last executing test programs: 1.817242712s ago: executing program 3 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 1.757769802s ago: executing program 3 (id=875): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.752467633s ago: executing program 3 (id=878): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x1c, r3, 0x1, 0x0, 0x8, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.734812933s ago: executing program 3 (id=879): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@dioread_lock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nodiscard}, {@grpquota}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@bh}, {@errors_continue}]}, 0x1, 0x565, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181082, 0xe1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xe8}}, 0x1000) ioctl$TCXONC(r0, 0x540a, 0x3) 1.325816659s ago: executing program 0 (id=885): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001440)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) 1.26508355s ago: executing program 0 (id=886): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r6 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r5, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r6, 0x567, 0x72, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xfffffffffffffe06) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x100000000010001) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r12, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) 1.254669991s ago: executing program 0 (id=887): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_raw(r1, &(0x7f0000000540)={&(0x7f00000001c0), 0x10, &(0x7f0000000400)={&(0x7f00000004c0)=@canfd={{0x2, 0x1, 0x1}, 0x27, 0x3, 0x0, 0x0, "bc26c8d2a55c39e9efd264fd8661f315c53703f3b0d17829db2d525aa5776afe6ed714b53c7fd80f02df7f5def765cc034f617fba1f176987cc3e7e3f56ab0dc"}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x48040) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000002500000200000000080004"], 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x705380, 0x0) 947.759005ms ago: executing program 2 (id=890): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002004e22e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 944.579985ms ago: executing program 2 (id=891): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x7, 0x8d, 0x1, 0x0, 0xce, 0xff, 0x1, 0x2e, 0x1, 0xf0, 0x5, 0x9, 0x39, 0x1}, 0xe) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0x4000000a, 0x10000}, {0x8, 0x726, 0x6, 0x208, 0xfff, 0x9}, {0x5, 0x9, 0x0, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0x2, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x40003, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x80000001, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x100003, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x6}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x8a89}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0x4000c, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0xffffffff, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x0, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x0, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x200000c5) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010200000000000000000a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) socket$netlink(0x10, 0x3, 0xc) 913.507575ms ago: executing program 4 (id=893): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = msgget$private(0x0, 0x2) msgsnd(r3, &(0x7f0000000100)={0x3}, 0x8, 0x800) msgsnd(r3, &(0x7f0000000340)={0x2}, 0x8, 0x800) msgrcv(r3, &(0x7f0000000740)={0x0, ""/139}, 0x93, 0x3, 0x1000) r4 = socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 880.992856ms ago: executing program 3 (id=894): mkdir(&(0x7f0000000080)='./file0\x00', 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@deltaction={0x4c, 0x18, 0x1, 0x0, 0x25dedbfe, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x4c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2b00, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x5, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) 823.808107ms ago: executing program 2 (id=895): socket(0x2, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000007000000ff0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 797.032878ms ago: executing program 4 (id=896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_read_part_table(0x5d3, &(0x7f0000000000)="$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") bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000001380)="9d03a486dcd5badf9adefbb51a6553eccc15de88bf37a4019bf73ae3a16f1c803c6ad216603098c82b652a3be345aebc0a091d79cff32919d43ab09d41157b5da3c76c82955b1591c15e827720bc62d5af6ad8c10b4a98442f151038d75abad87d95119ae6eeb681", &(0x7f0000001400)=""/237, &(0x7f0000001500)="86b20c2d6a61491ebae982192450952482c005e9520642cc6725625dff3a05eaf5cba93d32854b7c8a776ffe71d90a26a2ea00dfff792fc3bf3f9278d97f562b24cdeb48533d25fed7b74f056e050f44dce86cbf767ff2889526de6ce512ddc30c111f54d57fbc52ed9797c384322e7e0f9b63e01602333bd98fe5b2f85110202cb7d739b866219eae58076f069b97db03dc49a990e81c80aea8ecbba5c30c059994957847544ea60295c03724", &(0x7f0000000580)="f61257b4ed", 0xc, r0}, 0x38) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x8, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="69cc6818ac9dd77643d5ea07f1b63cf02617e1a51da84c2556c5a7addcdbb211770bdcb93d36a21f2b7c8c9b68d652459d1979b63c9b04030a402a5a3217dcae9acd408deacf3530d0867470dad20d9ab1c3ca7159", 0x55}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="02c920d05b11ddd04453716a94c3b40e856e1c1c5eeec61d5f188a0918e25272c90167b406d05657c448a45eedd0ae4cdda21db0eba6020e17f7d601a116f634e54842116b20d1a6f9038e5b8286f7889821503c71ed7860c7817d1625525632042395c6f0c0267eae", 0x69}, {&(0x7f0000000680)="addc2039b792cbde304338609854125e3c0977eda722d2ba22d5271e0270f88e6602ce2c4075ea87990f54eab7a45d4be13774", 0x33}], 0x4, &(0x7f0000000700)=[@hopopts={{0xa0, 0x29, 0x36, {0x84, 0x10, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x19, [0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x92800000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x33, "5241494d41b006bbf909ae0d29d4a8de346cb5eddbc2f281bff6c7444275a1be0bcb18706ebf1af38c399f37476e58bd596a06"}, @ra={0x5, 0x2, 0xb9d3}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0xb8}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0xff, @local, 0x9}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000800)="4f8e2d53222fdad70708a0694d1b987b91c3f1ec71bef2adde4664070f1ac159057ef308f4dd2fd814065e04692c91a3208b6e9a300d1d8694c41421a8f1d40fd4e6ca36b03d06f3be9c5bfb534d3da590532291036b88248b556da158c3dd107ac13c492695975d10474ea8ed5baa5feef39d5f5f8edcafca39d5e64be802d87c220c0c41b51c11dec931c04951efae42750d6ed65f09e73564c3245ccdfbbb68f3831e4b1b61615e71072a368fc5d048eb2a", 0xb3}, {&(0x7f0000000bc0)="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", 0xfb}, {&(0x7f00000008c0)="2da0051805bcbde861ab80a27b29a6043411006f23ae9ffc9b1e2558", 0x1c}, {&(0x7f0000000cc0)="28a5f41e7340b51735771dc0900e59bb3e8c3beace75e2662bbb17535d74e0c949e78339fb1190075bc15a052e787d3136c627189f7234055a0d2b340462c9d276abffea026645dbac6b0bb5d2b14d2d67e07455ba66249afebfd53bf4f3020cfe532106a90e291f8b91baa530e9ff5e58c7adf76cdb4cb1da7d46752587ecfe81735161b162442e", 0x88}, {&(0x7f0000000d80)="0a8d40e044b9e5b68a52268cfdec19aac513e5dfbfd64ca483f0c88d21c00ae9a951f525d3f18c66780a653e92c8a08de7ad3af11eea9a3d0da14fb4711673977bf6a0357eb07a566dd352c1ec7bbc0666cfebf3a6349bcb230961c5cf4bec053b74fd6e9ca1b2c4fe15605464aa440c0b6e951989059210c0cba9f895eae59df6a27b239dc9dec205fd3d7276608767cc", 0x91}], 0x5, &(0x7f0000000ec0)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0xf9, 0x1b, '\x00', [@generic={0x7, 0x70, "afc9057262303cde781d56e8fe8efc5f49da8be021cd3d7efd06ba5f3efed0dd7435fefcfa897019e2b546ef0ede7b382fb51970772cabcee6ae015fc390e20f8fb3c526cc19e8f58148a198afdba748a0e002bb61ebac9be09f450ac6792cbd25dcdb84407887ec83333070729076ca"}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x4, [0x2]}}, @pad1, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0xe2, 0xffef, [0x7, 0x700000000000000, 0x8, 0x43, 0x9, 0x29dc4471, 0x2]}}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x4, 0x61, "2eeef2f2050fcb142cb56a60ea532a011ce96b29a678bfa7e87732fe5bc8b12218a89e71197898b4a264cd3d46287965b4fb38ae6542bacd889a34a801c288f8f89651642f3f0747b861ad30108d01e53273e8e3bf6d3f14426048558ca57d86b8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0xa26474a81bf0f2d1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x0, 0xf, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xda, 0xe, [0x4, 0x963, 0x5, 0x7, 0xb, 0x9a]}}, @hao={0xc9, 0x10, @remote}, @pad1, @pad1, @ra={0x5, 0x2, 0x9100}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0x150, 0x29, 0x37, {0x32, 0x27, '\x00', [@ra={0x5, 0x2, 0xee5}, @generic={0x8, 0xb0, "c7c92cdbe09d468796ea90bf6be7d7b426023f1e714e332a66ef73ab6cc6f1b47fc03eb8d54529f5d9bfc001c43af938fea7535d9c07b59f40ec3c166292646acb7ab99edaed1bc83bb5800a4d6b1ebd55db39c94bf1ae690db5273e1cac0046459d294840d0ba9e36fc6221a646d1986167b12207ffd0fc02c4ee2507b55714ec175ba9863f7257201ae2e13d8d6249d5bb361d7ae7732a7ad136ddafecb5de2880731e79e6cdee1972f7eb0a19f391"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x3, [0x3, 0x1c00000000000, 0x7, 0x10000, 0x8000000000000000]}}, @generic={0x1, 0x11, "df8e603155f212b5fc020adc99312e225c"}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x8fa6, [0x7fff, 0x7fff, 0x2, 0x2, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xfd}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x418}}], 0x2, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, 0x0, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r4) fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.]'], 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000001840)={'dummy0\x00', {0x2, 0x4e22, @loopback}}) r6 = socket(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x100, 0x70bd26, 0x25dfdbfe, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e22, 0x0, 0x4e21, 0x100, 0xa, 0xc0, 0xa0, 0x67}, {0x7ad6, 0xa16, 0x1, 0x1, 0x5, 0x9, 0xfffffffffffffff9}, {0x8, 0xec53, 0x0, 0x2}, 0x6, 0x0, 0x2, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 673.496159ms ago: executing program 4 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 640.73738ms ago: executing program 4 (id=898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_read_part_table(0x5d3, &(0x7f0000000000)="$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") bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000001380)="9d03a486dcd5badf9adefbb51a6553eccc15de88bf37a4019bf73ae3a16f1c803c6ad216603098c82b652a3be345aebc0a091d79cff32919d43ab09d41157b5da3c76c82955b1591c15e827720bc62d5af6ad8c10b4a98442f151038d75abad87d95119ae6eeb681", &(0x7f0000001400)=""/237, &(0x7f0000001500)="86b20c2d6a61491ebae982192450952482c005e9520642cc6725625dff3a05eaf5cba93d32854b7c8a776ffe71d90a26a2ea00dfff792fc3bf3f9278d97f562b24cdeb48533d25fed7b74f056e050f44dce86cbf767ff2889526de6ce512ddc30c111f54d57fbc52ed9797c384322e7e0f9b63e01602333bd98fe5b2f85110202cb7d739b866219eae58076f069b97db03dc49a990e81c80aea8ecbba5c30c059994957847544ea60295c03724", &(0x7f0000000580)="f61257b4ed", 0xc, r0}, 0x38) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x8, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="69cc6818ac9dd77643d5ea07f1b63cf02617e1a51da84c2556c5a7addcdbb211770bdcb93d36a21f2b7c8c9b68d652459d1979b63c9b04030a402a5a3217dcae9acd408deacf3530d0867470dad20d9ab1c3ca7159", 0x55}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="02c920d05b11ddd04453716a94c3b40e856e1c1c5eeec61d5f188a0918e25272c90167b406d05657c448a45eedd0ae4cdda21db0eba6020e17f7d601a116f634e54842116b20d1a6f9038e5b8286f7889821503c71ed7860c7817d1625525632042395c6f0c0267eae", 0x69}, {&(0x7f0000000680)="addc2039b792cbde304338609854125e3c0977eda722d2ba22d5271e0270f88e6602ce2c4075ea87990f54eab7a45d4be13774", 0x33}], 0x4, &(0x7f0000000700)=[@hopopts={{0xa0, 0x29, 0x36, {0x84, 0x10, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x19, [0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x92800000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x33, "5241494d41b006bbf909ae0d29d4a8de346cb5eddbc2f281bff6c7444275a1be0bcb18706ebf1af38c399f37476e58bd596a06"}, @ra={0x5, 0x2, 0xb9d3}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0xb8}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0xff, @local, 0x9}, 0x1c, &(0x7f0000000e40), 0x0, &(0x7f0000000ec0)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0xf9, 0x1b, '\x00', [@generic={0x7, 0x70, "afc9057262303cde781d56e8fe8efc5f49da8be021cd3d7efd06ba5f3efed0dd7435fefcfa897019e2b546ef0ede7b382fb51970772cabcee6ae015fc390e20f8fb3c526cc19e8f58148a198afdba748a0e002bb61ebac9be09f450ac6792cbd25dcdb84407887ec83333070729076ca"}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x4, [0x2]}}, @pad1, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0xe2, 0xffef, [0x7, 0x700000000000000, 0x8, 0x43, 0x9, 0x29dc4471, 0x2]}}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x4, 0x61, "2eeef2f2050fcb142cb56a60ea532a011ce96b29a678bfa7e87732fe5bc8b12218a89e71197898b4a264cd3d46287965b4fb38ae6542bacd889a34a801c288f8f89651642f3f0747b861ad30108d01e53273e8e3bf6d3f14426048558ca57d86b8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0xa26474a81bf0f2d1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x0, 0xf, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xda, 0xe, [0x4, 0x963, 0x5, 0x7, 0xb, 0x9a]}}, @hao={0xc9, 0x10, @remote}, @pad1, @pad1, @ra={0x5, 0x2, 0x9100}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0x150, 0x29, 0x37, {0x32, 0x27, '\x00', [@ra={0x5, 0x2, 0xee5}, @generic={0x8, 0xb0, "c7c92cdbe09d468796ea90bf6be7d7b426023f1e714e332a66ef73ab6cc6f1b47fc03eb8d54529f5d9bfc001c43af938fea7535d9c07b59f40ec3c166292646acb7ab99edaed1bc83bb5800a4d6b1ebd55db39c94bf1ae690db5273e1cac0046459d294840d0ba9e36fc6221a646d1986167b12207ffd0fc02c4ee2507b55714ec175ba9863f7257201ae2e13d8d6249d5bb361d7ae7732a7ad136ddafecb5de2880731e79e6cdee1972f7eb0a19f391"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x3, [0x3, 0x1c00000000000, 0x7, 0x10000, 0x8000000000000000]}}, @generic={0x1, 0x11, "df8e603155f212b5fc020adc99312e225c"}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x8fa6, [0x7fff, 0x7fff, 0x2, 0x2, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xfd}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x418}}], 0x2, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, 0x0, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r4) fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.]'], 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000001840)={'dummy0\x00', {0x2, 0x4e22, @loopback}}) r6 = socket(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x100, 0x70bd26, 0x25dfdbfe, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e22, 0x0, 0x4e21, 0x100, 0xa, 0xc0, 0xa0, 0x67}, {0x7ad6, 0xa16, 0x1, 0x1, 0x5, 0x9, 0xfffffffffffffff9}, {0x8, 0xec53, 0x0, 0x2}, 0x6, 0x0, 0x2, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 640.06042ms ago: executing program 2 (id=899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 560.869401ms ago: executing program 2 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0x4000000000000000) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) (async, rerun: 64) recvmsg$unix(r2, &(0x7f0000000300)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000140)=""/232, 0xe8}], 0x2, &(0x7f00000002c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x10002) (rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071afe000000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async, rerun: 64) socket(0xa, 0x2, 0x0) (async, rerun: 64) r7 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) (async, rerun: 64) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) syz_open_dev$evdev(0x0, 0x2, 0x862b01) (async) poll(0x0, 0x0, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 552.740571ms ago: executing program 4 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000010101020000000000000000020000080c001980080001000c0000000600124000020000180001800c0002800500010001000000060001"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) 522.312171ms ago: executing program 2 (id=903): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)="276a2cf7000000007a5dce779d46889d7a6e2f98c5db8bd86fc52942f5f591f689405931411c4ac602772ec3cabb4ff5836c", &(0x7f0000000580), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008020) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r4 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="1c0000042b57004d000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000000080101000000000000000007000007050039596d5e00000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5c091}, 0xc081) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x40840) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 515.929412ms ago: executing program 4 (id=904): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@dioread_lock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nodiscard}, {@grpquota}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@bh}, {@errors_continue}]}, 0x1, 0x565, &(0x7f0000001540)="$eJzs3c9rHFUcAPDvbLLpj1SbQikqIoEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+Jd7x6L/4B/RUELRUrQg5fIbGbTtNlNtuk2m7ifD0x4b2c2b7775vv2zc4sG0DfGs3+FCJejohvkojDEZHk6wYjXzm6ut3yw+tT2ZLEysqnfyWN7bJ68381nzecV16KiN++ijhZ2NhubXFptlyppPN5faw+d2Wstrh06tJceSadSS9PTE6eeXty4r133+larG+c/+f7T+5+eObr48vf/XL/yO0kzsahfN36OJ7BjfWV0RjNX5NinH1iw/EuNLabJL3eAbZlIM/zYmRjwOEYyLMe+P/7MiJWgD6VyH/oU815QPPcvkvnwXvGgw9WT4A2xj+4+tlI7G+cGx1cTh47M8rOd0e60H7Wxq9/3rmdLdG9zyEAtnTjZkScHhzcOP4l+fi3fac72ObJNox/sHPuZvOfN1vNfwpr859oMf8ZbpG727F1/hfud6GZtrL53/st579rF61GBvLaC405XzG5eKmSZmPbixFxIor7snq76znHhyPOLN9badf++vlftmTtN+eC+X7cH9z3+HOmy/Xys8bd9OBmxCst57/JWv8nLfo/ez3Od9jGsfTOa+3WbR3/87XyU8TrLfv/0RWtZPPrk2ON42GseVRs9PetY7+3a7/X8Wf9f3Dz+EeS9ddra0/fxo/7/03brXss/uj8+B9KPmuUh/LHrpXr9fnxiKHk442PTzx6brPe3D6L/8Txzce/Vsf/gYj4vMP4bx39+dWO4u9R/08/Vf9vXhiKjavuffTFD+3a72z8e6tROpE/0sn4t/WebvdoBgAAAAAAgN2rEBGHIimU1sqFQqm0en/H0ThYqFRr9ZMXqwuXp6PxXdmRKBaaV7oPr7sfYjy/H7ZZn3iiPhkRRyLi24EDjXppqlqZ7nXwAAAAAAAAAAAAAAAAAAAAsEsMt/n+f+aPgV7vHfDc+clv6F9b5n83fukJ2JW8/0P/kv/Qv+Q/9C/5D/2rTf4Xdno/gJ3n/R/6l/yH/iX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKvOnzuXLSvLD69PZfXpq4sLs9Wrp6bT2mxpbmGqNFWdv1KaqVZnKmlpqjq31f+rVKtXxidi4dpYPa3Vx2qLSxfmqguX6xcuzZVn0gtpcUeiAgAAAAAAAAAAAAAAAAAAgL2lVozZcqWSztcWlxR6U9jbXTC4O3ZDocuFXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//r/g1Pg==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181082, 0xe1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010067656e6576653000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530"], 0xe8}}, 0x1000) ioctl$TCXONC(r0, 0x540a, 0x3) 404.129534ms ago: executing program 0 (id=907): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece0195b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x4080) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000001c0)=0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000000004000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rxrpc_rtt_rx\x00', r5, 0x0, 0x3}, 0x18) 235.795556ms ago: executing program 0 (id=909): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 235.404586ms ago: executing program 0 (id=910): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)="276a2cf7000000007a5dce779d46889d7a6e2f98c5db8bd86fc52942f5f591f689405931411c4ac602772ec3", &(0x7f0000000580), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008020) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r4 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="1c0000042b57004d00000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000000080101000000000000000007000007050039596d5e00000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5c091}, 0xc081) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x40840) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 234.967866ms ago: executing program 1 (id=911): socket(0x2, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="170000000000000007000000ff0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 79.432369ms ago: executing program 1 (id=912): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 30.917059ms ago: executing program 1 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) 30.525349ms ago: executing program 1 (id=914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000010101020000000000000000020000080c001980080001000c0000000600124000020000180001800c0002800500010001000000060001"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008000) 30.012879ms ago: executing program 3 (id=915): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)="276a2cf7000000007a5dce779d46889d7a6e2f98c5db8bd86fc52942f5f591f689405931411c4ac602772ec3", &(0x7f0000000580), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008020) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r4 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x14a8}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="1c0000042b57004d00000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000000080101000000000000000007000007050039596d5e00000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5c091}, 0xc081) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x40840) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 19.13215ms ago: executing program 1 (id=916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 1 (id=917): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f0000000040)={[{@map_off}, {@utf8}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$eJzs3c9vHOX9B/D3+EdiDAoB8uWbIiCb0ICB1LGdEhpxaWKvk6X+UdmORFRVhJKkimKVCloJUKWmUtVTUXuoeqA3jj0hcYFLlVv7F/RQqeJfQD1FPXSrmV3HNvZ67dSxTXi9rPXOj888z+fZmZ1HHu/OE77Kms1m9bjL+Yt/3slk2XvOTXz+0ccflI9f3cy+9OaX+TQZSFJL+pIcTvrHJ+Zmp7sUdCO5nORWUiTZn9bzplxO8bs8tDx/K8WfynorF++yYWxKk6+13T7+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyrGJ0ZGRotMNWYuvlbrrBoCvNPKnuXyPqtG/S4+61pvUpSPDAwsDfV9+NDy6sfLX8fyZGvuyWpA8gzk/QcfP/jKY309S9tvkPBW/Kc9GPKWN3znvfdvvLG4ePXtbUrkq+Z8faYxP9uYPnu+XmvMz9bOnD49cvLC5HxtsjFVn780v1Cfro3P1c8uzM7Vhsafr42eOXOqVh++NHtx5vzE8FR9aeHL3xobGTlde3X4+/Wzc/OzMydfHZ4fv9CYmmrMnK9iytVlzMvlgfi9xkJtoX52ula7dn3x6qlVGa1zSJRBo91aUgaNdYnJ2MjY2Ojo2Njo6ZfOvPTyyEjf8oLeVAtGvmTtJncO2vKI3tKLzV72Yc9mI7f3BA7/g552/5+pNDKTi3kttXV/xjORucxmusP6tqX+//jJ+ob1ruz/l3r5w8urn0jV/z/dmnu6U//fIZed+3kn7+X93MgbWcxirubtVWv330WJzebut2rzP+dTz0wamc9sGpnO2WpJrb2kljM5ndMZyeu5kMnMp5bJNDKVeuZzKfNZSL06osYzl3rOZqGv3NG1DGU8z6eW0ZzJmZxKLfUM51JmczEzOZ+JnK1KuZbr1et+aoMc7wSNbiZobIOgDfr/9oIt9P98Td2DszjcnWa7/9/XPXRofCcSAgAAALbdN/6WA4ce/es/k/48VV1jBwAAAO431cf1niyf+supp1JMNqbqI7udFgAAALCNiuo7dkWSwRxpTS19E8pFAAAAALhPVP//f7p8GiynjqTw9z8AAADcb7rfY79rRHEitdwsV9WutCKvtCPa9/kdnGxM1YfHZ6deGc2z1V0Gqm8arCmtNweT6usHL+RoK+roYOt5cHWJA2XU6PAroxnIsXZDhp4pn54ZWidyrIx8Ic+1Ip9bihzImshTZSQA3O+ObdAfb7b/fyEnWhEnnqhu3973xDp98IieFQD2iu5j7HSNKL69NPxPh7//H821I62PFAznzbyVxVzJierbBtUnDtql5laR5VIHV3wM4USXqwGDK0Z4ObF0PeDIQ+teDxhcMdDLiTVXBDrFntqBPQEAO+fYmn54g/6/2WxNrbn+v/Hf/4M+UggAe8qdEezv4cRutxEAWO2ueunee5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Ad24v7/e3LiZpI9kIaJezsxsDNH+A/3JXulyds0sdtnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHZCkfSut7wn2Z/0jSQ5ufNZ3Ts3dzuBXVbczu28mwO7nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP2mff//nrSeH2wtSl9PcjzJ5SQ/2O0ct9Pt3U5gl624/3+5z9Ms0tfa7Sn6xyfmZqfL3Z/95frPP/r4g/JxN/WUBZQ1rBpcol1D560eqbYanLj6zo2fvfXT2sS5KslzC5NTE9Pn5767HPh48UlSS+uxZCnfXxTto3h1yz8pW7q5eiereifW1vv/6219p97jf/l957YtW07j+uLVsbKmhfprCz//yfV3VwQ9mqPJM0PJ0Oqaflw+OtR0NP0b1Vt8UfymOJA/5nK1/8s0imZR7qKHq/Y/cO364tXhN99avNIhp4M5kuRKMrD5nI6s3RNLqqOup7+sdaQKKn8d6lLehh7sPdBstkocXb8NDzxSHTKDW2pDrXMbKl1e93YbT3V4VR/Ls1ve0892qbHt382W1lzxRfGP4kL+nl+vGP+jp9z/x7OZd2cZU0WuOFI6t/n4csvHVq54/cuRHd+V3AO/zY/ynTv7v2fF+b+9r3bmfLSixnv2vihavVBbNX3oSz1S++zTKct2nodaUR3y/L+8uHa7Lnm+2OWMsk3v/9WKL4oPi6H8KzeN/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOx9RdK73vKe5HiSg0keLudrSXM76usZLLajmE3at2bJzR2sfe/ouTNV3M7tvJsDu5oOAAAAAAAAANvm3MTnH338Qfmo/h/fm28WnyYDrf/09yU5WPyhf3xibna6S0H9yeUkt8rpga3lUG6Xh5bnb5Vzh7feFgBgc/4bAAD//7Y4dyw=") ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 33.184800][ T29] audit: type=1400 audit(1744257463.438:81): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.185921][ T3294] cgroup: Unknown subsys name 'net' [ 33.208153][ T29] audit: type=1400 audit(1744257463.438:82): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.235547][ T29] audit: type=1400 audit(1744257463.458:83): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.255419][ T29] audit: type=1400 audit(1744257463.468:84): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.375343][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.381619][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.533173][ T29] audit: type=1400 audit(1744257463.778:85): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.556596][ T29] audit: type=1400 audit(1744257463.778:86): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.577143][ T29] audit: type=1400 audit(1744257463.788:87): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.597534][ T29] audit: type=1400 audit(1744257463.788:88): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.604878][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.617897][ T29] audit: type=1400 audit(1744257463.798:89): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.651444][ T29] audit: type=1400 audit(1744257463.798:90): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.680795][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.782680][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 34.836910][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 34.905393][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.912578][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.919839][ T3304] bridge_slave_0: entered allmulticast mode [ 34.926457][ T3304] bridge_slave_0: entered promiscuous mode [ 34.955654][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.962786][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.970072][ T3304] bridge_slave_1: entered allmulticast mode [ 34.976574][ T3304] bridge_slave_1: entered promiscuous mode [ 34.982736][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.018264][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.025417][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.032595][ T3313] bridge_slave_0: entered allmulticast mode [ 35.039046][ T3313] bridge_slave_0: entered promiscuous mode [ 35.047696][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.054962][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.062165][ T3313] bridge_slave_1: entered allmulticast mode [ 35.068682][ T3313] bridge_slave_1: entered promiscuous mode [ 35.083199][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.094811][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.134310][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.150946][ T3304] team0: Port device team_slave_0 added [ 35.157918][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.181603][ T3304] team0: Port device team_slave_1 added [ 35.188318][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.209486][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.231963][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.238989][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.264945][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.278642][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.286216][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.293369][ T3311] bridge_slave_0: entered allmulticast mode [ 35.299839][ T3311] bridge_slave_0: entered promiscuous mode [ 35.314774][ T3313] team0: Port device team_slave_0 added [ 35.320861][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.327871][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.353960][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.374314][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.381430][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.388604][ T3311] bridge_slave_1: entered allmulticast mode [ 35.395081][ T3311] bridge_slave_1: entered promiscuous mode [ 35.404598][ T3313] team0: Port device team_slave_1 added [ 35.433449][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.440449][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.466581][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.503706][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.510730][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.536817][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.553798][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.582235][ T3304] hsr_slave_0: entered promiscuous mode [ 35.588429][ T3304] hsr_slave_1: entered promiscuous mode [ 35.595344][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.604626][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.611735][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.619037][ T3305] bridge_slave_0: entered allmulticast mode [ 35.625470][ T3305] bridge_slave_0: entered promiscuous mode [ 35.631842][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.638964][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.646195][ T3310] bridge_slave_0: entered allmulticast mode [ 35.652571][ T3310] bridge_slave_0: entered promiscuous mode [ 35.659998][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.667200][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.674529][ T3310] bridge_slave_1: entered allmulticast mode [ 35.680816][ T3310] bridge_slave_1: entered promiscuous mode [ 35.697659][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.704771][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.711928][ T3305] bridge_slave_1: entered allmulticast mode [ 35.718510][ T3305] bridge_slave_1: entered promiscuous mode [ 35.756117][ T3313] hsr_slave_0: entered promiscuous mode [ 35.762212][ T3313] hsr_slave_1: entered promiscuous mode [ 35.768130][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.775739][ T3313] Cannot create hsr debugfs directory [ 35.782397][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.792255][ T3311] team0: Port device team_slave_0 added [ 35.817951][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.827598][ T3311] team0: Port device team_slave_1 added [ 35.839232][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.849490][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.894360][ T3310] team0: Port device team_slave_0 added [ 35.901123][ T3310] team0: Port device team_slave_1 added [ 35.907521][ T3305] team0: Port device team_slave_0 added [ 35.922857][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.929917][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.955879][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.972362][ T3305] team0: Port device team_slave_1 added [ 35.988273][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.995318][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.021305][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.040032][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.047074][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.073089][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.096520][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.103498][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.129532][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.145718][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.152682][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.178654][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.215896][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.222880][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.248849][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.281405][ T3310] hsr_slave_0: entered promiscuous mode [ 36.287675][ T3310] hsr_slave_1: entered promiscuous mode [ 36.293437][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.301290][ T3310] Cannot create hsr debugfs directory [ 36.310265][ T3311] hsr_slave_0: entered promiscuous mode [ 36.316505][ T3311] hsr_slave_1: entered promiscuous mode [ 36.322427][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.330120][ T3311] Cannot create hsr debugfs directory [ 36.360576][ T3305] hsr_slave_0: entered promiscuous mode [ 36.366812][ T3305] hsr_slave_1: entered promiscuous mode [ 36.372737][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.380514][ T3305] Cannot create hsr debugfs directory [ 36.455749][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.483455][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.494333][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.520754][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.552911][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.561859][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.586401][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.600317][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.610751][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.623523][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.632438][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.641041][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.685546][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.697400][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.709271][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.718308][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.780907][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.790912][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.800170][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.810182][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.827344][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.842335][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.853901][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.869027][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.885535][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.897237][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.904357][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.926805][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.935048][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.946473][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.953541][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.962258][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.969348][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.989838][ T1603] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.997016][ T1603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.009457][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.020700][ T1603] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.027840][ T1603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.047621][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.054743][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.069298][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.076406][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.104632][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.111745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.137833][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.148559][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.201585][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.218554][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.239526][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.252011][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.259211][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.283653][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.295143][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.302234][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.341651][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.354228][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.413183][ T3313] veth0_vlan: entered promiscuous mode [ 37.429207][ T3313] veth1_vlan: entered promiscuous mode [ 37.478113][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.493118][ T3313] veth0_macvtap: entered promiscuous mode [ 37.512965][ T3313] veth1_macvtap: entered promiscuous mode [ 37.533206][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.542977][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.564002][ T3310] veth0_vlan: entered promiscuous mode [ 37.581474][ T3311] veth0_vlan: entered promiscuous mode [ 37.592500][ T3310] veth1_vlan: entered promiscuous mode [ 37.599536][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.608357][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.617233][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.626004][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.647078][ T3311] veth1_vlan: entered promiscuous mode [ 37.656498][ T3310] veth0_macvtap: entered promiscuous mode [ 37.678673][ T3310] veth1_macvtap: entered promiscuous mode [ 37.706896][ T3311] veth0_macvtap: entered promiscuous mode [ 37.726549][ T3311] veth1_macvtap: entered promiscuous mode [ 37.734100][ T3305] veth0_vlan: entered promiscuous mode [ 37.743117][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.753768][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.766018][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.767217][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.777505][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.798423][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.808341][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.818827][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.829625][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.842316][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.852897][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.863603][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.871564][ T3304] veth0_vlan: entered promiscuous mode [ 37.883283][ T3305] veth1_vlan: entered promiscuous mode [ 37.900531][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.911100][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.921113][ T3310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.931793][ T3310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.942337][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.950648][ T3311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.959487][ T3311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.968249][ T3311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.977073][ T3311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.994278][ T3445] bond1: entered promiscuous mode [ 37.999507][ T3445] bond1: entered allmulticast mode [ 38.004892][ T3445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.014213][ T3445] bond1 (unregistering): Released all slaves [ 38.025161][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.033890][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042659][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.051550][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.065312][ T3304] veth1_vlan: entered promiscuous mode [ 38.128053][ T3305] veth0_macvtap: entered promiscuous mode [ 38.140810][ T3304] veth0_macvtap: entered promiscuous mode [ 38.148884][ T3304] veth1_macvtap: entered promiscuous mode [ 38.156397][ T3305] veth1_macvtap: entered promiscuous mode [ 38.183713][ T3452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 38.193462][ T3454] loop2: detected capacity change from 0 to 2048 [ 38.194115][ T3456] bond1: entered promiscuous mode [ 38.205060][ T3456] bond1: entered allmulticast mode [ 38.211188][ T3456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.221847][ T3456] bond1 (unregistering): Released all slaves [ 38.236235][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 38.236252][ T29] audit: type=1400 audit(1744257468.488:132): avc: denied { create } for pid=3453 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.264702][ T29] audit: type=1400 audit(1744257468.518:133): avc: denied { write } for pid=3453 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.277129][ T3454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3454 comm=syz.2.6 [ 38.285037][ T29] audit: type=1400 audit(1744257468.518:134): avc: denied { write } for pid=3450 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.302356][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.316966][ T29] audit: type=1400 audit(1744257468.528:135): avc: denied { ioctl } for pid=3453 comm="syz.2.6" path="socket:[3641]" dev="sockfs" ino=3641 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.326647][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.361871][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.372364][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.382261][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.392759][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.403633][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.403788][ T3452] syz.3.4 (3452) used greatest stack depth: 10296 bytes left [ 38.413783][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.428821][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.438673][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.449170][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.459040][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.469496][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.479365][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.489834][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.500748][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.521053][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.531711][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.541707][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.552279][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.562124][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.572586][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.582540][ T29] audit: type=1400 audit(1744257468.768:136): avc: denied { prog_run } for pid=3459 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.601272][ T29] audit: type=1400 audit(1744257468.768:137): avc: denied { create } for pid=3459 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.621621][ T29] audit: type=1400 audit(1744257468.768:138): avc: denied { write } for pid=3459 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.641821][ T29] audit: type=1400 audit(1744257468.768:139): avc: denied { nlmsg_read } for pid=3459 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.649563][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.662687][ T29] audit: type=1326 audit(1744257468.878:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3465 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 38.692879][ T29] audit: type=1326 audit(1744257468.878:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3465 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 38.727851][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.738366][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.748298][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.758825][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.768748][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.779257][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.789109][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.799595][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.810340][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.818780][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.827675][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836525][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.845311][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880191][ T3474] bond1: entered promiscuous mode [ 38.885568][ T3474] bond1: entered allmulticast mode [ 38.887874][ T3470] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 38.893721][ T3474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.908849][ T3474] bond1 (unregistering): Released all slaves [ 38.919887][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.928729][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.937600][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.946419][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.998096][ T3478] bond1: entered promiscuous mode [ 39.003212][ T3478] bond1: entered allmulticast mode [ 39.008807][ T3478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.022011][ T3478] bond1 (unregistering): Released all slaves [ 39.043233][ T3481] bond1: entered promiscuous mode [ 39.048403][ T3481] bond1: entered allmulticast mode [ 39.053933][ T3481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.063683][ T3481] bond1 (unregistering): Released all slaves [ 39.148136][ T3488] bond1: entered promiscuous mode [ 39.153262][ T3488] bond1: entered allmulticast mode [ 39.160769][ T3488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.176784][ T3488] bond1 (unregistering): Released all slaves [ 39.226225][ T3500] loop3: detected capacity change from 0 to 1024 [ 39.232791][ T3500] ======================================================= [ 39.232791][ T3500] WARNING: The mand mount option has been deprecated and [ 39.232791][ T3500] and is ignored by this kernel. Remove the mand [ 39.232791][ T3500] option from the mount to silence this warning. [ 39.232791][ T3500] ======================================================= [ 39.309280][ T3504] loop4: detected capacity change from 0 to 1024 [ 39.316551][ T3500] EXT4-fs: Ignoring removed oldalloc option [ 39.322594][ T3500] EXT4-fs: Ignoring removed nobh option [ 39.328820][ T3504] EXT4-fs: Ignoring removed oldalloc option [ 39.343938][ T3504] EXT4-fs: Ignoring removed nobh option [ 39.356832][ T3502] bond1: entered promiscuous mode [ 39.358745][ T3500] EXT4-fs: Ignoring removed bh option [ 39.361909][ T3502] bond1: entered allmulticast mode [ 39.374220][ T3504] EXT4-fs: Ignoring removed bh option [ 39.382088][ T3504] EXT4-fs: Mount option(s) incompatible with ext3 [ 39.388995][ T3502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.397137][ T3500] EXT4-fs: Mount option(s) incompatible with ext3 [ 39.423369][ T3502] bond1 (unregistering): Released all slaves [ 39.485339][ T3507] bond1: entered promiscuous mode [ 39.490434][ T3507] bond1: entered allmulticast mode [ 39.524716][ T3507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.558294][ T3507] bond1 (unregistering): Released all slaves [ 39.594362][ T3514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 39.747411][ T3521] Zero length message leads to an empty skb [ 39.815033][ T3525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.28'. [ 39.827307][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'. [ 39.920580][ C1] hrtimer: interrupt took 37361 ns [ 39.986000][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 39.998383][ T3532] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 40.127254][ T3545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.30'. [ 40.131462][ T3546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.168252][ T3549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.35'. [ 40.233258][ T3549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35'. [ 40.257375][ T3555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.355810][ T3563] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.363197][ T3563] vhci_hcd: invalid port number 186 [ 40.368507][ T3563] vhci_hcd: default hub control req: 2314 v0008 i00ba l0 [ 40.404612][ T3565] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 40.445049][ T3567] 9pnet_virtio: no channels available for device 127.0.0.1 [ 40.453958][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 40.462966][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 40.471900][ T3567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.42'. [ 40.671261][ T3585] lo: entered promiscuous mode [ 40.676146][ T3585] lo: entered allmulticast mode [ 40.686747][ T3585] tunl0: entered promiscuous mode [ 40.691958][ T3585] tunl0: entered allmulticast mode [ 40.699709][ T3585] gre0: entered promiscuous mode [ 40.704960][ T3585] gre0: entered allmulticast mode [ 40.713426][ T3585] gretap0: entered promiscuous mode [ 40.718848][ T3585] gretap0: entered allmulticast mode [ 40.729207][ T3585] erspan0: entered promiscuous mode [ 40.734597][ T3585] erspan0: entered allmulticast mode [ 40.741827][ T3585] ip_vti0: entered promiscuous mode [ 40.747140][ T3585] ip_vti0: entered allmulticast mode [ 40.755913][ T3585] ip6_vti0: entered promiscuous mode [ 40.761265][ T3585] ip6_vti0: entered allmulticast mode [ 40.771050][ T3585] sit0: entered promiscuous mode [ 40.776185][ T3585] sit0: entered allmulticast mode [ 40.782517][ T3585] ip6tnl0: entered promiscuous mode [ 40.787808][ T3585] ip6tnl0: entered allmulticast mode [ 40.809949][ T3589] loop4: detected capacity change from 0 to 128 [ 41.209937][ T3585] ip6gre0: entered promiscuous mode [ 41.215272][ T3585] ip6gre0: entered allmulticast mode [ 41.221847][ T3585] syz_tun: entered promiscuous mode [ 41.227182][ T3585] syz_tun: entered allmulticast mode [ 41.233666][ T3585] ip6gretap0: entered promiscuous mode [ 41.239207][ T3585] ip6gretap0: entered allmulticast mode [ 41.246298][ T3585] bridge0: entered promiscuous mode [ 41.251546][ T3585] bridge0: entered allmulticast mode [ 41.258383][ T3585] vcan0: entered promiscuous mode [ 41.263449][ T3585] vcan0: entered allmulticast mode [ 41.269017][ T3585] bond0: entered promiscuous mode [ 41.274264][ T3585] bond_slave_0: entered promiscuous mode [ 41.280069][ T3585] bond_slave_1: entered promiscuous mode [ 41.285936][ T3585] bond0: entered allmulticast mode [ 41.291048][ T3585] bond_slave_0: entered allmulticast mode [ 41.296863][ T3585] bond_slave_1: entered allmulticast mode [ 41.316470][ T3585] team0: entered promiscuous mode [ 41.321606][ T3585] team_slave_0: entered promiscuous mode [ 41.327396][ T3585] team_slave_1: entered promiscuous mode [ 41.333243][ T3585] team0: entered allmulticast mode [ 41.338510][ T3585] team_slave_0: entered allmulticast mode [ 41.344290][ T3585] team_slave_1: entered allmulticast mode [ 41.356098][ T3585] dummy0: entered promiscuous mode [ 41.361314][ T3585] dummy0: entered allmulticast mode [ 41.368093][ T3585] nlmon0: entered promiscuous mode [ 41.373246][ T3585] nlmon0: entered allmulticast mode [ 41.381586][ T3585] caif0: entered promiscuous mode [ 41.386739][ T3585] caif0: entered allmulticast mode [ 41.391949][ T3585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.415560][ T3588] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.446596][ T3598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3598 comm=syz.0.46 [ 41.637097][ T3622] bond1: entered promiscuous mode [ 41.642270][ T3622] bond1: entered allmulticast mode [ 41.653183][ T3622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.674107][ T3622] bond1 (unregistering): Released all slaves [ 41.691082][ T3627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.829248][ T10] IPVS: starting estimator thread 0... [ 41.851636][ T3646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.926631][ T3658] 9pnet_fd: Insufficient options for proto=fd [ 41.934819][ T3649] IPVS: using max 2256 ests per chain, 112800 per kthread [ 41.946346][ T3661] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.994065][ T3671] bond1: entered promiscuous mode [ 41.999335][ T3671] bond1: entered allmulticast mode [ 42.005686][ T3671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.029708][ T3671] bond1 (unregistering): Released all slaves [ 42.056946][ T3675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.092738][ T3680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3680 comm=syz.2.76 [ 42.168943][ T3675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.228946][ T3675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.241077][ T3691] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.295408][ T3675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.386698][ T3675] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.400097][ T3675] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.412456][ T3675] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.436079][ T3675] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.473178][ T3698] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3698 comm=syz.1.82 [ 42.509213][ T3704] 9pnet_fd: Insufficient options for proto=fd [ 42.689603][ T3714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.698836][ T3714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 42.743963][ T3720] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.962378][ T3732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.070574][ T3742] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3742 comm=syz.3.96 [ 43.353711][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 43.353735][ T29] audit: type=1400 audit(1744257473.598:558): avc: denied { name_bind } for pid=3758 comm="syz.3.102" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.383208][ T29] audit: type=1400 audit(1744257473.598:559): avc: denied { node_bind } for pid=3758 comm="syz.3.102" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.403820][ T29] audit: type=1400 audit(1744257473.628:560): avc: denied { append } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.427448][ T3763] bond1: entered promiscuous mode [ 43.432545][ T3763] bond1: entered allmulticast mode [ 43.438365][ T3763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.448363][ T3763] bond1 (unregistering): Released all slaves [ 43.504008][ T29] audit: type=1400 audit(1744257473.748:561): avc: denied { create } for pid=3765 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.523828][ T29] audit: type=1400 audit(1744257473.748:562): avc: denied { ioctl } for pid=3765 comm="syz.3.105" path="socket:[4071]" dev="sockfs" ino=4071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.585390][ T29] audit: type=1400 audit(1744257473.838:563): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.611050][ T29] audit: type=1400 audit(1744257473.838:564): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.635189][ T29] audit: type=1400 audit(1744257473.838:565): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.661576][ T29] audit: type=1400 audit(1744257473.868:566): avc: denied { allowed } for pid=3770 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.681079][ T29] audit: type=1400 audit(1744257473.888:567): avc: denied { create } for pid=3770 comm="syz.4.107" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 43.790322][ T3784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.836955][ T3788] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.903508][ T3795] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 43.921182][ T3799] syz.4.117 uses obsolete (PF_INET,SOCK_PACKET) [ 43.975251][ T3799] __nla_validate_parse: 21 callbacks suppressed [ 43.975270][ T3799] netlink: 36 bytes leftover after parsing attributes in process `syz.4.117'. [ 43.993595][ T3809] 9pnet_fd: Insufficient options for proto=fd [ 44.028897][ T3811] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.045902][ T3815] FAULT_INJECTION: forcing a failure. [ 44.045902][ T3815] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.059373][ T3815] CPU: 1 UID: 0 PID: 3815 Comm: syz.2.125 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 44.059412][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.059430][ T3815] Call Trace: [ 44.059438][ T3815] [ 44.059519][ T3815] dump_stack_lvl+0xf6/0x150 [ 44.059542][ T3815] dump_stack+0x15/0x1a [ 44.059559][ T3815] should_fail_ex+0x261/0x270 [ 44.059627][ T3815] should_fail+0xb/0x10 [ 44.059652][ T3815] should_fail_usercopy+0x1a/0x20 [ 44.059687][ T3815] _copy_from_user+0x1c/0xa0 [ 44.059728][ T3815] __sys_bpf+0x16a/0x800 [ 44.059808][ T3815] __x64_sys_bpf+0x43/0x50 [ 44.059876][ T3815] x64_sys_call+0x23da/0x2e10 [ 44.059904][ T3815] do_syscall_64+0xc9/0x1c0 [ 44.059938][ T3815] ? clear_bhb_loop+0x25/0x80 [ 44.059964][ T3815] ? clear_bhb_loop+0x25/0x80 [ 44.060051][ T3815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.060077][ T3815] RIP: 0033:0x7ffbb197d169 [ 44.060094][ T3815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.060115][ T3815] RSP: 002b:00007ffbaffe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.060272][ T3815] RAX: ffffffffffffffda RBX: 00007ffbb1b95fa0 RCX: 00007ffbb197d169 [ 44.060287][ T3815] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 44.060301][ T3815] RBP: 00007ffbaffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.060314][ T3815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.060367][ T3815] R13: 0000000000000000 R14: 00007ffbb1b95fa0 R15: 00007ffd54f2b668 [ 44.060393][ T3815] [ 44.266725][ T3820] bond1: entered promiscuous mode [ 44.271845][ T3820] bond1: entered allmulticast mode [ 44.294158][ T3820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.325678][ T3820] bond1 (unregistering): Released all slaves [ 44.368738][ T3838] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.498835][ T3851] capability: warning: `syz.0.139' uses deprecated v2 capabilities in a way that may be insecure [ 44.499350][ T3853] SELinux: Context system_u:object_r:agp_device_t:s0 is not valid (left unmapped). [ 44.682193][ T3871] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.716897][ T3874] bond1: entered promiscuous mode [ 44.722156][ T3874] bond1: entered allmulticast mode [ 44.728326][ T3877] FAULT_INJECTION: forcing a failure. [ 44.728326][ T3877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.728917][ T3874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.741537][ T3877] CPU: 1 UID: 0 PID: 3877 Comm: syz.1.148 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 44.741635][ T3877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 44.741652][ T3877] Call Trace: [ 44.741659][ T3877] [ 44.741669][ T3877] dump_stack_lvl+0xf6/0x150 [ 44.741701][ T3877] dump_stack+0x15/0x1a [ 44.741800][ T3877] should_fail_ex+0x261/0x270 [ 44.741835][ T3877] should_fail+0xb/0x10 [ 44.741865][ T3877] should_fail_usercopy+0x1a/0x20 [ 44.741902][ T3877] strncpy_from_user+0x25/0x230 [ 44.741970][ T3877] ? kstrtouint_from_user+0xbf/0x100 [ 44.742004][ T3877] path_setxattrat+0xef/0x320 [ 44.742054][ T3877] __x64_sys_fsetxattr+0x6d/0x80 [ 44.742081][ T3877] x64_sys_call+0x2bad/0x2e10 [ 44.742154][ T3877] do_syscall_64+0xc9/0x1c0 [ 44.742211][ T3877] ? clear_bhb_loop+0x25/0x80 [ 44.742238][ T3877] ? clear_bhb_loop+0x25/0x80 [ 44.742266][ T3877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.742293][ T3877] RIP: 0033:0x7f271bc5d169 [ 44.742370][ T3877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.742393][ T3877] RSP: 002b:00007f271a2bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 44.742417][ T3877] RAX: ffffffffffffffda RBX: 00007f271be75fa0 RCX: 00007f271bc5d169 [ 44.742433][ T3877] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000000000000006 [ 44.742448][ T3877] RBP: 00007f271a2bf090 R08: 0000000000000001 R09: 0000000000000000 [ 44.742462][ T3877] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 44.742477][ T3877] R13: 0000000000000000 R14: 00007f271be75fa0 R15: 00007ffc60745d28 [ 44.742517][ T3877] [ 44.924383][ T3874] bond1 (unregistering): Released all slaves [ 44.989292][ T3888] bond1: entered promiscuous mode [ 44.994410][ T3888] bond1: entered allmulticast mode [ 45.002378][ T3888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.013143][ T3888] bond1 (unregistering): Released all slaves [ 45.066861][ T3900] hub 9-0:1.0: USB hub found [ 45.071632][ T3900] hub 9-0:1.0: 8 ports detected [ 45.117480][ T3904] bond1: entered promiscuous mode [ 45.122566][ T3904] bond1: entered allmulticast mode [ 45.128212][ T3904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.138781][ T3904] bond1 (unregistering): Released all slaves [ 45.172628][ T3910] bond1: entered promiscuous mode [ 45.177791][ T3910] bond1: entered allmulticast mode [ 45.183808][ T3910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.196471][ T3910] bond1 (unregistering): Released all slaves [ 45.239804][ T3913] bond1: entered promiscuous mode [ 45.245364][ T3913] bond1: entered allmulticast mode [ 45.251209][ T3913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.278999][ T3913] bond1 (unregistering): Released all slaves [ 45.712320][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 45.776088][ T3967] bond1: entered promiscuous mode [ 45.781197][ T3967] bond1: entered allmulticast mode [ 45.786581][ T3967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.797062][ T3967] bond1 (unregistering): Released all slaves [ 45.865994][ T3970] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 45.933030][ T3972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'. [ 45.943623][ T3972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.181'. [ 46.077054][ T3974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3974 comm=syz.2.182 [ 46.168645][ T3986] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.219176][ T3991] 9pnet_fd: Insufficient options for proto=fd [ 46.379748][ T4003] 9pnet_fd: Insufficient options for proto=fd [ 46.427802][ T4012] bond1: entered promiscuous mode [ 46.432901][ T4012] bond1: entered allmulticast mode [ 46.446092][ T4012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.460381][ T4012] bond1 (unregistering): Released all slaves [ 46.471883][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.480895][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.490082][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.505479][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.514292][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.523348][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 46.548094][ T4024] SELinux: failed to load policy [ 46.753798][ T4040] bond1: entered promiscuous mode [ 46.753820][ T4040] bond1: entered allmulticast mode [ 46.754023][ T4040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.766603][ T4040] bond1 (unregistering): Released all slaves [ 46.971910][ T4045] bond1: entered promiscuous mode [ 46.971932][ T4045] bond1: entered allmulticast mode [ 46.972176][ T4045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.992750][ T4045] bond1 (unregistering): Released all slaves [ 47.118178][ T4057] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.462148][ T4079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.501241][ T4084] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 47.585878][ T4098] 9pnet_virtio: no channels available for device 127.0.0.1 [ 48.288234][ T4114] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4114 comm=syz.3.233 [ 48.372882][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 48.372900][ T29] audit: type=1400 audit(1744257478.618:1091): avc: denied { allowed } for pid=4115 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.375905][ T4121] 9pnet_fd: Insufficient options for proto=fd [ 48.387150][ T29] audit: type=1400 audit(1744257478.628:1092): avc: denied { create } for pid=4115 comm="syz.1.234" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.425841][ T29] audit: type=1400 audit(1744257478.628:1093): avc: denied { map } for pid=4115 comm="syz.1.234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.450339][ T29] audit: type=1400 audit(1744257478.628:1094): avc: denied { read write } for pid=4115 comm="syz.1.234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 48.467976][ T4123] 9pnet_fd: Insufficient options for proto=fd [ 48.474998][ T29] audit: type=1400 audit(1744257478.628:1095): avc: denied { write } for pid=4115 comm="syz.1.234" laddr=fe80::f lport=35874 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.505178][ T29] audit: type=1400 audit(1744257478.628:1096): avc: denied { read } for pid=4115 comm="syz.1.234" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.528645][ T29] audit: type=1400 audit(1744257478.628:1097): avc: denied { open } for pid=4115 comm="syz.1.234" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.591468][ T29] audit: type=1400 audit(1744257478.838:1098): avc: denied { map_create } for pid=4126 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.610722][ T29] audit: type=1400 audit(1744257478.838:1099): avc: denied { perfmon } for pid=4126 comm="syz.2.238" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.642548][ T29] audit: type=1400 audit(1744257478.838:1100): avc: denied { map_read map_write } for pid=4126 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.692562][ T4138] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 48.797738][ T4156] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.825502][ T4160] 9pnet_fd: Insufficient options for proto=fd [ 48.840608][ T4162] bond1: entered promiscuous mode [ 48.845839][ T4162] bond1: entered allmulticast mode [ 48.851389][ T4162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.862076][ T4162] bond1 (unregistering): Released all slaves [ 48.886251][ T4168] bond1: entered promiscuous mode [ 48.891337][ T4168] bond1: entered allmulticast mode [ 48.896657][ T4168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.906607][ T4168] bond1 (unregistering): Released all slaves [ 48.978969][ T4173] 9pnet: Could not find request transport: f [ 49.240460][ T4191] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.272112][ T4193] 9pnet_fd: Insufficient options for proto=fd [ 49.348172][ T4200] bond1: entered promiscuous mode [ 49.353289][ T4200] bond1: entered allmulticast mode [ 49.358863][ T4200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.368943][ T4200] bond1 (unregistering): Released all slaves [ 49.379682][ T4205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.442753][ T4210] bond1: entered promiscuous mode [ 49.447880][ T4210] bond1: entered allmulticast mode [ 49.453349][ T4210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.463765][ T4210] bond1 (unregistering): Released all slaves [ 49.685054][ T4222] 9pnet_fd: Insufficient options for proto=fd [ 49.692457][ T4223] bond1: entered promiscuous mode [ 49.692502][ T4227] 9pnet_fd: Insufficient options for proto=fd [ 49.697670][ T4223] bond1: entered allmulticast mode [ 49.709481][ T4223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.727159][ T4223] bond1 (unregistering): Released all slaves [ 49.880920][ T4246] bond1: entered promiscuous mode [ 49.886216][ T4246] bond1: entered allmulticast mode [ 49.896596][ T4246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.914857][ T4246] bond1 (unregistering): Released all slaves [ 50.004157][ T4254] bond1: entered promiscuous mode [ 50.009290][ T4254] bond1: entered allmulticast mode [ 50.016146][ T4254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.027454][ T4254] bond1 (unregistering): Released all slaves [ 50.116213][ T4260] 9pnet_virtio: no channels available for device 127.0.0.1 [ 50.124186][ T4260] __nla_validate_parse: 13 callbacks suppressed [ 50.124205][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.139473][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.148431][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.175947][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.185065][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.193954][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.231961][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.240952][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.249853][ T4260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'. [ 50.552211][ T4268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 50.747211][ T4275] bond1: entered promiscuous mode [ 50.752331][ T4275] bond1: entered allmulticast mode [ 50.762345][ T4275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.776957][ T4275] bond1 (unregistering): Released all slaves [ 50.946527][ T4284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4284 comm=syz.3.296 [ 50.960887][ T4287] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.095584][ T4295] 9pnet_fd: Insufficient options for proto=fd [ 51.225678][ T4310] bond1: entered promiscuous mode [ 51.230781][ T4310] bond1: entered allmulticast mode [ 51.249795][ T4310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.260649][ T4310] bond1 (unregistering): Released all slaves [ 51.606466][ T4336] bond1: entered promiscuous mode [ 51.611594][ T4336] bond1: entered allmulticast mode [ 51.617491][ T4336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.631436][ T4336] bond1 (unregistering): Released all slaves [ 51.830210][ T4349] bond1: entered promiscuous mode [ 51.835348][ T4349] bond1: entered allmulticast mode [ 51.841064][ T4349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.851936][ T4349] bond1 (unregistering): Released all slaves [ 52.028681][ T4375] random: crng reseeded on system resumption [ 52.384380][ T4399] 9pnet_fd: Insufficient options for proto=fd [ 53.284101][ T4438] bond1: entered promiscuous mode [ 53.289210][ T4438] bond1: entered allmulticast mode [ 53.295747][ T4440] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4440 comm=syz.3.349 [ 53.328519][ T4438] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.376966][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 53.376983][ T29] audit: type=1400 audit(1744257483.628:1581): avc: denied { ioctl } for pid=4447 comm="+}[@" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.407779][ T29] audit: type=1326 audit(1744257483.628:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.431629][ T29] audit: type=1326 audit(1744257483.628:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.454923][ T29] audit: type=1326 audit(1744257483.628:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.477852][ T29] audit: type=1326 audit(1744257483.628:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.500775][ T29] audit: type=1326 audit(1744257483.628:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.523824][ T29] audit: type=1326 audit(1744257483.628:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.559281][ T4438] bond1 (unregistering): Released all slaves [ 53.569705][ T29] audit: type=1326 audit(1744257483.678:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.592706][ T29] audit: type=1326 audit(1744257483.678:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.615623][ T29] audit: type=1326 audit(1744257483.698:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f271bc5d169 code=0x7ffc0000 [ 53.686883][ T4456] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 53.771710][ T4468] FAULT_INJECTION: forcing a failure. [ 53.771710][ T4468] name failslab, interval 1, probability 0, space 0, times 0 [ 53.784579][ T4468] CPU: 1 UID: 0 PID: 4468 Comm: syz.3.358 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 53.784654][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.784666][ T4468] Call Trace: [ 53.784734][ T4468] [ 53.784818][ T4468] dump_stack_lvl+0xf6/0x150 [ 53.784846][ T4468] dump_stack+0x15/0x1a [ 53.784863][ T4468] should_fail_ex+0x261/0x270 [ 53.784894][ T4468] should_failslab+0x8f/0xb0 [ 53.784932][ T4468] __kmalloc_noprof+0xad/0x410 [ 53.785015][ T4468] ? rds_message_alloc+0x43/0x110 [ 53.785050][ T4468] rds_message_alloc+0x43/0x110 [ 53.785084][ T4468] rds_sendmsg+0x82e/0x14a0 [ 53.785130][ T4468] ? __pfx_rds_sendmsg+0x10/0x10 [ 53.785235][ T4468] __sock_sendmsg+0x140/0x180 [ 53.785274][ T4468] ____sys_sendmsg+0x350/0x4e0 [ 53.785375][ T4468] __sys_sendmsg+0x1a0/0x240 [ 53.785418][ T4468] __x64_sys_sendmsg+0x46/0x50 [ 53.785480][ T4468] x64_sys_call+0x26f3/0x2e10 [ 53.785506][ T4468] do_syscall_64+0xc9/0x1c0 [ 53.785617][ T4468] ? clear_bhb_loop+0x25/0x80 [ 53.785639][ T4468] ? clear_bhb_loop+0x25/0x80 [ 53.785705][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.785728][ T4468] RIP: 0033:0x7f947b34d169 [ 53.785746][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.785767][ T4468] RSP: 002b:00007f94799af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.785789][ T4468] RAX: ffffffffffffffda RBX: 00007f947b565fa0 RCX: 00007f947b34d169 [ 53.785877][ T4468] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 53.785888][ T4468] RBP: 00007f94799af090 R08: 0000000000000000 R09: 0000000000000000 [ 53.785902][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.785916][ T4468] R13: 0000000000000000 R14: 00007f947b565fa0 R15: 00007ffd0c8ea858 [ 53.785938][ T4468] [ 54.057225][ T4485] Cannot find add_set index 0 as target [ 54.139689][ T4496] bond1: entered promiscuous mode [ 54.144945][ T4496] bond1: entered allmulticast mode [ 54.167281][ T4496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.183157][ T4496] bond1 (unregistering): Released all slaves [ 55.318214][ T4538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.340134][ T4538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.399612][ T4538] ------------[ cut here ]------------ [ 55.405183][ T4538] WARNING: CPU: 1 PID: 4538 at mm/page_alloc.c:4910 __alloc_frozen_pages_noprof+0x71/0x360 [ 55.415265][ T4538] Modules linked in: [ 55.419191][ T4538] CPU: 1 UID: 0 PID: 4538 Comm: syz.4.376 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 55.431652][ T4538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 55.441881][ T4538] RIP: 0010:__alloc_frozen_pages_noprof+0x71/0x360 [ 55.448600][ T4538] Code: 00 20 00 00 75 0f 41 83 fc 0b 72 09 f6 05 df 35 50 05 01 74 0d 41 83 fc 0a 76 18 31 ed e9 5a 01 00 00 c6 05 c9 35 50 05 01 90 <0f> 0b 90 41 83 fc 0a 77 e8 23 1d 10 38 54 05 65 4c 8b 2c 25 08 00 [ 55.468280][ T4538] RSP: 0018:ffffc900012aba70 EFLAGS: 00010246 [ 55.474419][ T4538] RAX: da4e52b3da840600 RBX: 0000000000040dc0 RCX: ffffffff88df0020 [ 55.482566][ T4538] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 55.490675][ T4538] RBP: 0000000000040dc0 R08: ffffffff81cf39be R09: 0000000000000000 [ 55.498773][ T4538] R10: ffff888101046840 R11: 0001888101046850 R12: 0000000000000016 [ 55.506810][ T4538] R13: ffff888101046840 R14: 0000000000000000 R15: 0000000000000000 [ 55.514926][ T4538] FS: 00007f79b25af6c0(0000) GS:ffff8882aef24000(0000) knlGS:0000000000000000 [ 55.523935][ T4538] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.530548][ T4538] CR2: 0000200000001000 CR3: 000000011c9c8000 CR4: 00000000003506f0 [ 55.538588][ T4538] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.546701][ T4538] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.554796][ T4538] Call Trace: [ 55.558159][ T4538] [ 55.561143][ T4538] __alloc_pages_noprof+0x9/0x20 [ 55.566144][ T4538] ___kmalloc_large_node+0x83/0x130 [ 55.571437][ T4538] __kmalloc_large_node_noprof+0x17/0xa0 [ 55.577175][ T4538] __kmalloc_noprof+0x2bb/0x410 [ 55.582111][ T4538] ? hashtab_init+0x82/0xf0 [ 55.586667][ T4538] hashtab_init+0x82/0xf0 [ 55.591020][ T4538] symtab_init+0x2a/0x40 [ 55.595346][ T4538] policydb_read+0x528/0x1350 [ 55.600057][ T4538] security_load_policy+0xc1/0x8d0 [ 55.605253][ T4538] ? rep_movs_alternative+0x4a/0x90 [ 55.610563][ T4538] sel_write_load+0x1f7/0x3c0 [ 55.615397][ T4538] ? __pfx_sel_write_load+0x10/0x10 [ 55.620626][ T4538] vfs_write+0x295/0x950 [ 55.624930][ T4538] ? __fget_files+0x186/0x1c0 [ 55.629750][ T4538] ksys_write+0xeb/0x1b0 [ 55.634080][ T4538] __x64_sys_write+0x42/0x50 [ 55.638777][ T4538] x64_sys_call+0x2a45/0x2e10 [ 55.643491][ T4538] do_syscall_64+0xc9/0x1c0 [ 55.648058][ T4538] ? clear_bhb_loop+0x25/0x80 [ 55.652757][ T4538] ? clear_bhb_loop+0x25/0x80 [ 55.657582][ T4538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.663558][ T4538] RIP: 0033:0x7f79b3f4d169 [ 55.668036][ T4538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.687788][ T4538] RSP: 002b:00007f79b25af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.696257][ T4538] RAX: ffffffffffffffda RBX: 00007f79b4165fa0 RCX: 00007f79b3f4d169 [ 55.704252][ T4538] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000005 [ 55.712276][ T4538] RBP: 00007f79b3fce730 R08: 0000000000000000 R09: 0000000000000000 [ 55.720297][ T4538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.728456][ T4538] R13: 0000000000000000 R14: 00007f79b4165fa0 R15: 00007ffd25a7ffe8 [ 55.736569][ T4538] [ 55.739606][ T4538] ---[ end trace 0000000000000000 ]--- [ 55.745189][ T4538] SELinux: failed to load policy [ 55.975541][ T4545] __nla_validate_parse: 61 callbacks suppressed [ 55.975558][ T4545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.378'. [ 56.012757][ T4545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'. [ 56.080054][ T4547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4547 comm=syz.3.379 [ 56.165390][ T4550] bond1: entered promiscuous mode [ 56.170491][ T4550] bond1: entered allmulticast mode [ 56.177446][ T4550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.188495][ T4550] bond1 (unregistering): Released all slaves [ 56.214368][ T4553] bond1: entered promiscuous mode [ 56.219526][ T4553] bond1: entered allmulticast mode [ 56.226307][ T4553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.245938][ T4553] bond1 (unregistering): Released all slaves [ 56.453189][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 56.705685][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.389'. [ 56.751037][ T4582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 56.762061][ T4580] 9pnet_fd: Insufficient options for proto=fd [ 56.815848][ T4585] bond1: entered promiscuous mode [ 56.820948][ T4585] bond1: entered allmulticast mode [ 56.826716][ T4585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.837348][ T4585] bond1 (unregistering): Released all slaves [ 57.234535][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 57.276851][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 57.286831][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 57.471359][ T4614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 57.472220][ T4611] bond1: entered promiscuous mode [ 57.485419][ T4611] bond1: entered allmulticast mode [ 57.490923][ T4611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.505461][ T4611] bond1 (unregistering): Released all slaves [ 57.514364][ T4616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 57.583980][ T4621] 9pnet_fd: Insufficient options for proto=fd [ 57.688394][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 57.884051][ T4635] FAULT_INJECTION: forcing a failure. [ 57.884051][ T4635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.897277][ T4635] CPU: 0 UID: 0 PID: 4635 Comm: syz.0.409 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 57.897309][ T4635] Tainted: [W]=WARN [ 57.897317][ T4635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.897331][ T4635] Call Trace: [ 57.897338][ T4635] [ 57.897358][ T4635] dump_stack_lvl+0xf6/0x150 [ 57.897385][ T4635] dump_stack+0x15/0x1a [ 57.897425][ T4635] should_fail_ex+0x261/0x270 [ 57.897455][ T4635] should_fail+0xb/0x10 [ 57.897479][ T4635] should_fail_usercopy+0x1a/0x20 [ 57.897535][ T4635] _copy_to_user+0x20/0xa0 [ 57.897576][ T4635] simple_read_from_buffer+0xb2/0x130 [ 57.897660][ T4635] proc_fail_nth_read+0x103/0x140 [ 57.897680][ T4635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.897850][ T4635] vfs_read+0x1b2/0x710 [ 57.897882][ T4635] ? __rcu_read_unlock+0x4e/0x70 [ 57.897989][ T4635] ? __fget_files+0x186/0x1c0 [ 57.898014][ T4635] ksys_read+0xeb/0x1b0 [ 57.898050][ T4635] __x64_sys_read+0x42/0x50 [ 57.898084][ T4635] x64_sys_call+0x2a3b/0x2e10 [ 57.898112][ T4635] do_syscall_64+0xc9/0x1c0 [ 57.898177][ T4635] ? clear_bhb_loop+0x25/0x80 [ 57.898199][ T4635] ? clear_bhb_loop+0x25/0x80 [ 57.898219][ T4635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.898244][ T4635] RIP: 0033:0x7f556044bb7c [ 57.898261][ T4635] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.898319][ T4635] RSP: 002b:00007f555eab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.898342][ T4635] RAX: ffffffffffffffda RBX: 00007f5560665fa0 RCX: 00007f556044bb7c [ 57.898356][ T4635] RDX: 000000000000000f RSI: 00007f555eab70a0 RDI: 0000000000000004 [ 57.898371][ T4635] RBP: 00007f555eab7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.898385][ T4635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.898399][ T4635] R13: 0000000000000000 R14: 00007f5560665fa0 R15: 00007ffe38e3c9d8 [ 57.898420][ T4635] [ 58.307161][ T4644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 58.429754][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 58.429788][ T29] audit: type=1326 audit(1744257488.678:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.494087][ T29] audit: type=1326 audit(1744257488.718:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.496901][ T4651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.517582][ T29] audit: type=1326 audit(1744257488.718:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.550546][ T29] audit: type=1326 audit(1744257488.718:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.574124][ T29] audit: type=1326 audit(1744257488.718:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.597491][ T29] audit: type=1326 audit(1744257488.718:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.621133][ T29] audit: type=1326 audit(1744257488.718:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.644657][ T29] audit: type=1326 audit(1744257488.718:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.661329][ T4658] bond1: entered promiscuous mode [ 58.668064][ T29] audit: type=1326 audit(1744257488.718:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.673119][ T4658] bond1: entered allmulticast mode [ 58.696453][ T29] audit: type=1326 audit(1744257488.718:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4647 comm="syz.2.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbb197d169 code=0x7ffc0000 [ 58.701829][ T4658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.755563][ T4658] bond1 (unregistering): Released all slaves [ 58.856210][ T4673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.424'. [ 58.877000][ T4673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.424'. [ 58.893026][ T4669] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.912035][ T4676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4676 comm=syz.0.421 [ 59.050603][ T4683] 9pnet_fd: Insufficient options for proto=fd [ 59.069671][ T4685] bond1: entered promiscuous mode [ 59.074803][ T4685] bond1: entered allmulticast mode [ 59.106630][ T4685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.165414][ T4685] bond1 (unregistering): Released all slaves [ 59.303425][ T4698] bond1: entered promiscuous mode [ 59.308565][ T4698] bond1: entered allmulticast mode [ 59.314161][ T4698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.329628][ T4698] bond1 (unregistering): Released all slaves [ 59.430339][ T4708] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 59.702010][ T4740] bond1: entered promiscuous mode [ 59.707140][ T4740] bond1: entered allmulticast mode [ 59.725627][ T4740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.760983][ T4740] bond1 (unregistering): Released all slaves [ 59.807614][ T4749] bond1: entered promiscuous mode [ 59.812713][ T4749] bond1: entered allmulticast mode [ 59.818717][ T4749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.847899][ T4749] bond1 (unregistering): Released all slaves [ 59.904853][ T4747] bond1: entered promiscuous mode [ 59.909968][ T4747] bond1: entered allmulticast mode [ 59.920730][ T4747] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.953351][ T4747] bond1 (unregistering): Released all slaves [ 60.066321][ T4765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4765 comm=syz.2.451 [ 60.145685][ T4777] bond1: entered promiscuous mode [ 60.150793][ T4777] bond1: entered allmulticast mode [ 60.172977][ T4777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.190305][ T4777] bond1 (unregistering): Released all slaves [ 60.204790][ T4783] 9pnet_fd: Insufficient options for proto=fd [ 60.252748][ T4788] bond1: entered promiscuous mode [ 60.257952][ T4788] bond1: entered allmulticast mode [ 60.297639][ T4788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.323031][ T4788] bond1 (unregistering): Released all slaves [ 60.342643][ T4793] bond1: entered promiscuous mode [ 60.347810][ T4793] bond1: entered allmulticast mode [ 60.355608][ T4793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.371715][ T4793] bond1 (unregistering): Released all slaves [ 60.538010][ T4820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=4820 comm=syz.0.472 [ 61.075378][ T4845] bond1: entered promiscuous mode [ 61.080486][ T4845] bond1: entered allmulticast mode [ 61.085875][ T4845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.098693][ T4845] bond1 (unregistering): Released all slaves [ 61.271422][ T4848] bond1: entered promiscuous mode [ 61.276550][ T4848] bond1: entered allmulticast mode [ 61.283208][ T4848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.294230][ T4848] bond1 (unregistering): Released all slaves [ 61.305388][ T4857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.643037][ T4899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.741231][ T4907] __nla_validate_parse: 34 callbacks suppressed [ 61.741251][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.756702][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.765606][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.793716][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.802687][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.811600][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.844377][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.853423][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.862422][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'. [ 61.956772][ T4922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.504'. [ 62.408962][ T4956] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.548595][ T4971] bond1: entered promiscuous mode [ 62.553721][ T4971] bond1: entered allmulticast mode [ 62.559466][ T4971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.579253][ T4971] bond1 (unregistering): Released all slaves [ 62.774417][ T4992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.848880][ T5005] bond1: entered promiscuous mode [ 62.854081][ T5005] bond1: entered allmulticast mode [ 62.859728][ T5005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.880448][ T5005] bond1 (unregistering): Released all slaves [ 62.963977][ T5023] bond1: entered promiscuous mode [ 62.969188][ T5023] bond1: entered allmulticast mode [ 62.976633][ T5023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.988869][ T5023] bond1 (unregistering): Released all slaves [ 63.040157][ T5026] FAULT_INJECTION: forcing a failure. [ 63.040157][ T5026] name failslab, interval 1, probability 0, space 0, times 0 [ 63.052869][ T5026] CPU: 0 UID: 0 PID: 5026 Comm: syz.3.545 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 63.052915][ T5026] Tainted: [W]=WARN [ 63.052923][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.053021][ T5026] Call Trace: [ 63.053030][ T5026] [ 63.053039][ T5026] dump_stack_lvl+0xf6/0x150 [ 63.053077][ T5026] dump_stack+0x15/0x1a [ 63.053117][ T5026] should_fail_ex+0x261/0x270 [ 63.053146][ T5026] should_failslab+0x8f/0xb0 [ 63.053184][ T5026] __kmalloc_cache_noprof+0x55/0x320 [ 63.053207][ T5026] ? resv_map_alloc+0x32/0x190 [ 63.053227][ T5026] ? vfs_write+0x669/0x950 [ 63.053263][ T5026] resv_map_alloc+0x32/0x190 [ 63.053289][ T5026] hugetlbfs_get_inode+0x64/0x380 [ 63.053328][ T5026] hugetlb_file_setup+0x188/0x3c0 [ 63.053366][ T5026] ksys_mmap_pgoff+0x174/0x340 [ 63.053423][ T5026] x64_sys_call+0x1945/0x2e10 [ 63.053445][ T5026] do_syscall_64+0xc9/0x1c0 [ 63.053508][ T5026] ? clear_bhb_loop+0x25/0x80 [ 63.053581][ T5026] ? clear_bhb_loop+0x25/0x80 [ 63.053608][ T5026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.053678][ T5026] RIP: 0033:0x7f947b34d169 [ 63.053697][ T5026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.053714][ T5026] RSP: 002b:00007f94799af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 63.053778][ T5026] RAX: ffffffffffffffda RBX: 00007f947b565fa0 RCX: 00007f947b34d169 [ 63.053818][ T5026] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000200000400000 [ 63.053833][ T5026] RBP: 00007f94799af090 R08: ffffffffffffffff R09: 0000000000000000 [ 63.053919][ T5026] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 63.053935][ T5026] R13: 0000000000000000 R14: 00007f947b565fa0 R15: 00007ffd0c8ea858 [ 63.053958][ T5026] [ 63.436405][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 63.436422][ T29] audit: type=1400 audit(1744257493.688:2500): avc: denied { create } for pid=5049 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.477505][ T29] audit: type=1400 audit(1744257493.718:2501): avc: denied { write } for pid=5049 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.501899][ T29] audit: type=1326 audit(1744257493.748:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.525404][ T29] audit: type=1326 audit(1744257493.748:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.548788][ T29] audit: type=1326 audit(1744257493.748:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.572427][ T29] audit: type=1326 audit(1744257493.748:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.595806][ T29] audit: type=1326 audit(1744257493.748:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.619262][ T29] audit: type=1326 audit(1744257493.748:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.642769][ T29] audit: type=1326 audit(1744257493.748:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.666400][ T29] audit: type=1326 audit(1744257493.748:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.3.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f947b34d169 code=0x7ffc0000 [ 63.759326][ T5059] FAULT_INJECTION: forcing a failure. [ 63.759326][ T5059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.772464][ T5059] CPU: 1 UID: 0 PID: 5059 Comm: syz.1.558 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 63.772561][ T5059] Tainted: [W]=WARN [ 63.772568][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.772579][ T5059] Call Trace: [ 63.772586][ T5059] [ 63.772595][ T5059] dump_stack_lvl+0xf6/0x150 [ 63.772627][ T5059] dump_stack+0x15/0x1a [ 63.772647][ T5059] should_fail_ex+0x261/0x270 [ 63.772679][ T5059] should_fail+0xb/0x10 [ 63.772703][ T5059] should_fail_usercopy+0x1a/0x20 [ 63.772738][ T5059] _copy_from_user+0x1c/0xa0 [ 63.772848][ T5059] copy_msghdr_from_user+0x54/0x2b0 [ 63.772883][ T5059] ? __fget_files+0x186/0x1c0 [ 63.772910][ T5059] __sys_sendmsg+0x141/0x240 [ 63.772961][ T5059] __x64_sys_sendmsg+0x46/0x50 [ 63.773048][ T5059] x64_sys_call+0x26f3/0x2e10 [ 63.773076][ T5059] do_syscall_64+0xc9/0x1c0 [ 63.773113][ T5059] ? clear_bhb_loop+0x25/0x80 [ 63.773205][ T5059] ? clear_bhb_loop+0x25/0x80 [ 63.773228][ T5059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.773313][ T5059] RIP: 0033:0x7f271bc5d169 [ 63.773331][ T5059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.773352][ T5059] RSP: 002b:00007f271a2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.773374][ T5059] RAX: ffffffffffffffda RBX: 00007f271be75fa0 RCX: 00007f271bc5d169 [ 63.773389][ T5059] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 63.773401][ T5059] RBP: 00007f271a2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 63.773412][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.773423][ T5059] R13: 0000000000000000 R14: 00007f271be75fa0 R15: 00007ffc60745d28 [ 63.773441][ T5059] [ 64.093227][ T5076] bond1: entered promiscuous mode [ 64.098550][ T5076] bond1: entered allmulticast mode [ 64.114617][ T5076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.143265][ T5076] bond1 (unregistering): Released all slaves [ 64.226702][ T5085] bond1: entered promiscuous mode [ 64.231871][ T5085] bond1: entered allmulticast mode [ 64.257708][ T5085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.290755][ T5085] bond1 (unregistering): Released all slaves [ 65.035824][ T5132] FAULT_INJECTION: forcing a failure. [ 65.035824][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.049021][ T5132] CPU: 1 UID: 0 PID: 5132 Comm: syz.0.583 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 65.049129][ T5132] Tainted: [W]=WARN [ 65.049137][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.049152][ T5132] Call Trace: [ 65.049158][ T5132] [ 65.049167][ T5132] dump_stack_lvl+0xf6/0x150 [ 65.049196][ T5132] dump_stack+0x15/0x1a [ 65.049217][ T5132] should_fail_ex+0x261/0x270 [ 65.049252][ T5132] should_fail+0xb/0x10 [ 65.049362][ T5132] should_fail_usercopy+0x1a/0x20 [ 65.049439][ T5132] _copy_to_user+0x20/0xa0 [ 65.049478][ T5132] simple_read_from_buffer+0xb2/0x130 [ 65.049575][ T5132] proc_fail_nth_read+0x103/0x140 [ 65.049597][ T5132] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.049631][ T5132] vfs_read+0x1b2/0x710 [ 65.049658][ T5132] ? __rcu_read_unlock+0x4e/0x70 [ 65.049764][ T5132] ? __fget_files+0x186/0x1c0 [ 65.049785][ T5132] ksys_read+0xeb/0x1b0 [ 65.049860][ T5132] __x64_sys_read+0x42/0x50 [ 65.049893][ T5132] x64_sys_call+0x2a3b/0x2e10 [ 65.049920][ T5132] do_syscall_64+0xc9/0x1c0 [ 65.049962][ T5132] ? clear_bhb_loop+0x25/0x80 [ 65.049989][ T5132] ? clear_bhb_loop+0x25/0x80 [ 65.050013][ T5132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.050036][ T5132] RIP: 0033:0x7f556044bb7c [ 65.050070][ T5132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.050087][ T5132] RSP: 002b:00007f555eab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.050109][ T5132] RAX: ffffffffffffffda RBX: 00007f5560665fa0 RCX: 00007f556044bb7c [ 65.050124][ T5132] RDX: 000000000000000f RSI: 00007f555eab70a0 RDI: 0000000000000005 [ 65.050137][ T5132] RBP: 00007f555eab7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.050150][ T5132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.050163][ T5132] R13: 0000000000000000 R14: 00007f5560665fa0 R15: 00007ffe38e3c9d8 [ 65.050184][ T5132] [ 65.319711][ T5147] 9pnet_fd: Insufficient options for proto=fd [ 65.453531][ T5158] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5158 comm=syz.4.593 [ 65.509003][ T5157] bridge_slave_0: left allmulticast mode [ 65.514768][ T5157] bridge_slave_0: left promiscuous mode [ 65.520544][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.536733][ T5157] bridge_slave_1: left allmulticast mode [ 65.542429][ T5157] bridge_slave_1: left promiscuous mode [ 65.548280][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.565183][ T5157] bond0: (slave bond_slave_0): Releasing backup interface [ 65.594850][ T5157] bond0: (slave bond_slave_1): Releasing backup interface [ 65.621438][ T5157] team0: Port device team_slave_0 removed [ 65.633327][ T5157] team0: Port device team_slave_1 removed [ 65.640266][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.647922][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.660798][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.668340][ T5157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.758306][ T5169] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5169 comm=syz.1.596 [ 65.855778][ T5184] bond1: entered promiscuous mode [ 65.860938][ T5184] bond1: entered allmulticast mode [ 65.867420][ T5184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.881065][ T5184] bond1 (unregistering): Released all slaves [ 66.183515][ T5197] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5197 comm=syz.3.605 [ 66.771673][ T5221] 9pnet_fd: Insufficient options for proto=fd [ 66.877078][ T5224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5224 comm=syz.1.616 [ 67.199987][ T5236] bond1: entered promiscuous mode [ 67.205168][ T5236] bond1: entered allmulticast mode [ 67.211697][ T5236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.221880][ T5236] bond1 (unregistering): Released all slaves [ 67.674411][ T5257] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 67.719370][ T5257] syzkaller0: entered promiscuous mode [ 67.724963][ T5257] syzkaller0: entered allmulticast mode [ 67.976701][ T5279] __nla_validate_parse: 53 callbacks suppressed [ 67.976788][ T5279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.638'. [ 67.994483][ T5279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.638'. [ 68.171142][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.180254][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.189295][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.212537][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.221534][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.230634][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.284721][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.293706][ T5291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.643'. [ 68.547559][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 68.547577][ T29] audit: type=1326 audit(1744257498.798:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.578997][ T29] audit: type=1326 audit(1744257498.798:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.602551][ T29] audit: type=1326 audit(1744257498.798:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.626008][ T29] audit: type=1326 audit(1744257498.798:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.649402][ T29] audit: type=1326 audit(1744257498.798:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.672736][ T29] audit: type=1326 audit(1744257498.798:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.696215][ T29] audit: type=1326 audit(1744257498.798:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.719624][ T29] audit: type=1326 audit(1744257498.798:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.743040][ T29] audit: type=1326 audit(1744257498.798:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 68.766549][ T29] audit: type=1326 audit(1744257498.798:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.4.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79b3f4d169 code=0x7ffc0000 [ 69.515944][ T5383] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.515944][ T5383] The task syz.1.673 (5383) triggered the difference, watch for misbehavior. [ 70.272043][ T5416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5416 comm=syz.4.687 [ 70.304122][ T5419] 9pnet_fd: Insufficient options for proto=fd [ 71.527491][ T5504] FAULT_INJECTION: forcing a failure. [ 71.527491][ T5504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.540660][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: syz.1.715 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 71.540700][ T5504] Tainted: [W]=WARN [ 71.540708][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.540722][ T5504] Call Trace: [ 71.540731][ T5504] [ 71.540740][ T5504] dump_stack_lvl+0xf6/0x150 [ 71.540782][ T5504] dump_stack+0x15/0x1a [ 71.540802][ T5504] should_fail_ex+0x261/0x270 [ 71.540836][ T5504] should_fail+0xb/0x10 [ 71.540865][ T5504] should_fail_usercopy+0x1a/0x20 [ 71.540900][ T5504] _copy_to_user+0x20/0xa0 [ 71.540954][ T5504] simple_read_from_buffer+0xb2/0x130 [ 71.540992][ T5504] proc_fail_nth_read+0x103/0x140 [ 71.541018][ T5504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.541178][ T5504] vfs_read+0x1b2/0x710 [ 71.541211][ T5504] ? __rcu_read_unlock+0x4e/0x70 [ 71.541247][ T5504] ? __fget_files+0x186/0x1c0 [ 71.541274][ T5504] ksys_read+0xeb/0x1b0 [ 71.541309][ T5504] __x64_sys_read+0x42/0x50 [ 71.541364][ T5504] x64_sys_call+0x2a3b/0x2e10 [ 71.541386][ T5504] do_syscall_64+0xc9/0x1c0 [ 71.541421][ T5504] ? clear_bhb_loop+0x25/0x80 [ 71.541448][ T5504] ? clear_bhb_loop+0x25/0x80 [ 71.541475][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.541556][ T5504] RIP: 0033:0x7f271bc5bb7c [ 71.541626][ T5504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.541644][ T5504] RSP: 002b:00007f271a29e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.541665][ T5504] RAX: ffffffffffffffda RBX: 00007f271be76080 RCX: 00007f271bc5bb7c [ 71.541679][ T5504] RDX: 000000000000000f RSI: 00007f271a29e0a0 RDI: 0000000000000007 [ 71.541693][ T5504] RBP: 00007f271a29e090 R08: 0000000000000000 R09: 0000000000000000 [ 71.541707][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.541786][ T5504] R13: 0000000000000000 R14: 00007f271be76080 R15: 00007ffc60745d28 [ 71.541807][ T5504] [ 72.806422][ T5558] xt_CT: No such helper "snmp_trap" [ 72.824716][ T5558] SELinux: policydb version 1886519320 does not match my version range 15-34 [ 72.834334][ T5558] SELinux: failed to load policy [ 73.127260][ T5575] syzkaller0: entered promiscuous mode [ 73.132795][ T5575] syzkaller0: entered allmulticast mode [ 73.602487][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 73.602502][ T29] audit: type=1326 audit(1744257503.848:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.642525][ T5602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5602 comm=syz.3.751 [ 73.656926][ T29] audit: type=1326 audit(1744257503.848:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.680378][ T29] audit: type=1326 audit(1744257503.848:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.703818][ T29] audit: type=1326 audit(1744257503.848:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.727271][ T29] audit: type=1326 audit(1744257503.848:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.750635][ T29] audit: type=1326 audit(1744257503.848:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.774103][ T29] audit: type=1326 audit(1744257503.848:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.797621][ T29] audit: type=1326 audit(1744257503.848:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.820976][ T29] audit: type=1326 audit(1744257503.848:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.844457][ T29] audit: type=1326 audit(1744257503.848:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.0.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556044d169 code=0x7ffc0000 [ 73.950628][ T5621] __nla_validate_parse: 31 callbacks suppressed [ 73.950649][ T5621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 74.108156][ T5636] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.243088][ T5646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5646 comm=syz.2.769 [ 74.912842][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 75.183978][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 75.311091][ T5692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.786'. [ 75.387668][ T5697] vlan2: entered allmulticast mode [ 75.428825][ T5697] 9pnet_fd: Insufficient options for proto=fd [ 75.480337][ T5705] 9pnet_fd: Insufficient options for proto=fd [ 76.026268][ T5732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 76.132675][ T5743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5743 comm=syz.0.804 [ 76.178516][ T5749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5749 comm=syz.1.807 [ 76.343258][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 76.404158][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 76.428753][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 76.437762][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 76.460343][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 76.478254][ T5772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 76.524647][ T5783] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5783 comm=syz.0.819 [ 76.657906][ T5792] 9pnet_fd: Insufficient options for proto=fd [ 77.161903][ T5824] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5824 comm=syz.1.833 [ 77.270504][ T5836] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 77.497106][ T5846] FAULT_INJECTION: forcing a failure. [ 77.497106][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.510322][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.2.842 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 77.510358][ T5846] Tainted: [W]=WARN [ 77.510366][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.510377][ T5846] Call Trace: [ 77.510384][ T5846] [ 77.510391][ T5846] dump_stack_lvl+0xf6/0x150 [ 77.510444][ T5846] dump_stack+0x15/0x1a [ 77.510464][ T5846] should_fail_ex+0x261/0x270 [ 77.510496][ T5846] should_fail+0xb/0x10 [ 77.510580][ T5846] should_fail_usercopy+0x1a/0x20 [ 77.510616][ T5846] strncpy_from_user+0x25/0x230 [ 77.510641][ T5846] ? kstrtouint_from_user+0xbf/0x100 [ 77.510676][ T5846] path_setxattrat+0xef/0x320 [ 77.510796][ T5846] __x64_sys_lsetxattr+0x71/0x90 [ 77.510820][ T5846] x64_sys_call+0x2014/0x2e10 [ 77.510847][ T5846] do_syscall_64+0xc9/0x1c0 [ 77.510882][ T5846] ? clear_bhb_loop+0x25/0x80 [ 77.510908][ T5846] ? clear_bhb_loop+0x25/0x80 [ 77.510969][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.510994][ T5846] RIP: 0033:0x7ffbb197d169 [ 77.511012][ T5846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.511033][ T5846] RSP: 002b:00007ffbaffe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 77.511055][ T5846] RAX: ffffffffffffffda RBX: 00007ffbb1b95fa0 RCX: 00007ffbb197d169 [ 77.511069][ T5846] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0 [ 77.511083][ T5846] RBP: 00007ffbaffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.511097][ T5846] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 77.511111][ T5846] R13: 0000000000000000 R14: 00007ffbb1b95fa0 R15: 00007ffd54f2b668 [ 77.511213][ T5846] [ 77.763978][ T5860] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5860 comm=syz.1.847 [ 77.938020][ T5876] FAULT_INJECTION: forcing a failure. [ 77.938020][ T5876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.951221][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.2.854 Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 77.951261][ T5876] Tainted: [W]=WARN [ 77.951269][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.951283][ T5876] Call Trace: [ 77.951289][ T5876] [ 77.951297][ T5876] dump_stack_lvl+0xf6/0x150 [ 77.951321][ T5876] dump_stack+0x15/0x1a [ 77.951409][ T5876] should_fail_ex+0x261/0x270 [ 77.951443][ T5876] should_fail+0xb/0x10 [ 77.951472][ T5876] should_fail_usercopy+0x1a/0x20 [ 77.951508][ T5876] _copy_from_user+0x1c/0xa0 [ 77.951548][ T5876] copy_msghdr_from_user+0x54/0x2b0 [ 77.951709][ T5876] ? __fget_files+0x186/0x1c0 [ 77.951858][ T5876] __sys_sendmsg+0x141/0x240 [ 77.951907][ T5876] __x64_sys_sendmsg+0x46/0x50 [ 77.951939][ T5876] x64_sys_call+0x26f3/0x2e10 [ 77.951982][ T5876] do_syscall_64+0xc9/0x1c0 [ 77.952015][ T5876] ? clear_bhb_loop+0x25/0x80 [ 77.952042][ T5876] ? clear_bhb_loop+0x25/0x80 [ 77.952069][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.952095][ T5876] RIP: 0033:0x7ffbb197d169 [ 77.952113][ T5876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.952207][ T5876] RSP: 002b:00007ffbaffe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.952229][ T5876] RAX: ffffffffffffffda RBX: 00007ffbb1b95fa0 RCX: 00007ffbb197d169 [ 77.952244][ T5876] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 77.952293][ T5876] RBP: 00007ffbaffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.952328][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.952342][ T5876] R13: 0000000000000000 R14: 00007ffbb1b95fa0 R15: 00007ffd54f2b668 [ 77.952366][ T5876] [ 78.158136][ T5877] 9pnet_fd: Insufficient options for proto=fd [ 78.295552][ T5885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5885 comm=syz.3.856 [ 78.608391][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 78.608476][ T29] audit: type=1400 audit(1744257508.858:3815): avc: denied { create } for pid=5893 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.809807][ T29] audit: type=1400 audit(1744257508.898:3816): avc: denied { write } for pid=5893 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.830265][ T29] audit: type=1400 audit(1744257508.968:3817): avc: denied { prog_load } for pid=5899 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 78.849259][ T29] audit: type=1400 audit(1744257508.968:3818): avc: denied { bpf } for pid=5899 comm="syz.3.859" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.869820][ T29] audit: type=1400 audit(1744257508.968:3819): avc: denied { perfmon } for pid=5899 comm="syz.3.859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.890719][ T29] audit: type=1400 audit(1744257508.978:3820): avc: denied { mounton } for pid=5899 comm="syz.3.859" path="/173/file0" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.178811][ T5903] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5903 comm=syz.3.861 [ 79.231337][ T29] audit: type=1400 audit(1744257509.188:3821): avc: denied { map_create } for pid=5902 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.250503][ T29] audit: type=1400 audit(1744257509.188:3822): avc: denied { map_read map_write } for pid=5902 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.270464][ T29] audit: type=1400 audit(1744257509.198:3823): avc: denied { read write } for pid=5902 comm="syz.3.861" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.293869][ T29] audit: type=1400 audit(1744257509.198:3824): avc: denied { open } for pid=5902 comm="syz.3.861" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.544810][ T5923] __nla_validate_parse: 7 callbacks suppressed [ 79.544825][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 80.085120][ T5933] 9pnet_fd: Insufficient options for proto=fd [ 80.349513][ T5946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5946 comm=syz.0.877 [ 80.779605][ T5970] openvswitch: netlink: Message has 6 unknown bytes. [ 80.886452][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 81.096298][ T5981] ip6t_REJECT: ECHOREPLY is not supported [ 81.147690][ T5988] siw: device registration error -23 [ 81.337561][ T5999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=5999 comm=syz.4.896 [ 81.458688][ T6004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=6004 comm=syz.4.898 [ 81.490587][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 81.499734][ T6008] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 81.509583][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 81.527613][ T6008] netlink: 108 bytes leftover after parsing attributes in process `syz.2.900'. [ 81.536662][ T6008] netlink: 84 bytes leftover after parsing attributes in process `syz.2.900'. [ 81.726855][ T6027] block device autoloading is deprecated and will be removed. [ 81.742835][ T6029] loop1: detected capacity change from 0 to 2048 [ 81.780609][ T6029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=6029 comm=syz.1.908 [ 82.100669][ T6049] loop1: detected capacity change from 0 to 1764 [ 82.111114][ T6049] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 82.193104][ T3004] ================================================================== [ 82.201226][ T3004] BUG: KCSAN: data-race in dont_mount / step_into [ 82.207651][ T3004] [ 82.209968][ T3004] read-write to 0xffff8881065e2600 of 4 bytes by task 5674 on cpu 1: [ 82.218026][ T3004] dont_mount+0x2a/0x40 [ 82.222194][ T3004] vfs_unlink+0x298/0x430 [ 82.226595][ T3004] do_unlinkat+0x21b/0x4b0 [ 82.231040][ T3004] __x64_sys_unlink+0x2e/0x40 [ 82.235730][ T3004] x64_sys_call+0x2358/0x2e10 [ 82.240435][ T3004] do_syscall_64+0xc9/0x1c0 [ 82.244951][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.250862][ T3004] [ 82.253194][ T3004] read to 0xffff8881065e2600 of 4 bytes by task 3004 on cpu 0: [ 82.260730][ T3004] step_into+0xe7/0x860 [ 82.264911][ T3004] walk_component+0x178/0x240 [ 82.269594][ T3004] path_lookupat+0x103/0x2a0 [ 82.274231][ T3004] filename_lookup+0x14b/0x340 [ 82.279021][ T3004] do_readlinkat+0x8b/0x210 [ 82.283528][ T3004] __x64_sys_readlink+0x47/0x60 [ 82.288402][ T3004] x64_sys_call+0x2a81/0x2e10 [ 82.293098][ T3004] do_syscall_64+0xc9/0x1c0 [ 82.297613][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.303509][ T3004] [ 82.305829][ T3004] value changed: 0x00300008 -> 0x00004008 [ 82.311538][ T3004] [ 82.313882][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 82.320031][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G W 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 82.333598][ T3004] Tainted: [W]=WARN [ 82.337399][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.347457][ T3004] ================================================================== [ 82.358112][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'.