr block 95: invalid header [ 929.219573][ T5418] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 929.228774][ T5418] EXT4-fs (loop7): 1 orphan inode deleted [ 929.235051][ T5418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.238031][ T5423] netlink: '+}[@': attribute type 1 has an invalid length. [ 929.294264][T27542] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x4 [ 929.302029][T27542] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x2 [ 929.309870][T27542] hid-generic 0000:3000000:0000.0068: unknown main item tag 0x3 [ 929.318198][T27542] hid-generic 0000:3000000:0000.0068: hidraw0: HID v0.00 Device [sy] on syz0 [ 929.328862][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.341682][ T5435] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 929.352489][ T5435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.414808][T27542] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x4 [ 929.422595][T27542] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x2 [ 929.431377][T27542] hid-generic 0000:3000000:0000.0069: unknown main item tag 0x3 [ 929.439903][T27542] hid-generic 0000:3000000:0000.0069: hidraw0: HID v0.00 Device [sy] on syz0 [ 929.514061][ T7887] Bluetooth: hci0: Frame reassembly failed (-84) [ 929.726324][ T5489] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 929.737180][ T5489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.985432][ T5506] dummy0: entered promiscuous mode [ 929.991815][ T5506] bond_slave_0: entered promiscuous mode [ 929.997560][ T5506] bond_slave_0: left promiscuous mode [ 930.007004][ T5506] dummy0: left promiscuous mode [ 930.326032][ T5550] siw: device registration error -23 [ 930.421809][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.430338][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.667829][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 930.667898][ T29] audit: type=1400 audit(930.643:96171): avc: denied { create } for pid=5571 comm="syz.1.14152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 930.693515][ T29] audit: type=1400 audit(930.653:96172): avc: denied { write } for pid=5571 comm="syz.1.14152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 930.712710][ T29] audit: type=1400 audit(930.653:96173): avc: denied { ioctl } for pid=5571 comm="syz.1.14152" path="socket:[248691]" dev="sockfs" ino=248691 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 930.738244][ T29] audit: type=1400 audit(930.653:96174): avc: denied { module_request } for pid=5571 comm="syz.1.14152" kmod="netdev-batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 930.759887][ T29] audit: type=1400 audit(930.663:96175): avc: denied { sys_module } for pid=5571 comm="syz.1.14152" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 930.781056][ T29] audit: type=1400 audit(930.743:96176): avc: denied { create } for pid=5575 comm="syz.1.14153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 930.801301][ T29] audit: type=1400 audit(930.743:96177): avc: denied { write } for pid=5575 comm="syz.1.14153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 930.851122][ T29] audit: type=1400 audit(930.833:96178): avc: denied { write } for pid=5581 comm="syz.1.14155" name="packet" dev="proc" ino=4026534822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 930.880798][ T29] audit: type=1326 audit(930.863:96179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.1.14155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efd2bf749 code=0x7ffc0000 [ 930.906622][ T29] audit: type=1326 audit(930.863:96180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5581 comm="syz.1.14155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1efd2bf749 code=0x7ffc0000 [ 930.956381][ T5584] netlink: '+}[@': attribute type 1 has an invalid length. [ 930.994757][ T5596] hub 5-0:1.0: USB hub found [ 930.999844][ T5596] hub 5-0:1.0: 8 ports detected [ 931.081168][ T5601] __nla_validate_parse: 6 callbacks suppressed [ 931.081183][ T5601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14158'. [ 931.123615][ T5608] siw: device registration error -23 [ 931.174041][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14163'. [ 931.261524][ T5617] lo speed is unknown, defaulting to 1000 [ 931.267757][ T5617] lo speed is unknown, defaulting to 1000 [ 931.518593][T30545] Bluetooth: hci0: command 0x1003 tx timeout [ 931.518593][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 931.587213][ T5654] netlink: '+}[@': attribute type 1 has an invalid length. [ 931.594530][ T5654] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 931.629892][ T5662] hub 5-0:1.0: USB hub found [ 931.634714][ T5662] hub 5-0:1.0: 8 ports detected [ 931.701315][ T5669] loop7: detected capacity change from 0 to 512 [ 931.709215][ T5669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 931.725870][ T5669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 931.861902][ T5681] netdevsim netdevsim6: Direct firmware load for ÿÿÿÿ failed with error -2 [ 931.893670][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14174'. [ 931.930247][ T5688] pim6reg1: entered promiscuous mode [ 931.935606][ T5688] pim6reg1: entered allmulticast mode [ 932.169166][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14184'. [ 932.199672][ T5727] netdevsim netdevsim1: Direct firmware load for ÿÿÿÿ failed with error -2 [ 932.245340][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14188'. [ 932.276444][ T5737] netlink: 'syz.1.14191': attribute type 1 has an invalid length. [ 932.284532][ T5737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14191'. [ 932.379148][ T5751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14195'. [ 932.473193][ T5764] netdevsim netdevsim1: Direct firmware load for ÿÿÿÿ failed with error -2 [ 932.483535][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 932.543019][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14200'. [ 932.577467][ T5783] FAULT_INJECTION: forcing a failure. [ 932.577467][ T5783] name failslab, interval 1, probability 0, space 0, times 0 [ 932.589820][ T7871] Bluetooth: hci0: Frame reassembly failed (-84) [ 932.590229][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz.1.14203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 932.590261][ T5783] Tainted: [W]=WARN [ 932.590268][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 932.590304][ T5783] Call Trace: [ 932.590311][ T5783] [ 932.590319][ T5783] __dump_stack+0x1d/0x30 [ 932.590342][ T5783] dump_stack_lvl+0xe8/0x140 [ 932.590362][ T5783] dump_stack+0x15/0x1b [ 932.590380][ T5783] should_fail_ex+0x265/0x280 [ 932.590412][ T5783] ? __se_sys_mount+0xef/0x2e0 [ 932.590497][ T5783] should_failslab+0x8c/0xb0 [ 932.590524][ T5783] __kmalloc_cache_noprof+0x4c/0x4a0 [ 932.590620][ T5783] ? memdup_user+0x99/0xd0 [ 932.590646][ T5783] __se_sys_mount+0xef/0x2e0 [ 932.590669][ T5783] ? fput+0x8f/0xc0 [ 932.590728][ T5783] ? ksys_write+0x192/0x1a0 [ 932.590853][ T5783] __x64_sys_mount+0x67/0x80 [ 932.590878][ T5783] x64_sys_call+0x2b51/0x3000 [ 932.590943][ T5783] do_syscall_64+0xd2/0x200 [ 932.590965][ T5783] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 932.590992][ T5783] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 932.591023][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.591078][ T5783] RIP: 0033:0x7f1efd2bf749 [ 932.591094][ T5783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.591112][ T5783] RSP: 002b:00007f1efbd1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 932.591132][ T5783] RAX: ffffffffffffffda RBX: 00007f1efd515fa0 RCX: 00007f1efd2bf749 [ 932.591145][ T5783] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 932.591158][ T5783] RBP: 00007f1efbd1f090 R08: 0000200000000140 R09: 0000000000000000 [ 932.591226][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.591239][ T5783] R13: 00007f1efd516038 R14: 00007f1efd515fa0 R15: 00007ffda50afce8 [ 932.591257][ T5783] [ 932.764160][ T5801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14209'. [ 932.798348][ T5781] Bluetooth: hci0: Frame reassembly failed (-90) [ 932.870732][ T5808] netdevsim netdevsim1: Direct firmware load for ÿÿÿÿ failed with error -2 [ 933.301305][ T5838] loop0: detected capacity change from 0 to 512 [ 933.307843][ T5838] EXT4-fs: Ignoring removed mblk_io_submit option [ 933.314334][ T5838] EXT4-fs: dax option not supported [ 934.114325][ T5869] pim6reg1: entered promiscuous mode [ 934.119844][ T5869] pim6reg1: entered allmulticast mode [ 934.260975][ T5881] loop0: detected capacity change from 0 to 512 [ 934.269104][ T5881] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 934.281377][ T5881] EXT4-fs (loop0): 1 truncate cleaned up [ 934.287496][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.325551][ T5891] siw: device registration error -23 [ 934.387743][ T5881] can: request_module (can-proto-3) failed. [ 934.411433][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.639914][T30545] Bluetooth: hci0: command 0x1003 tx timeout [ 934.646044][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 934.687190][ T5942] siw: device registration error -23 [ 934.790668][ T5949] lo speed is unknown, defaulting to 1000 [ 934.796746][ T5949] lo speed is unknown, defaulting to 1000 [ 935.310360][ T3416] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x4 [ 935.318093][ T3416] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x2 [ 935.351785][ T3416] hid-generic 0000:3000000:0000.006A: unknown main item tag 0x3 [ 935.362280][ T3416] hid-generic 0000:3000000:0000.006A: hidraw0: HID v0.00 Device [sy] on syz0 [ 935.407759][ T5984] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 935.430361][ T5984] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 935.467310][ T6011] siw: device registration error -23 [ 935.672039][ T29] kauditd_printk_skb: 1352 callbacks suppressed [ 935.672055][ T29] audit: type=1326 audit(935.653:97533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.701432][ T29] audit: type=1326 audit(935.653:97534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.721756][ T6014] lo speed is unknown, defaulting to 1000 [ 935.724462][ T29] audit: type=1326 audit(935.653:97535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.754292][ T29] audit: type=1326 audit(935.653:97536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.777696][ T29] audit: type=1326 audit(935.653:97537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.778287][ T6014] lo speed is unknown, defaulting to 1000 [ 935.801124][ T29] audit: type=1326 audit(935.653:97538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.830275][ T29] audit: type=1326 audit(935.653:97539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.853849][ T29] audit: type=1326 audit(935.653:97540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.876840][ T29] audit: type=1326 audit(935.663:97541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.881638][ T6064] Bluetooth: hci0: Frame reassembly failed (-90) [ 935.899936][ T29] audit: type=1326 audit(935.663:97542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.6.14266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ffb4eb82005 code=0x7ffc0000 [ 935.957472][ T6072] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 935.968332][ T6072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 935.986630][ T6076] siw: device registration error -23 [ 936.191919][ T6097] netdevsim netdevsim2: Direct firmware load for ÿÿÿÿ failed with error -2 [ 936.455138][ T6105] __nla_validate_parse: 11 callbacks suppressed [ 936.455154][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14289'. [ 936.526252][ T6108] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 936.537482][ T6108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 936.605352][ T6114] siw: device registration error -23 [ 936.737534][ T6117] lo speed is unknown, defaulting to 1000 [ 936.743899][ T6117] lo speed is unknown, defaulting to 1000 [ 936.792134][ T6152] netdevsim netdevsim7: Direct firmware load for ÿÿÿÿ failed with error -2 [ 936.922870][ T6166] Bluetooth: hci1: Frame reassembly failed (-90) [ 936.930376][ T6160] loop7: detected capacity change from 0 to 512 [ 936.937277][ T6160] EXT4-fs: Ignoring removed mblk_io_submit option [ 936.943347][ T7871] Bluetooth: hci1: Frame reassembly failed (-84) [ 936.943822][ T6160] EXT4-fs: dax option not supported [ 936.966888][ T6160] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14301'. [ 937.017910][ T6178] siw: device registration error -23 [ 937.073986][ T6185] netdevsim netdevsim2: Direct firmware load for ÿÿÿÿ failed with error -2 [ 937.083087][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14307'. [ 937.154860][ T6194] siw: device registration error -23 [ 937.233353][ T6202] siw: device registration error -23 [ 937.402261][ T6206] lo speed is unknown, defaulting to 1000 [ 937.408646][ T6206] lo speed is unknown, defaulting to 1000 [ 937.683850][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14317'. [ 937.723171][T27542] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x4 [ 937.730943][T27542] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x2 [ 937.738754][T27542] hid-generic 0000:3000000:0000.006B: unknown main item tag 0x3 [ 937.747232][T27542] hid-generic 0000:3000000:0000.006B: hidraw0: HID v0.00 Device [sy] on syz0 [ 937.779667][ T6253] siw: device registration error -23 [ 937.878964][ T6255] lo speed is unknown, defaulting to 1000 [ 937.885284][ T6255] lo speed is unknown, defaulting to 1000 [ 937.918618][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 937.959148][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14321'. [ 938.176949][ T6313] loop0: detected capacity change from 0 to 512 [ 938.194908][ T6313] EXT4-fs: Ignoring removed mblk_io_submit option [ 938.201457][ T6313] EXT4-fs: dax option not supported [ 938.231939][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14328'. [ 938.241785][ T6298] lo speed is unknown, defaulting to 1000 [ 938.248083][ T6298] lo speed is unknown, defaulting to 1000 [ 938.254254][ T6316] siw: device registration error -23 [ 938.368638][ T6350] pim6reg1: entered promiscuous mode [ 938.374006][ T6350] pim6reg1: entered allmulticast mode [ 938.410835][ T2967] hid-generic 0000:3000000:0000.006C: unknown main item tag 0x4 [ 938.418632][ T2967] hid-generic 0000:3000000:0000.006C: unknown main item tag 0x2 [ 938.426501][ T2967] hid-generic 0000:3000000:0000.006C: unknown main item tag 0x3 [ 938.436356][ T2967] hid-generic 0000:3000000:0000.006C: hidraw0: HID v0.00 Device [sy] on syz0 [ 938.463110][ T6358] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 938.478998][ T6358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 938.512564][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14338'. [ 938.529927][ T2967] hid-generic 0000:3000000:0000.006D: unknown main item tag 0x4 [ 938.548211][ T2967] hid-generic 0000:3000000:0000.006D: hidraw0: HID v0.00 Device [sy] on syz0 [ 938.597135][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.7.14343'. [ 938.645230][ T6387] siw: device registration error -23 [ 938.651425][ T6389] siw: device registration error -23 [ 938.853968][ T6401] lo speed is unknown, defaulting to 1000 [ 938.864976][ T6401] lo speed is unknown, defaulting to 1000 [ 938.886559][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14351'. [ 938.958734][T30545] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 938.984509][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14355'. [ 939.042649][ T6458] hub 5-0:1.0: USB hub found [ 939.047413][ T6458] hub 5-0:1.0: 8 ports detected [ 939.075208][ T1036] hid-generic 0000:3000000:0000.006E: hidraw0: HID v0.00 Device [sy] on syz0 [ 939.091089][ T6466] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 939.102467][ T6466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 939.115546][ T6473] loop0: detected capacity change from 0 to 512 [ 939.131015][ T6473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 939.171426][ T6473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 939.374357][ T6504] siw: device registration error -23 [ 939.396951][ T6507] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 939.409176][ T6507] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 939.540460][ T6511] lo speed is unknown, defaulting to 1000 [ 939.546779][ T6511] lo speed is unknown, defaulting to 1000 [ 939.854699][ T3440] hid-generic 0000:3000000:0000.006F: hidraw0: HID v0.00 Device [sy] on syz0 [ 939.868342][ T6582] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 939.890791][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 939.902102][ T6582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.101893][ T6599] lo speed is unknown, defaulting to 1000 [ 940.108122][ T6599] lo speed is unknown, defaulting to 1000 [ 940.446080][ T1036] hid_parser_main: 8 callbacks suppressed [ 940.446098][ T1036] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x4 [ 940.459568][ T1036] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x2 [ 940.540501][ T1036] hid-generic 0000:3000000:0000.0070: unknown main item tag 0x3 [ 940.594941][ T1036] hid-generic 0000:3000000:0000.0070: hidraw0: HID v0.00 Device [sy] on syz0 [ 940.832088][ T29] kauditd_printk_skb: 2826 callbacks suppressed [ 940.832113][ T29] audit: type=1326 audit(940.813:100369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.14417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8514bff749 code=0x7ffc0000 [ 940.864070][ T29] audit: type=1326 audit(940.813:100370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.14417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8514bff749 code=0x7ffc0000 [ 940.887267][ T29] audit: type=1326 audit(940.813:100371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.14417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8514bff749 code=0x7ffc0000 [ 940.910521][ T29] audit: type=1326 audit(940.813:100372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.7.14417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8514bff749 code=0x7ffc0000 [ 940.967871][ T29] audit: type=1326 audit(940.943:100373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 940.991058][ T29] audit: type=1326 audit(940.943:100374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 941.014820][ T29] audit: type=1326 audit(940.983:100375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 941.038244][ T29] audit: type=1326 audit(940.983:100376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 941.061829][ T29] audit: type=1326 audit(940.983:100377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 941.069312][ T6703] FAULT_INJECTION: forcing a failure. [ 941.069312][ T6703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.098104][ T6703] CPU: 1 UID: 0 PID: 6703 Comm: syz.7.14421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 941.098146][ T6703] Tainted: [W]=WARN [ 941.098154][ T6703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 941.098234][ T6703] Call Trace: [ 941.098243][ T6703] [ 941.098333][ T6703] __dump_stack+0x1d/0x30 [ 941.098358][ T6703] dump_stack_lvl+0xe8/0x140 [ 941.098380][ T6703] dump_stack+0x15/0x1b [ 941.098399][ T6703] should_fail_ex+0x265/0x280 [ 941.098494][ T6703] should_fail+0xb/0x20 [ 941.098513][ T6703] should_fail_usercopy+0x1a/0x20 [ 941.098597][ T6703] _copy_from_user+0x1c/0xb0 [ 941.098622][ T6703] ___sys_sendmsg+0xc1/0x1d0 [ 941.098655][ T6703] __x64_sys_sendmsg+0xd4/0x160 [ 941.098706][ T6703] x64_sys_call+0x191e/0x3000 [ 941.098731][ T6703] do_syscall_64+0xd2/0x200 [ 941.098795][ T6703] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 941.098835][ T6703] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 941.098868][ T6703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.098892][ T6703] RIP: 0033:0x7f8514bff749 [ 941.098910][ T6703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.098931][ T6703] RSP: 002b:00007f8513646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.098995][ T6703] RAX: ffffffffffffffda RBX: 00007f8514e56090 RCX: 00007f8514bff749 [ 941.099010][ T6703] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 941.099057][ T6703] RBP: 00007f8513646090 R08: 0000000000000000 R09: 0000000000000000 [ 941.099071][ T6703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.099086][ T6703] R13: 00007f8514e56128 R14: 00007f8514e56090 R15: 00007fff8fbf0298 [ 941.099106][ T6703] [ 941.122907][ T29] audit: type=1326 audit(940.993:100378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.6.14416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 941.345658][ T6702] siw: device registration error -23 [ 941.490887][ T6710] lo speed is unknown, defaulting to 1000 [ 941.506076][ T6710] lo speed is unknown, defaulting to 1000 [ 941.791616][ T6769] __nla_validate_parse: 13 callbacks suppressed [ 941.791635][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14438'. [ 941.838303][ T2967] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x4 [ 941.846087][ T2967] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x2 [ 941.871357][ T2967] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x3 [ 941.918410][ T6776] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 941.959815][ T6776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 942.006122][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14441'. [ 942.012091][ T2967] hid-generic 0000:3000000:0000.0071: hidraw0: HID v0.00 Device [sy] on syz0 [ 942.095081][ T6791] pim6reg1: entered promiscuous mode [ 942.100567][ T6791] pim6reg1: entered allmulticast mode [ 942.199997][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14451'. [ 942.387447][ T6834] lo speed is unknown, defaulting to 1000 [ 942.444416][ T6834] lo speed is unknown, defaulting to 1000 [ 942.462986][ T1036] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x4 [ 942.470754][ T1036] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x2 [ 942.494268][ T1036] hid-generic 0000:3000000:0000.0072: unknown main item tag 0x3 [ 942.513870][ T1036] hid-generic 0000:3000000:0000.0072: hidraw0: HID v0.00 Device [sy] on syz0 [ 942.679645][ T7871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.771404][ T7871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.823784][ T7871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.851586][ T6883] lo speed is unknown, defaulting to 1000 [ 942.857750][ T6883] lo speed is unknown, defaulting to 1000 [ 942.893810][ T7871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.924026][ T6968] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14480'. [ 943.000039][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 943.022101][ T7871] bridge_slave_1: left allmulticast mode [ 943.027795][ T7871] bridge_slave_1: left promiscuous mode [ 943.033557][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.042786][ T7871] bridge_slave_0: left allmulticast mode [ 943.048473][ T7871] bridge_slave_0: left promiscuous mode [ 943.054264][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.801306][ T7871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.811504][ T7871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.821308][ T7871] bond0 (unregistering): Released all slaves [ 943.855091][ T7095] pim6reg1: entered promiscuous mode [ 943.860572][ T7095] pim6reg1: entered allmulticast mode [ 943.926643][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.933782][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.941390][ T6883] bridge_slave_0: entered allmulticast mode [ 943.948098][ T6883] bridge_slave_0: entered promiscuous mode [ 943.956651][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.963847][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.972127][ T6883] bridge_slave_1: entered allmulticast mode [ 943.978878][ T6883] bridge_slave_1: entered promiscuous mode [ 944.011259][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.056100][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.102916][ T6883] team0: Port device team_slave_0 added [ 944.119632][ T7077] lo speed is unknown, defaulting to 1000 [ 944.126689][ T6883] team0: Port device team_slave_1 added [ 944.135306][ T7077] lo speed is unknown, defaulting to 1000 [ 944.154215][ T7871] hsr_slave_0: left promiscuous mode [ 944.160193][ T7871] hsr_slave_1: left promiscuous mode [ 944.169373][ T7871] veth1_macvtap: left promiscuous mode [ 944.174960][ T7871] veth0_macvtap: left promiscuous mode [ 944.225876][ T7871] team0 (unregistering): Port device team_slave_0 removed [ 944.272202][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.279341][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.305452][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.316809][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.323992][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.350020][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.395822][ T6883] hsr_slave_0: entered promiscuous mode [ 944.404112][ T6883] hsr_slave_1: entered promiscuous mode [ 944.410189][ T6883] debugfs: 'hsr0' already exists in 'hsr' [ 944.416015][ T6883] Cannot create hsr debugfs directory [ 944.736213][ T7378] hub 5-0:1.0: USB hub found [ 944.741072][ T7378] hub 5-0:1.0: 8 ports detected [ 944.884286][ T6883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.896728][ T6883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 944.907719][ T6883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 944.919961][ T6883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 944.971219][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14504'. [ 945.013860][ T3440] hid-generic 0000:3000000:0000.0073: unknown main item tag 0x4 [ 945.019531][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.029651][ T3440] hid-generic 0000:3000000:0000.0073: hidraw0: HID v0.00 Device [sy] on syz0 [ 945.057805][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.069451][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.076586][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.089540][ T7428] hub 5-0:1.0: USB hub found [ 945.095985][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.099332][ T7428] hub 5-0:1.0: 8 ports detected [ 945.103091][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.189142][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.205349][ T7441] loop0: detected capacity change from 0 to 512 [ 945.215831][ T7441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 945.241449][ T7441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 945.301025][ T6883] veth0_vlan: entered promiscuous mode [ 945.309591][ T6883] veth1_vlan: entered promiscuous mode [ 945.329055][ T6883] veth0_macvtap: entered promiscuous mode [ 945.336848][ T6883] veth1_macvtap: entered promiscuous mode [ 945.350884][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.364879][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.377571][ T7864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.386732][ T7864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.396308][ T7864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.407280][ T7864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.564898][ T7471] pim6reg1: entered promiscuous mode [ 945.570393][ T7471] pim6reg1: entered allmulticast mode [ 945.632762][ T7484] siw: device registration error -23 [ 945.658680][ T7486] siw: device registration error -23 [ 945.696768][ T7490] FAULT_INJECTION: forcing a failure. [ 945.696768][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 945.709659][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.6.14524 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 945.709693][ T7490] Tainted: [W]=WARN [ 945.709700][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 945.709711][ T7490] Call Trace: [ 945.709718][ T7490] [ 945.709728][ T7490] __dump_stack+0x1d/0x30 [ 945.709755][ T7490] dump_stack_lvl+0xe8/0x140 [ 945.709777][ T7490] dump_stack+0x15/0x1b [ 945.709853][ T7490] should_fail_ex+0x265/0x280 [ 945.709894][ T7490] should_failslab+0x8c/0xb0 [ 945.709925][ T7490] kmem_cache_alloc_noprof+0x50/0x480 [ 945.709951][ T7490] ? alloc_empty_file+0x76/0x200 [ 945.709979][ T7490] ? mntput+0x4b/0x80 [ 945.710013][ T7490] alloc_empty_file+0x76/0x200 [ 945.710041][ T7490] path_openat+0x68/0x2170 [ 945.710131][ T7490] ? _parse_integer_limit+0x170/0x190 [ 945.710161][ T7490] ? kstrtoull+0x111/0x140 [ 945.710319][ T7490] ? kstrtouint+0x76/0xc0 [ 945.710350][ T7490] do_filp_open+0x109/0x230 [ 945.710381][ T7490] do_sys_openat2+0xa6/0x110 [ 945.710405][ T7490] __x64_sys_openat+0xf2/0x120 [ 945.710449][ T7490] x64_sys_call+0x2eab/0x3000 [ 945.710471][ T7490] do_syscall_64+0xd2/0x200 [ 945.710491][ T7490] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 945.710599][ T7490] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 945.710676][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.710696][ T7490] RIP: 0033:0x7ffb4eb4f749 [ 945.710711][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.710777][ T7490] RSP: 002b:00007ffb4d5af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 945.710800][ T7490] RAX: ffffffffffffffda RBX: 00007ffb4eda5fa0 RCX: 00007ffb4eb4f749 [ 945.710813][ T7490] RDX: 0000000000020000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 945.710825][ T7490] RBP: 00007ffb4d5af090 R08: 0000000000000000 R09: 0000000000000000 [ 945.710843][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.710855][ T7490] R13: 00007ffb4eda6038 R14: 00007ffb4eda5fa0 R15: 00007ffd0013af78 [ 945.710882][ T7490] [ 945.930869][ T29] kauditd_printk_skb: 1957 callbacks suppressed [ 945.930899][ T29] audit: type=1400 audit(945.913:102336): avc: denied { egress } for pid=7866 comm="kworker/u8:37" daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 945.968831][ T29] audit: type=1400 audit(945.913:102337): avc: denied { sendto } for pid=7866 comm="kworker/u8:37" daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 945.969763][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 945.991952][ T29] audit: type=1326 audit(945.913:102338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.0.14508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e6ff749 code=0x7ffc0000 [ 945.991983][ T29] audit: type=1326 audit(945.913:102339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7427 comm="syz.0.14508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e6ff749 code=0x7ffc0000 [ 946.008605][T30545] Bluetooth: hci0: command 0x1003 tx timeout [ 946.024329][ T29] audit: type=1400 audit(945.943:102340): avc: denied { write } for pid=7487 comm="syz.1.14523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 946.072398][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 946.075614][ T29] audit: type=1400 audit(945.943:102341): avc: denied { connect } for pid=7487 comm="syz.1.14523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 946.101062][ T29] audit: type=1400 audit(945.943:102342): avc: denied { name_connect } for pid=7487 comm="syz.1.14523" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 946.123013][ T29] audit: type=1400 audit(945.943:102343): avc: denied { connect } for pid=7487 comm="syz.1.14523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 946.142353][ T29] audit: type=1400 audit(945.943:102344): avc: denied { allowed } for pid=7487 comm="syz.1.14523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 946.161405][ T29] audit: type=1400 audit(945.943:102345): avc: denied { create } for pid=7487 comm="syz.1.14523" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.203886][ T7502] hub 5-0:1.0: USB hub found [ 946.219478][ T7502] hub 5-0:1.0: 8 ports detected [ 946.312339][ T7527] loop7: detected capacity change from 0 to 512 [ 946.321586][ T7527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 946.340454][ T7527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 946.371933][ T7531] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 946.379465][ T7531] vhci_hcd: invalid port number 96 [ 946.384604][ T7531] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 946.539765][ T3416] hid_parser_main: 2 callbacks suppressed [ 946.539780][ T3416] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x4 [ 946.553444][ T3416] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x2 [ 946.561370][ T3416] hid-generic 0000:3000000:0000.0074: unknown main item tag 0x3 [ 946.571149][ T3416] hid-generic 0000:3000000:0000.0074: hidraw0: HID v0.00 Device [sy] on syz0 [ 946.584853][ T7550] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 946.589375][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14540'. [ 946.595736][ T7550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.665095][ T7563] pim6reg1: entered promiscuous mode [ 946.670548][ T7563] pim6reg1: entered allmulticast mode [ 947.034588][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 947.269787][ T3416] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x4 [ 947.277480][ T3416] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x2 [ 947.286209][ T3416] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x3 [ 947.295288][ T3416] hid-generic 0000:3000000:0000.0075: hidraw0: HID v0.00 Device [sy] on syz0 [ 947.322458][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14554'. [ 947.350363][ T7600] hub 5-0:1.0: USB hub found [ 947.355139][ T7600] hub 5-0:1.0: 8 ports detected [ 947.400361][ T7608] 9pnet_fd: Insufficient options for proto=fd [ 947.427022][ T7612] loop7: detected capacity change from 0 to 512 [ 947.436917][ T7612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 947.450237][ T7612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 947.475360][ T7619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 947.481975][ T7619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 947.489545][ T7619] vhci_hcd vhci_hcd.0: Device attached [ 947.501647][ T7619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 947.508177][ T7619] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 947.515996][ T7619] vhci_hcd vhci_hcd.0: Device attached [ 947.524269][ T7619] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.533407][ T7619] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 947.540019][ T7619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 947.547520][ T7619] vhci_hcd vhci_hcd.0: Device attached [ 947.559714][ T7619] can0: slcan on ttyS3. [ 947.593877][ T1036] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x4 [ 947.601825][ T1036] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x2 [ 947.610091][ T1036] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x3 [ 947.618916][ T1036] hid-generic 0000:3000000:0000.0076: hidraw0: HID v0.00 Device [sy] on syz0 [ 947.631151][ T7632] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 947.641613][ T7619] can0 (unregistered): slcan off ttyS3. [ 947.641806][ T7632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.692320][ T7624] vhci_hcd: connection closed [ 947.692427][ T7871] vhci_hcd: stop threads [ 947.701493][ T7871] vhci_hcd: release socket [ 947.705934][ T7871] vhci_hcd: disconnect device [ 947.711247][ T7622] vhci_hcd: connection closed [ 947.711391][ T7620] vhci_hcd: connection closed [ 947.721562][ T7871] vhci_hcd: stop threads [ 947.730511][ T1036] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x4 [ 947.730667][ T7871] vhci_hcd: release socket [ 947.739127][ T1036] hid-generic 0000:3000000:0000.0077: hidraw0: HID v0.00 Device [sy] on syz0 [ 947.742801][ T7871] vhci_hcd: disconnect device [ 947.755633][ T7654] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 947.758885][ T7871] vhci_hcd: stop threads [ 947.772027][ T7871] vhci_hcd: release socket [ 947.776549][ T7871] vhci_hcd: disconnect device [ 947.779340][ T7654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 947.789070][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14566'. [ 947.858865][ T7667] geneve2: entered promiscuous mode [ 947.864127][ T7667] geneve2: entered allmulticast mode [ 947.888866][ T7669] pim6reg1: entered promiscuous mode [ 947.894201][ T7669] pim6reg1: entered allmulticast mode [ 948.189337][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 948.265063][ T7683] loop7: detected capacity change from 0 to 128 [ 948.275883][ T7683] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 948.318811][T30545] Bluetooth: hci0: command 0x1003 tx timeout [ 948.324857][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 948.343827][T31261] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 948.360385][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14575'. [ 948.369672][ T7698] netlink: 15 bytes leftover after parsing attributes in process `syz.0.14575'. [ 948.470626][ T7710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14579'. [ 948.512807][ T7717] hub 5-0:1.0: USB hub found [ 948.512860][ T7717] hub 5-0:1.0: 8 ports detected [ 949.041896][ T7729] lo speed is unknown, defaulting to 1000 [ 949.048064][ T7729] lo speed is unknown, defaulting to 1000 [ 949.260595][ T7771] pim6reg1: entered promiscuous mode [ 949.265948][ T7771] pim6reg1: entered allmulticast mode [ 949.333189][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14592'. [ 949.530709][ T3416] hid-generic 0000:3000000:0000.0078: hidraw0: HID v0.00 Device [sy] on syz0 [ 949.531051][ T7808] hub 5-0:1.0: USB hub found [ 949.545835][ T7808] hub 5-0:1.0: 8 ports detected [ 949.558010][ T7805] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 949.569923][ T7805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 949.690212][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14607'. [ 949.813782][ T7837] siw: device registration error -23 [ 950.113880][ T3440] hid-generic 0000:3000000:0000.0079: hidraw0: HID v0.00 Device [sy] on syz0 [ 950.128391][ T7859] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 950.139548][ T7859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 950.168419][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14618'. [ 950.224829][ T7879] netlink: 'syz.7.14621': attribute type 13 has an invalid length. [ 950.261762][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.268964][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.361119][ T7885] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.370984][ T7885] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.399210][ T7885] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.412628][ T7885] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.425646][ T7883] siw: device registration error -23 [ 950.529661][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14629'. [ 950.564532][ T7908] loop0: detected capacity change from 0 to 1024 [ 950.638040][ T7908] EXT4-fs: Ignoring removed bh option [ 950.647601][ T7916] hub 5-0:1.0: USB hub found [ 950.655037][ T7916] hub 5-0:1.0: 8 ports detected [ 950.663378][ T7908] EXT4-fs: inline encryption not supported [ 950.683034][ T7908] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 950.694402][ T7908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 950.715360][ T7908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.14628: lblock 2 mapped to illegal pblock 2 (length 1) [ 950.736025][ T7908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.14628: lblock 0 mapped to illegal pblock 48 (length 1) [ 950.752695][ T7908] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.14628: Failed to acquire dquot type 0 [ 950.765106][ T7908] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 950.777756][ T7908] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.14628: mark_inode_dirty error [ 950.796368][ T7908] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 950.808277][ T7908] EXT4-fs (loop0): 1 orphan inode deleted [ 950.816134][ T7908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.932023][ T7927] loop7: detected capacity change from 0 to 512 [ 950.940945][ T7927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 950.999513][ T7927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 951.019994][ T29] kauditd_printk_skb: 985 callbacks suppressed [ 951.020011][ T29] audit: type=1400 audit(951.003:103329): avc: denied { add_name } for pid=7915 comm="syz.7.14633" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.047027][ T29] audit: type=1400 audit(951.003:103330): avc: denied { create } for pid=7915 comm="syz.7.14633" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 951.104690][ T7885] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 951.121002][ T7885] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 951.121828][ T29] audit: type=1400 audit(951.063:103331): avc: denied { read append open } for pid=7915 comm="syz.7.14633" path="/331/file0/cpu.stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 951.129504][ T7885] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:56: Failed to release dquot type 0 [ 951.153171][ T29] audit: type=1400 audit(951.063:103332): avc: denied { ioctl } for pid=7915 comm="syz.7.14633" path="/331/file0/cpu.stat" dev="loop7" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 951.200540][ T7908] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.14628: lblock 0 mapped to illegal pblock 48 (length 1) [ 951.230860][ T7908] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 951.247688][ T7932] pim6reg1: entered promiscuous mode [ 951.253130][ T7932] pim6reg1: entered allmulticast mode [ 951.310549][ T29] audit: type=1400 audit(951.293:103333): avc: denied { write } for pid=7897 comm="syz.0.14628" name="udp6" dev="proc" ino=4026534622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 951.347091][ T29] audit: type=1326 audit(951.323:103334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.0.14628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e6ff749 code=0x7ffc0000 [ 951.370311][ T29] audit: type=1326 audit(951.323:103335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.0.14628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082e6ff749 code=0x7ffc0000 [ 951.393416][ T29] audit: type=1326 audit(951.323:103336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.0.14628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f082e6ff749 code=0x7ffc0000 [ 951.532764][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 951.567626][ T7908] lo speed is unknown, defaulting to 1000 [ 951.574615][ T7908] lo speed is unknown, defaulting to 1000 [ 951.701400][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14641'. [ 951.731114][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.828027][ T7978] siw: device registration error -23 [ 951.935563][ T2967] hid_parser_main: 8 callbacks suppressed [ 951.935581][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.948971][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.956261][ T7999] pim6reg1: entered promiscuous mode [ 951.956464][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.961864][ T7999] pim6reg1: entered allmulticast mode [ 951.974765][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.982252][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.989825][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 951.997271][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 952.004774][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 952.012264][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 952.019776][ T2967] hid-generic 0003:0004:0000.007A: unknown main item tag 0x0 [ 952.185639][ T8012] siw: device registration error -23 [ 952.512303][ T2967] hid-generic 0003:0004:0000.007A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 952.895765][ T8059] __nla_validate_parse: 2 callbacks suppressed [ 952.895782][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14664'. [ 952.943115][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14670'. [ 953.030419][ T8071] lo speed is unknown, defaulting to 1000 [ 953.037741][ T8071] lo speed is unknown, defaulting to 1000 [ 953.212145][ T8161] loop0: detected capacity change from 0 to 512 [ 953.248883][ T8161] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 953.266885][ T8150] loop7: detected capacity change from 0 to 32768 [ 953.274037][ T8161] EXT4-fs (loop0): orphan cleanup on readonly fs [ 953.280658][ T8161] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.14683: bad orphan inode 15 [ 953.291141][ T8161] ext4_test_bit(bit=14, block=18) = 1 [ 953.296708][ T8161] is_bad_inode(inode)=0 [ 953.300940][ T8161] NEXT_ORPHAN(inode)=1023 [ 953.305297][ T8161] max_ino=32 [ 953.309569][ T8161] i_nlink=0 [ 953.324191][ T8161] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #15: comm syz.0.14683: corrupted xattr block 19: e_value size too large [ 953.341687][ T8150] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 953.346944][ T8161] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 953.356195][ T8150] loop7: p1 start 460800 is beyond EOD, truncated [ 953.362741][ T8150] loop7: p2 size 83886080 extends beyond EOD, truncated [ 953.371536][ T8161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 953.393237][ T3440] IPVS: starting estimator thread 0... [ 953.401310][ T8150] loop7: p5 start 460800 is beyond EOD, truncated [ 953.407786][ T8150] loop7: p6 size 83886080 extends beyond EOD, truncated [ 953.427197][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.498939][ T8172] IPVS: using max 2736 ests per chain, 136800 per kthread [ 953.509038][ T8193] netlink: 'syz.0.14688': attribute type 1 has an invalid length. [ 953.512122][ T8187] lo speed is unknown, defaulting to 1000 [ 953.517222][ T8193] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14688'. [ 953.524050][ T8187] lo speed is unknown, defaulting to 1000 [ 953.541271][ T8192] siw: device registration error -23 [ 953.617683][ T7885] Bluetooth: hci0: Frame reassembly failed (-84) [ 953.692792][ T8187] loop0: detected capacity change from 0 to 1024 [ 953.700302][ T8187] EXT4-fs: Ignoring removed nomblk_io_submit option [ 953.706981][ T8187] EXT4-fs: Ignoring removed orlov option [ 953.712952][ T8187] ext2: Bad value for 'mb_optimize_scan' [ 953.728973][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14694'. [ 953.741554][ T8187] veth1_to_bridge: entered allmulticast mode [ 953.749611][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.832906][ T8251] netlink: 23 bytes leftover after parsing attributes in process `syz.1.14697'. [ 953.846211][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14697'. [ 953.855551][ T8251] netlink: 15 bytes leftover after parsing attributes in process `syz.1.14697'. [ 953.867353][ T8255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14699'. [ 953.886543][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14699'. [ 953.900933][ T8264] FAULT_INJECTION: forcing a failure. [ 953.900933][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.914121][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.0.14702 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 953.914223][ T8264] Tainted: [W]=WARN [ 953.914231][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 953.914245][ T8264] Call Trace: [ 953.914252][ T8264] [ 953.914260][ T8264] __dump_stack+0x1d/0x30 [ 953.914325][ T8264] dump_stack_lvl+0xe8/0x140 [ 953.914349][ T8264] dump_stack+0x15/0x1b [ 953.914378][ T8264] should_fail_ex+0x265/0x280 [ 953.914409][ T8264] should_fail+0xb/0x20 [ 953.914427][ T8264] should_fail_usercopy+0x1a/0x20 [ 953.914449][ T8264] _copy_from_user+0x1c/0xb0 [ 953.914480][ T8264] ___sys_sendmsg+0xc1/0x1d0 [ 953.914586][ T8264] __x64_sys_sendmsg+0xd4/0x160 [ 953.914613][ T8264] x64_sys_call+0x191e/0x3000 [ 953.914638][ T8264] do_syscall_64+0xd2/0x200 [ 953.914659][ T8264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 953.914736][ T8264] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 953.914774][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.914798][ T8264] RIP: 0033:0x7f082e6ff749 [ 953.914814][ T8264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.914830][ T8264] RSP: 002b:00007f082d15f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 953.914918][ T8264] RAX: ffffffffffffffda RBX: 00007f082e955fa0 RCX: 00007f082e6ff749 [ 953.914933][ T8264] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000005 [ 953.914948][ T8264] RBP: 00007f082d15f090 R08: 0000000000000000 R09: 0000000000000000 [ 953.914973][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.914987][ T8264] R13: 00007f082e956038 R14: 00007f082e955fa0 R15: 00007ffce4e6a898 [ 953.915006][ T8264] [ 953.919098][ T8261] siw: device registration error -23 [ 954.261775][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14707'. [ 954.408276][ T8296] netlink: 'syz.7.14714': attribute type 1 has an invalid length. [ 954.416259][ T8296] netlink: 'syz.7.14714': attribute type 2 has an invalid length. [ 954.425130][ T8296] netlink: 'syz.7.14714': attribute type 1 has an invalid length. [ 954.433530][ T8296] netlink: 'syz.7.14714': attribute type 2 has an invalid length. [ 954.502523][ T8298] loop7: detected capacity change from 0 to 512 [ 954.520573][ T8298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.535981][ T8298] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.14715: corrupted inode contents [ 954.548189][ T8298] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.14715: mark_inode_dirty error [ 954.561048][ T8298] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.14715: corrupted inode contents [ 954.573467][ T8298] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.14715: mark_inode_dirty error [ 954.598631][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.705702][ T8310] siw: device registration error -23 [ 954.751907][ T8315] loop7: detected capacity change from 0 to 512 [ 954.778843][ T8315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.801177][ T8315] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.14720: bg 0: block 18: invalid block bitmap [ 954.835848][ T8323] hub 5-0:1.0: USB hub found [ 954.844123][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.854470][ T8323] hub 5-0:1.0: 8 ports detected [ 954.915147][ T8333] pim6reg1: entered promiscuous mode [ 954.920607][ T8333] pim6reg1: entered allmulticast mode [ 954.945925][ T8337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 955.074022][ T7844] Bluetooth: hci1: Frame reassembly failed (-90) [ 955.678645][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 955.680444][T30427] Bluetooth: hci0: command 0x1003 tx timeout [ 955.786627][ T8397] pim6reg1: entered promiscuous mode [ 955.791993][ T8397] pim6reg1: entered allmulticast mode [ 955.934109][ T8406] siw: device registration error -23 [ 956.005457][ T8412] pim6reg1: entered promiscuous mode [ 956.011140][ T8412] pim6reg1: entered allmulticast mode [ 956.051723][ T29] kauditd_printk_skb: 912 callbacks suppressed [ 956.051739][ T29] audit: type=1326 audit(956.033:104249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 956.081114][ T29] audit: type=1326 audit(956.033:104250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 956.104476][ T29] audit: type=1326 audit(956.033:104251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb4eb4df90 code=0x7ffc0000 [ 956.127601][ T29] audit: type=1400 audit(956.033:104252): avc: denied { read } for pid=8419 comm="syz.6.14746" dev="nsfs" ino=4026534331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 956.148395][ T29] audit: type=1400 audit(956.033:104253): avc: denied { open } for pid=8419 comm="syz.6.14746" path="net:[4026534331]" dev="nsfs" ino=4026534331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 956.171241][ T29] audit: type=1326 audit(956.033:104254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffb4eb50f77 code=0x7ffc0000 [ 956.194387][ T29] audit: type=1326 audit(956.033:104255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 956.217417][ T29] audit: type=1326 audit(956.033:104256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffb4eb50f77 code=0x7ffc0000 [ 956.240670][ T29] audit: type=1326 audit(956.033:104257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb4eb4e3aa code=0x7ffc0000 [ 956.263703][ T29] audit: type=1326 audit(956.033:104258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8419 comm="syz.6.14746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4eb4f749 code=0x7ffc0000 [ 956.304449][ T8428] program syz.2.14749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.319886][ T7885] Bluetooth: hci3: Frame reassembly failed (-84) [ 956.327301][ T8430] Bluetooth: hci3: Frame reassembly failed (-90) [ 956.395322][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.402848][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.410653][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.418039][ T8442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.551408][ T1036] hid-generic 0000:3000000:0000.007B: hidraw0: HID v0.00 Device [sy] on syz0 [ 956.609935][ T8460] pim6reg1: entered promiscuous mode [ 956.615279][ T8460] pim6reg1: entered allmulticast mode [ 956.692944][ T8467] pim6reg1: entered promiscuous mode [ 956.698310][ T8467] pim6reg1: entered allmulticast mode [ 956.817863][ T8475] siw: device registration error -23 [ 957.118671][T30545] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 957.462360][ T3440] hid_parser_main: 11 callbacks suppressed [ 957.462375][ T3440] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x4 [ 957.475929][ T3440] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x2 [ 957.483830][ T3440] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x3 [ 957.492812][ T3440] hid-generic 0000:3000000:0000.007C: hidraw0: HID v0.00 Device [sy] on syz0 [ 957.506423][ T8501] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 957.517200][ T8501] IPv6: NLM_F_CREATE should be specified when creating new route [ 957.525155][ T8501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 957.532518][ T8501] IPv6: NLM_F_CREATE should be set when creating new route [ 957.630411][ T8524] pim6reg1: entered promiscuous mode [ 957.635746][ T8524] pim6reg1: entered allmulticast mode [ 957.825364][ T8545] pim6reg1: entered promiscuous mode [ 957.830950][ T8545] pim6reg1: entered allmulticast mode [ 957.855844][ T8536] lo speed is unknown, defaulting to 1000 [ 957.862017][ T8536] lo speed is unknown, defaulting to 1000 [ 958.036344][ T8582] program syz.1.14789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.112237][ T8588] hub 5-0:1.0: USB hub found [ 958.117084][ T8588] hub 5-0:1.0: 8 ports detected [ 958.368712][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 958.400033][T30427] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 958.688615][ T8629] pim6reg1: entered promiscuous mode [ 958.694001][ T8629] pim6reg1: entered allmulticast mode [ 958.769538][ T8626] lo speed is unknown, defaulting to 1000 [ 958.775831][ T8626] lo speed is unknown, defaulting to 1000 [ 958.843742][ T8672] loop0: detected capacity change from 0 to 128 [ 958.850879][ T8672] FAT-fs (loop0): bogus number of reserved sectors [ 958.857495][ T8672] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 958.867081][ T8672] FAT-fs (loop0): Can't find a valid FAT filesystem [ 958.886517][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x1 [ 958.894056][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.901490][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.909043][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.916476][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.923916][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.931367][ T3401] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 958.954550][ T3401] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 959.149345][ T8719] loop0: detected capacity change from 0 to 512 [ 959.156370][ T8721] pim6reg1: entered promiscuous mode [ 959.161816][ T8721] pim6reg1: entered allmulticast mode [ 959.166334][ T8719] EXT4-fs: inline encryption not supported [ 959.174031][ T8719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 959.185616][ T8719] EXT4-fs (loop0): 1 truncate cleaned up [ 959.193455][ T8719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.375544][T30626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.643182][ T8734] lo speed is unknown, defaulting to 1000 [ 959.657594][ T8734] lo speed is unknown, defaulting to 1000 [ 959.660022][ T1036] hid-generic 0000:3000000:0000.007E: hidraw0: HID v0.00 Device [sy] on syz0 [ 959.686133][ T8746] pim6reg1: entered promiscuous mode [ 959.691664][ T8746] pim6reg1: entered allmulticast mode [ 959.731835][ T8782] siw: device registration error -23 [ 959.762669][ T8784] pim6reg1: entered promiscuous mode [ 959.768075][ T8784] pim6reg1: entered allmulticast mode [ 959.790085][ T3401] hid-generic 0000:3000000:0000.007F: hidraw0: HID v0.00 Device [sy] on syz0 [ 959.847774][ T8805] pim6reg1: entered promiscuous mode [ 959.853217][ T8805] pim6reg1: entered allmulticast mode [ 959.990821][T27542] hid-generic 0000:3000000:0000.0080: hidraw0: HID v0.00 Device [sy] on syz0 [ 960.093677][ T8844] pim6reg1: entered promiscuous mode [ 960.099066][ T8844] pim6reg1: entered allmulticast mode [ 960.235280][ T8850] lo speed is unknown, defaulting to 1000 [ 960.242302][ T8850] lo speed is unknown, defaulting to 1000 [ 960.245492][ T8871] __nla_validate_parse: 12 callbacks suppressed [ 960.245507][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14848'. [ 960.256673][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14846'. [ 960.272540][ T8883] netlink: 15 bytes leftover after parsing attributes in process `syz.6.14846'. [ 960.493601][ T8925] pim6reg1: entered promiscuous mode [ 960.498998][ T8925] pim6reg1: entered allmulticast mode [ 960.519287][ T8932] loop7: detected capacity change from 0 to 512 [ 960.532616][ T8932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.548380][ T8932] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.14858: bg 0: block 18: invalid block bitmap [ 960.570685][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.600734][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14859'. [ 960.617979][ T8949] siw: device registration error -23 [ 960.752797][ T7844] Bluetooth: hci1: Frame reassembly failed (-84) [ 960.761155][ T8977] Bluetooth: hci1: Frame reassembly failed (-90) [ 960.794302][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14871'. [ 960.824799][ T8967] lo speed is unknown, defaulting to 1000 [ 960.839707][ T8967] lo speed is unknown, defaulting to 1000 [ 960.851823][ T8997] loop7: detected capacity change from 0 to 512 [ 960.881443][ T8997] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.905259][T31261] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.925666][ T9023] siw: device registration error -23 [ 960.984966][ T9027] pim6reg1: entered promiscuous mode [ 960.990523][ T9027] pim6reg1: entered allmulticast mode [ 961.039074][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 961.067402][ T9039] netlink: 'syz.6.14877': attribute type 10 has an invalid length. [ 961.080283][ T9039] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.088572][ T9039] bond0: (slave team0): Enslaving as an active interface with an up link [ 961.100024][ T29] kauditd_printk_skb: 2040 callbacks suppressed [ 961.100042][ T29] audit: type=1400 audit(961.083:106299): avc: denied { create } for pid=9038 comm="syz.6.14877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.128622][ T29] audit: type=1400 audit(961.103:106300): avc: denied { recv } for pid=9038 comm="syz.6.14877" saddr=10.128.0.163 src=30036 daddr=10.128.0.170 dest=60342 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 961.168441][ T29] audit: type=1400 audit(961.143:106301): avc: denied { map_create } for pid=9048 comm="syz.1.14880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.187431][ T29] audit: type=1400 audit(961.143:106302): avc: denied { map_create } for pid=9038 comm="syz.6.14877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.201700][ T9039] FAULT_INJECTION: forcing a failure. [ 961.201700][ T9039] name failslab, interval 1, probability 0, space 0, times 0 [ 961.206358][ T29] audit: type=1400 audit(961.143:106303): avc: denied { perfmon } for pid=9038 comm="syz.6.14877" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 961.218972][ T9039] CPU: 0 UID: 0 PID: 9039 Comm: syz.6.14877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 961.219004][ T9039] Tainted: [W]=WARN [ 961.219012][ T9039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 961.219023][ T9039] Call Trace: [ 961.219045][ T9039] [ 961.219053][ T9039] __dump_stack+0x1d/0x30 [ 961.219077][ T9039] dump_stack_lvl+0xe8/0x140 [ 961.219097][ T9039] dump_stack+0x15/0x1b [ 961.219175][ T9039] should_fail_ex+0x265/0x280 [ 961.219249][ T9039] ? __hw_addr_add_ex+0x162/0x440 [ 961.219277][ T9039] should_failslab+0x8c/0xb0 [ 961.219305][ T9039] __kmalloc_cache_noprof+0x4c/0x4a0 [ 961.219360][ T9039] __hw_addr_add_ex+0x162/0x440 [ 961.219390][ T9039] dev_uc_add_excl+0x69/0xb0 [ 961.219419][ T9039] ndo_dflt_fdb_add+0x103/0x1a0 [ 961.219440][ T9039] rtnl_fdb_add+0x59c/0x670 [ 961.219508][ T9039] ? __pfx_rtnl_fdb_add+0x10/0x10 [ 961.219532][ T9039] rtnetlink_rcv_msg+0x65a/0x6d0 [ 961.219558][ T9039] netlink_rcv_skb+0x123/0x220 [ 961.219625][ T9039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 961.219653][ T9039] rtnetlink_rcv+0x1c/0x30 [ 961.219674][ T9039] netlink_unicast+0x5c0/0x690 [ 961.219722][ T9039] netlink_sendmsg+0x58b/0x6b0 [ 961.219744][ T9039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 961.219764][ T9039] __sock_sendmsg+0x145/0x180 [ 961.219805][ T9039] ____sys_sendmsg+0x31e/0x4e0 [ 961.219827][ T9039] ___sys_sendmsg+0x17b/0x1d0 [ 961.219857][ T9039] __x64_sys_sendmsg+0xd4/0x160 [ 961.219887][ T9039] x64_sys_call+0x191e/0x3000 [ 961.219909][ T9039] do_syscall_64+0xd2/0x200 [ 961.219961][ T9039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 961.219988][ T9039] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 961.220064][ T9039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.220085][ T9039] RIP: 0033:0x7ffb4eb4f749 [ 961.220112][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.220131][ T9039] RSP: 002b:00007ffb4d5af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.220151][ T9039] RAX: ffffffffffffffda RBX: 00007ffb4eda5fa0 RCX: 00007ffb4eb4f749 [ 961.220164][ T9039] RDX: 0000000024040040 RSI: 0000200000000000 RDI: 000000000000000b [ 961.220178][ T9039] RBP: 00007ffb4d5af090 R08: 0000000000000000 R09: 0000000000000000 [ 961.220190][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.220227][ T9039] R13: 00007ffb4eda6038 R14: 00007ffb4eda5fa0 R15: 00007ffd0013af78 [ 961.220245][ T9039] [ 961.484750][ T29] audit: type=1400 audit(961.143:106304): avc: denied { map_read map_write } for pid=9038 comm="syz.6.14877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.504451][ T29] audit: type=1400 audit(961.143:106305): avc: denied { bpf } for pid=9048 comm="syz.1.14880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 961.524703][ T29] audit: type=1400 audit(961.143:106306): avc: denied { prog_load } for pid=9038 comm="syz.6.14877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.543720][ T29] audit: type=1400 audit(961.153:106307): avc: denied { read write } for pid=31261 comm="syz-executor" name="loop7" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 961.566629][ T29] audit: type=1400 audit(961.153:106308): avc: denied { open } for pid=31261 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 961.613189][ T9069] siw: device registration error -23 [ 961.662538][ T9077] netlink: 332 bytes leftover after parsing attributes in process `syz.7.14887'. [ 961.672372][ T9077] netlink: 'syz.7.14887': attribute type 9 has an invalid length. [ 961.675490][ T9086] netlink: 7 bytes leftover after parsing attributes in process `syz.1.14886'. [ 961.680469][ T9077] netlink: 108 bytes leftover after parsing attributes in process `syz.7.14887'. [ 961.680488][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.7.14887'. [ 961.723979][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14886'. [ 961.762048][ T7848] Bluetooth: hci0: Frame reassembly failed (-84) [ 961.821838][ T9079] lo speed is unknown, defaulting to 1000 [ 961.827978][ T9079] lo speed is unknown, defaulting to 1000 [ 962.185961][ T9136] FAULT_INJECTION: forcing a failure. [ 962.185961][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 962.198715][ T9136] CPU: 0 UID: 0 PID: 9136 Comm: syz.7.14895 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 962.198752][ T9136] Tainted: [W]=WARN [ 962.198759][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 962.198772][ T9136] Call Trace: [ 962.198779][ T9136] [ 962.198787][ T9136] __dump_stack+0x1d/0x30 [ 962.198813][ T9136] dump_stack_lvl+0xe8/0x140 [ 962.198846][ T9136] dump_stack+0x15/0x1b [ 962.198865][ T9136] should_fail_ex+0x265/0x280 [ 962.198901][ T9136] should_failslab+0x8c/0xb0 [ 962.198949][ T9136] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 962.198983][ T9136] ? sidtab_sid2str_get+0xa0/0x130 [ 962.199011][ T9136] kmemdup_noprof+0x2b/0x70 [ 962.199092][ T9136] sidtab_sid2str_get+0xa0/0x130 [ 962.199182][ T9136] security_sid_to_context_core+0x1eb/0x2e0 [ 962.199295][ T9136] security_sid_to_context+0x27/0x40 [ 962.199327][ T9136] avc_audit_post_callback+0x10f/0x520 [ 962.199370][ T9136] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 962.199482][ T9136] common_lsm_audit+0x1bb/0x230 [ 962.199532][ T9136] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 962.199596][ T9136] slow_avc_audit+0x104/0x140 [ 962.199631][ T9136] avc_has_perm+0x13a/0x180 [ 962.199738][ T9136] sel_write_load+0xf8/0x380 [ 962.199751][ T9136] ? __pfx_sel_write_load+0x10/0x10 [ 962.199763][ T9136] vfs_write+0x269/0x960 [ 962.199779][ T9136] ? __rcu_read_unlock+0x4f/0x70 [ 962.199795][ T9136] ? __fget_files+0x184/0x1c0 [ 962.199843][ T9136] ksys_write+0xda/0x1a0 [ 962.199859][ T9136] __x64_sys_write+0x40/0x50 [ 962.199998][ T9136] x64_sys_call+0x2802/0x3000 [ 962.200107][ T9136] do_syscall_64+0xd2/0x200 [ 962.200120][ T9136] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 962.200213][ T9136] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 962.200282][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.200351][ T9136] RIP: 0033:0x7f8514bff749 [ 962.200363][ T9136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.200376][ T9136] RSP: 002b:00007f8513667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.200390][ T9136] RAX: ffffffffffffffda RBX: 00007f8514e55fa0 RCX: 00007f8514bff749 [ 962.200399][ T9136] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000006 [ 962.200453][ T9136] RBP: 00007f8513667090 R08: 0000000000000000 R09: 0000000000000000 [ 962.200461][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.200469][ T9136] R13: 00007f8514e56038 R14: 00007f8514e55fa0 R15: 00007fff8fbf0298 [ 962.200481][ T9136] [ 962.471727][ T9136] SELinux: failed to load policy [ 962.500485][ T9162] pim6reg1: entered promiscuous mode [ 962.505844][ T9162] pim6reg1: entered allmulticast mode [ 962.529830][ T9159] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 962.569322][ T1036] hid_parser_main: 40 callbacks suppressed [ 962.569355][ T1036] hid-generic 0000:3000000:0000.0081: unknown main item tag 0x4 [ 962.582949][ T1036] hid-generic 0000:3000000:0000.0081: unknown main item tag 0x2 [ 962.604726][ T1036] hid-generic 0000:3000000:0000.0081: unknown main item tag 0x3 [ 962.614214][ T1036] hid-generic 0000:3000000:0000.0081: hidraw0: HID v0.00 Device [sy] on syz0 [ 962.625937][ T9172] lo speed is unknown, defaulting to 1000 [ 962.632419][ T9172] lo speed is unknown, defaulting to 1000 [ 962.636816][ T9177] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 962.658067][ T9177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.784264][ T9242] netlink: 'syz.2.14910': attribute type 10 has an invalid length. [ 962.795979][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.798612][T30427] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 962.804591][ T9242] bond0: (slave team0): Enslaving as an active interface with an up link [ 962.808796][T30400] Bluetooth: hci1: command 0x1003 tx timeout [ 962.984184][ T9272] sch_fq: defrate 4294967295 ignored. [ 963.072435][ T9285] pim6reg1: entered promiscuous mode [ 963.077879][ T9285] pim6reg1: entered allmulticast mode [ 963.216661][ T7844] Bluetooth: hci1: Frame reassembly failed (-84) [ 963.224727][ T9305] Bluetooth: hci1: Frame reassembly failed (-90) [ 963.366880][ T9309] lo speed is unknown, defaulting to 1000 [ 963.373184][ T9309] lo speed is unknown, defaulting to 1000 [ 963.694427][ T9374] siw: device registration error -23 [ 963.735460][ T9383] pim6reg1: entered promiscuous mode [ 963.740835][ T9383] pim6reg1: entered allmulticast mode [ 963.838720][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 964.071080][ T9433] pim6reg1: entered promiscuous mode [ 964.076440][ T9433] pim6reg1: entered allmulticast mode [ 964.666561][ T7848] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.699410][ T9444] lo speed is unknown, defaulting to 1000 [ 964.699779][ T9444] lo speed is unknown, defaulting to 1000 [ 964.731911][ T9493] siw: device registration error -23 [ 964.733392][ T7848] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.770929][ T7885] ================================================================== [ 964.770957][ T7885] BUG: KCSAN: data-race in alloc_pid / copy_process [ 964.770985][ T7885] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 964.770991][ T7885] read-write to 0xffffffff8685ff98 of 4 bytes by task 7844 on cpu 0: [ 964.771006][ T7885] alloc_pid+0x539/0x720 [ 964.771023][ T7885] copy_process+0xe25/0x2000 [ 964.771044][ T7885] kernel_clone+0x16c/0x5c0 [ 964.771067][ T7885] user_mode_thread+0x7d/0xb0 [ 964.771090][ T7885] call_usermodehelper_exec_work+0x41/0x160 [ 964.771108][ T7885] process_scheduled_works+0x4ce/0x9d0 [ 964.771135][ T7885] worker_thread+0x582/0x770 [ 964.771149][ T7885] kthread+0x489/0x510 [ 964.771168][ T7885] ret_from_fork+0x122/0x1b0 [ 964.771185][ T7885] ret_from_fork_asm+0x1a/0x30 [ 964.771205][ T7885] [ 964.771209][ T7885] read to 0xffffffff8685ff98 of 4 bytes by task 7885 on cpu 1: [ 964.771223][ T7885] copy_process+0x17fc/0x2000 [ 964.771245][ T7885] kernel_clone+0x16c/0x5c0 [ 964.771267][ T7885] user_mode_thread+0x7d/0xb0 [ 964.771290][ T7885] call_usermodehelper_exec_work+0x41/0x160 [ 964.771308][ T7885] process_scheduled_works+0x4ce/0x9d0 [ 964.771334][ T7885] worker_thread+0x582/0x770 [ 964.771349][ T7885] kthread+0x489/0x510 [ 964.771366][ T7885] ret_from_fork+0x122/0x1b0 [ 964.771383][ T7885] ret_from_fork_asm+0x1a/0x30 [ 964.771402][ T7885] [ 964.771406][ T7885] value changed: 0x8000027b -> 0x8000027c [ 964.771416][ T7885] [ 964.771420][ T7885] Reported by Kernel Concurrency Sanitizer on: [ 964.771433][ T7885] CPU: 1 UID: 0 PID: 7885 Comm: kworker/u8:56 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 964.771460][ T7885] Tainted: [W]=WARN [ 964.771466][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 964.771478][ T7885] Workqueue: events_unbound call_usermodehelper_exec_work [ 964.771498][ T7885] ================================================================== [ 964.855611][ T7848] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.071587][ T7848] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.215408][ T7848] bridge_slave_1: left allmulticast mode [ 965.221116][ T7848] bridge_slave_1: left promiscuous mode [ 965.226848][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.234909][ T7848] bridge_slave_0: left allmulticast mode [ 965.240614][ T7848] bridge_slave_0: left promiscuous mode [ 965.246361][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.278626][T30400] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 965.278837][ T3556] Bluetooth: hci1: command 0x1003 tx timeout [ 966.158883][ T2967] SELinux: failure in sel_netif_sid_slow(), invalid network interface (130) [ 966.167674][ T2967] SELinux: failure in sel_netif_sid_slow(), invalid network interface (131) [ 966.331064][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.340717][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.349929][ T7848] bond0 (unregistering): Released all slaves [ 966.373459][ T7848] tipc: Left network mode [ 966.409851][ T7848] hsr_slave_0: left promiscuous mode [ 966.415601][ T7848] hsr_slave_1: left promiscuous mode [ 966.424132][ T7848] veth1_macvtap: left promiscuous mode [ 966.429652][ T7848] veth0_macvtap: left promiscuous mode [ 966.474470][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 966.483702][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 967.063101][ T7848] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.112106][ T7848] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.171582][ T7848] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.210887][ T7848] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.274337][ T7848] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.310975][ T7848] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.380596][ T7848] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.460865][ T7848] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.514308][ T7848] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.551064][ T7848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.601537][ T7848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.671854][ T7848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.893353][ T7848] bridge_slave_1: left allmulticast mode [ 967.899032][ T7848] bridge_slave_1: left promiscuous mode [ 967.904685][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.912466][ T7848] bridge_slave_0: left allmulticast mode [ 967.918096][ T7848] bridge_slave_0: left promiscuous mode [ 967.923842][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.932572][ T7848] bridge_slave_1: left allmulticast mode [ 967.938200][ T7848] bridge_slave_1: left promiscuous mode [ 967.943966][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.951683][ T7848] bridge_slave_0: left allmulticast mode [ 967.957345][ T7848] bridge_slave_0: left promiscuous mode [ 967.963016][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.974320][ T7848] bridge_slave_1: left allmulticast mode [ 967.980162][ T7848] bridge_slave_1: left promiscuous mode [ 967.985859][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.993497][ T7848] bridge_slave_0: left allmulticast mode [ 967.999185][ T7848] bridge_slave_0: left promiscuous mode [ 968.004895][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.015862][ T7848] bridge_slave_1: left allmulticast mode [ 968.021552][ T7848] bridge_slave_1: left promiscuous mode [ 968.027183][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.034943][ T7848] bridge_slave_0: left allmulticast mode [ 968.040634][ T7848] bridge_slave_0: left promiscuous mode [ 968.046306][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.240589][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.250553][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.260283][ T7848] bond0 (unregistering): (slave team0): Releasing backup interface [ 968.268625][ T3401] SELinux: failure in sel_netif_sid_slow(), invalid network interface (73) [ 968.269401][ T7848] bond0 (unregistering): Released all slaves [ 968.288620][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (85) [ 968.340216][ T7848] bond0 (unregistering): Released all slaves [ 968.588698][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (93) [ 968.718694][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (87) [ 968.860615][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.870423][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.878729][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (78) [ 968.888812][ T7848] bond0 (unregistering): (slave team0): Releasing backup interface [ 968.897535][ T7848] bond0 (unregistering): Released all slaves [ 968.905687][ T7848] bond1 (unregistering): Released all slaves [ 969.118638][ T1036] SELinux: failure in sel_netif_sid_slow(), invalid network interface (84) [ 969.380401][ T7848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.390064][ T7848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.399655][ T7848] bond0 (unregistering): Released all slaves [ 969.920719][ T7848] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 969.929835][ T7848] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.938925][ T7848] .` (unregistering): Released all slaves [ 970.124767][ T7848] hsr_slave_0: left promiscuous mode [ 970.130424][ T7848] hsr_slave_1: left promiscuous mode [ 970.136618][ T7848] hsr_slave_0: left promiscuous mode [ 970.142452][ T7848] hsr_slave_1: left promiscuous mode [ 970.150378][ T7848] hsr_slave_0: left promiscuous mode [ 970.156277][ T7848] hsr_slave_1: left promiscuous mode [ 970.162499][ T7848] hsr_slave_0: left promiscuous mode [ 970.168175][ T7848] hsr_slave_1: left promiscuous mode [ 970.180427][ T7848] veth1_macvtap: left promiscuous mode [ 970.185990][ T7848] veth0_macvtap: left promiscuous mode [ 970.191960][ T7848] veth1_macvtap: left promiscuous mode [ 970.197423][ T7848] veth0_macvtap: left promiscuous mode [ 970.203328][ T7848] veth1_macvtap: left promiscuous mode [ 970.208831][ T7848] veth0_macvtap: left promiscuous mode [ 970.288572][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 970.298085][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 970.343147][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 970.355173][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 970.398402][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 970.408023][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 970.452166][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 970.461760][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 970.490586][T24522] lo speed is unknown, defaulting to 1000 [ 970.496378][T24522] infiniband syz2: ib_query_port failed (-19) [ 971.138728][ T7848] IPVS: stop unused estimator thread 0...