last executing test programs: 1m19.684096023s ago: executing program 2 (id=9378): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000001600010a00000000000000000a0000df"], 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x20000010) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x10, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x6}}, 0x1c}}, 0x4040) 1m19.603187234s ago: executing program 2 (id=9382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fcffffef42000000ffffffff6e65740f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000000000000000000000d7a5fa3e4813fef04ff2e8c7dce46444aeed48fc101f892ab5a209c0c0d49d1db095833fa12b19da4d4696a3949630aef368cab9972978285b6cf2a7747530f6b801b1b082590e4188d0751ab3103935808d6f5d4a8205aa50154d0789608936bdfa8b0be1691957204a9a41771a04342d5ee7e3b9179a7f61f8dfb13a079c387528a36be58e7090ee2556eff69e"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m19.551555394s ago: executing program 2 (id=9384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, 0x0, 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24, 0x1) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) unlink(0x0) pwritev2(r8, &(0x7f0000000240)=[{0x0}], 0x1, 0x33000, 0x0, 0x3) pipe2(0x0, 0xc880) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 1m19.456077855s ago: executing program 2 (id=9389): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, r1, {0x2, 0x0, @private=0xa010101}}}, 0x26) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)="730ffaabe653254be84565812e0a3812cf40a8540f2eab9a696e8e7175fc62d35816931c4bbd92f38d7805074aad7f8aeea71894eb31cf02d94ca7b0a4a8a346f01a13face968bab9d598386407bfb6308df611701f64fb78af8441a8288a3fc40eb1708ea87b590256c5fb8bdf3f8a8e5e5f0799a40aac63c6c271cdac19d14b9b35e034f1840bbf8f64c3f850bffa6f1c9b9524ed1b1cc6f50efdf065337aa79000fcfb056a017edca304174b4715c504084fd76b715001a2a0cfead60a7236640d389426e37cffb"}, 0x20) 1m19.386249675s ago: executing program 2 (id=9394): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000000000)="23922befba7122b2913c967545991468ae21e9f0451fa0dd2b79d62a458f759b60f6", 0x22, 0xc8c1, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioperm(0x0, 0x12e, 0x8000000000008) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='ns\x00') readlinkat(r2, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) mq_notify(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x63012ee2791497c, r2, 0x4, '\x00', r5, r2, 0x2, 0x2, 0x2, 0x2, @void, @value, @value=r2}, 0x50) 1m19.327111896s ago: executing program 2 (id=9397): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3b4}, [@ldst={0x2, 0xb2e092c5b4cf0829, 0x0, 0x1, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x81, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x1, 0x5, 0xa, 0x4}, {0x4, 0x4, 0x3, 0x4}, {0x2, 0x2, 0x5, 0x1}, {0x4, 0x1, 0x1, 0x9}, {0x0, 0x2, 0x6, 0x7}], 0x10, 0x8000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) lstat(0x0, 0x0) socket$inet(0xa, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000001480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001500)=""/247, 0xf7}, {&(0x7f0000001600)=""/241, 0xf1}], 0x2}, 0x7f}, {{&(0x7f0000001700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/103, 0x67}, {&(0x7f0000001800)=""/237, 0xed}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/153, 0x99}], 0x4}, 0x6}, {{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/79, 0x4f}, {&(0x7f0000001b40)=""/216, 0xd8}, {&(0x7f0000001c40)=""/44, 0x2c}], 0x3, &(0x7f0000001cc0)=""/6, 0x6}, 0x10001}, {{&(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001d80)=""/207, 0xcf}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/79, 0x4f}, {&(0x7f0000001f80)=""/111, 0x6f}, {&(0x7f0000002000)=""/39, 0x27}, {&(0x7f0000002040)=""/248, 0xf8}], 0x6, &(0x7f00000021c0)=""/143, 0x8f}, 0xef5b}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002280)=""/213, 0xd5}, {&(0x7f0000002380)=""/6, 0x6}, {&(0x7f00000023c0)=""/99, 0x63}, {&(0x7f0000002440)=""/142, 0x8e}], 0x4, &(0x7f0000002540)=""/156, 0x9c}, 0x7}, {{&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/237, 0xed}, {&(0x7f0000003780)=""/93, 0x5d}, {&(0x7f0000003800)=""/4, 0x4}, {&(0x7f0000004a80)=""/112, 0x70}, {&(0x7f0000003840)=""/17, 0x11}, {&(0x7f0000004b00)=""/182, 0xb6}], 0x7, &(0x7f0000004c40)=""/4096, 0x1000}, 0x4}], 0x6, 0x35d225cb5628e508, &(0x7f0000005dc0)) 1m4.288392438s ago: executing program 32 (id=9397): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3b4}, [@ldst={0x2, 0xb2e092c5b4cf0829, 0x0, 0x1, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000200)='syzkaller\x00', 0x81, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x1, 0x5, 0xa, 0x4}, {0x4, 0x4, 0x3, 0x4}, {0x2, 0x2, 0x5, 0x1}, {0x4, 0x1, 0x1, 0x9}, {0x0, 0x2, 0x6, 0x7}], 0x10, 0x8000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) lstat(0x0, 0x0) socket$inet(0xa, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000001480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000300)=[{&(0x7f0000001500)=""/247, 0xf7}, {&(0x7f0000001600)=""/241, 0xf1}], 0x2}, 0x7f}, {{&(0x7f0000001700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/103, 0x67}, {&(0x7f0000001800)=""/237, 0xed}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/153, 0x99}], 0x4}, 0x6}, {{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/79, 0x4f}, {&(0x7f0000001b40)=""/216, 0xd8}, {&(0x7f0000001c40)=""/44, 0x2c}], 0x3, &(0x7f0000001cc0)=""/6, 0x6}, 0x10001}, {{&(0x7f0000001d00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001d80)=""/207, 0xcf}, {&(0x7f0000001e80)=""/119, 0x77}, {&(0x7f0000001f00)=""/79, 0x4f}, {&(0x7f0000001f80)=""/111, 0x6f}, {&(0x7f0000002000)=""/39, 0x27}, {&(0x7f0000002040)=""/248, 0xf8}], 0x6, &(0x7f00000021c0)=""/143, 0x8f}, 0xef5b}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002280)=""/213, 0xd5}, {&(0x7f0000002380)=""/6, 0x6}, {&(0x7f00000023c0)=""/99, 0x63}, {&(0x7f0000002440)=""/142, 0x8e}], 0x4, &(0x7f0000002540)=""/156, 0x9c}, 0x7}, {{&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/237, 0xed}, {&(0x7f0000003780)=""/93, 0x5d}, {&(0x7f0000003800)=""/4, 0x4}, {&(0x7f0000004a80)=""/112, 0x70}, {&(0x7f0000003840)=""/17, 0x11}, {&(0x7f0000004b00)=""/182, 0xb6}], 0x7, &(0x7f0000004c40)=""/4096, 0x1000}, 0x4}], 0x6, 0x35d225cb5628e508, &(0x7f0000005dc0)) 973.932663ms ago: executing program 5 (id=13872): r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x1d, 0x10, 0x2, 0x1ee}, &(0x7f0000000340)=0x0, &(0x7f0000000540)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006da1cdb3d2"], 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) capget(0x0, 0x0) mq_timedreceive(r5, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 877.598634ms ago: executing program 4 (id=13879): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@jqfmt_vfsold}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) memfd_create(&(0x7f00000001c0)='\xf3e\t\xa9\xff\vty\x01senux\x00}e\xf1\xad7I\xd0_\x87\xf3r\xdcz38B\xc7m\xb8V\xf4\"\r\xddk\xad\x85\x88\x066\x8fg\x9e\r\x04\xf3\x19\xe2\xb0\xd7\x98\x8f\x1c\x97n\xb5\xe9\"\x9fl\x14nry\xb7*\xf9\x98\xcb\x14\xdc\xa1\xab\xe1/\x194>\xa2S\xe8\x93\xbb\xa8:\xbbC>x\x05\xcb\x1dy\r\xc7\x8ei\xd5\xce\x1d\xe2\xaf\t\x99\xf9-\xde\x82\xa8\xae\x98\x12\x1f\xad-S$N\xba\x1d\x92\xe3S\xa0', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x4e22, @empty}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x1, 0xfffffffffffffffd}}}, 0x118) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000e900"/17], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r6}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r8, r7}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 831.242834ms ago: executing program 3 (id=13881): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) 807.321964ms ago: executing program 3 (id=13882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(r2, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612b, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 766.572974ms ago: executing program 3 (id=13883): syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 726.011415ms ago: executing program 5 (id=13885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58db, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001, {[@end, @timestamp_addr={0x44, 0x4, 0xe, 0x1, 0x8}]}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 704.418075ms ago: executing program 3 (id=13887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 677.140555ms ago: executing program 5 (id=13888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) listen(r2, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x8001, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6077000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="54a9a8f8f0780000"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = accept(r0, 0x0, &(0x7f0000000600)) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000680)) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000005", @ANYRES16=r10, @ANYBLOB="01002dbd7000fbdbdf25140000000c0006000100000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000280)="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") 645.096745ms ago: executing program 4 (id=13890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x3, 0x4) listen(r2, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x8001, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6077000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="54a9a8f8f0780000"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000008579000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r9 = accept(r0, 0x0, &(0x7f0000000600)) ioctl$sock_inet6_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000680)) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000005", @ANYRES16=r11, @ANYBLOB="01002dbd7000fbdbdf25140000000c0006000100000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000280)="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") 579.588616ms ago: executing program 3 (id=13893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), 0x0}, 0x20) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000380)="851e00814f", 0x5}], 0x1, 0x33000, 0x0, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 579.171606ms ago: executing program 1 (id=13894): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0800000000040000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x7c67, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x40000001}, &(0x7f00000009c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001c80)={0x8, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0xd2}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/209, 0xd2}, {&(0x7f0000000540)=""/52, 0xfffffffffffffe14}, {&(0x7f0000000700)=""/25, 0x19}], &(0x7f0000000540)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='net_dev_start_xmit\x00', r1, 0x0, 0xd}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xf4}}, 0x10009000) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x2, 0x200) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x20010, r7, 0xffffffffffffffff) 578.288076ms ago: executing program 5 (id=13895): syz_mount_image$msdos(&(0x7f0000004140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000041c0), 0x81, 0x413f, &(0x7f0000008340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x40101, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000001680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query]}, &(0x7f00000000c0)='syzkaller\x00', 0x80, 0xa5, &(0x7f0000000100)=""/165, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x9, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000280)=[{0x5, 0x1, 0xe, 0x2}, {0x0, 0x2, 0xc, 0x7}, {0x4, 0x3, 0x1, 0xb}, {0x1, 0x3, 0x5, 0x5}, {0x2, 0x3, 0xe, 0x6}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0x800, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r0, 0x0, 0x1000, 0xf6, &(0x7f00000003c0)="c3cb9298d475715b84ef68eaf5a37361276e93a891dc249316c756cdee0a7cb8e4864864c5cacf1607f00bfaae2b656f4fd35399de076528a94ab7814104ec515c2b781d296d036d0ff0e63b718d5ba3cad5285f6a785c4f9f9039265f6f1f4ec89308a2b42cd0ea1270613769ff5e285202c801760d000a803881dd1375ad5e03d1af6ae8ac38a77ad11515d413eccbad2c0bf89f074ab5bb4595128f12bb78b5b22032ebd00bc4f4770ad3999d1b7c1043b52988008d8c765bf33a5b3519b20802d8daf4010545147520b18776a7bff4c89273a0c6d6001420ad485d6996354da713a29a098c85090c2148de28aa89082430ed862c7f0819a457aaba91e39541008c53b8092e8963681f7f25cc51faffdd44e6e34f32d651ffdf5e089096caa536f377e640d641e36511bc2bacbd3cbea7a8646ce9a8d9cf7cfea019b97104666eda3979b04da37afb2c331c615d2e957a4ef6c3919baeeee2e079666d81565e22559eb35ca16e2529f5c56a026a3b337cbc367e55106b9dde5d6d4dd7bbabcc1303c6b82a368e35a316d794e0f77fb34368e1ec861ade434669c8ef0a8e04acb3aae5cde752b200ca4d9c2ae368d6739e2828558a10d070b69cd7d8e49d2d3ec4dc3f5fa409aace00285595322e885ca34b4b1e5dfc42141cab2cb8b06422c4c3c16e55d178c429e81d80cb02e910311f46d465664e1aba2677b171d538f6cdc74ebcd6b363a0a7150f47fedb1d8d86aad5a1f9aa7e773e12f979221f3cf73e40bf576aac58f390d1bef346b785b19e1b217cc9ffd216f90850b82b69e85e4b745ab00321aabc8d2893795f8a9dde5bed603d8cd1fb3f935b317e83200b21fa2712236c34ed209d56ccd61ddacfa9c4f1cae77ad7f0b7357cf7e3cfe7bb4fc17be082004e6c185ca8d80b99b3470a7e1face1cd1e52e0d9ed2558dc803254ab2c60924ff0f329cf2982da564aad58d9d512155d2a36f24239f0ad0c493231697b40dc5525742241d2ee06d7370cef3007c6534d60ae89e350dd3cca4391325a0c0e34f8570577132a31803fa47b114ecfbc61769f87330abefbac92867a9ec2525132a4712a4391c5f9104e8d52493a83f1d7bd633fd9fb9b4f6a7d188e268f5e85caa3fef092ed5ec481efc9de31c0d0b45f1d40ac6c143d191c5cdcecd258b2bdbb855684dc221b512ee0d6f2f1837b61e1dd8329c461e4d24e0b431fdedfe7411847ba5a5fa7b2db564ad51b0bff3e0ef6729e0b3f1f7db4d466b3a475dfb769b0275018d31d463822908c2379f66adf4c6ba8273c945b49f1c50ab7ad79595925921bc1ccdc062041ba3aafc8cefa232423ea9fe20bafa2e948d8a00c7a2f73c671fe985c1c38fe5baf778465ad26b2bf32659112009f3f3cde93e2d90333ce7e7d84efe42dfa28721cc2c34475c3edfaba123648be7cf2208acea928c5f9b48a48c85187fe575b2690fb5dee3dea7ba7bcb4429bfa2e9dd2f4ecba910e16c3517bc70d0ed923f1e59daca1ebcadbaaa3279f4105ae988b7d3153eca3f4823f09319605d65532bde51f46ed1ef29f862322d4703f029acdc20419ccc0b9d23838944023d1d9702bd12a28d0a689b5893bc3c5329972a12bfd7687cd594bbe9678a2cb929b10de70fb8cec644290003333b0fa6712db6eff648c78eb6fed511ae36e1665b56428d5a97c62e8139bda96e6f68e5b55280d84a462c55ca9efe11d8f59110b3d38d886c0c3178164fe4416ee9e62b6cdd9141bce426bc646e08ea8b30d9e7eeebad8abd8ef259e61f9af159c9ccf65c8d1525204f34f166e71d6553cebae3b05724057496b372682fed70e11b47fbb93c1ef056770c22cc76a7dc6d0cd31d6836de834750a01dceb98d46911b12a51f15eb75fbb282edefbf7d80fa2fb2d17542fe018ca22ad653a72b1e3b5a9b8ca109550de506c9ae5af7144d12b944d170204fcaa1b4f57630644aaa9f69bd41a1f6d29dba8eab84e60040e7f2c39b4571ff836221bc754b88d2a001eb4b94f37a7d929fbcdd879bfbdf54dbbb88a34d6892e2c9ce03a7f6a6eea4f32f76698dac6993776e0ec9c41c7fadcf3dda151ee02080364cf7a7dd05be7fed7902e64502abaedadec73678c601c67f53e3fb635d4131136ac5a66e4bcb1bfda145c35da124903ca70e2a6d317ba52d5a8b75e9b41cff2940c3fa317e56994fa79278b9047b5152a9f210c44a1b1729e80104cdcd7cbbf4ab5dff527daed1c3cf9365e43d622ad241208ecdadf1f6752e795a00e7eeb862a7c7eeb7354bee4d3cab43175d5d12201a399cbd62a33273b2b7efb40c868f0776e4cc988229aecec8ddfd6e91231a1ce9f080ae8721d07fb24bea9e2f3425e0e78548ba3193caeb2a7cc7ab906b883b4546eb3f7ad10690a504abf258cd9970e1a14c597b25c7b71de8dfb74d824fbefa1f9073f23402387c7388a6ab437c508a009bd42ca7c8317b6a2d3ea60a43401da5647d61c1a7e777a5bc00060092be839d8d8aa1c614f9ba538a6c911421376c32446d5d20ecca3492bc1ea3f3b1fac46d2cbba6ef15139cc3712b3c44e5397f6d29b4c07c68723538a32c8c9203bd5edb6a37142e6c8603ce2c71ab5ebe78d8c20a53b076896d04997b44dfeafcd861438a64dd48f3503efb6fb69e0d13d8b1dcc945ae52b1321be79f037e816286b6cdabf4ed5024139efab398e01b86d58e7317891f3a061bcb9beb65a56fa6616d9a1e5f581468719ad4e0f9a40aba21a37a633869af14c51add4e3cfe9e7d14ed602d3ed6a5ef31fb30914cfbaddb7e87bb4f97409f62ea7052ba5fd79d4ce173ef85d0e84cdea19239b52a9d7dd126ef258581e46d9fcb0516bfaf3e397c64fc92f0fd5011d393231c99367da8a05f8c0b298959f6a1c0825da0e30f73ddff3b0428fb4bf2140c309e105888376b10099e21493b54be52fda1d2515bbc8b3231174a3f734059e1851b8da5d83b6cd28485543048da9db06a0f3189b2dc72293e8f30462edc743aa2c7e72c797017a3d69bb0bbe082664ddba4d523c38d3664acac1e479c479258c484a0a38ecfd40c78d791f60ff47a0c2493c87115ac1032237dc58537f10dc5af218028d7d041f791fc57bc415e8996eaf4d5d8e86c7d61f98231a88447fc41706df4ab8a00be874e7a1d8fd21919a1f9dae49dd37ab542634453d1c0ff5e2bc87dc14b72f1aa36e1f49e1cf2b8cc90ed8cc7d46eb36eb8ac37dfb715af58ba37ccc2501ab664b1bbe7c27bde56a27897df0ef204071991f0c854a4af21bdbfb95204ee654f32d80ecb782b2f5e3a907fc934bbabf497e510a5624de1038639bd1ae0885b9efc98d7a594ac012b27c187312b83b67ae9e060121ff6065dc45813e46bc29dd413de6b82ec8d770b96a8cd5ed68b102b6aec01034757ab059603014cc01178b8c6a5c1d660deb404b9d79177b13d35828d22e7e30ea6147c7a8dca410563cfd424f9042dd1860bb15e026f2a765003d4a8a33b1c6134f534aeb8925aab73d60c352f4ec2d7effb358a08390f71632cfc977554fa7efadff63ca8acad73d4b95a5043c58add630bc70b29c7a3d376bb295317c0f043e6216b3a5765de767bef28e512231f7049663a64739785f9b0ee97cb5211d926a911cd989db9391c0aafdf85a14d406fa534120c3e1263a1ec8bb220b6b794ac50780dffdcca34f3d2397d1b771aa62746bb70ce9b407cca1ec1c803f93bc8a2f4cdd4be5ade2077992c56ca75fb899b69fca82e56a5b4c76b467bc34ed2948e388f8b17d746edb76ec27b3b747a324c82ac595883a4e39e2bddf3eaf7cd0c05e42f1de64ef32f2d9968a26501b83c135780b22ce48d0bcab840320d63783473f0528febf0ca4646efc02b788f3eebd841b76b828a5d678e7ef10c60e1cb5d0a74279d9e5e9ce9b2f032f109105ce6e08eff5a02514c651e9980d98c73b18b000564199cba5b47ccbb46fd10e51428bc9544baf2254c4bb76ed85c8aeea464b7f491528be4d19c2183c1ad1f09dc3f6908c23b6f82789dd6ef855521f8e591123094823dd4abe3af24de25f912ab45a19f1934aeed5982195295a835b7aefa6d4cf6143af65812cce4c52689bfd0fe34714b605d5629ed227ba045e8cb4e402e3a9bba67d7b8baa33caa8943c21a5abfad96ba2b97908ba953535a605c19ec803d86328315ae857bf9baca9cc2ad51b8170f56ef7d701ea2d4045282c513c83229a5550a30c8f8de589c540068f664b1eb0bf928b94fa0d1570b3b077992863373575d6e83c72d78f727b7b232b83c2bce78e1652fd65e16e882b023e0f36b8cf4fb79d7dca251d8ee6da5c280a193111bc6b21bfbd4c197d08fff905c01755db1d9e363848fe7bf9d6b1d7bc9a18c44b32a2b6ab4e442ff5e70591263f44b3a490efed40c2fec728049d5a8e773c3042df7afabf5788f5a5a4e214dca02ff3bd2fa538c14cbc00df88b7aca68d71f43c3776a97c28c41c3bb7c8088ab98f7a7563ed40e068f45e7c24b25f7260bbdf5624ca7e88a3b6a972efedb300b66b6ab27bb9686e5cc845dd2c06ed18b0231333bae44cdd38278943dc1cec3c88b404675fbcda1cdadf7b7df2acec88e5eaf323ec1c3abbff5905424d45f92d2fd749d317613c07fa7070fa3d246af81bbef08dfccafe11377654956eb12bf7f4ece104aec6f20684ef3e77f8ae7b1dc1d16b30da7285e64d86d0a19107b093ac51583739bb2a2e6321ba167fbf87edf37d9b7152d5c6dc0fc0e66b0a9cbff4716bbf06c40b879f79e9743325f79697f4ad4ca3993015020614e75f359d6495a7283d868378459f74d453aa1575f1651e2cf94808dfc88d860832ed65506696ecd8f13d525f34f695eadc585589b9a54eb01f079819e6676a456257d277d2eecc71dee99e48a7c946dea8f6554e7edeb510855c45c6a83d077e5e6e38af62680857f8e295fe94b15e65f6d69644b8e94b6cfb191e64913dbbac0635825038a16de8ce9dde929ab546aa8dd0eae1821bd3dbd2223fb91bb610b405a630e32a2c97e3c1c8f125fc58f98e36f041177d55cd106d51fa1cbeca086f1c7ebd21dacc5a45f305862b159275da6c5a67d20d3ff9f76f09f6cc46bf2971372bca3037211657b4d0e729be034fe75058e785bfeb773427a795da5e84045a58fc5e2735a6cdad7d9c5b37aedf2724a2ce3991c66fafd939f9f1a53702ec8d515ba90f7ab17c740717e63f18108c0201099f3d0d00aeb02323df080b833bc5dfc45de7aff9ea0254b0f6865aa965316e66f42c05492afdb4bd639908ff513c844cd96a2a1f0ea9ceb4027e87f4fa075de626e456efd9fc9330583e7abc767ba0ad9e9ece7179c6e25f075e44fa311a292be8e1c3995c4c3ef3675d1b3e6bef1d7cbe9de139863e8e4ddba727787f559232ac1dfcdb50aa177cad3d03348083d1120c2e53060ad178cc0ed43998a983ed0f2baaaac0b74d68e022c0e615ec7a1db9a061003d1643cb876b33d3412f9a6b7450352852df06e5b19be53af57aa47cbe09137db4d75939d56d88e0e37442d251aada45f77838de580ee11dfb66f8c634d5ea2572c0071073b41cd49b23a6a4d01b31fc6e2e18e559ecad1c27d1726d0ba55f317e6b6db7e72f67a7856caff904bbf47ea4a737a5ede00b8861bd4d90a40459c2ad7267833836a9397cd4a4e699c2cad0484b08f1d794ca0b0dfd2df5c3378c7a42c8ca39e6908c3510a752d3f53658441d2199cd7a79edc6af409371fba2bacf900a3a35dc3c0f26611c13e672ca3d7c96490b9ad41383", &(0x7f00000013c0)=""/246, 0x8, 0x0, 0x4, 0xee, &(0x7f00000014c0)="32488cac", &(0x7f0000001500)="629a76596757c5179f7305eb96319f11f445afb97060634b17a885ea4773bd762cbf794b079b237cd318e9650a4086e9e3f535409b587b61c035a1cfd6d7973e3484b095bed687684ac445ab33f22c52e85391c18f7385a69f3c6c3e6483247392d6d2522e06e3291f6a3010073ffbdcfd0c5ad26e00535212c5e3e9cc82abb16c0f21ca5491654aa9b393144dc28decace0c5ac572cf19a4b5124d300258eebb085601cca36cac87186ac6175dd6eab250a250090a83c7b4cbd531fd716acdb980ffe369400448d29f3ecee19ee9b0f71d6871731dce6512e1f7649c401d3962be0aefa6528a704fa8dbff79976", 0x1, 0x0, 0xffff}, 0x50) 508.440706ms ago: executing program 3 (id=13896): r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x1d, 0x10, 0x2, 0x1ee}, &(0x7f0000000340)=0x0, &(0x7f0000000540)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006da1cdb3d2"], 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) capget(0x0, 0x0) mq_timedreceive(r5, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 481.630577ms ago: executing program 4 (id=13897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r4, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000300), 0x74ea) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 374.480607ms ago: executing program 4 (id=13899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r2) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b6, &(0x7f0000000380)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x5a) write$9p(r4, &(0x7f0000001400)="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", 0x180) sendfile(r4, r5, 0x0, 0xe065) 341.870487ms ago: executing program 0 (id=13900): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000015000100000000000000000002000000"], 0x28}}, 0x0) 288.709498ms ago: executing program 1 (id=13901): r0 = io_uring_setup(0x410f, &(0x7f0000000200)) io_uring_enter(r0, 0x20be, 0x3, 0x10, 0x0, 0x0) 252.490778ms ago: executing program 1 (id=13902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r7, 0x0, &(0x7f0000000100)='system_u:object_r:ptchown_exec_t:s0\x00', 0x24, 0x1) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) unlink(0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000380)="851e00814f", 0x5}], 0x1, 0x33000, 0x0, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0xc880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 251.798508ms ago: executing program 4 (id=13903): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3}}}}}}}, 0x0) 225.132619ms ago: executing program 5 (id=13904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x4880, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@id, 0x10, 0x0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000300)={@multicast1, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendto$packet(r7, &(0x7f0000000380)="ecd6b9ac73b00acdd33b8b0e004567bf9b3460e47b20c771579efb1cb3a22a4b0b0af680bcb16359bfcaf4f84643f4196614b91f51a263100f2e7472188f0c77ee2bb702785c8af3781e5a248e344fb706700c0e74c838cecd8f7d8315a0b1874cb2275f05635d828dcab140f348e7cf0bdf0641022fa613e698ac5d135eab265bf105e621d34af2ca6127349d3337004995b541", 0x94, 0x40004, &(0x7f0000000480)={0x11, 0x2, r8, 0x1, 0x10, 0x6, @local}, 0x14) 224.494428ms ago: executing program 4 (id=13905): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000001618a69400000000000000005a60a222c3a0143859b487cfa4e2108de4bf9837ba", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket(0xb, 0x3, 0x80000001) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000faff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000100000008001b0000000000"], 0x30}}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000812000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x5c, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000440)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000de5466b940748023ce910ea38163e8f9802709ed1091ffedb5d4d0794377c1574e29667aa17b3ee7ce61619517b2bbef3a2101a03b1566db55cd45fde26efb5112a5a8fe213a50196f4efa76468f0a6b3ed5be6b76184c25209fd97cfcc832091654fa160ce752ad4efe0b6a6c4776482f9f3dcc3ca1f6f26355dc00"/159, @ANYRESHEX=r8, @ANYRES64=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x378, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) close(r4) 171.798459ms ago: executing program 0 (id=13906): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) 171.279869ms ago: executing program 5 (id=13907): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095", @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/319], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x5, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r8, 0x401}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000003c0)) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r5, 0x0, 0x20000000}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRESHEX=r8, @ANYBLOB="01000000050000000500000000050000000000000000000000000000aa31b6a97b431d7366ad5be11d49ed3311612cf133861366ded940dd40fb6e53038c7503a9c69c7af8cd93e04192b378714d460886371aa2efc54e2d59c257755a1e23c21e8c2ce0ad8d3d09c7b73026bc5d34efc2f5a4a5560fa97e16cef881f3225e5d91e99e16a8"], 0x50) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 156.018019ms ago: executing program 1 (id=13908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000015000100000000000000000002000000", @ANYRES32=r4], 0x28}}, 0x0) 122.834969ms ago: executing program 0 (id=13909): iopl(0x3) flock(0xffffffffffffffff, 0xe) 114.659769ms ago: executing program 1 (id=13910): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) 95.267049ms ago: executing program 0 (id=13911): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) getpgrp(r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) 77.33033ms ago: executing program 1 (id=13912): r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000500)=""/46) shmat(0x0, &(0x7f000029f000/0x4000)=nil, 0x6000) r1 = syz_io_uring_setup(0xf3d, &(0x7f0000000480)={0x0, 0x1d, 0x10, 0x2, 0x1ee}, &(0x7f0000000340)=0x0, &(0x7f0000000540)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00000000000000000000000000006da1cdb3d2"], 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x9}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x4ac6, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) capget(0x0, 0x0) mq_timedreceive(r5, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 8.74399ms ago: executing program 0 (id=13913): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) 0s ago: executing program 0 (id=13914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r2) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b6, &(0x7f0000000380)="$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") r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x5a) write$9p(r4, &(0x7f0000001400)="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", 0x180) sendfile(r4, r5, 0x0, 0xe065) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.189216][ T29] audit: type=1326 audit(2000000005.070:858444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.216309][ T29] audit: type=1326 audit(2000000005.070:858445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.240264][ T29] audit: type=1326 audit(2000000005.070:858446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.264201][ T29] audit: type=1326 audit(2000000005.070:858447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.288351][ T29] audit: type=1326 audit(2000000005.070:858448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.312304][ T29] audit: type=1326 audit(2000000005.070:858449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.336284][ T29] audit: type=1326 audit(2000000005.070:858450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31953 comm="syz.3.10317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 401.435471][T32065] siw: device registration error -23 [ 401.573119][T32096] loop0: detected capacity change from 0 to 2048 [ 401.601208][T32096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.638025][T32137] SELinux: failed to load policy [ 401.643802][T32137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10333'. [ 401.677917][T32201] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 401.694441][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.790089][T32209] netlink: 'syz.4.10342': attribute type 34 has an invalid length. [ 401.840916][T32217] loop0: detected capacity change from 0 to 2048 [ 401.905588][T32217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.923973][T32232] SELinux: failed to load policy [ 401.930232][T32232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10351'. [ 402.001961][T32317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10357'. [ 402.008353][T32321] netlink: 'syz.1.10358': attribute type 34 has an invalid length. [ 402.041622][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.089066][T32354] loop0: detected capacity change from 0 to 2048 [ 402.096365][T32357] SELinux: failed to load policy [ 402.102648][T32357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10363'. [ 402.143649][T32354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.410543][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.466406][T32679] loop0: detected capacity change from 0 to 256 [ 402.748947][ T350] loop0: detected capacity change from 0 to 512 [ 402.760775][ T354] SELinux: failed to load policy [ 402.761193][ T350] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 402.786278][ T350] EXT4-fs (loop0): 1 truncate cleaned up [ 402.792491][ T350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.873081][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.068004][ T505] loop0: detected capacity change from 0 to 2048 [ 403.121656][ T505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.160935][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.221952][ T525] hub 2-0:1.0: USB hub found [ 403.226788][ T525] hub 2-0:1.0: 8 ports detected [ 403.600436][ T799] loop0: detected capacity change from 0 to 2048 [ 403.637845][ T799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.690695][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.772337][ T837] netlink: 'syz.1.10464': attribute type 34 has an invalid length. [ 403.935579][ T862] netlink: 'syz.4.10477': attribute type 34 has an invalid length. [ 404.533417][ T1285] __nla_validate_parse: 13 callbacks suppressed [ 404.533438][ T1285] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10527'. [ 404.758296][ T1631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10544'. [ 404.771765][ T1632] siw: device registration error -23 [ 404.791204][ T1631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10544'. [ 404.807384][ T1638] loop0: detected capacity change from 0 to 2048 [ 404.847997][ T1638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.878940][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.939782][ T1658] loop0: detected capacity change from 0 to 256 [ 405.054704][ T1772] siw: device registration error -23 [ 405.205556][ T1902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10574'. [ 405.235520][ T1902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10574'. [ 405.282979][ T1911] siw: device registration error -23 [ 405.379315][ T2024] loop0: detected capacity change from 0 to 2048 [ 405.408067][ T2034] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10591'. [ 405.428071][ T2034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10591'. [ 405.546905][ T2156] hub 2-0:1.0: USB hub found [ 405.551668][ T2156] hub 2-0:1.0: 8 ports detected [ 405.794720][ T2200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10621'. [ 405.814353][ T2200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10621'. [ 405.906603][ T2318] loop0: detected capacity change from 0 to 2048 [ 405.992020][ T2333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10637'. [ 406.019952][ T2330] loop0: detected capacity change from 0 to 2048 [ 406.100014][ T29] kauditd_printk_skb: 1333 callbacks suppressed [ 406.100028][ T29] audit: type=1326 audit(2000000010.050:859784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="syz.0.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.131221][ T29] audit: type=1326 audit(2000000010.050:859785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="syz.0.10641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.155211][ T29] audit: type=1326 audit(2000000010.050:859786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.178551][ T29] audit: type=1326 audit(2000000010.050:859787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.201767][ T29] audit: type=1326 audit(2000000010.050:859788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.224794][ T2448] loop0: detected capacity change from 0 to 2048 [ 406.231441][ T29] audit: type=1326 audit(2000000010.050:859789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.254630][ T29] audit: type=1326 audit(2000000010.050:859790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.277800][ T29] audit: type=1326 audit(2000000010.050:859791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2343 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 406.278083][ T29] audit: type=1326 audit(2000000010.130:859792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2449 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a4c5e719 code=0x7ffc0000 [ 406.278195][ T29] audit: type=1326 audit(2000000010.130:859793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2449 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a4c5e719 code=0x7ffc0000 [ 406.362334][ T2612] siw: device registration error -23 [ 406.570120][ T2684] loop0: detected capacity change from 0 to 2048 [ 406.586125][ T2894] netlink: 'syz.4.10665': attribute type 34 has an invalid length. [ 406.661511][ T2906] siw: device registration error -23 [ 406.780932][ T2927] netlink: 'syz.4.10679': attribute type 34 has an invalid length. [ 406.783422][ T2944] loop0: detected capacity change from 0 to 512 [ 406.803067][ T2944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 406.829640][ T2944] EXT4-fs (loop0): 1 truncate cleaned up [ 407.025458][ T3194] netlink: 'syz.4.10698': attribute type 34 has an invalid length. [ 407.446706][ T3515] loop0: detected capacity change from 0 to 256 [ 407.820329][ T3881] netlink: 'syz.4.10772': attribute type 34 has an invalid length. [ 407.983503][ T4022] netlink: 'syz.4.10786': attribute type 34 has an invalid length. [ 408.032374][ T4026] loop0: detected capacity change from 0 to 2048 [ 408.167653][ T4054] netlink: 'syz.5.10801': attribute type 34 has an invalid length. [ 408.387383][ T4188] hub 2-0:1.0: USB hub found [ 408.392178][ T4188] hub 2-0:1.0: 8 ports detected [ 408.484221][ T4310] loop0: detected capacity change from 0 to 2048 [ 408.777398][ T4467] netlink: 'syz.4.10855': attribute type 34 has an invalid length. [ 408.995434][ T4611] siw: device registration error -23 [ 409.167403][ T4697] loop0: detected capacity change from 0 to 2048 [ 409.250383][ T4760] loop0: detected capacity change from 0 to 256 [ 409.446028][ T4983] loop0: detected capacity change from 0 to 2048 [ 409.761405][ T5234] __nla_validate_parse: 28 callbacks suppressed [ 409.761425][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10932'. [ 409.798499][ T5240] loop0: detected capacity change from 0 to 256 [ 409.799150][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10932'. [ 409.974118][ T5265] siw: device registration error -23 [ 410.100680][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10961'. [ 410.119540][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10961'. [ 410.178206][ T5307] syz.4.10968[5307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.178329][ T5307] syz.4.10968[5307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.193369][ T5307] syz.4.10968[5307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.266916][ T5323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10975'. [ 410.295538][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10975'. [ 410.327237][ T5330] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10979'. [ 410.369643][ T5338] syz.4.10982[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.369715][ T5338] syz.4.10982[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.382605][ T5338] syz.4.10982[5338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.559293][ T5471] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10999'. [ 410.677844][ T5662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11008'. [ 410.697807][ T5662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11008'. [ 410.941123][ T5741] syz.3.11030[5741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.941208][ T5741] syz.3.11030[5741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.962920][ T5741] syz.3.11030[5741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.023696][ T5749] loop0: detected capacity change from 0 to 2048 [ 411.103805][ T29] kauditd_printk_skb: 1420 callbacks suppressed [ 411.103837][ T29] audit: type=1326 audit(2000000015.050:861214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.118170][ T5865] loop0: detected capacity change from 0 to 256 [ 411.133871][ T29] audit: type=1326 audit(2000000015.050:861215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.164196][ T29] audit: type=1326 audit(2000000015.050:861216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.188120][ T29] audit: type=1326 audit(2000000015.050:861217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.212663][ T29] audit: type=1326 audit(2000000015.050:861218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.236635][ T29] audit: type=1326 audit(2000000015.050:861219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.260487][ T29] audit: type=1326 audit(2000000015.050:861220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.284441][ T29] audit: type=1326 audit(2000000015.050:861221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.308160][ T29] audit: type=1326 audit(2000000015.050:861222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.331859][ T29] audit: type=1326 audit(2000000015.050:861223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.3.11038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 411.517849][ T5900] syz.0.11056[5900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.579712][ T5908] loop0: detected capacity change from 0 to 2048 [ 412.330244][ T6334] loop0: detected capacity change from 0 to 2048 [ 412.385481][ T6348] siw: device registration error -23 [ 412.445595][ T6352] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 412.560590][ T6462] loop0: detected capacity change from 0 to 2048 [ 412.755711][ T6495] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 412.855999][ T6502] hub 2-0:1.0: USB hub found [ 412.862030][ T6502] hub 2-0:1.0: 8 ports detected [ 412.911899][ T6514] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 412.974174][ T6524] loop0: detected capacity change from 0 to 512 [ 412.982809][ T6524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 413.021529][ T6524] EXT4-fs (loop0): 1 truncate cleaned up [ 413.028181][ T6524] EXT4-fs mount: 28 callbacks suppressed [ 413.028195][ T6524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.130028][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.221445][ T6554] loop0: detected capacity change from 0 to 256 [ 413.293052][ T6665] siw: device registration error -23 [ 413.509229][ T6701] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 413.682804][ T6927] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 413.703504][ T6930] siw: device registration error -23 [ 413.860572][ T7010] loop0: detected capacity change from 0 to 2048 [ 413.886657][ T7144] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 413.927664][ T7010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.999770][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.015755][ T7276] siw: device registration error -23 [ 414.086750][ T7284] loop0: detected capacity change from 0 to 2048 [ 414.122036][ T7332] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 414.127571][ T7284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.180838][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.257163][ T7512] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 414.306711][ T7515] loop0: detected capacity change from 0 to 256 [ 414.407013][ T7528] siw: device registration error -23 [ 414.500982][ T7543] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 414.550545][ T7547] loop0: detected capacity change from 0 to 512 [ 414.573184][ T7547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 414.615564][ T7547] EXT4-fs (loop0): 1 truncate cleaned up [ 414.621620][ T7547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.665909][ T7568] siw: device registration error -23 [ 414.721830][ T7580] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 414.771090][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.833242][ T7685] loop0: detected capacity change from 0 to 2048 [ 414.846293][ T7699] siw: device registration error -23 [ 414.867620][ T7685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.895258][ T7707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 414.929028][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.952827][ T7716] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 415.040091][ T7728] __nla_validate_parse: 30 callbacks suppressed [ 415.040144][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11304'. [ 415.057396][ T7728] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 415.114364][ T7740] loop0: detected capacity change from 0 to 2048 [ 415.146116][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11312'. [ 415.159605][ T7740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.194394][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11312'. [ 415.211508][ T7754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 415.251236][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.266478][ T7762] siw: device registration error -23 [ 415.286785][ T7764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11321'. [ 415.386342][ T7873] loop0: detected capacity change from 0 to 256 [ 415.423823][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11329'. [ 415.455235][ T7882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11329'. [ 415.521554][ T7991] siw: device registration error -23 [ 415.527512][ T7967] hub 2-0:1.0: USB hub found [ 415.534260][ T7967] hub 2-0:1.0: 8 ports detected [ 415.549310][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11335'. [ 415.558793][ T7995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 415.590948][ T8003] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 415.624728][ T8007] loop0: detected capacity change from 0 to 2048 [ 415.646225][ T8007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.676389][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.689898][ T8013] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11343'. [ 415.712876][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11344'. [ 415.735951][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11344'. [ 415.811482][ T8030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 415.881813][ T8037] loop0: detected capacity change from 0 to 512 [ 415.892778][ T8037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 415.909020][ T8037] EXT4-fs (loop0): 1 truncate cleaned up [ 415.916383][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.973497][ T8053] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 416.003002][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.099652][ T8166] loop0: detected capacity change from 0 to 256 [ 416.131882][ T29] kauditd_printk_skb: 1635 callbacks suppressed [ 416.131899][ T29] audit: type=1326 audit(2000000020.080:862859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.167240][ T29] audit: type=1326 audit(2000000020.080:862860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.190990][ T29] audit: type=1326 audit(2000000020.080:862861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.214822][ T29] audit: type=1326 audit(2000000020.080:862862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.238717][ T29] audit: type=1326 audit(2000000020.080:862863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.262656][ T29] audit: type=1326 audit(2000000020.080:862864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 416.286902][ T29] audit: type=1326 audit(2000000020.080:862865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad165ae753 code=0x7ffc0000 [ 416.310687][ T29] audit: type=1326 audit(2000000020.080:862866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad165ad1ff code=0x7ffc0000 [ 416.334536][ T29] audit: type=1326 audit(2000000020.090:862867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad165ae7a7 code=0x7ffc0000 [ 416.358228][ T29] audit: type=1326 audit(2000000020.090:862868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8169 comm="syz.3.11371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad165ad0b0 code=0x7ffc0000 [ 416.417402][ T8190] loop0: detected capacity change from 0 to 512 [ 416.431616][ T8190] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 416.472365][ T8190] EXT4-fs (loop0): 1 truncate cleaned up [ 416.490489][ T8190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.536551][ T8205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 416.589507][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.602875][ T8252] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 416.736820][ T8336] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 416.747579][ T8333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8333 comm=syz.0.11401 [ 416.939155][ T8356] loop0: detected capacity change from 0 to 2048 [ 416.965481][ T8356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.996385][ T8376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8376 comm=syz.3.11422 [ 417.064926][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.137004][ T8398] loop0: detected capacity change from 0 to 256 [ 417.147464][ T8400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8400 comm=syz.3.11434 [ 417.266457][ T8515] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 417.315500][ T8517] loop0: detected capacity change from 0 to 2048 [ 417.337090][ T8517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.399193][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.547522][ T8561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8561 comm=syz.0.11462 [ 417.571508][ T8557] siw: device registration error -23 [ 417.600248][ T8568] loop0: detected capacity change from 0 to 512 [ 417.627094][ T8568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.640069][ T8568] ext4 filesystem being mounted at /2340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.681864][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.779023][ T8591] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 417.868619][ T8769] loop0: detected capacity change from 0 to 2048 [ 417.897405][ T8769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.926729][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.058194][ T8823] loop0: detected capacity change from 0 to 256 [ 418.118301][ T8831] tbf_change: 5 callbacks suppressed [ 418.118320][ T8831] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 418.208033][ T8950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.289829][ T9059] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 418.394174][ T9075] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.553061][ T9205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.737695][ T9433] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 418.988585][ T9571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 419.113131][ T9681] hub 2-0:1.0: USB hub found [ 419.119784][ T9681] hub 2-0:1.0: 8 ports detected [ 419.277605][ T9709] loop0: detected capacity change from 0 to 256 [ 419.331689][ T9817] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 419.418101][ T9829] loop0: detected capacity change from 0 to 512 [ 419.426128][ T9829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 419.450198][ T9829] EXT4-fs (loop0): 1 truncate cleaned up [ 419.457170][ T9829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.542085][ T9847] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 419.555623][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.626512][ T9955] loop0: detected capacity change from 0 to 2048 [ 419.646478][ T9955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.676522][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.700431][ T9965] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 419.701462][ T9967] loop0: detected capacity change from 0 to 512 [ 419.719980][ T9967] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 419.731162][ T9967] EXT4-fs (loop0): 1 truncate cleaned up [ 419.737578][ T9967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.801837][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.926442][T10192] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 419.977544][T10195] hub 2-0:1.0: USB hub found [ 419.982494][T10195] hub 2-0:1.0: 8 ports detected [ 420.047711][T10211] __nla_validate_parse: 45 callbacks suppressed [ 420.047780][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11628'. [ 420.071309][T10229] loop0: detected capacity change from 0 to 512 [ 420.110177][T10319] siw: device registration error -23 [ 420.112918][T10229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.135819][T10321] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 420.138635][T10229] ext4 filesystem being mounted at /2369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.176968][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.204159][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11637'. [ 420.276584][T10341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11642'. [ 420.290992][T10337] loop0: detected capacity change from 0 to 2048 [ 420.310443][T10337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.346049][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.360594][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11646'. [ 420.374213][T10449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.389317][T10457] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 420.458321][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11651'. [ 420.482708][T10561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11651'. [ 420.525739][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11654'. [ 420.534856][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11654'. [ 420.565242][T10569] loop0: detected capacity change from 0 to 256 [ 420.576018][T10576] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 420.646939][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11664'. [ 420.656061][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11664'. [ 420.779343][T10806] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 420.914204][T10909] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 420.943650][T10934] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 421.063049][T11048] loop0: detected capacity change from 0 to 512 [ 421.085881][T11048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.100773][T11048] ext4 filesystem being mounted at /2382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.123553][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.138097][ T29] kauditd_printk_skb: 1528 callbacks suppressed [ 421.138115][ T29] audit: type=1326 audit(2000000025.090:864397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.168258][ T29] audit: type=1326 audit(2000000025.090:864398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.192138][ T29] audit: type=1326 audit(2000000025.090:864399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.215934][ T29] audit: type=1326 audit(2000000025.090:864400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.239981][ T29] audit: type=1326 audit(2000000025.090:864401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.263782][ T29] audit: type=1326 audit(2000000025.090:864402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.287712][ T29] audit: type=1326 audit(2000000025.090:864403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.311552][ T29] audit: type=1326 audit(2000000025.090:864404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.335505][ T29] audit: type=1326 audit(2000000025.090:864405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.359468][ T29] audit: type=1326 audit(2000000025.090:864406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.11694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 421.512445][T11284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 421.599393][T11326] netlink: 'syz.5.11719': attribute type 34 has an invalid length. [ 421.719014][T11416] loop0: detected capacity change from 0 to 2048 [ 421.747507][T11416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.777597][T11630] netlink: 'syz.1.11732': attribute type 34 has an invalid length. [ 421.845819][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.022054][T11970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.198755][T12005] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.335718][T12220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.405267][T12328] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.423025][T12347] loop0: detected capacity change from 0 to 512 [ 422.433171][T12347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 422.447694][T12347] EXT4-fs (loop0): 1 truncate cleaned up [ 422.459350][T12347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.548071][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.761706][T12493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.774436][T12546] netlink: 'syz.5.11805': attribute type 34 has an invalid length. [ 422.871530][T12694] loop0: detected capacity change from 0 to 512 [ 422.886627][T12700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 422.904641][T12694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 422.932621][T12694] EXT4-fs (loop0): 1 truncate cleaned up [ 422.940240][T12694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.013243][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.031098][T12821] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 423.088423][T12822] hub 2-0:1.0: USB hub found [ 423.095339][T12822] hub 2-0:1.0: 8 ports detected [ 423.109005][T12834] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 423.147144][T12840] tbf_change: 5 callbacks suppressed [ 423.147180][T12840] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 423.158007][T12836] loop0: detected capacity change from 0 to 2048 [ 423.196937][T12836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.257247][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.534556][T13194] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 423.751151][T13236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 423.793462][T13240] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 423.938599][T13262] netlink: 'syz.1.11891': attribute type 34 has an invalid length. [ 423.970426][T13266] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 424.003613][T13258] hub 2-0:1.0: USB hub found [ 424.011300][T13258] hub 2-0:1.0: 8 ports detected [ 424.301683][T13419] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 424.315279][T13515] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 424.352125][T13509] hub 2-0:1.0: USB hub found [ 424.360478][T13509] hub 2-0:1.0: 8 ports detected [ 424.361422][T13522] loop0: detected capacity change from 0 to 256 [ 424.451710][T13533] loop0: detected capacity change from 0 to 256 [ 424.512866][T13538] hub 2-0:1.0: USB hub found [ 424.517649][T13538] hub 2-0:1.0: 8 ports detected [ 424.596187][T13554] loop0: detected capacity change from 0 to 256 [ 424.728869][T13571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 424.798193][T13579] loop0: detected capacity change from 0 to 2048 [ 424.842283][T13579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.860524][T13591] netlink: 'syz.4.11953': attribute type 34 has an invalid length. [ 424.880070][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.968604][T13610] loop0: detected capacity change from 0 to 256 [ 425.010780][T13612] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.071669][T13621] loop0: detected capacity change from 0 to 2048 [ 425.078401][T13626] netlink: 'syz.4.11970': attribute type 34 has an invalid length. [ 425.115677][T13621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.182264][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.210880][T13647] __nla_validate_parse: 68 callbacks suppressed [ 425.210897][T13647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11979'. [ 425.242821][T13652] loop0: detected capacity change from 0 to 512 [ 425.261498][T13655] netlink: 'syz.1.11983': attribute type 34 has an invalid length. [ 425.368380][T13652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.381054][T13652] ext4 filesystem being mounted at /2425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.382443][T13772] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 425.412647][T13776] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 425.420911][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.481829][T13789] netlink: 'syz.1.11997': attribute type 34 has an invalid length. [ 425.495832][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11996'. [ 425.506009][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11993'. [ 425.506546][T13784] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.515939][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11995'. [ 425.534120][T13790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.579887][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12002'. [ 425.598394][T13802] loop0: detected capacity change from 0 to 512 [ 425.628585][T13802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.655300][T13802] ext4 filesystem being mounted at /2427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.679803][T13808] siw: device registration error -23 [ 425.689887][T13806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12004'. [ 425.699152][T13806] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.727719][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.734235][T13812] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 425.807711][T13822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12013'. [ 425.817328][T13822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 425.818409][T13824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12014'. [ 425.861837][T13927] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 425.912560][T13933] loop0: detected capacity change from 0 to 2048 [ 425.947235][T13933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.962002][T13940] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 426.006902][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.060322][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12024'. [ 426.076531][T13950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.158881][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12031'. [ 426.168071][T13964] loop0: detected capacity change from 0 to 2048 [ 426.168320][T13966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.205614][T13964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.222903][ T29] kauditd_printk_skb: 1018 callbacks suppressed [ 426.222922][ T29] audit: type=1326 audit(2000000030.170:865425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.253123][ T29] audit: type=1326 audit(2000000030.170:865426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.291965][ T29] audit: type=1326 audit(2000000030.170:865427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.315928][ T29] audit: type=1326 audit(2000000030.170:865428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.339807][ T29] audit: type=1326 audit(2000000030.170:865429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.363568][ T29] audit: type=1326 audit(2000000030.210:865430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.387445][ T29] audit: type=1326 audit(2000000030.210:865431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.411259][ T29] audit: type=1326 audit(2000000030.210:865432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.435310][ T29] audit: type=1326 audit(2000000030.230:865433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.0.12032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 426.459210][ T29] audit: type=1326 audit(2000000030.270:865434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13973 comm="syz.4.12037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a4c5e719 code=0x7ffc0000 [ 426.460529][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.500023][T13970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.582101][T13990] netlink: 'syz.1.12043': attribute type 34 has an invalid length. [ 426.619645][T13995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.671989][T14036] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.700669][T14083] siw: device registration error -23 [ 426.731317][T14113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.822149][T14125] loop0: detected capacity change from 0 to 2048 [ 426.838030][T14125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.864765][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.945535][T14235] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 426.970986][T14240] loop0: detected capacity change from 0 to 2048 [ 427.003999][T14240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.070860][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.132433][T14268] loop0: detected capacity change from 0 to 256 [ 427.143389][T14271] netlink: 'syz.4.12080': attribute type 34 has an invalid length. [ 427.159694][T14272] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.326729][T14296] netlink: 'syz.4.12093': attribute type 34 has an invalid length. [ 427.395295][T14302] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.428700][T14312] loop0: detected capacity change from 0 to 256 [ 427.539454][T14328] netlink: 'syz.4.12109': attribute type 34 has an invalid length. [ 427.651216][T14447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.864185][T14485] netlink: 'syz.1.12137': attribute type 34 has an invalid length. [ 427.983106][T14601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.035696][T14612] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 428.048982][T14615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.068326][T14621] netlink: 'syz.1.12150': attribute type 34 has an invalid length. [ 428.216595][T14940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.267104][T14949] netlink: 'syz.5.12167': attribute type 34 has an invalid length. [ 428.379718][T14965] loop0: detected capacity change from 0 to 512 [ 428.394743][T14965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 428.415534][T14965] EXT4-fs (loop0): 1 truncate cleaned up [ 428.424067][T14965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.476601][T14978] netlink: 'syz.4.12181': attribute type 34 has an invalid length. [ 428.525372][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.627879][T15090] loop0: detected capacity change from 0 to 2048 [ 428.665979][T15100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.723217][T15112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.771636][T15188] loop0: detected capacity change from 0 to 2048 [ 428.919441][T15241] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.963700][T15250] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.994422][T15249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.083031][T15263] loop0: detected capacity change from 0 to 2048 [ 429.148386][T15280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.236866][T15290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.320513][T15402] netlink: 'syz.1.12240': attribute type 34 has an invalid length. [ 429.453032][T15420] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 429.509949][T15431] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.545619][T15436] netlink: 'syz.1.12254': attribute type 34 has an invalid length. [ 429.594727][T15444] siw: device registration error -23 [ 429.599516][T15448] netlink: 'syz.1.12270': attribute type 34 has an invalid length. [ 429.611560][T15446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.720871][T15465] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.759920][T15470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 429.829215][T15478] siw: device registration error -23 [ 429.832581][T15480] loop0: detected capacity change from 0 to 512 [ 429.867397][T15480] ext4 filesystem being mounted at /2484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.923471][T15490] loop0: detected capacity change from 0 to 2048 [ 429.948029][T15492] hub 2-0:1.0: USB hub found [ 429.952768][T15492] hub 2-0:1.0: 8 ports detected [ 430.002060][T15501] loop0: detected capacity change from 0 to 256 [ 430.039968][T15607] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.116512][T15617] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 430.146302][T15619] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.149913][T15621] loop0: detected capacity change from 0 to 2048 [ 430.323453][T15641] __nla_validate_parse: 55 callbacks suppressed [ 430.323472][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12304'. [ 430.324369][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12303'. [ 430.330913][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12304'. [ 430.357468][T15639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.432610][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12310'. [ 430.444109][T15653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.516910][T15665] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 430.597333][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12319'. [ 430.606620][T15673] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.728070][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12325'. [ 430.737700][T15688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.807735][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12342'. [ 430.812978][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12330'. [ 430.826107][T15699] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.835906][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12330'. [ 430.851465][T15700] loop0: detected capacity change from 0 to 512 [ 430.882365][T15700] ext4 filesystem being mounted at /2501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.989937][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12344'. [ 430.999560][T15727] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.014422][T15724] hub 2-0:1.0: USB hub found [ 431.032670][T15724] hub 2-0:1.0: 8 ports detected [ 431.056324][T15736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.350383][T15786] loop0: detected capacity change from 0 to 2048 [ 431.372891][ T29] kauditd_printk_skb: 1095 callbacks suppressed [ 431.372910][ T29] audit: type=1326 audit(2000000035.320:866530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.414345][ T29] audit: type=1326 audit(2000000035.320:866531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.438317][ T29] audit: type=1326 audit(2000000035.320:866532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.462566][ T29] audit: type=1326 audit(2000000035.320:866533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.486493][ T29] audit: type=1326 audit(2000000035.330:866534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.510572][ T29] audit: type=1326 audit(2000000035.330:866535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.534569][ T29] audit: type=1326 audit(2000000035.330:866536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.558605][ T29] audit: type=1326 audit(2000000035.360:866537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.582491][ T29] audit: type=1326 audit(2000000035.360:866538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15785 comm="syz.0.12370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 431.606638][ T29] audit: type=1326 audit(2000000035.470:866539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.3.12374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 431.638878][T15803] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.657925][T15905] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.780782][T15926] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.801382][T15928] bpf_get_probe_write_proto: 14 callbacks suppressed [ 431.801402][T15928] syz.0.12389[15928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.809219][T15928] syz.0.12389[15928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.822856][T15928] syz.0.12389[15928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.888990][T16040] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 431.896878][T16036] loop0: detected capacity change from 0 to 2048 [ 431.931225][T16039] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 432.069185][T16158] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 432.086198][T16162] syz.4.12405[16162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.086328][T16162] syz.4.12405[16162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.097834][T16154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 432.119398][T16162] syz.4.12405[16162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.128518][T16164] syz.5.12406[16164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.140794][T16164] syz.5.12406[16164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.153126][T16164] syz.5.12406[16164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.335576][T16292] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.375432][T16296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 432.472879][T16306] hub 2-0:1.0: USB hub found [ 432.485455][T16306] hub 2-0:1.0: 8 ports detected [ 432.662078][T16339] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 432.724137][T16345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.769309][T16353] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 432.785973][T16357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 432.984893][T16480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 433.000225][T16487] siw: device registration error -23 [ 433.151946][T16609] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 433.183069][T16615] loop0: detected capacity change from 0 to 512 [ 433.206068][T16615] ext4 filesystem being mounted at /2528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.285526][T16698] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 433.315601][T16727] loop0: detected capacity change from 0 to 2048 [ 433.541805][T16969] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 433.557270][T16972] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 433.677584][T16989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 433.702839][T16994] validate_nla: 4 callbacks suppressed [ 433.702858][T16994] netlink: 'syz.1.12513': attribute type 34 has an invalid length. [ 433.753990][T17000] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 433.951265][T17029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.000830][T17038] siw: device registration error -23 [ 434.036921][T17044] siw: device registration error -23 [ 434.180487][T17065] netlink: 'syz.5.12546': attribute type 34 has an invalid length. [ 434.204071][T17068] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.247988][T17075] loop0: detected capacity change from 0 to 256 [ 434.387527][T17089] loop0: detected capacity change from 0 to 2048 [ 434.388069][T17093] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.526512][T17114] loop0: detected capacity change from 0 to 256 [ 434.627854][T17122] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.636535][T17125] loop0: detected capacity change from 0 to 2048 [ 434.647716][T17123] hub 2-0:1.0: USB hub found [ 434.652655][T17123] hub 2-0:1.0: 8 ports detected [ 434.841627][T17146] netlink: 'syz.1.12584': attribute type 34 has an invalid length. [ 434.890353][T17150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 434.940723][T17158] siw: device registration error -23 [ 434.952959][T17160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 435.055435][T17172] syz.3.12596[17172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.071237][T17174] siw: device registration error -23 [ 435.157234][T17181] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 435.354563][T17205] __nla_validate_parse: 56 callbacks suppressed [ 435.354577][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12613'. [ 435.370689][T17205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 435.429134][T17217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12619'. [ 435.440444][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12619'. [ 435.508188][T17227] SELinux: failed to load policy [ 435.517006][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12624'. [ 435.530791][T17229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.544879][T17227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12624'. [ 435.552779][T17229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.625713][T17239] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 435.650598][T17241] loop0: detected capacity change from 0 to 512 [ 435.658002][T17241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 435.669159][T17241] EXT4-fs (loop0): 1 truncate cleaned up [ 435.687396][T17242] hub 2-0:1.0: USB hub found [ 435.692147][T17242] hub 2-0:1.0: 8 ports detected [ 435.799475][T17251] loop0: detected capacity change from 0 to 256 [ 435.863094][T17253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12636'. [ 435.872487][T17253] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 435.932667][T17257] siw: device registration error -23 [ 435.968658][T17259] netlink: 'syz.1.12639': attribute type 34 has an invalid length. [ 435.989833][T17261] loop0: detected capacity change from 0 to 2048 [ 436.021511][T17266] netlink: 'syz.1.12640': attribute type 34 has an invalid length. [ 436.120532][T17279] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 436.131279][T17281] SELinux: failed to load policy [ 436.137673][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12647'. [ 436.169780][T17285] loop0: detected capacity change from 0 to 2048 [ 436.171984][T17281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12647'. [ 436.188547][T17287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12651'. [ 436.198095][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12651'. [ 436.291677][T17305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.300635][T17305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.438960][ T29] kauditd_printk_skb: 1336 callbacks suppressed [ 436.438980][ T29] audit: type=1326 audit(2000000040.390:867876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.445461][T17523] siw: device registration error -23 [ 436.481887][T17519] loop0: detected capacity change from 0 to 2048 [ 436.490191][ T29] audit: type=1326 audit(2000000040.390:867877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.513997][ T29] audit: type=1326 audit(2000000040.390:867878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.537802][ T29] audit: type=1326 audit(2000000040.390:867879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.561666][ T29] audit: type=1326 audit(2000000040.390:867880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.585525][ T29] audit: type=1326 audit(2000000040.390:867881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.609475][ T29] audit: type=1326 audit(2000000040.390:867882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.633341][ T29] audit: type=1326 audit(2000000040.390:867883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.657278][ T29] audit: type=1326 audit(2000000040.390:867884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.681282][ T29] audit: type=1326 audit(2000000040.390:867885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17521 comm="syz.3.12668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 436.705490][T17529] SELinux: failed to load policy [ 436.786172][T17644] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.808984][T17648] netlink: 'syz.5.12679': attribute type 34 has an invalid length. [ 436.829090][T17650] loop0: detected capacity change from 0 to 256 [ 436.876328][T17653] siw: device registration error -23 [ 436.887830][T17654] siw: device registration error -23 [ 436.983593][T17667] loop0: detected capacity change from 0 to 2048 [ 437.005407][T17671] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 437.064531][T17677] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 437.137182][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.148609][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.168556][T17689] siw: device registration error -23 [ 437.288842][T17695] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 437.358703][T17701] netlink: 'syz.4.12702': attribute type 34 has an invalid length. [ 437.382236][T17703] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 437.616734][T17709] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 437.741620][T17745] siw: device registration error -23 [ 437.777913][T17782] hub 2-0:1.0: USB hub found [ 437.784484][T17826] siw: device registration error -23 [ 437.788098][T17782] hub 2-0:1.0: 8 ports detected [ 437.819102][T17832] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 437.931750][T17845] siw: device registration error -23 [ 437.980200][T17847] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 438.098566][T17850] loop0: detected capacity change from 0 to 2048 [ 438.160264][T17854] loop0: detected capacity change from 0 to 2048 [ 438.203646][T17858] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.323720][T17872] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.357059][T17874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 438.427889][T17876] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 438.473653][T17880] loop0: detected capacity change from 0 to 2048 [ 438.529495][T17886] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.533302][T17885] loop0: detected capacity change from 0 to 256 [ 438.590442][T17892] netlink: 'syz.5.12743': attribute type 34 has an invalid length. [ 438.659382][T17900] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 438.704724][T17912] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.799903][T18023] netlink: 'syz.1.12756': attribute type 34 has an invalid length. [ 438.845252][T18022] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.851945][T18028] siw: device registration error -23 [ 438.912189][T18032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.995563][T18053] siw: device registration error -23 [ 439.092716][T18160] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.134837][T18265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.177203][T18274] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.228344][T18284] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.339342][T18299] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.461669][T18424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.508779][T18449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.557005][T18546] netlink: 'syz.1.12811': attribute type 34 has an invalid length. [ 439.657418][T18562] SELinux: failed to load policy [ 439.683283][T18564] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.732671][T18575] netlink: 'syz.5.12825': attribute type 34 has an invalid length. [ 439.770913][T18576] loop0: detected capacity change from 0 to 256 [ 439.881455][T18800] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.935368][T18808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.007908][T18806] hub 2-0:1.0: USB hub found [ 440.017775][T18806] hub 2-0:1.0: 8 ports detected [ 440.083304][T18929] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.166632][T18939] SELinux: failed to load policy [ 440.167897][T18943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.305896][T18974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.364649][T19073] __nla_validate_parse: 52 callbacks suppressed [ 440.364702][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12869'. [ 440.368924][T19072] loop0: detected capacity change from 0 to 256 [ 440.437682][T19080] siw: device registration error -23 [ 440.511284][T19088] loop0: detected capacity change from 0 to 2048 [ 440.564534][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12880'. [ 440.581288][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12880'. [ 440.591283][T19097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12880'. [ 440.734816][T19219] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12891'. [ 440.753519][T19221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12892'. [ 440.771069][T19219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12891'. [ 440.782403][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12892'. [ 440.795440][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12892'. [ 440.860595][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12894'. [ 440.884738][T19329] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 440.993972][T19348] loop0: detected capacity change from 0 to 2048 [ 440.993980][T19352] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 441.109206][T19389] loop0: detected capacity change from 0 to 256 [ 441.180037][T19586] netlink: 'syz.1.12913': attribute type 34 has an invalid length. [ 441.242072][T19596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 441.292164][T19598] loop0: detected capacity change from 0 to 2048 [ 441.437108][T19619] hub 2-0:1.0: USB hub found [ 441.441872][T19619] hub 2-0:1.0: 8 ports detected [ 441.447036][ T29] kauditd_printk_skb: 1175 callbacks suppressed [ 441.447089][ T29] audit: type=1326 audit(2000000045.390:869061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="syz.0.12932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.459279][T19627] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 441.477185][ T29] audit: type=1326 audit(2000000045.390:869062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="syz.0.12932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.510664][ T29] audit: type=1326 audit(2000000045.390:869063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.534175][ T29] audit: type=1326 audit(2000000045.390:869064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.557477][ T29] audit: type=1326 audit(2000000045.390:869065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.580703][ T29] audit: type=1326 audit(2000000045.390:869066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.604117][ T29] audit: type=1326 audit(2000000045.390:869067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.627389][ T29] audit: type=1326 audit(2000000045.390:869068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19628 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 441.652647][ T29] audit: type=1326 audit(2000000045.600:869069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19799 comm="syz.3.12939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 441.683929][ T29] audit: type=1326 audit(2000000045.600:869070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19799 comm="syz.3.12939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 441.794553][T19861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 441.812268][T19863] loop0: detected capacity change from 0 to 2048 [ 441.842898][T19869] netlink: 'syz.4.12950': attribute type 34 has an invalid length. [ 441.860280][T19871] siw: device registration error -23 [ 441.943814][T19985] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.023420][T19999] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.044234][T20002] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.077107][T20007] netlink: 'syz.1.12963': attribute type 34 has an invalid length. [ 442.207499][T20137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.229162][T20141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.261904][T20169] netlink: 'syz.5.12979': attribute type 34 has an invalid length. [ 442.381506][T20273] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.393521][T20279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.571017][T20304] netlink: 'syz.1.13012': attribute type 34 has an invalid length. [ 442.609638][T20311] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.743535][T20436] bpf_get_probe_write_proto: 8 callbacks suppressed [ 442.743557][T20436] syz.4.13016[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.752309][T20436] syz.4.13016[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.767588][T20436] syz.4.13016[20436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.772121][T20441] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 442.808288][T20438] hub 2-0:1.0: USB hub found [ 442.813098][T20438] hub 2-0:1.0: 8 ports detected [ 442.843725][T20447] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 442.886790][T20456] siw: device registration error -23 [ 442.946018][T20465] loop0: detected capacity change from 0 to 256 [ 443.068244][T20573] syz.3.13032[20573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.068312][T20573] syz.3.13032[20573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.079988][T20573] syz.3.13032[20573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.112231][T20582] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 443.163877][T20587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.189245][T20589] loop0: detected capacity change from 0 to 2048 [ 443.206924][T20589] EXT4-fs mount: 50 callbacks suppressed [ 443.206943][T20589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.239671][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.396963][T20717] syz.0.13045[20717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.397094][T20717] syz.0.13045[20717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.409407][T20717] syz.0.13045[20717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.499785][T20727] loop0: detected capacity change from 0 to 2048 [ 443.535677][T20727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.572353][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.609174][T20741] loop0: detected capacity change from 0 to 2048 [ 443.626998][T20741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.658475][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.659001][T20750] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.681411][T20748] hub 2-0:1.0: USB hub found [ 443.686382][T20748] hub 2-0:1.0: 8 ports detected [ 443.827966][T20770] loop0: detected capacity change from 0 to 2048 [ 443.847391][T20770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.867414][T20824] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 443.891132][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.896976][T20879] siw: device registration error -23 [ 443.930775][T20891] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 444.016935][T20900] loop0: detected capacity change from 0 to 2048 [ 444.086894][T20900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.114890][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.280564][T20952] loop0: detected capacity change from 0 to 256 [ 444.362060][T20956] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.438055][T20968] netlink: 'syz.5.13111': attribute type 34 has an invalid length. [ 444.473674][T20977] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.495981][T20980] loop0: detected capacity change from 0 to 256 [ 444.679661][T21014] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.755111][T21119] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.815300][T21123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 444.841651][T21139] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 444.914075][T21153] siw: device registration error -23 [ 445.002813][T21168] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.034595][T21209] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.130992][T21288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.173040][T21294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.269154][T21405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.304941][T21410] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.385389][T21422] __nla_validate_parse: 78 callbacks suppressed [ 445.385418][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13176'. [ 445.401155][T21422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.426708][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13178'. [ 445.435869][T21426] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.759687][T21429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13180'. [ 445.791609][T21429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13180'. [ 445.842729][T21445] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13187'. [ 445.853098][T21445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13187'. [ 445.863609][T21448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13188'. [ 445.876548][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13185'. [ 445.891033][T21439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13195'. [ 445.908053][T21440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 445.908345][T21448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13188'. [ 445.943287][T21452] netlink: 'syz.5.13190': attribute type 34 has an invalid length. [ 446.039023][T21466] loop0: detected capacity change from 0 to 256 [ 446.251903][T21616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.258255][T21614] loop0: detected capacity change from 0 to 2048 [ 446.266355][T21609] hub 2-0:1.0: USB hub found [ 446.277888][T21609] hub 2-0:1.0: 8 ports detected [ 446.300308][T21614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.328709][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.385306][T21632] netlink: 'syz.4.13219': attribute type 34 has an invalid length. [ 446.865059][T21742] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.883109][T21746] netlink: 'syz.1.13223': attribute type 34 has an invalid length. [ 446.895617][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 446.895633][ T29] audit: type=1326 audit(2000000050.850:870055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.1.13223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 446.924834][T21752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 446.926874][ T29] audit: type=1326 audit(2000000050.880:870056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.1.13223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 446.959808][ T29] audit: type=1326 audit(2000000050.890:870057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="syz.1.13223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 446.983713][ T29] audit: type=1326 audit(2000000050.890:870058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.007294][ T29] audit: type=1326 audit(2000000050.890:870059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.030650][ T29] audit: type=1326 audit(2000000050.910:870060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.053977][ T29] audit: type=1326 audit(2000000050.910:870061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.077211][ T29] audit: type=1326 audit(2000000050.910:870062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.100635][ T29] audit: type=1326 audit(2000000050.910:870063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.124112][ T29] audit: type=1326 audit(2000000050.910:870064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21745 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6262ace719 code=0x7ffc0000 [ 447.184636][T21868] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.225004][T21877] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.258582][T21879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.410007][T22000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.459419][T22079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.580851][T22132] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.619469][T22136] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.647092][T22137] hub 2-0:1.0: USB hub found [ 447.654019][T22137] hub 2-0:1.0: 8 ports detected [ 447.682167][T22147] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.734323][T22155] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.739127][T22157] netlink: 'syz.4.13272': attribute type 34 has an invalid length. [ 447.801967][T22163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 447.809209][T22165] loop0: detected capacity change from 0 to 2048 [ 447.827588][T22165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.855383][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.931398][T22181] loop0: detected capacity change from 0 to 2048 [ 447.955397][T22181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.984228][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.202070][T22191] netlink: 'syz.4.13285': attribute type 34 has an invalid length. [ 448.238131][T22195] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.272030][T22197] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.334547][T22205] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.387748][T22215] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.408615][T22217] netlink: 'syz.5.13299': attribute type 34 has an invalid length. [ 448.549677][T22240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.572281][T22243] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.715018][T22267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.767510][T22282] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 448.799316][T22285] loop0: detected capacity change from 0 to 2048 [ 448.835829][T22285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.884632][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.946433][T22312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.012315][T22316] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.094635][T22339] netlink: 'syz.5.13356': attribute type 34 has an invalid length. [ 449.186798][T22435] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.245754][T22457] netlink: 'syz.5.13364': attribute type 34 has an invalid length. [ 449.260566][T22463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.278342][T22462] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.362732][T22478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.413720][T22482] loop0: detected capacity change from 0 to 2048 [ 449.426405][T22482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.455805][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.472411][T22590] netlink: 'syz.5.13377': attribute type 34 has an invalid length. [ 449.493291][T22592] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.564156][T22600] siw: device registration error -23 [ 449.582973][T22603] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.628736][T22608] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.710068][T22620] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.790478][T22636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.857188][T22677] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.895761][T22818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 449.986153][T22865] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.073041][T22874] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.205978][T22894] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.262559][T23006] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.288365][T23008] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.383011][T23024] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.448580][T23032] __nla_validate_parse: 88 callbacks suppressed [ 450.448603][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13444'. [ 450.469173][T23032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.516542][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13446'. [ 450.537050][T23106] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.631226][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13454'. [ 450.641063][T23152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.704869][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13460'. [ 450.721534][T23165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.736401][T23170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13462'. [ 450.761421][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13463'. [ 450.772295][T23172] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.892413][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13472'. [ 450.897310][T23287] loop0: detected capacity change from 0 to 512 [ 450.901781][T23286] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 450.930336][T23292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13473'. [ 450.967490][T23297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13477'. [ 450.980923][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13475'. [ 450.990973][T23287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.009745][T23287] ext4 filesystem being mounted at /2745/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.025414][T23300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.069636][T23312] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.095003][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.162329][T23328] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 451.188767][T23325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.209704][T23332] siw: device registration error -23 [ 451.237102][T23333] loop0: detected capacity change from 0 to 2048 [ 451.260139][T23335] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.277991][T23337] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.324403][T23333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.340010][T23343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.428814][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.468055][T23359] loop0: detected capacity change from 0 to 2048 [ 451.477313][T23357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.496288][T23359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.529211][T23367] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.557034][T23366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.576983][T23371] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.590241][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.632002][T23377] loop0: detected capacity change from 0 to 2048 [ 451.658057][T23377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.697983][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.698477][T23389] siw: device registration error -23 [ 451.802129][T23399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.864341][T23405] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 451.883431][T23407] loop0: detected capacity change from 0 to 2048 [ 451.899201][T23407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.913807][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 451.913823][ T29] audit: type=1326 audit(2000000055.870:870696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.0.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 451.943970][ T29] audit: type=1326 audit(2000000055.870:870697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.0.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 451.967884][ T29] audit: type=1326 audit(2000000055.900:870698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.0.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 451.991877][ T29] audit: type=1326 audit(2000000055.900:870699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.0.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 452.015806][ T29] audit: type=1326 audit(2000000055.950:870700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23406 comm="syz.0.13524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75ba2de719 code=0x7ffc0000 [ 452.039613][ T29] audit: type=1400 audit(2000000055.950:870701): avc: denied { write } for pid=2998 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.061369][ T29] audit: type=1400 audit(2000000055.950:870702): avc: denied { remove_name } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.084229][ T29] audit: type=1400 audit(2000000055.950:870703): avc: denied { rename } for pid=2998 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 452.106705][ T29] audit: type=1400 audit(2000000055.950:870704): avc: denied { add_name } for pid=2998 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.129609][ T29] audit: type=1400 audit(2000000055.950:870705): avc: denied { unlink } for pid=2998 comm="syslogd" name="messages.0" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 452.191166][T23419] netlink: 'syz.5.13530': attribute type 34 has an invalid length. [ 452.208997][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.241574][T23424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.300180][T23435] siw: device registration error -23 [ 452.360230][T23441] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.489994][T23554] netlink: 'syz.4.13545': attribute type 34 has an invalid length. [ 452.626818][T23669] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.689615][T23731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.753607][T23783] loop0: detected capacity change from 0 to 256 [ 452.916219][T23826] loop0: detected capacity change from 0 to 256 [ 452.951833][T23905] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 452.968889][T23907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 453.073448][T23917] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 453.200593][T23939] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 453.207158][T23935] loop0: detected capacity change from 0 to 2048 [ 453.253015][T23935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.288101][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.326146][T24065] siw: device registration error -23 [ 453.363595][T24055] loop0: detected capacity change from 0 to 2048 [ 453.415229][T24055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.474826][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.510071][T24231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 453.635971][T24290] loop0: detected capacity change from 0 to 2048 [ 453.655254][T24290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.681214][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.714942][T24296] loop0: detected capacity change from 0 to 2048 [ 453.745631][T24296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.778189][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.839270][T24311] siw: device registration error -23 [ 453.882329][T24309] hub 2-0:1.0: USB hub found [ 453.887577][T24309] hub 2-0:1.0: 8 ports detected [ 453.906091][T24317] loop0: detected capacity change from 0 to 2048 [ 453.918064][T24317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.940935][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.992133][T24323] loop0: detected capacity change from 0 to 2048 [ 454.015595][T24323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.045256][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.114017][T24331] loop0: detected capacity change from 0 to 256 [ 454.240113][T24341] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.298532][T24345] loop0: detected capacity change from 0 to 2048 [ 454.317569][T24345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.346066][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.386189][T24357] loop0: detected capacity change from 0 to 256 [ 454.454875][T24367] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.564079][T24379] loop0: detected capacity change from 0 to 256 [ 454.692939][T24393] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.840198][T24419] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.850647][T24415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.898403][T24463] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 454.929602][T24428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.056825][T24645] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.082710][T24652] loop0: detected capacity change from 0 to 256 [ 455.118333][T24653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.164187][T24661] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.192520][T24667] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.273052][T24668] hub 2-0:1.0: USB hub found [ 455.284447][T24668] hub 2-0:1.0: 8 ports detected [ 455.285331][T24688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.437122][T24820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.522650][T24907] __nla_validate_parse: 74 callbacks suppressed [ 455.522747][T24907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13705'. [ 455.611230][T25018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13711'. [ 455.635151][T25022] FAULT_INJECTION: forcing a failure. [ 455.635151][T25022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.638148][T25021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13713'. [ 455.648463][T25022] CPU: 1 UID: 0 PID: 25022 Comm: syz.3.13712 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 455.648500][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 455.648517][T25022] Call Trace: [ 455.648524][T25022] [ 455.648532][T25022] dump_stack_lvl+0xf2/0x150 [ 455.648563][T25022] dump_stack+0x15/0x20 [ 455.658404][T25021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 455.668413][T25022] should_fail_ex+0x223/0x230 [ 455.668465][T25022] should_fail+0xb/0x10 [ 455.711923][T25022] should_fail_usercopy+0x1a/0x20 [ 455.716975][T25022] _copy_from_user+0x1e/0xb0 [ 455.721688][T25022] get_user_ifreq+0x8c/0x160 [ 455.726329][T25022] sock_ioctl+0x576/0x640 [ 455.730721][T25022] ? __pfx_sock_ioctl+0x10/0x10 [ 455.735586][T25022] __se_sys_ioctl+0xcd/0x140 [ 455.740237][T25022] __x64_sys_ioctl+0x43/0x50 [ 455.744874][T25022] x64_sys_call+0x15cc/0x2d60 [ 455.749666][T25022] do_syscall_64+0xc9/0x1c0 [ 455.754184][T25022] ? clear_bhb_loop+0x55/0xb0 [ 455.758899][T25022] ? clear_bhb_loop+0x55/0xb0 [ 455.763634][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.769680][T25022] RIP: 0033:0x7fad165ae719 [ 455.774101][T25022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.793722][T25022] RSP: 002b:00007fad15227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.802170][T25022] RAX: ffffffffffffffda RBX: 00007fad16765f80 RCX: 00007fad165ae719 [ 455.810231][T25022] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000004 [ 455.818226][T25022] RBP: 00007fad15227090 R08: 0000000000000000 R09: 0000000000000000 [ 455.826243][T25022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.834226][T25022] R13: 0000000000000000 R14: 00007fad16765f80 R15: 00007fff8da439d8 [ 455.842242][T25022] [ 455.905958][T25031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13717'. [ 455.927811][T25031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13717'. [ 455.959572][T25038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13720'. [ 456.009591][T25142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13721'. [ 456.041550][T25148] syz.1.13724[25148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.041599][T25148] syz.1.13724[25148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.053537][T25148] syz.1.13724[25148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.073341][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13722'. [ 456.094396][T25144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.180724][T25263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13731'. [ 456.198874][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13729'. [ 456.228259][T25258] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.255779][T25267] loop0: detected capacity change from 0 to 2048 [ 456.296069][T25267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.331020][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.363947][T25281] hub 2-0:1.0: USB hub found [ 456.369136][T25281] hub 2-0:1.0: 8 ports detected [ 456.377238][T25325] FAULT_INJECTION: forcing a failure. [ 456.377238][T25325] name failslab, interval 1, probability 0, space 0, times 0 [ 456.389934][T25325] CPU: 1 UID: 0 PID: 25325 Comm: syz.0.13740 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 456.400828][T25325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 456.410971][T25325] Call Trace: [ 456.414254][T25325] [ 456.417190][T25325] dump_stack_lvl+0xf2/0x150 [ 456.421815][T25325] dump_stack+0x15/0x20 [ 456.426025][T25325] should_fail_ex+0x223/0x230 [ 456.430726][T25325] ? security_file_alloc+0x32/0x100 [ 456.435954][T25325] should_failslab+0x8f/0xb0 [ 456.440588][T25325] kmem_cache_alloc_noprof+0x4c/0x290 [ 456.445981][T25325] security_file_alloc+0x32/0x100 [ 456.451018][T25325] alloc_empty_file+0x121/0x2f0 [ 456.455976][T25325] alloc_file_pseudo+0xc3/0x140 [ 456.461005][T25325] __shmem_file_setup+0x1bb/0x1f0 [ 456.466205][T25325] shmem_file_setup+0x3b/0x50 [ 456.470913][T25325] __se_sys_memfd_create+0x31d/0x5c0 [ 456.476284][T25325] __x64_sys_memfd_create+0x31/0x40 [ 456.481519][T25325] x64_sys_call+0x2891/0x2d60 [ 456.486292][T25325] do_syscall_64+0xc9/0x1c0 [ 456.490820][T25325] ? clear_bhb_loop+0x55/0xb0 [ 456.495527][T25325] ? clear_bhb_loop+0x55/0xb0 [ 456.500297][T25325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.506223][T25325] RIP: 0033:0x7f75ba2de719 [ 456.510767][T25325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.530562][T25325] RSP: 002b:00007f75b8f56e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 456.539022][T25325] RAX: ffffffffffffffda RBX: 0000000000004141 RCX: 00007f75ba2de719 [ 456.547082][T25325] RDX: 00007f75b8f56ef0 RSI: 0000000000000000 RDI: 00007f75ba351fca [ 456.555059][T25325] RBP: 0000000020008340 R08: 00007f75b8f56bb7 R09: 00007f75b8f56e40 [ 456.563060][T25325] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020004180 [ 456.571040][T25325] R13: 00007f75b8f56ef0 R14: 00007f75b8f56eb0 R15: 0000000020000140 [ 456.579107][T25325] [ 456.595177][T25401] siw: device registration error -23 [ 456.712596][T25503] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 456.909234][T25774] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 457.019502][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 457.019519][ T29] audit: type=1326 audit(2000000060.970:871311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.055125][ T29] audit: type=1326 audit(2000000061.010:871312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.079137][ T29] audit: type=1326 audit(2000000061.010:871313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.103479][ T29] audit: type=1326 audit(2000000061.010:871314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.134310][ T29] audit: type=1326 audit(2000000061.090:871315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.175901][ T29] audit: type=1326 audit(2000000061.090:871316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.199820][ T29] audit: type=1326 audit(2000000061.110:871317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.223787][ T29] audit: type=1326 audit(2000000061.120:871318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25850 comm="syz.3.13772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.262834][T25867] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 457.302319][T25871] FAULT_INJECTION: forcing a failure. [ 457.302319][T25871] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.317802][T25871] CPU: 0 UID: 0 PID: 25871 Comm: syz.1.13782 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 457.329115][T25871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.339195][T25871] Call Trace: [ 457.342550][T25871] [ 457.345599][T25871] dump_stack_lvl+0xf2/0x150 [ 457.350398][T25871] dump_stack+0x15/0x20 [ 457.354585][T25871] should_fail_ex+0x223/0x230 [ 457.359300][T25871] should_fail_alloc_page+0xfd/0x110 [ 457.364668][T25871] __alloc_pages_noprof+0x109/0x340 [ 457.369901][T25871] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 457.375438][T25871] alloc_pages_noprof+0xe1/0x100 [ 457.380430][T25871] get_zeroed_page_noprof+0x17/0x40 [ 457.385674][T25871] simple_transaction_get+0x4c/0x120 [ 457.391025][T25871] selinux_transaction_write+0x86/0x100 [ 457.396629][T25871] ? __pfx_selinux_transaction_write+0x10/0x10 [ 457.402817][T25871] vfs_write+0x281/0x920 [ 457.407159][T25871] ? __pfx_kfree_link+0x10/0x10 [ 457.412058][T25871] ? __rcu_read_unlock+0x4e/0x70 [ 457.417115][T25871] ? __fget_files+0x1d4/0x210 [ 457.421814][T25871] ksys_write+0xeb/0x1b0 [ 457.426114][T25871] __x64_sys_write+0x42/0x50 [ 457.430805][T25871] x64_sys_call+0x27dd/0x2d60 [ 457.435502][T25871] do_syscall_64+0xc9/0x1c0 [ 457.440021][T25871] ? clear_bhb_loop+0x55/0xb0 [ 457.444758][T25871] ? clear_bhb_loop+0x55/0xb0 [ 457.449532][T25871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.455474][T25871] RIP: 0033:0x7f6262ace719 [ 457.459901][T25871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.479709][T25871] RSP: 002b:00007f6261741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 457.488151][T25871] RAX: ffffffffffffffda RBX: 00007f6262c85f80 RCX: 00007f6262ace719 [ 457.496280][T25871] RDX: 0000000000000065 RSI: 00000000200000c0 RDI: 0000000000000003 [ 457.504259][T25871] RBP: 00007f6261741090 R08: 0000000000000000 R09: 0000000000000000 [ 457.512238][T25871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.520222][T25871] R13: 0000000000000000 R14: 00007f6262c85f80 R15: 00007ffd6e197b28 [ 457.528221][T25871] [ 457.578182][ T29] audit: type=1326 audit(2000000061.530:871319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25879 comm="syz.3.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.612487][ T29] audit: type=1326 audit(2000000061.530:871320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25879 comm="syz.3.13786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad165ae719 code=0x7ffc0000 [ 457.709768][T26099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 457.729826][T26103] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 457.732348][T26095] loop0: detected capacity change from 0 to 2048 [ 457.748770][T26098] hub 2-0:1.0: USB hub found [ 457.757083][T26098] hub 2-0:1.0: 8 ports detected [ 457.784838][T26095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.813266][T26111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 457.828029][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.851683][T26117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=26117 comm=syz.1.13803 [ 457.954608][T26138] syz.0.13812[26138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.954722][T26138] syz.0.13812[26138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.980325][T26138] syz.0.13812[26138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.013936][T26142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.256386][T26179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.320076][T26190] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.412551][T26309] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.445810][T26317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.459210][T26315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=278 sclass=netlink_route_socket pid=26315 comm=syz.3.13845 [ 458.476087][T26310] loop0: detected capacity change from 0 to 2048 [ 458.510795][T26326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.536517][T26310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.575454][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.649035][T26448] FAULT_INJECTION: forcing a failure. [ 458.649035][T26448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.662247][T26448] CPU: 1 UID: 0 PID: 26448 Comm: syz.1.13860 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 458.673152][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 458.683281][T26448] Call Trace: [ 458.686577][T26448] [ 458.689523][T26448] dump_stack_lvl+0xf2/0x150 [ 458.694237][T26448] dump_stack+0x15/0x20 [ 458.698416][T26448] should_fail_ex+0x223/0x230 [ 458.703177][T26448] should_fail+0xb/0x10 [ 458.707459][T26448] should_fail_usercopy+0x1a/0x20 [ 458.712505][T26448] copy_page_from_iter_atomic+0x228/0xf80 [ 458.718269][T26448] ? shmem_write_begin+0xa2/0x180 [ 458.723362][T26448] ? shmem_write_begin+0xda/0x180 [ 458.728486][T26448] generic_perform_write+0x2f1/0x4a0 [ 458.733801][T26448] shmem_file_write_iter+0xc2/0xe0 [ 458.739055][T26448] vfs_write+0x77f/0x920 [ 458.743335][T26448] ? handle_mm_fault+0x170a/0x2aa0 [ 458.748489][T26448] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 458.754427][T26448] ksys_write+0xeb/0x1b0 [ 458.758723][T26448] __x64_sys_write+0x42/0x50 [ 458.763350][T26448] x64_sys_call+0x27dd/0x2d60 [ 458.768054][T26448] do_syscall_64+0xc9/0x1c0 [ 458.772640][T26448] ? clear_bhb_loop+0x55/0xb0 [ 458.777391][T26448] ? clear_bhb_loop+0x55/0xb0 [ 458.782114][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.788131][T26448] RIP: 0033:0x7f6262acd1ff [ 458.792565][T26448] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 458.812450][T26448] RSP: 002b:00007f6261740df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 458.820926][T26448] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f6262acd1ff [ 458.828914][T26448] RDX: 0000000000040000 RSI: 00007f6259321000 RDI: 0000000000000004 [ 458.836898][T26448] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000002be [ 458.844974][T26448] R10: 00000000200003c2 R11: 0000000000000293 R12: 0000000000000004 [ 458.852959][T26448] R13: 00007f6261740ef0 R14: 00007f6261740eb0 R15: 00007f6259321000 [ 458.860946][T26448] [ 458.948889][T26458] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.080717][T26478] siw: device registration error -23 [ 459.138178][T26471] lo speed is unknown, defaulting to 1000 [ 459.200575][T26490] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.301102][T26645] loop0: detected capacity change from 0 to 2048 [ 459.344242][T26645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.402787][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.427651][T26814] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.500493][T26824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.538341][T26826] siw: device registration error -23 [ 459.550411][T26823] lo speed is unknown, defaulting to 1000 [ 459.575617][T26828] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 459.596083][T26832] loop0: detected capacity change from 0 to 256 [ 459.940128][T27061] siw: device registration error -23 [ 459.957391][T27058] hub 2-0:1.0: USB hub found [ 459.972544][T27058] hub 2-0:1.0: 8 ports detected [ 460.020841][T27066] loop0: detected capacity change from 0 to 256 [ 460.032334][T18421] ================================================================== [ 460.040486][T18421] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 460.047920][T18421] [ 460.050249][T18421] write to 0xffff8881005f042e of 1 bytes by task 27066 on cpu 1: [ 460.057972][T18421] set_blocksize+0x215/0x270 [ 460.062584][T18421] sb_min_blocksize+0x63/0xe0 [ 460.067280][T18421] fat_fill_super+0x33a/0x1bf0 [ 460.072064][T18421] vfat_fill_super+0x24/0x30 [ 460.076751][T18421] get_tree_bdev_flags+0x29f/0x310 [ 460.081884][T18421] get_tree_bdev+0x1f/0x30 [ 460.086325][T18421] vfat_get_tree+0x1c/0x30 [ 460.090747][T18421] vfs_get_tree+0x56/0x1e0 [ 460.095169][T18421] do_new_mount+0x227/0x690 [ 460.099727][T18421] path_mount+0x49b/0xb30 [ 460.104087][T18421] __se_sys_mount+0x27c/0x2d0 [ 460.108894][T18421] __x64_sys_mount+0x67/0x80 [ 460.113520][T18421] x64_sys_call+0x203e/0x2d60 [ 460.118221][T18421] do_syscall_64+0xc9/0x1c0 [ 460.122739][T18421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.128661][T18421] [ 460.131005][T18421] read to 0xffff8881005f042e of 1 bytes by task 18421 on cpu 0: [ 460.138655][T18421] do_mpage_readpage+0x55/0xcb0 [ 460.143584][T18421] mpage_readahead+0x1ad/0x2d0 [ 460.148489][T18421] blkdev_readahead+0x1c/0x30 [ 460.153193][T18421] read_pages+0xa0/0x540 [ 460.157546][T18421] page_cache_ra_unbounded+0x2d6/0x310 [ 460.163113][T18421] page_cache_sync_ra+0x252/0x670 [ 460.168158][T18421] filemap_get_pages+0x2c1/0x10e0 [ 460.173211][T18421] filemap_read+0x216/0x680 [ 460.177735][T18421] blkdev_read_iter+0x20e/0x2c0 [ 460.182592][T18421] vfs_read+0x5dc/0x700 [ 460.186767][T18421] ksys_read+0xeb/0x1b0 [ 460.190946][T18421] __x64_sys_read+0x42/0x50 [ 460.195475][T18421] x64_sys_call+0x27d3/0x2d60 [ 460.200182][T18421] do_syscall_64+0xc9/0x1c0 [ 460.204697][T18421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.210700][T18421] [ 460.213023][T18421] value changed: 0x0c -> 0x09 [ 460.217699][T18421] [ 460.220023][T18421] Reported by Kernel Concurrency Sanitizer on: [ 460.226188][T18421] CPU: 0 UID: 0 PID: 18421 Comm: udevd Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 460.236523][T18421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 460.246590][T18421] ==================================================================