last executing test programs: 2m41.322756436s ago: executing program 4 (id=256): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setns(0xffffffffffffffff, 0x24020000) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1021, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070007000400fbff07000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x800, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e24, @in=@dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x154}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="00000000000067d8a78d0000cb000000850000001b006ae1efd5352ff7c2e38b621abecf66080000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@union={0xe, 0x1, 0x0, 0x5, 0x1, 0xfffffffc, [{0x4, 0x5, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3}}]}, {0x0, [0x30]}}, &(0x7f0000000340)=""/18, 0x4b, 0x12, 0x1, 0x4}, 0x28) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000740), 0xff67) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) (async, rerun: 32) write$selinux_access(r8, &(0x7f00000019c0)={'system_u:object_r:v4l_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xffffffff}, 0x46) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r9, @ANYRES32=0x1, @ANYRES8=r0, @ANYRES32=r1, @ANYRES32, @ANYBLOB="03000000020000000300"/28], 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlock(&(0x7f0000002000/0x1000)=nil, 0x1000) (async, rerun: 64) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (rerun: 64) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000003000000000000009d05000018680000030000000000000009000000850000006400000018000000a10800000000000000010000180000000100000000000000f103000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008503000086000000186b0000010000000000000003000000853407e1f5d69ae30000004c00000018830000070000000000000005002bd0f3"], &(0x7f00000000c0)='syzkaller\x00', 0x81, 0x64, &(0x7f0000000240)=""/100, 0x41000, 0x68, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x5, 0x7ff, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r7, r10, r13, r14], &(0x7f0000000600)=[{0x2, 0x2, 0xe, 0x8}, {0x2, 0x4, 0x4, 0x1}, {0x3, 0x3, 0x9, 0x8}, {0x4, 0x1, 0x10, 0x1}, {0x4, 0x2, 0x4, 0x6}], 0x10, 0x80000001}, 0x94) 2m41.263587149s ago: executing program 4 (id=258): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2100) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m41.262926429s ago: executing program 4 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20048000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x2e85, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xb, 0x4, @thr={&(0x7f00000000c0)="e20e0a2e91bd0bdfedbee33ee40acf7b8123e020a30f5508c22b224a9d2aa0392b19e59f6ee7528d4dbc0b10d2478090252363bd2fc1a8216c3a8219662bd90c9a907d550939c97fe2abcaf2c6e0753297c90ad538cdcff6d95a705d6dca7072949deebfdf9c8b69fcbf14ab373794efae5fafa26c50", &(0x7f0000001440)="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"}}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="20388425fc24229f381ab4f4d82a0143", 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) socket$kcm(0x2, 0x3, 0x2) 2m41.239713s ago: executing program 4 (id=261): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004454) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000400)={@remote, 0x9, 0x2, 0x422be278c3f58f46, 0x6, 0x1, 0x8}, 0x20) ioctl$MON_IOCG_STATS(r4, 0xc0109207, &(0x7f0000000180)) r5 = gettid() socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800714, &(0x7f0000000000)={[{}]}, 0xff, 0x490, &(0x7f0000000640)="$eJzs3M9rHFUcAPDvbJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9ku9lNkzTdtdnPBzb73sybfe87M2/nzUxmA+hY/emfJGJHRPwWEb159sYC/fnb3Oz06PXZ6dEk5uff+CvJyl2bnR4ti5bLbS8yhysRlU+TeD5ZWu/khYtnRqrV8fNFfnDq7HuDkxcuPnX67Mip8VPj54aPHz92dOjZZ4afXpc407iu7f9w4sC+V966/Nroictv//hN2qy9B/P5tXHc1PUGATXQn661v+cz9fMeXUXb7wQ7a9JJdxsbwqp0RUS6uXqy/t8bXbG48Xrj5U/a2jjgtkqPTZubz56ZBzawJNrdAqA9ygN9ev5bvlo09PhfuPpCxKYiPTc7PTq3EH93VIrpPU2WXY/T3P6IODHz75fpK1Z7HQIAYA2ysc2TjcZ/ldibvef3OnYV91D6IuKuiNgdEXdHxJ6IuCciK3tvRNyXLzzfu8L6++sGUUvHP5UrDdu8TtLx33M1Y7+5mviLt76uIrczi78nOXm6On6kWCeHo2dzmh9apo7vXvr182bzasd/6SutvxwLFg240l13gW5sZGpkvVbC1Y8j9nc3ij9ZGN+me8C+iNi/uo/eVSZOP/71gWaFbh7/MtZhAD7/VcRj+fafibr4S8ny9ycHt0R1/MhguVcs9dMvl15vVv8txb8O0u2/7cb9v65E7z9Jfr+2J6rV8fOTq6/j0u+fNT2nWev+vyl5M7tn/fM7+bQPRqamzg9FbEpezfLlOV02fXhx2TJflk/jP3yocf/fXSyTxn9/RKQ78cGIeCAiHiza/lBEPBwRh5aJ/4cXH3l3mfiTSKKt23+s4fffwv7fl9Ter19DouvM9982u2O+su1/LGay79pc9v13Eytt4C2uPgAAALgjVCJiRySVgTzdvyMqlYGB/H/498S2SnVicuqJkxPvnxvLnxHoi55KeaWrt+Z66FAyU3xinh8urhWX848W142/6Nqa5QdGJ6pjbY4dOt32G/t/lP0/9WfXQhFgo/K8FnSu+v5faVM7gNZbyfG/qwXtAFqvQf/f2o52AK3n/B86V6P+/1Fd3vgfNqal/f+PBj9ZB2xExv/QufR/6Fz6P3SkW3muf+2J8mGBtX/OlhU/4d8pifIXL25nXVtjcUpUWhBXeWRq/+ptcyLtMa2tdPE3VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5k/wUAAP//qVvjcg==") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000020, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71efdd23dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syncfs(r7) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000003c0)) io_setup(0x0, &(0x7f0000000040)=0x0) io_submit(r9, 0x2, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x23f, r6, &(0x7f00000000c0)="a3a47bee2330fa1f8241537ef56e0b7f2fd925c61aaf154aeeb638c900aebba3dacb8c7e7e1b5be9b484b2853d8a0f9ca58f6db3e82a032794d2612eb05aaca2e4ca40a0a310c4b17d778b0098a1b9076e66f53efb0cc3318b7e3b4af2f9cc6e", 0x60, 0xffffffffffffffc0, 0x0, 0x1, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xa5f, 0xffffffffffffffff, &(0x7f00000002c0)="3e96205bb546a5981deaf45f8bf66bf388a40102dc8e7a809c86897bb83cadcd458ddcec3ba81fdb6dd6ad908050b5eb6226429ed8350a287a230621e3d9be7535eba10a29f9f20b368a97cf95fd7f2959c0bfcb2cb930537e4a0a3351c1bd6d82669ded5753af1e1b29838ee576ece14d8397adebbfea3f47c302285eee2715ebeb8ceb1cf558d5345b702da92a70aab4faab2683fdc636992434b3a10d10892fbab2758d6f0a20a49af11f12c325044a200ffb7290df1f505b1b0cce4038ba44cb7ac9", 0xc4, 0x4, 0x0, 0x2, r8}]) 2m41.036306299s ago: executing program 4 (id=262): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) kexec_load(0x4, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00!G', 0x3}], 0x1, 0x6, 0xfffffffe) 2m40.833041607s ago: executing program 4 (id=264): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60cb800000403aff00000000000000000000ffffac1e0001ff0200000000000000000000000000010101907836000000619b42d7000400fffe800000000000000000000000000040fc0100000000000000000000000000003a000000000000000c193ffb611e1f37cf23c1d524e4c42844e9bb3b3c386a9fcaed3848c9d37790d4eda2e3cf469f92ed0ba4698a5fe714288e687447940951213fa47dec446fd71af549531e6091fcef07800b74"], 0x0) 2m40.800958919s ago: executing program 32 (id=264): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000001bbbbbbbbbbbb86dd60cb800000403aff00000000000000000000ffffac1e0001ff0200000000000000000000000000010101907836000000619b42d7000400fffe800000000000000000000000000040fc0100000000000000000000000000003a000000000000000c193ffb611e1f37cf23c1d524e4c42844e9bb3b3c386a9fcaed3848c9d37790d4eda2e3cf469f92ed0ba4698a5fe714288e687447940951213fa47dec446fd71af549531e6091fcef07800b74"], 0x0) 1m16.291751439s ago: executing program 5 (id=2015): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r1 = memfd_create(&(0x7f0000000d80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xeb\x12\xbcv\x80\xef\x81`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf3\xaf\xcbQ\x84\xe2\x1c\x0fR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6\x9b\r\xa2\xb1\xf0@\xedX\xde\x93\x8a\x8a8\xf8\"\x1ei-f[\xaf\n\xea\x86\x00}\xf9\xbc\x9dH?W\xb5\x10\x92\x1f\xd2', 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) r2 = accept4(r0, &(0x7f00000003c0)=@sco, &(0x7f0000000200)=0x80, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x4}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000180)='./file0\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) write$tun(r6, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x6c, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) 1m16.251026691s ago: executing program 5 (id=2019): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x8, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) close(r1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46, 0x43]}, 0x2d) 1m16.213017482s ago: executing program 5 (id=2022): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x3}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) recvmsg(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x2100) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x75, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m15.919824595s ago: executing program 5 (id=2023): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x351, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0xc6e9f000) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB, @ANYRES8, @ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.444310836s ago: executing program 5 (id=2031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050010) 1m15.021483534s ago: executing program 5 (id=2043): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000006000000000000000000000a0400000007000000000000100c0000000d0000000000001101000000010000000900000000000010040000000f00000000000009e48540c5a4535ff9d5d7e28599010000000a000000000000110200000008000000002e5f003000627d23fe50b442d77d8b4cdc13"], &(0x7f00000001c0)=""/175, 0x6e, 0xaf, 0x1, 0x9}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m14.998826055s ago: executing program 33 (id=2043): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000006000000000000000000000a0400000007000000000000100c0000000d0000000000001101000000010000000900000000000010040000000f00000000000009e48540c5a4535ff9d5d7e28599010000000a000000000000110200000008000000002e5f003000627d23fe50b442d77d8b4cdc13"], &(0x7f00000001c0)=""/175, 0x6e, 0xaf, 0x1, 0x9}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.052475302s ago: executing program 0 (id=4020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.924865717s ago: executing program 0 (id=4021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x10}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) syz_usb_connect$cdc_ecm(0x3, 0x91, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0xcb, 0xb0, 0x56, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xa, 0x24, 0x6, 0x0, 0x0, "efac334532"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xb0, 0x4, 0x2, 0xb}, [@mdlm={0x15, 0x24, 0x12, 0x3ff}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x1, 0xd}, @mdlm_detail={0x1d, 0x24, 0x13, 0x3, "ad9a115f84242facdb3c0384001fd271488b2e83194ab912ca"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x9b}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5, 0x19, 0xa, 0xff, 0x9}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "352d364a53bf6bed63c801f8151e2cff"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x405}}, {0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="0d0396136e04000000d67d77561d696ccc9992ebc74cc01f9d96f8514454c0020d4501cf131092b9dc268c298d27946084569b8cad683acfce38cc7db5030e0bf4ea7ea6d102213362cedd99aaeaf894ff422c73a17c7cb5ddff685275cfe3d79d315c52"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x140a}}]}) r7 = io_uring_setup(0x7f59, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x1009, 0x197}) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x4) close_range(r7, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/12, @ANYRESOCT=r7, @ANYBLOB="0d00ff00000000007e0000000001eaff450fcca2ca7e6d01cd920d8677e2f356e17a5967fe28ec133e0aeaef7866b436e54b"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) socket$kcm(0x11, 0x200000000000002, 0x300) 1.874295999s ago: executing program 3 (id=4023): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x240440c8) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167", 0x80}], 0x3, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_ttl={{0x14, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) 1.808072822s ago: executing program 3 (id=4025): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xa39ad000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9", 0xa) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000480)={@remote, @broadcast}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ffff0000000000000055540000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='cpu>00||!') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r9, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.569032532s ago: executing program 6 (id=4028): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x8, @vifc_lcl_ifindex=r7, @broadcast}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46, 0x43]}, 0x2d) 1.522153844s ago: executing program 6 (id=4029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.468336937s ago: executing program 3 (id=4030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = gettid() getpgid(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000013c0)=""/4100, 0x1004) socket$inet6(0xa, 0x3, 0x88) 1.449568247s ago: executing program 6 (id=4032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) inotify_rm_watch(0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400b59500000000000000000a100000", @ANYRES32=r4, @ANYBLOB="14000200000000000000000000001b000000000014000100fe80000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001400b59500000000000040000a000000", @ANYRES32=r4, @ANYBLOB="14000200"], 0x54}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) sendmsg$inet(0xffffffffffffffff, 0x0, 0x240000c0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000200000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) pwrite64(r8, &(0x7f0000000280)='\x00', 0x1, 0xfecc) fallocate(0xffffffffffffffff, 0x0, 0xfff, 0x5) r9 = socket(0x1d, 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.271980196s ago: executing program 0 (id=4033): syz_clone3(&(0x7f0000000880)={0x44304000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000600)=0x0, {0x3c}, &(0x7f0000000780)=""/97, 0x61, &(0x7f0000000800)=""/17, &(0x7f0000000840)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r1 = perf_event_open$cgroup(&(0x7f0000000900)={0x4, 0x80, 0x8, 0x63, 0x4, 0x5, 0x0, 0x9, 0x4040, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x5}, 0x8, 0x9, 0x246a5c8e, 0x5, 0x0, 0x800000, 0x6fd2, 0x0, 0x9, 0x0, 0xfffffffffffffff0}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x2, 0x0, 0x7, 0x9, 0x0, 0x3, 0x88446, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x40, 0xf1f, 0x7, 0x5, 0x9, 0xd9bb, 0xaca1, 0x0, 0x9, 0x0, 0x2}, r0, 0x1, r1, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) syz_open_pts(r4, 0x20800) 1.197806098s ago: executing program 0 (id=4035): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 1.125591041s ago: executing program 6 (id=4036): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='netfs_read\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa152f18a66094080045290014006800000c019078"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800000, 0xffffffff, 0x8000, 0xe1dd, 0x10fd, 0xff}) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010200040000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000001f) close_range(r9, 0xffffffffffffffff, 0x0) 871.721242ms ago: executing program 6 (id=4039): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa8000000060a0b040000000000000000020000067c000480780001800a0001006d617463680700006800028008000240000000000900010064736370000000004d000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b27"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 800.309205ms ago: executing program 6 (id=4041): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e", 0xcb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) shmctl$IPC_RMID(0x0, 0x0) 752.314278ms ago: executing program 0 (id=4043): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)={@void, @void, @eth={@multicast, @random="fdb065f649d1", @val={@val={0x88a8, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0x68, 0x0, 0x9, 0x6c, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x2a) 646.183092ms ago: executing program 0 (id=4045): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xd4}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r4, @ANYBLOB="e25715229e26fc2a2581bee69ef3eb62267134bd24adf7cf2d3ee19b6e2ae9335720cc73f2e68c223e703cc94c2f62e44655bc0439bac84f0e51ed6bf2ff45eef3ba289a3f6c8c4b1177f1375cb53f8d7a4feaeb00fd4e4a1d98340db8dd4a62cb38c5e30e3dc6b90b"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 550.588296ms ago: executing program 3 (id=4046): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 550.015266ms ago: executing program 3 (id=4047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 531.794587ms ago: executing program 3 (id=4048): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x40000}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000a04000000fef2f09230", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000300"/28], 0x50) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) 471.56169ms ago: executing program 1 (id=4049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="4c0000000d0a0108"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (fail_nth: 2) 212.572681ms ago: executing program 1 (id=4050): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/kexec_crash_loaded', 0x140, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1ffffffffffffe9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) r6 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r6, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="c5cb655b8d18110040", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast1, @dev}, &(0x7f0000000800)=0xc) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x440c0}, 0x8000) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r10 = socket$xdp(0x2c, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x20403f, 0x1000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) 211.327071ms ago: executing program 2 (id=4051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 159.297814ms ago: executing program 1 (id=4052): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xe, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x804, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0xf4) openat$rtc(0xffffffffffffff9c, 0x0, 0x500, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 150.620584ms ago: executing program 1 (id=4053): syz_clone3(&(0x7f0000000880)={0x44304000, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000600)=0x0, {0x3c}, &(0x7f0000000780)=""/97, 0x61, &(0x7f0000000800)=""/17, &(0x7f0000000840)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r1 = perf_event_open$cgroup(&(0x7f0000000900)={0x4, 0x80, 0x8, 0x63, 0x4, 0x5, 0x0, 0x9, 0x4040, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x5}, 0x8, 0x9, 0x246a5c8e, 0x5, 0x0, 0x800000, 0x6fd2, 0x0, 0x9, 0x0, 0xfffffffffffffff0}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x2, 0x0, 0x7, 0x9, 0x0, 0x3, 0x88446, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x40, 0xf1f, 0x7, 0x5, 0x9, 0xd9bb, 0xaca1, 0x0, 0x9, 0x0, 0x2}, r0, 0x1, r1, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) syz_open_pts(r3, 0x20800) 112.011895ms ago: executing program 2 (id=4054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 95.474186ms ago: executing program 2 (id=4055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x8, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46, 0x50, 0x46, 0x43]}, 0x2d) 70.795857ms ago: executing program 2 (id=4056): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x240440c8) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167", 0x80}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_ttl={{0x14, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x20004044) 30.190179ms ago: executing program 2 (id=4057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xc, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 28.637739ms ago: executing program 1 (id=4058): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r2, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.53786ms ago: executing program 2 (id=4059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x7, &(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYBLOB="6e524a542d9a65435d4ad5622c601ebfec51078c48bee221520c5f6984361b12f5d6728b75d5ef00808d29a3e72210c69ef815e77dbb034dc4de59269274304e8f66672ed2bb062f641265146aa5ff2d9b2fac7baa4c3720b9fd1a382086b2daa885dabbfa55d4ffbff36a0948a735b481b95a92223d869fef96b14bc79bd95fb653954e47b3b0289b78e9e3305a4201ad5e8fa985c4288099fc6c31387e3e21c8b8ac41ddd7562a83945a33e87ebe77189861f91c2fbbf18373b729cda81e95dbf65d1887dfe72fe71f2beca247473d83adecbfaa80dc", @ANYBLOB="0000000000000002b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000840)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a0003070000000000000000de3f0005001a"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d00000098b7a5f8633c2cb88ae64ec0a7bcf37cc80a48a94b8ce0e5d92b37e581d116e9eb175cf5858b36a4f2a1d932acaac0f054bfa0be9f860cc3a44bf572c411b45c2ecc9581b4a87da75eeb8664f640aef35835c730659144f090ee3f7b59167e2e8deb78db7e03513bd53620dae9c5", @ANYRES16=r2, @ANYBLOB="0100d0000000fbdbdf3a2700000018000180140002007665746831", @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000952daec6d3f52721d987020e000000000018110000cbf16c4299b21c9c8e2ae1759fe4f68ed38964fa402b1973485098920d5799cf0a00fc23961945f0251d26b7ccd47389c571c1aa", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000d6b13dae79e5ce1464e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x4}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xa, 0xfb, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x401}, 0x8) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r11 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r12, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x2, r11}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fb}, {0xa, 0x4e22, 0x8ed, @empty, 0x3}, 0xffffffffffffffff, 0x9}}, 0x48) 0s ago: executing program 1 (id=4060): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x200, 0x1, 0xfffffffffffffffc, 0x6, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff00000000000088a800008100000086dd60661040004c2f00654790092033f8ddb30e48fc0000000000000000000000000000fcff0200000000000000000000000000013c00080067000100242081000000000200000800000086dd080088be00000000100000000100000000000000080022eb0000000020000008020000000010000000"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000", @ANYRES32=r7], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) add_key(0x0, 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xfffffffffffffffd) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0xfcff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(r5, 0x0, 0x0) bind$tipc(r5, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x3}}, 0x10) bind$tipc(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) kernel console output (not intermixed with test programs): yz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.475329][ T29] audit: type=1326 audit(1764373652.142:11693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.498925][ T29] audit: type=1326 audit(1764373652.142:11694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.522670][ T29] audit: type=1326 audit(1764373652.142:11695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.546320][ T29] audit: type=1326 audit(1764373652.142:11696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.585205][T11467] netlink: 'syz.3.2841': attribute type 12 has an invalid length. [ 167.633559][ T29] audit: type=1326 audit(1764373652.142:11697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.657405][ T29] audit: type=1326 audit(1764373652.312:11698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.3.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7b9c0f749 code=0x7ffc0000 [ 167.748610][T11491] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 167.756840][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2849'. [ 167.766629][T11488] ALSA: seq fatal error: cannot create timer (-19) [ 167.864493][T11499] netlink: 'syz.0.2853': attribute type 12 has an invalid length. [ 167.881677][T11502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2855'. [ 167.887196][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 167.901730][T11502] program syz.1.2855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.960503][T11502] can: request_module (can-proto-0) failed. [ 167.970222][ T8449] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.999584][T11513] SELinux: policydb version 2560277 does not match my version range 15-35 [ 168.010452][T11513] SELinux: failed to load policy [ 168.024761][T11513] loop3: detected capacity change from 0 to 1764 [ 168.045378][T11517] ALSA: seq fatal error: cannot create timer (-19) [ 168.105174][T11525] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2864'. [ 168.189204][T11527] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.313975][T11542] netlink: 'syz.3.2868': attribute type 12 has an invalid length. [ 168.364254][T11547] program syz.3.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.416318][T11547] can: request_module (can-proto-0) failed. [ 168.554996][T11562] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.615435][T11570] netlink: 'syz.6.2882': attribute type 7 has an invalid length. [ 168.623303][T11570] netlink: 'syz.6.2882': attribute type 8 has an invalid length. [ 168.863613][T11586] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.913337][T11592] __nla_validate_parse: 5 callbacks suppressed [ 168.913356][T11592] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2893'. [ 168.963242][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2896'. [ 168.972232][T11598] netlink: 'syz.6.2896': attribute type 7 has an invalid length. [ 168.980053][T11598] netlink: 'syz.6.2896': attribute type 8 has an invalid length. [ 168.987969][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2896'. [ 169.067066][T11604] IPv6: Can't replace route, no match found [ 169.108032][T11611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 169.168086][T11617] bridge_slave_0: left allmulticast mode [ 169.173946][T11617] bridge_slave_0: left promiscuous mode [ 169.179864][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.190421][T11617] bridge_slave_1: left allmulticast mode [ 169.196289][T11617] bridge_slave_1: left promiscuous mode [ 169.202081][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.211476][T11618] netlink: 'syz.6.2905': attribute type 10 has an invalid length. [ 169.219426][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2905'. [ 169.231487][T11617] bond0: (slave bond_slave_0): Releasing backup interface [ 169.242680][T11617] bond0: (slave bond_slave_1): Releasing backup interface [ 169.255818][T11617] team0: Port device team_slave_0 removed [ 169.267261][T11617] team0: Port device team_slave_1 removed [ 169.274874][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.282294][T11617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.294204][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.301682][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.318458][T11617] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.334921][ T3394] lo speed is unknown, defaulting to 1000 [ 169.343975][T11618] batman_adv: batadv0: Adding interface: veth1_vlan [ 169.350663][T11618] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.376449][T11618] batman_adv: batadv0: Interface activated: veth1_vlan [ 169.468350][T11637] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 169.480044][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2912'. [ 169.573984][T11643] netlink: 'syz.6.2915': attribute type 12 has an invalid length. [ 169.602322][T11651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2919'. [ 169.611474][T11651] netlink: 'syz.3.2919': attribute type 7 has an invalid length. [ 169.619286][T11651] netlink: 'syz.3.2919': attribute type 8 has an invalid length. [ 169.627168][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 169.684536][T11661] IPv6: Can't replace route, no match found [ 169.743840][ T6242] syz_tun (unregistering): left promiscuous mode [ 169.841887][T11665] lo speed is unknown, defaulting to 1000 [ 169.848888][T11665] lo speed is unknown, defaulting to 1000 [ 169.911305][T11665] chnl_net:caif_netlink_parms(): no params data found [ 169.949363][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.956495][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.965673][T11665] bridge_slave_0: entered allmulticast mode [ 169.972245][T11665] bridge_slave_0: entered promiscuous mode [ 169.979269][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.986415][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.993858][T11665] bridge_slave_1: entered allmulticast mode [ 170.000453][T11665] bridge_slave_1: entered promiscuous mode [ 170.019115][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.029576][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.042432][ T6168] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.042512][ T3633] Bluetooth: hci0: command 0x1003 tx timeout [ 170.070368][T11665] team0: Port device team_slave_0 added [ 170.077466][T11665] team0: Port device team_slave_1 added [ 170.094932][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.102052][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.128492][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.140718][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.147837][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.173948][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.202783][T11665] hsr_slave_0: entered promiscuous mode [ 170.209019][T11665] hsr_slave_1: entered promiscuous mode [ 170.215002][T11665] debugfs: 'hsr0' already exists in 'hsr' [ 170.220792][T11665] Cannot create hsr debugfs directory [ 170.346218][T11690] loop2: detected capacity change from 0 to 1024 [ 170.367789][T11690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.404706][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.468478][T11665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.478875][T11665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.489284][T11665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 170.523120][T11665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 170.596482][T11709] bridge_slave_0: left allmulticast mode [ 170.602199][T11709] bridge_slave_0: left promiscuous mode [ 170.608085][T11709] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.620678][T11718] IPv6: Can't replace route, no match found [ 170.621449][T11709] bridge_slave_1: left allmulticast mode [ 170.632440][T11709] bridge_slave_1: left promiscuous mode [ 170.638315][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.657012][T11709] bond0: (slave bond_slave_0): Releasing backup interface [ 170.684572][T11709] bond0: (slave bond_slave_1): Releasing backup interface [ 170.702424][T11709] team0: Port device team_slave_0 removed [ 170.712629][T11709] team0: Port device team_slave_1 removed [ 170.719673][T11709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.727193][T11709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.760074][T11709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.767712][T11709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.799238][T11709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.885772][T11665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.898520][T11665] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.914453][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.921689][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.938026][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.945270][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.077868][T11740] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 171.086248][T11740] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 171.138563][T11747] IPv6: Can't replace route, no match found [ 171.161373][T11665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.265755][T11665] veth0_vlan: entered promiscuous mode [ 171.278878][T11665] veth1_vlan: entered promiscuous mode [ 171.306975][T11665] veth0_macvtap: entered promiscuous mode [ 171.324787][T11665] veth1_macvtap: entered promiscuous mode [ 171.347233][T11665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.364759][T11665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.385951][ T8481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.395091][ T8481] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.408980][ T8481] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.432420][ T8479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.696914][T11771] bridge_slave_0: left allmulticast mode [ 171.702709][T11771] bridge_slave_0: left promiscuous mode [ 171.708563][T11771] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.722022][T11771] bridge_slave_1: left allmulticast mode [ 171.727850][T11771] bridge_slave_1: left promiscuous mode [ 171.733601][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.764859][T11771] bond0: (slave bond_slave_0): Releasing backup interface [ 171.775048][T11771] bond0: (slave bond_slave_1): Releasing backup interface [ 171.787413][T11771] team0: Port device team_slave_0 removed [ 171.796534][T11771] team0: Port device team_slave_1 removed [ 171.823842][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.831290][T11771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.886118][T11771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.893617][T11771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.904284][T11771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 172.092686][T11790] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 172.101000][T11790] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 172.252928][T11797] SELinux: policydb version 2560277 does not match my version range 15-35 [ 172.262155][T11797] SELinux: failed to load policy [ 172.272558][T11799] IPv6: Can't replace route, no match found [ 172.313209][T11797] loop2: detected capacity change from 0 to 1764 [ 172.557717][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2973'. [ 172.585298][T11817] program syz.3.2973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.639856][T11820] loop3: detected capacity change from 0 to 512 [ 172.718899][T11820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.772044][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 172.772064][ T29] audit: type=1401 audit(1764373657.512:11924): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 172.790439][T11820] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.875974][T11817] can: request_module (can-proto-0) failed. [ 172.908897][ T29] audit: type=1326 audit(1764373657.652:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 172.943862][T11841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2982'. [ 172.952907][T11841] netlink: 'syz.0.2982': attribute type 7 has an invalid length. [ 172.960641][T11841] netlink: 'syz.0.2982': attribute type 8 has an invalid length. [ 172.968522][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 173.002535][ T29] audit: type=1326 audit(1764373657.682:11926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.026302][ T29] audit: type=1326 audit(1764373657.682:11927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.049918][ T29] audit: type=1326 audit(1764373657.682:11928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.073768][ T29] audit: type=1326 audit(1764373657.682:11929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.097498][ T29] audit: type=1326 audit(1764373657.682:11930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.121346][ T29] audit: type=1326 audit(1764373657.682:11931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.144996][ T29] audit: type=1326 audit(1764373657.692:11932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.168625][ T29] audit: type=1326 audit(1764373657.692:11933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11840 comm="syz.0.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 173.214468][T11845] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 173.260898][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.402917][T11846] lo speed is unknown, defaulting to 1000 [ 173.414850][T11846] lo speed is unknown, defaulting to 1000 [ 173.528132][T11875] loop2: detected capacity change from 0 to 1024 [ 173.549672][T11862] netlink: 'syz.3.2985': attribute type 12 has an invalid length. [ 173.583758][T11871] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 173.592060][T11871] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 173.612551][ T8479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.622888][ T8479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.646805][T11875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.699839][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.702078][T11846] chnl_net:caif_netlink_parms(): no params data found [ 173.787275][ T8479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.797614][ T8479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.886607][ T8479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.896952][ T8479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.013490][T11846] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.020783][T11846] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.055238][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 174.057534][T11846] bridge_slave_0: entered allmulticast mode [ 174.082870][T11846] bridge_slave_0: entered promiscuous mode [ 174.092657][ T8479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.103186][ T8479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.120997][T11846] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.121338][T11914] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3005'. [ 174.128215][T11846] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.169110][T11846] bridge_slave_1: entered allmulticast mode [ 174.177988][T11846] bridge_slave_1: entered promiscuous mode [ 174.199172][T11920] ALSA: seq fatal error: cannot create timer (-19) [ 174.216495][T11846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.227632][T11846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.260278][T11923] ALSA: seq fatal error: cannot create timer (-19) [ 174.322219][T11929] loop6: detected capacity change from 0 to 1024 [ 174.340066][T11846] team0: Port device team_slave_0 added [ 174.349965][T11846] team0: Port device team_slave_1 added [ 174.367378][T11929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.476142][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.714732][ T8479] bond0 (unregistering): Released all slaves [ 174.723720][T11846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.730688][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.756689][T11846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.768755][T11846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.775820][T11846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.801839][T11846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.848236][ T8479] hsr_slave_0: left promiscuous mode [ 174.854686][ T8479] hsr_slave_1: left promiscuous mode [ 174.860308][ T8479] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 174.867594][ T8479] batman_adv: batadv0: Removing interface: veth1_vlan [ 174.879238][ T8479] veth1_macvtap: left promiscuous mode [ 174.892624][ T8479] veth1_vlan: left promiscuous mode [ 174.897989][ T8479] veth0_vlan: left promiscuous mode [ 174.947346][T11958] IPv6: Can't replace route, no match found [ 174.955642][ T8479] pim6reg (unregistering): left allmulticast mode [ 175.013948][T11960] ALSA: seq fatal error: cannot create timer (-19) [ 175.146572][T11846] hsr_slave_0: entered promiscuous mode [ 175.159347][T11846] hsr_slave_1: entered promiscuous mode [ 175.174687][T11846] debugfs: 'hsr0' already exists in 'hsr' [ 175.180766][T11846] Cannot create hsr debugfs directory [ 175.392914][T12001] IPv6: Can't replace route, no match found [ 175.486601][T12010] IPv6: Can't replace route, no match found [ 175.626834][T12029] IPv6: Can't replace route, no match found [ 175.713543][T11846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.725077][T11846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.741418][T11846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.764669][T12039] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 175.764777][T11846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.772906][T12039] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 175.826826][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3061'. [ 175.836015][T12051] netlink: 'syz.0.3061': attribute type 7 has an invalid length. [ 175.843853][T12051] netlink: 'syz.0.3061': attribute type 8 has an invalid length. [ 175.851598][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 175.906296][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.028212][T11846] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.043228][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.050339][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.074460][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.081786][ T8481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.121469][T11846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.132397][T11846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.189642][T12079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3072'. [ 176.199475][T12079] program syz.3.3072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.260436][T12089] loop3: detected capacity change from 0 to 512 [ 176.267822][T11846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.345692][T12089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.377409][T12089] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.441939][T11846] veth0_vlan: entered promiscuous mode [ 176.467168][T12089] can: request_module (can-proto-0) failed. [ 176.485279][T11846] veth1_vlan: entered promiscuous mode [ 176.492825][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.510520][T11846] veth0_macvtap: entered promiscuous mode [ 176.548141][T11846] veth1_macvtap: entered promiscuous mode [ 176.573787][T11846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.598392][T11846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.633221][ T8449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.642040][ T8449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.651298][T12125] loop2: detected capacity change from 0 to 1024 [ 176.660889][T12130] ALSA: seq fatal error: cannot create timer (-19) [ 176.674251][ T8495] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.685538][T12125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.722204][ T8495] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.873949][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.033326][T12150] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 177.041529][T12150] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 177.072463][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'. [ 177.398357][T12176] ALSA: seq fatal error: cannot create timer (-19) [ 177.713552][T12190] ALSA: seq fatal error: cannot create timer (-19) [ 177.739999][T12195] loop6: detected capacity change from 0 to 1024 [ 177.766332][T12195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.816720][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.194927][T12211] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 178.435363][T12229] ALSA: seq fatal error: cannot create timer (-19) [ 178.551495][T12237] loop2: detected capacity change from 0 to 1024 [ 178.598278][T12237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.665114][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.712141][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 178.712158][ T29] audit: type=1401 audit(1764373663.452:12027): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 178.772098][T12264] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 178.780383][T12264] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 178.819726][T12271] loop6: detected capacity change from 0 to 1024 [ 178.834452][T12271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.860826][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.913653][T12284] program syz.2.3144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.939223][T12284] can: request_module (can-proto-0) failed. [ 179.011981][ T29] audit: type=1401 audit(1764373663.752:12028): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 179.113428][ T8481] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.126266][ T29] audit: type=1326 audit(1764373663.872:12029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.150481][ T29] audit: type=1326 audit(1764373663.872:12030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.174226][ T29] audit: type=1326 audit(1764373663.872:12031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.195662][T12301] lo speed is unknown, defaulting to 1000 [ 179.197880][ T29] audit: type=1326 audit(1764373663.872:12032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.204729][T12301] lo speed is unknown, defaulting to 1000 [ 179.227404][ T29] audit: type=1326 audit(1764373663.872:12033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.256769][ T29] audit: type=1326 audit(1764373663.872:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.280924][ T29] audit: type=1326 audit(1764373663.872:12035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.304514][ T29] audit: type=1326 audit(1764373663.872:12036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12307 comm="syz.0.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 179.306852][T12301] chnl_net:caif_netlink_parms(): no params data found [ 179.357024][ T8481] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.378966][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.386250][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.393785][T12301] bridge_slave_0: entered allmulticast mode [ 179.400435][T12301] bridge_slave_0: entered promiscuous mode [ 179.409388][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.416667][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.424370][T12301] bridge_slave_1: entered allmulticast mode [ 179.430954][T12301] bridge_slave_1: entered promiscuous mode [ 179.438248][ T8481] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.461747][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.474741][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.498810][T12301] team0: Port device team_slave_0 added [ 179.505812][T12301] team0: Port device team_slave_1 added [ 179.512962][ T8481] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.545903][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.552938][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.579042][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.590906][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.591272][T12325] program syz.3.3158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.597992][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.633216][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.672081][T12301] hsr_slave_0: entered promiscuous mode [ 179.680060][T12325] can: request_module (can-proto-0) failed. [ 179.693496][T12301] hsr_slave_1: entered promiscuous mode [ 179.699530][T12301] debugfs: 'hsr0' already exists in 'hsr' [ 179.705337][T12301] Cannot create hsr debugfs directory [ 179.829502][ T8481] ip6gretap0 (unregistering): left promiscuous mode [ 179.852110][ T8481] erspan0 (unregistering): left promiscuous mode [ 179.951604][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3169'. [ 179.960735][T12351] netlink: 'syz.6.3169': attribute type 7 has an invalid length. [ 179.968595][T12351] netlink: 'syz.6.3169': attribute type 8 has an invalid length. [ 179.976364][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3169'. [ 180.005077][ T8481] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 180.015503][ T8481] bond0 (unregistering): Released all slaves [ 180.025222][ T8481] bond1 (unregistering): Released all slaves [ 180.036909][T12337] netlink: 'syz.1.3163': attribute type 12 has an invalid length. [ 180.073740][T12355] ALSA: seq fatal error: cannot create timer (-19) [ 180.101206][T12353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.137178][ T8481] tipc: Disabling bearer [ 180.147072][ T8481] tipc: Disabling bearer [ 180.152625][ T8481] tipc: Left network mode [ 180.205527][ T8481] hsr_slave_0: left promiscuous mode [ 180.217760][ T8481] hsr_slave_1: left promiscuous mode [ 180.230088][ T8481] vlan0: left allmulticast mode [ 180.235034][ T8481] veth0_vlan: left allmulticast mode [ 180.240352][ T8481] vlan0: left promiscuous mode [ 180.252039][ T8481] veth1_macvtap: left promiscuous mode [ 180.255108][T12372] loop3: detected capacity change from 0 to 1024 [ 180.266005][ T8481] veth0_macvtap: left promiscuous mode [ 180.271695][ T8481] veth1_vlan: left promiscuous mode [ 180.280878][ T8481] veth0_vlan: left promiscuous mode [ 180.308652][T12372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.335461][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.404620][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3183'. [ 180.413778][T12390] netlink: 'syz.6.3183': attribute type 7 has an invalid length. [ 180.421524][T12390] netlink: 'syz.6.3183': attribute type 8 has an invalid length. [ 180.429446][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3183'. [ 180.494095][ T3394] lo speed is unknown, defaulting to 1000 [ 180.500183][ T3394] syz0: Port: 1 Link DOWN [ 180.524549][T12395] ALSA: seq fatal error: cannot create timer (-19) [ 180.618119][T12400] bridge_slave_0: left allmulticast mode [ 180.623930][T12400] bridge_slave_0: left promiscuous mode [ 180.629612][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.660380][T12400] bridge_slave_1: left allmulticast mode [ 180.666202][T12400] bridge_slave_1: left promiscuous mode [ 180.671938][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.682348][T12400] bond0: (slave bond_slave_0): Releasing backup interface [ 180.693506][T12400] bond0: (slave bond_slave_1): Releasing backup interface [ 180.721796][T12400] team0: Port device team_slave_0 removed [ 180.731703][T12400] team0: Port device team_slave_1 removed [ 180.738793][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.746530][T12400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.755557][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.763094][T12400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.773139][T12400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 180.864548][T12301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.904723][T12301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.931150][T12301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.954238][ T8481] IPVS: stop unused estimator thread 0... [ 180.960372][T12301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 181.072160][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.089391][T12301] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.105679][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.112916][ T8479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.134236][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.141884][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.176514][T12301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.186996][T12301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.324835][T12301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.376192][T12461] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3210'. [ 181.385396][T12461] netlink: 'syz.6.3210': attribute type 7 has an invalid length. [ 181.393307][T12461] netlink: 'syz.6.3210': attribute type 8 has an invalid length. [ 181.401042][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3210'. [ 181.462969][T12301] veth0_vlan: entered promiscuous mode [ 181.471015][T12301] veth1_vlan: entered promiscuous mode [ 181.500314][T12301] veth0_macvtap: entered promiscuous mode [ 181.522010][T12301] veth1_macvtap: entered promiscuous mode [ 181.534608][T12301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.546408][T12301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.559685][ T8481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.574365][ T8449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.583627][ T8449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.593254][ T8449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.647383][T12483] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 181.655802][T12483] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 181.811987][T12488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.124811][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3230'. [ 182.133859][T12516] netlink: 'syz.6.3230': attribute type 7 has an invalid length. [ 182.141595][T12516] netlink: 'syz.6.3230': attribute type 8 has an invalid length. [ 182.149397][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3230'. [ 182.414069][T12532] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 182.422504][T12532] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 182.549632][T12549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3245'. [ 182.559481][T12549] program syz.1.3245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.603348][T12549] can: request_module (can-proto-0) failed. [ 182.705980][T12562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.732422][T12566] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 182.740641][T12566] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 182.803406][T12573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3255'. [ 182.812442][T12573] netlink: 'syz.1.3255': attribute type 7 has an invalid length. [ 182.820248][T12573] netlink: 'syz.1.3255': attribute type 8 has an invalid length. [ 182.883518][T12585] program syz.3.3259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.913369][T12585] can: request_module (can-proto-0) failed. [ 183.060779][T12608] ALSA: seq fatal error: cannot create timer (-19) [ 183.170971][T12619] netlink: 'syz.2.3272': attribute type 7 has an invalid length. [ 183.178879][T12619] netlink: 'syz.2.3272': attribute type 8 has an invalid length. [ 183.235830][T12623] program syz.6.3274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.267018][T12623] can: request_module (can-proto-0) failed. [ 183.486482][T12648] netlink: 'syz.1.3284': attribute type 7 has an invalid length. [ 183.494309][T12648] netlink: 'syz.1.3284': attribute type 8 has an invalid length. [ 183.550527][T12660] loop2: detected capacity change from 0 to 1024 [ 183.567199][T12660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.603410][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.694938][T12676] ALSA: seq fatal error: cannot create timer (-19) [ 183.784155][T12690] loop2: detected capacity change from 0 to 1024 [ 183.794557][T12690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.832103][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 183.832129][ T29] audit: type=1400 audit(1764373668.572:12287): avc: denied { write } for pid=12695 comm="syz.0.3304" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.864698][ T29] audit: type=1400 audit(1764373668.612:12288): avc: denied { ioctl } for pid=12695 comm="syz.0.3304" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.865066][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.213907][ T29] audit: type=1326 audit(1764373668.962:12289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.237936][ T29] audit: type=1326 audit(1764373668.962:12290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.261611][ T29] audit: type=1326 audit(1764373668.962:12291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.285293][ T29] audit: type=1326 audit(1764373668.962:12292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.308984][ T29] audit: type=1326 audit(1764373668.962:12293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.332594][ T29] audit: type=1326 audit(1764373668.962:12294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.356255][ T29] audit: type=1326 audit(1764373668.962:12295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.380048][ T29] audit: type=1326 audit(1764373668.962:12296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.2.3313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc991a2f749 code=0x7ffc0000 [ 184.496584][T12726] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 184.505041][T12726] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 184.869223][T12785] ALSA: seq fatal error: cannot create timer (-19) [ 184.996695][T12804] __nla_validate_parse: 11 callbacks suppressed [ 184.996744][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3352'. [ 185.012241][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3352'. [ 185.074816][T12810] ALSA: seq fatal error: cannot create timer (-19) [ 185.205815][T12829] loop3: detected capacity change from 0 to 1024 [ 185.231702][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3367'. [ 185.242885][T12829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.273846][T12835] program syz.6.3367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.292326][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.323598][T12846] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3372'. [ 185.337323][T12835] can: request_module (can-proto-0) failed. [ 185.345900][T12846] program syz.0.3372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.361931][T12849] bond1: entered promiscuous mode [ 185.367076][T12849] bond1: entered allmulticast mode [ 185.370223][T12846] can: request_module (can-proto-0) failed. [ 185.372574][T12849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.405919][T12849] bond1 (unregistering): Released all slaves [ 185.494189][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3379'. [ 185.503304][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 185.528414][T12872] loop6: detected capacity change from 0 to 1024 [ 185.560113][T12872] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.586801][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.648282][T12886] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 185.656631][T12886] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 185.686842][T12890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3389'. [ 185.697618][T12890] program syz.3.3389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.725646][T12890] can: request_module (can-proto-0) failed. [ 185.810581][T12911] loop3: detected capacity change from 0 to 1024 [ 185.829506][T12911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.883249][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.948322][T12925] ALSA: seq fatal error: cannot create timer (-19) [ 185.985668][T12929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3407'. [ 185.996155][T12929] program syz.1.3407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.020388][T12929] can: request_module (can-proto-0) failed. [ 186.145523][T12947] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3415'. [ 186.156687][T12947] program syz.1.3415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.183255][T12947] can: request_module (can-proto-0) failed. [ 186.252128][T12956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.324954][T12961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3421'. [ 186.340006][T12961] program syz.2.3421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.392343][T12961] can: request_module (can-proto-0) failed. [ 186.411307][T12966] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 186.419634][T12966] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 186.511144][T12983] validate_nla: 14 callbacks suppressed [ 186.511179][T12983] netlink: 'syz.6.3431': attribute type 12 has an invalid length. [ 186.618033][T12994] can: request_module (can-proto-0) failed. [ 186.662189][T13002] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 186.670535][T13002] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 186.899681][T13019] netlink: 'syz.3.3446': attribute type 12 has an invalid length. [ 186.977910][T13032] loop2: detected capacity change from 0 to 1024 [ 187.020532][T13032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.116856][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.217271][T13058] netlink: 'syz.3.3464': attribute type 12 has an invalid length. [ 187.256406][T13067] ALSA: seq fatal error: cannot create timer (-19) [ 187.389432][T13077] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 187.397791][T13077] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 187.746733][T13110] program syz.3.3488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.770591][T13110] can_create: 1 callbacks suppressed [ 187.770606][T13110] can: request_module (can-proto-0) failed. [ 187.898355][T13128] loop3: detected capacity change from 0 to 1024 [ 187.914351][T13128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.942827][T11665] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.087078][T13152] loop2: detected capacity change from 0 to 1024 [ 188.104115][T13152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.129963][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.299132][T13176] loop6: detected capacity change from 0 to 1024 [ 188.340377][T13176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.371465][T13182] lo speed is unknown, defaulting to 1000 [ 188.373577][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.428726][T13187] program syz.6.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.454978][T13187] can: request_module (can-proto-0) failed. [ 188.550559][T13194] netlink: 'syz.6.3523': attribute type 12 has an invalid length. [ 188.815093][T13220] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 188.823378][T13220] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 188.878332][T13225] netlink: 'syz.3.3537': attribute type 12 has an invalid length. [ 188.958104][T13231] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.980038][T13231] netlink: 'syz.6.3540': attribute type 10 has an invalid length. [ 189.085766][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 189.085783][ T29] audit: type=1401 audit(1764373673.832:12379): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 189.130969][T13249] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 189.139250][T13249] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 189.294692][T13271] program syz.1.3558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.321300][T13271] can: request_module (can-proto-0) failed. [ 189.352052][T13270] bridge_slave_0: left allmulticast mode [ 189.357788][T13270] bridge_slave_0: left promiscuous mode [ 189.363575][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.375673][T13270] bridge_slave_1: left allmulticast mode [ 189.381399][T13270] bridge_slave_1: left promiscuous mode [ 189.387233][T13270] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.403024][T13270] bond0: (slave bond_slave_0): Releasing backup interface [ 189.403027][T13278] netlink: 'syz.2.3556': attribute type 10 has an invalid length. [ 189.421380][T13270] bond0: (slave bond_slave_1): Releasing backup interface [ 189.435191][T13270] team0: Port device team_slave_0 removed [ 189.445143][T13270] team0: Port device team_slave_1 removed [ 189.455015][T13270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.462601][T13270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.471593][T13270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.479059][T13270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.489642][T13270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.506738][T13276] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 189.515002][T13276] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 189.555475][T13278] batman_adv: batadv0: Adding interface: veth1_vlan [ 189.562167][T13278] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.627649][T13290] netlink: 'syz.0.3566': attribute type 7 has an invalid length. [ 189.635572][T13290] netlink: 'syz.0.3566': attribute type 8 has an invalid length. [ 189.638526][T13278] batman_adv: batadv0: Interface activated: veth1_vlan [ 189.771758][T13300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.799325][T13300] netlink: 'syz.6.3571': attribute type 10 has an invalid length. [ 189.914564][T13315] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 189.939137][T13315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13315 comm=syz.3.3578 [ 189.951768][T13315] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13315 comm=syz.3.3578 [ 189.986852][T13321] program syz.3.3580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.039225][T13321] can: request_module (can-proto-0) failed. [ 190.180415][T13331] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.201880][T13331] __nla_validate_parse: 14 callbacks suppressed [ 190.201899][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3584'. [ 190.269207][T13335] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 190.277552][T13335] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 190.411236][T13347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3592'. [ 190.420383][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 190.929520][T13361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.945817][T13363] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 190.954087][T13363] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 190.970669][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3598'. [ 190.981050][T13361] batman_adv: batadv0: Adding interface: veth1_vlan [ 190.987738][T13361] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.014832][T13361] batman_adv: batadv0: Interface activated: veth1_vlan [ 191.029685][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3603'. [ 191.039869][T13370] program syz.2.3603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.064065][T13370] can: request_module (can-proto-0) failed. [ 191.111057][T13377] ALSA: seq fatal error: cannot create timer (-19) [ 191.293397][ T29] audit: type=1401 audit(1764373676.042:12380): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 191.354587][T13401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3615'. [ 191.374372][ T29] audit: type=1400 audit(1764373676.122:12381): avc: denied { getopt } for pid=13399 comm="syz.1.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 191.394206][T13401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3615'. [ 191.403735][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 191.415796][T13401] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 191.467110][T13401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13401 comm=syz.2.3615 [ 191.479742][T13401] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13401 comm=syz.2.3615 [ 191.549251][T13417] ALSA: seq fatal error: cannot create timer (-19) [ 191.583201][T13424] bond1: option min_links: invalid value (18446744073709551608) [ 191.590943][T13424] bond1: option min_links: allowed values 0 - 2147483647 [ 191.601919][T13424] bond1 (unregistering): Released all slaves [ 191.611731][T13428] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 191.620068][T13428] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 191.670735][T13432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3630'. [ 191.680639][T13432] program syz.1.3630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.714175][T13432] can: request_module (can-proto-0) failed. [ 191.837881][T13454] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3638'. [ 191.853154][T13454] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 191.904010][T13454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13454 comm=syz.0.3638 [ 191.916733][T13454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13454 comm=syz.0.3638 [ 192.007898][T13465] program syz.0.3644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.027543][T13458] validate_nla: 4 callbacks suppressed [ 192.027587][T13458] netlink: 'syz.1.3642': attribute type 12 has an invalid length. [ 192.063423][T13465] can: request_module (can-proto-0) failed. [ 192.256535][T13489] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 192.264821][T13489] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 192.285589][T13490] netlink: 'syz.2.3653': attribute type 7 has an invalid length. [ 192.293471][T13490] netlink: 'syz.2.3653': attribute type 8 has an invalid length. [ 192.306813][T13490] syz_tun: entered promiscuous mode [ 192.313531][T13490] syz_tun: left promiscuous mode [ 192.313945][T13494] loop6: detected capacity change from 0 to 1024 [ 192.334132][T13494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.359628][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.389426][ T29] audit: type=1401 audit(1764373677.132:12382): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 192.525810][T13523] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 192.534143][T13523] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 192.611439][T13531] netlink: 'syz.6.3673': attribute type 7 has an invalid length. [ 192.619594][T13531] netlink: 'syz.6.3673': attribute type 8 has an invalid length. [ 192.639170][T13531] syz_tun: entered promiscuous mode [ 192.645973][T13531] syz_tun: left promiscuous mode [ 192.721782][T13536] loop6: detected capacity change from 0 to 2048 [ 192.808806][T13536] hub 6-0:1.0: USB hub found [ 192.814013][T13536] hub 6-0:1.0: 8 ports detected [ 192.861632][ T29] audit: type=1401 audit(1764373677.602:12383): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 193.055789][T13548] netlink: 'syz.1.3681': attribute type 6 has an invalid length. [ 193.079470][ T29] audit: type=1326 audit(1764373677.822:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 193.103708][ T29] audit: type=1326 audit(1764373677.822:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 193.127513][ T29] audit: type=1326 audit(1764373677.822:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 193.151273][ T29] audit: type=1326 audit(1764373677.822:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 193.174887][ T29] audit: type=1326 audit(1764373677.822:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.1.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 193.298429][T13556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.320375][T13556] netlink: 'syz.0.3684': attribute type 10 has an invalid length. [ 193.419143][T13571] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 193.427448][T13571] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 193.488122][T13576] ip6gretap0: entered promiscuous mode [ 193.494773][T13576] syz_tun: entered promiscuous mode [ 193.531160][T13581] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:21 [ 193.539125][T13583] FAULT_INJECTION: forcing a failure. [ 193.539125][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 193.551818][T13583] CPU: 0 UID: 0 PID: 13583 Comm: syz.1.3696 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.551913][T13583] Tainted: [W]=WARN [ 193.551922][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.551937][T13583] Call Trace: [ 193.551945][T13583] [ 193.551954][T13583] __dump_stack+0x1d/0x30 [ 193.551988][T13583] dump_stack_lvl+0xe8/0x140 [ 193.552060][T13583] dump_stack+0x15/0x1b [ 193.552081][T13583] should_fail_ex+0x265/0x280 [ 193.552105][T13583] should_failslab+0x8c/0xb0 [ 193.552139][T13583] __kmalloc_noprof+0xa5/0x570 [ 193.552209][T13583] ? io_cache_alloc_new+0x2a/0xb0 [ 193.552246][T13583] io_cache_alloc_new+0x2a/0xb0 [ 193.552275][T13583] __io_prep_rw+0xcf/0x6d0 [ 193.552343][T13583] io_prep_rwv+0x33/0x250 [ 193.552384][T13583] io_prep_writev+0x22/0x30 [ 193.552419][T13583] io_submit_sqes+0x5ef/0x1060 [ 193.552547][T13583] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 193.552587][T13583] ? 0xffffffff81000000 [ 193.552608][T13583] ? __rcu_read_unlock+0x4f/0x70 [ 193.552642][T13583] ? get_pid_task+0x96/0xd0 [ 193.552809][T13583] ? proc_fail_nth_write+0x13b/0x160 [ 193.552848][T13583] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.552952][T13583] ? vfs_write+0x7e8/0x960 [ 193.552976][T13583] ? __rcu_read_unlock+0x4f/0x70 [ 193.553005][T13583] ? __fget_files+0x184/0x1c0 [ 193.553041][T13583] ? fput+0x8f/0xc0 [ 193.553074][T13583] __x64_sys_io_uring_enter+0x78/0x90 [ 193.553108][T13583] x64_sys_call+0x2df0/0x3000 [ 193.553130][T13583] do_syscall_64+0xd2/0x200 [ 193.553152][T13583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 193.553188][T13583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 193.553231][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.553261][T13583] RIP: 0033:0x7fd7d89cf749 [ 193.553279][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.553326][T13583] RSP: 002b:00007fd7d7437038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 193.553349][T13583] RAX: ffffffffffffffda RBX: 00007fd7d8c25fa0 RCX: 00007fd7d89cf749 [ 193.553363][T13583] RDX: 000000000000096a RSI: 000000000000349b RDI: 0000000000000007 [ 193.553378][T13583] RBP: 00007fd7d7437090 R08: 0000000000000000 R09: 0000000000000000 [ 193.553390][T13583] R10: ffff000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.553464][T13583] R13: 00007fd7d8c26038 R14: 00007fd7d8c25fa0 R15: 00007ffc39938558 [ 193.553482][T13583] [ 193.860358][T13593] loop2: detected capacity change from 0 to 2048 [ 193.870283][T13589] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.890161][T13597] program syz.1.3702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.893685][T13598] netlink: 'syz.6.3699': attribute type 10 has an invalid length. [ 193.917212][T13597] can: request_module (can-proto-0) failed. [ 193.950451][T13601] loop2: detected capacity change from 0 to 2048 [ 194.025247][T13601] hub 6-0:1.0: USB hub found [ 194.029981][T13601] hub 6-0:1.0: 8 ports detected [ 194.313595][T13628] program syz.3.3715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.339234][T13628] can: request_module (can-proto-0) failed. [ 194.352495][T13630] bond1: entered promiscuous mode [ 194.357623][T13630] bond1: entered allmulticast mode [ 194.372833][T13630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.373897][T13633] netlink: 'syz.3.3717': attribute type 7 has an invalid length. [ 194.387288][T13633] netlink: 'syz.3.3717': attribute type 8 has an invalid length. [ 194.398201][T13630] bond1 (unregistering): Released all slaves [ 194.411149][T13633] ip6gretap0: entered promiscuous mode [ 194.417816][T13633] syz_tun: entered promiscuous mode [ 194.423593][T13633] erspan0: entered promiscuous mode [ 194.429227][T13633] debugfs: 'hsr1' already exists in 'hsr' [ 194.435233][T13633] Cannot create hsr debugfs directory [ 194.451075][T13637] ALSA: seq fatal error: cannot create timer (-19) [ 194.664450][T13653] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 194.672823][T13653] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 194.837697][T13660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.864542][T13663] batman_adv: batadv0: Adding interface: veth1_vlan [ 194.871214][T13663] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.902988][T13663] batman_adv: batadv0: Interface activated: veth1_vlan [ 195.129668][T13694] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 195.138078][T13694] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 195.199534][T13692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.217659][T13705] __nla_validate_parse: 23 callbacks suppressed [ 195.217676][T13705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3744'. [ 195.399114][T13723] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3756'. [ 195.412134][T13723] vlan2: entered allmulticast mode [ 195.417400][T13723] gretap0: entered allmulticast mode [ 195.428821][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 195.428835][ T29] audit: type=1400 audit(1764373680.172:12418): avc: denied { write } for pid=13722 comm="syz.6.3756" name="file0" dev="tmpfs" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.457656][ T29] audit: type=1400 audit(1764373680.172:12419): avc: denied { open } for pid=13722 comm="syz.6.3756" path="/387/file0" dev="tmpfs" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 195.485343][ T29] audit: type=1326 audit(1764373680.232:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.509057][ T29] audit: type=1326 audit(1764373680.232:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.532928][ T29] audit: type=1326 audit(1764373680.232:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.556528][ T29] audit: type=1326 audit(1764373680.232:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.580381][ T29] audit: type=1326 audit(1764373680.232:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.604051][ T29] audit: type=1326 audit(1764373680.232:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.627882][ T29] audit: type=1326 audit(1764373680.232:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.651733][ T29] audit: type=1326 audit(1764373680.232:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.6.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2647daf749 code=0x7ffc0000 [ 195.858654][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3763'. [ 195.948985][T13758] ALSA: seq fatal error: cannot create timer (-19) [ 196.047401][T13766] block device autoloading is deprecated and will be removed. [ 196.067911][T13765] loop3: detected capacity change from 0 to 2048 [ 196.124390][T13765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.142392][T13765] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 196.157545][T13765] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 196.169960][T13765] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.169960][T13765] [ 196.179659][T13765] EXT4-fs (loop3): Total free blocks count 0 [ 196.185817][T13765] EXT4-fs (loop3): Free/Dirty block details [ 196.191766][T13765] EXT4-fs (loop3): free_blocks=66060288 [ 196.197364][T13765] EXT4-fs (loop3): dirty_blocks=48 [ 196.202960][T13765] EXT4-fs (loop3): Block reservation details [ 196.208975][T13765] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 196.231755][ T8479] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 196.392481][T13795] ALSA: seq fatal error: cannot create timer (-19) [ 197.011908][T13821] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3794'. [ 197.023181][T13821] program syz.6.3794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.045184][T13821] can: request_module (can-proto-0) failed. [ 197.067131][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3795'. [ 197.177172][T13829] validate_nla: 5 callbacks suppressed [ 197.177223][T13829] netlink: 'syz.6.3797': attribute type 12 has an invalid length. [ 197.192057][T13831] lo speed is unknown, defaulting to 1000 [ 197.249343][T13838] ALSA: seq fatal error: cannot create timer (-19) [ 197.395355][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3806'. [ 197.404489][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'. [ 197.481041][T13863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3812'. [ 197.490225][T13863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3812'. [ 197.507448][T13857] netlink: 'syz.6.3810': attribute type 12 has an invalid length. [ 197.691114][T13874] loop2: detected capacity change from 0 to 1024 [ 197.701139][T13874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.727543][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.981330][T13894] netlink: 'syz.0.3824': attribute type 12 has an invalid length. [ 198.550634][T13926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3838'. [ 198.585951][T13924] lo speed is unknown, defaulting to 1000 [ 198.619632][T13924] loop6: detected capacity change from 0 to 512 [ 198.638006][T13924] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 198.649769][T13924] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 198.660051][T13924] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3835: Corrupt directory, running e2fsck is recommended [ 198.673060][T13924] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 198.681379][T13924] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.3835: corrupted in-inode xattr: invalid ea_ino [ 198.695267][T13924] EXT4-fs (loop6): Remounting filesystem read-only [ 198.702321][T13924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.837632][T13941] netlink: 'syz.2.3844': attribute type 12 has an invalid length. [ 199.313577][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.327299][T13955] ip6gretap0: entered promiscuous mode [ 199.335253][T13955] syz_tun: entered promiscuous mode [ 199.341329][T13955] debugfs: 'hsr1' already exists in 'hsr' [ 199.347253][T13955] Cannot create hsr debugfs directory [ 199.355526][T13957] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 199.363768][T13957] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 199.450587][T13965] ALSA: seq fatal error: cannot create timer (-19) [ 199.536404][T13972] lo speed is unknown, defaulting to 1000 [ 199.614583][T13980] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 199.622963][T13980] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 199.682133][T13982] netlink: 'syz.0.3862': attribute type 12 has an invalid length. [ 199.717824][T13988] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 199.726069][T13988] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 199.857770][T14000] lo speed is unknown, defaulting to 1000 [ 199.910477][T14005] ALSA: seq fatal error: cannot create timer (-19) [ 199.961064][T14011] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 199.969352][T14011] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 200.319945][T14035] netlink: 'syz.3.3886': attribute type 21 has an invalid length. [ 200.328397][T14035] __nla_validate_parse: 7 callbacks suppressed [ 200.328417][T14035] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3886'. [ 200.348947][T14037] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 200.366429][T14037] netlink: 'syz.1.3885': attribute type 10 has an invalid length. [ 200.374446][T14037] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3885'. [ 200.587441][T14051] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.604657][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 200.604673][ T29] audit: type=1326 audit(1764373685.352:12731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.653723][ T29] audit: type=1326 audit(1764373685.382:12732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.677394][ T29] audit: type=1326 audit(1764373685.382:12733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.701295][ T29] audit: type=1326 audit(1764373685.382:12734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.724985][ T29] audit: type=1326 audit(1764373685.382:12735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.748761][ T29] audit: type=1326 audit(1764373685.382:12736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.772476][ T29] audit: type=1326 audit(1764373685.382:12737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.796309][ T29] audit: type=1326 audit(1764373685.382:12738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.819995][ T29] audit: type=1326 audit(1764373685.382:12739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.843859][ T29] audit: type=1326 audit(1764373685.382:12740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14050 comm="syz.1.3892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d89cf749 code=0x7ffc0000 [ 200.905526][T14061] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 200.913563][T14053] netlink: 'syz.3.3893': attribute type 12 has an invalid length. [ 200.929120][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3897'. [ 200.939139][T14063] program syz.1.3897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.963129][T14063] can: request_module (can-proto-0) failed. [ 200.986073][T14066] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 201.019415][T14066] netlink: 'syz.3.3898': attribute type 10 has an invalid length. [ 201.027340][T14066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3898'. [ 201.047473][T14066] batman_adv: batadv0: Adding interface: veth1_vlan [ 201.048899][T14072] FAULT_INJECTION: forcing a failure. [ 201.048899][T14072] name failslab, interval 1, probability 0, space 0, times 0 [ 201.054160][T14066] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.066999][T14072] CPU: 0 UID: 0 PID: 14072 Comm: syz.1.3901 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.067091][T14072] Tainted: [W]=WARN [ 201.067099][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.067118][T14072] Call Trace: [ 201.067128][T14072] [ 201.067138][T14072] __dump_stack+0x1d/0x30 [ 201.067170][T14072] dump_stack_lvl+0xe8/0x140 [ 201.067198][T14072] dump_stack+0x15/0x1b [ 201.067225][T14072] should_fail_ex+0x265/0x280 [ 201.067322][T14072] should_failslab+0x8c/0xb0 [ 201.067431][T14072] kmem_cache_alloc_noprof+0x50/0x480 [ 201.067469][T14072] ? audit_log_start+0x342/0x720 [ 201.067518][T14072] audit_log_start+0x342/0x720 [ 201.067630][T14072] audit_seccomp+0x48/0x100 [ 201.067673][T14072] ? __seccomp_filter+0x82d/0x1250 [ 201.067711][T14072] __seccomp_filter+0x83e/0x1250 [ 201.067837][T14072] __secure_computing+0x82/0x150 [ 201.067874][T14072] syscall_trace_enter+0xcf/0x1e0 [ 201.068016][T14072] do_syscall_64+0xac/0x200 [ 201.068046][T14072] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.068091][T14072] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 201.068138][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.068167][T14072] RIP: 0033:0x7fd7d89ce15c [ 201.068243][T14072] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.068268][T14072] RSP: 002b:00007fd7d7437030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.068294][T14072] RAX: ffffffffffffffda RBX: 00007fd7d8c25fa0 RCX: 00007fd7d89ce15c [ 201.068311][T14072] RDX: 000000000000000f RSI: 00007fd7d74370a0 RDI: 0000000000000004 [ 201.068380][T14072] RBP: 00007fd7d7437090 R08: 0000000000000000 R09: 0000000000000000 [ 201.068397][T14072] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000002 [ 201.068414][T14072] R13: 00007fd7d8c26038 R14: 00007fd7d8c25fa0 R15: 00007ffc39938558 [ 201.068439][T14072] [ 201.126125][T14070] loop2: detected capacity change from 0 to 512 [ 201.162471][T14066] batman_adv: batadv0: Interface activated: veth1_vlan [ 201.175047][T14070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.309967][T14070] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.326638][T14080] SELinux: Context system_u:object is not valid (left unmapped). [ 201.354922][T14080] program syz.6.3905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.392517][T14070] EXT4-fs (loop2): 1 truncate cleaned up [ 201.400991][T14070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.411749][T14087] lo speed is unknown, defaulting to 1000 [ 201.523996][T14093] netlink: 'syz.3.3908': attribute type 12 has an invalid length. [ 201.557471][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3909'. [ 201.566752][T14098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3909'. [ 201.591619][T14101] FAULT_INJECTION: forcing a failure. [ 201.591619][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.604941][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.3.3911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.605053][T14101] Tainted: [W]=WARN [ 201.605061][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.605075][T14101] Call Trace: [ 201.605083][T14101] [ 201.605091][T14101] __dump_stack+0x1d/0x30 [ 201.605116][T14101] dump_stack_lvl+0xe8/0x140 [ 201.605139][T14101] dump_stack+0x15/0x1b [ 201.605159][T14101] should_fail_ex+0x265/0x280 [ 201.605181][T14101] should_fail+0xb/0x20 [ 201.605200][T14101] should_fail_usercopy+0x1a/0x20 [ 201.605295][T14101] _copy_from_iter+0xd2/0xe80 [ 201.605321][T14101] ? __build_skb_around+0x1ab/0x200 [ 201.605356][T14101] ? __alloc_skb+0x223/0x320 [ 201.605392][T14101] netlink_sendmsg+0x471/0x6b0 [ 201.605431][T14101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.605521][T14101] __sock_sendmsg+0x145/0x180 [ 201.605547][T14101] ____sys_sendmsg+0x31e/0x4e0 [ 201.605571][T14101] ___sys_sendmsg+0x17b/0x1d0 [ 201.605678][T14101] __x64_sys_sendmsg+0xd4/0x160 [ 201.605703][T14101] x64_sys_call+0x191e/0x3000 [ 201.605741][T14101] do_syscall_64+0xd2/0x200 [ 201.605763][T14101] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.605793][T14101] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 201.605916][T14101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.605941][T14101] RIP: 0033:0x7fbd11b3f749 [ 201.605958][T14101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.605979][T14101] RSP: 002b:00007fbd1059f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.606000][T14101] RAX: ffffffffffffffda RBX: 00007fbd11d95fa0 RCX: 00007fbd11b3f749 [ 201.606080][T14101] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 201.606095][T14101] RBP: 00007fbd1059f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.606109][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.606122][T14101] R13: 00007fbd11d96038 R14: 00007fbd11d95fa0 R15: 00007ffe9f646b48 [ 201.606216][T14101] [ 201.849642][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.878737][T14107] loop0: detected capacity change from 0 to 1024 [ 201.890223][T14110] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 201.898579][T14110] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 201.900922][T14107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.960499][T11000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.970647][T14117] loop2: detected capacity change from 0 to 1024 [ 201.995860][T14117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.021985][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.137529][T14132] ALSA: seq fatal error: cannot create timer (-19) [ 202.150191][T14135] loop2: detected capacity change from 0 to 512 [ 202.158542][T14135] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3925: inode #0: comm syz.2.3925: iget: illegal inode # [ 202.172772][T14135] EXT4-fs (loop2): get orphan inode failed [ 202.178810][T14135] EXT4-fs (loop2): mount failed [ 202.189862][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3925'. [ 202.198979][T14135] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 202.265630][T14146] netlink: 'syz.3.3928': attribute type 21 has an invalid length. [ 202.288556][T14148] FAULT_INJECTION: forcing a failure. [ 202.288556][T14148] name failslab, interval 1, probability 0, space 0, times 0 [ 202.301329][T14148] CPU: 1 UID: 0 PID: 14148 Comm: syz.6.3930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.301364][T14148] Tainted: [W]=WARN [ 202.301384][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.301397][T14148] Call Trace: [ 202.301403][T14148] [ 202.301410][T14148] __dump_stack+0x1d/0x30 [ 202.301435][T14148] dump_stack_lvl+0xe8/0x140 [ 202.301523][T14148] dump_stack+0x15/0x1b [ 202.301565][T14148] should_fail_ex+0x265/0x280 [ 202.301648][T14148] ? tcp_sendmsg_fastopen+0x172/0x520 [ 202.301721][T14148] should_failslab+0x8c/0xb0 [ 202.301751][T14148] __kmalloc_cache_noprof+0x4c/0x4a0 [ 202.301812][T14148] tcp_sendmsg_fastopen+0x172/0x520 [ 202.301862][T14148] mptcp_sendmsg_fastopen+0x122/0x320 [ 202.301917][T14148] mptcp_sendmsg+0xcf0/0xf50 [ 202.302020][T14148] ? avc_has_perm+0xf7/0x180 [ 202.302043][T14148] ? selinux_socket_sendmsg+0x175/0x1b0 [ 202.302070][T14148] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 202.302116][T14148] inet_sendmsg+0xc5/0xd0 [ 202.302145][T14148] __sock_sendmsg+0x102/0x180 [ 202.302197][T14148] ____sys_sendmsg+0x31e/0x4e0 [ 202.302220][T14148] ___sys_sendmsg+0x17b/0x1d0 [ 202.302253][T14148] __x64_sys_sendmsg+0xd4/0x160 [ 202.302277][T14148] x64_sys_call+0x191e/0x3000 [ 202.302299][T14148] do_syscall_64+0xd2/0x200 [ 202.302392][T14148] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.302421][T14148] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 202.302455][T14148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.302477][T14148] RIP: 0033:0x7f2647daf749 [ 202.302492][T14148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.302570][T14148] RSP: 002b:00007f2646817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.302589][T14148] RAX: ffffffffffffffda RBX: 00007f2648005fa0 RCX: 00007f2647daf749 [ 202.302601][T14148] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000007 [ 202.302613][T14148] RBP: 00007f2646817090 R08: 0000000000000000 R09: 0000000000000000 [ 202.302626][T14148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.302639][T14148] R13: 00007f2648006038 R14: 00007f2648005fa0 R15: 00007ffe2d6389b8 [ 202.302658][T14148] [ 202.555788][T14152] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3932'. [ 202.556669][T14150] loop2: detected capacity change from 0 to 1024 [ 202.565972][T14152] program syz.6.3932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.591818][T14150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.604668][T14152] can: request_module (can-proto-0) failed. [ 202.637314][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.686393][T14163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 202.702701][T14166] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 202.703439][T14161] netlink: 'syz.6.3936': attribute type 12 has an invalid length. [ 202.710940][T14166] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 202.741216][T14170] FAULT_INJECTION: forcing a failure. [ 202.741216][T14170] name failslab, interval 1, probability 0, space 0, times 0 [ 202.754058][T14170] CPU: 0 UID: 0 PID: 14170 Comm: syz.3.3939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.754144][T14170] Tainted: [W]=WARN [ 202.754208][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.754252][T14170] Call Trace: [ 202.754260][T14170] [ 202.754269][T14170] __dump_stack+0x1d/0x30 [ 202.754349][T14170] dump_stack_lvl+0xe8/0x140 [ 202.754416][T14170] dump_stack+0x15/0x1b [ 202.754438][T14170] should_fail_ex+0x265/0x280 [ 202.754463][T14170] should_failslab+0x8c/0xb0 [ 202.754500][T14170] kmem_cache_alloc_noprof+0x50/0x480 [ 202.754638][T14170] ? radix_tree_node_alloc+0x8a/0x1f0 [ 202.754742][T14170] radix_tree_node_alloc+0x8a/0x1f0 [ 202.754828][T14170] idr_get_free+0x1fa/0x550 [ 202.754872][T14170] idr_alloc_u32+0xca/0x180 [ 202.754902][T14170] tcf_idr_check_alloc+0x193/0x240 [ 202.754960][T14170] tcf_bpf_init+0x1a8/0x610 [ 202.755003][T14170] ? __nla_validate_parse+0x1652/0x1d00 [ 202.755062][T14170] tcf_action_init_1+0x36a/0x4a0 [ 202.755138][T14170] tcf_action_init+0x267/0x6d0 [ 202.755262][T14170] tc_ctl_action+0x291/0x830 [ 202.755324][T14170] ? __pfx_tc_ctl_action+0x10/0x10 [ 202.755357][T14170] rtnetlink_rcv_msg+0x65a/0x6d0 [ 202.755431][T14170] netlink_rcv_skb+0x123/0x220 [ 202.755474][T14170] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.755506][T14170] rtnetlink_rcv+0x1c/0x30 [ 202.755554][T14170] netlink_unicast+0x5c0/0x690 [ 202.755595][T14170] netlink_sendmsg+0x58b/0x6b0 [ 202.755623][T14170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.755647][T14170] __sock_sendmsg+0x145/0x180 [ 202.755731][T14170] ____sys_sendmsg+0x31e/0x4e0 [ 202.755760][T14170] ___sys_sendmsg+0x17b/0x1d0 [ 202.755799][T14170] __x64_sys_sendmsg+0xd4/0x160 [ 202.755826][T14170] x64_sys_call+0x191e/0x3000 [ 202.755855][T14170] do_syscall_64+0xd2/0x200 [ 202.755911][T14170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.755948][T14170] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 202.755992][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.756020][T14170] RIP: 0033:0x7fbd11b3f749 [ 202.756108][T14170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.756203][T14170] RSP: 002b:00007fbd1059f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.756227][T14170] RAX: ffffffffffffffda RBX: 00007fbd11d95fa0 RCX: 00007fbd11b3f749 [ 202.756367][T14170] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 202.756383][T14170] RBP: 00007fbd1059f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.756399][T14170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.756414][T14170] R13: 00007fbd11d96038 R14: 00007fbd11d95fa0 R15: 00007ffe9f646b48 [ 202.756435][T14170] [ 202.759558][T14172] loop0: detected capacity change from 0 to 128 [ 203.035734][T14172] loop0: detected capacity change from 0 to 128 [ 203.059024][T14172] tipc: Started in network mode [ 203.064027][T14172] tipc: Node identity 4, cluster identity 4711 [ 203.070362][T14172] tipc: Node number set to 4 [ 203.103162][T14187] loop2: detected capacity change from 0 to 1024 [ 203.125102][T14187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.143531][T14193] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 203.151752][T14193] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 203.186789][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.232217][T14198] netlink: 'syz.6.3951': attribute type 12 has an invalid length. [ 203.240675][T14202] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 203.249317][T14202] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 203.265006][T14203] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 203.291241][T14203] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 203.364039][T14205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.412017][T14213] ip6gretap0: entered promiscuous mode [ 203.419062][T14213] syz_tun: entered promiscuous mode [ 203.427063][T14213] debugfs: 'hsr1' already exists in 'hsr' [ 203.432931][T14213] Cannot create hsr debugfs directory [ 203.609599][T14220] Cannot find del_set index 0 as target [ 203.749120][T14233] lo speed is unknown, defaulting to 1000 [ 203.824840][T14184] syz.3.3945 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 203.835907][T14184] CPU: 1 UID: 0 PID: 14184 Comm: syz.3.3945 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.835942][T14184] Tainted: [W]=WARN [ 203.835948][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.835960][T14184] Call Trace: [ 203.835966][T14184] [ 203.835972][T14184] __dump_stack+0x1d/0x30 [ 203.835996][T14184] dump_stack_lvl+0xe8/0x140 [ 203.836053][T14184] dump_stack+0x15/0x1b [ 203.836069][T14184] dump_header+0x81/0x220 [ 203.836087][T14184] oom_kill_process+0x342/0x400 [ 203.836124][T14184] out_of_memory+0x979/0xb80 [ 203.836158][T14184] try_charge_memcg+0x610/0xa10 [ 203.836242][T14184] charge_memcg+0x51/0xc0 [ 203.836270][T14184] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 203.836299][T14184] __read_swap_cache_async+0x17b/0x2d0 [ 203.836323][T14184] swap_cluster_readahead+0x262/0x3c0 [ 203.836504][T14184] swapin_readahead+0xde/0x800 [ 203.836531][T14184] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 203.836705][T14184] ? css_rstat_updated+0xb7/0x240 [ 203.836749][T14184] ? __rcu_read_unlock+0x4f/0x70 [ 203.836779][T14184] ? __rcu_read_unlock+0x4f/0x70 [ 203.836810][T14184] ? swap_cache_get_folio+0x277/0x280 [ 203.836837][T14184] do_swap_page+0x2ae/0x2370 [ 203.836883][T14184] ? _raw_spin_unlock+0x26/0x50 [ 203.836912][T14184] ? finish_task_switch+0xad/0x2b0 [ 203.836951][T14184] ? __pfx_default_wake_function+0x10/0x10 [ 203.837059][T14184] handle_mm_fault+0x9a5/0x2be0 [ 203.837084][T14184] ? vma_start_read+0x141/0x1f0 [ 203.837122][T14184] do_user_addr_fault+0x630/0x1080 [ 203.837144][T14184] ? fpregs_restore_userregs+0xe2/0x1d0 [ 203.837208][T14184] ? switch_fpu_return+0xe/0x20 [ 203.837297][T14184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 203.837329][T14184] exc_page_fault+0x62/0xa0 [ 203.837364][T14184] asm_exc_page_fault+0x26/0x30 [ 203.837412][T14184] RIP: 0033:0x7fbd11b67570 [ 203.837431][T14184] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 203.837450][T14184] RSP: 002b:00007ffe9f646c38 EFLAGS: 00010246 [ 203.837465][T14184] RAX: 0000000000000000 RBX: 00007fbd11d95fa0 RCX: 00007fbd11b72005 [ 203.837505][T14184] RDX: 00007ffe9f646c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.837521][T14184] RBP: 00007fbd11d97da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 203.837536][T14184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000031c63 [ 203.837616][T14184] R13: 00007fbd11d96090 R14: ffffffffffffffff R15: 00007ffe9f646dc0 [ 203.837640][T14184] [ 203.837648][T14184] memory: usage 307200kB, limit 307200kB, failcnt 10278 [ 204.003476][T14250] loop0: detected capacity change from 0 to 4096 [ 204.006398][T14184] memory+swap: usage 243596kB, limit 9007199254740988kB, failcnt 0 [ 204.024072][T14250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.039875][T14184] kmem: usage 228464kB, limit 9007199254740988kB, failcnt 0 [ 204.130188][T14184] Memory cgroup stats for /syz3: [ 204.178752][T14184] cache 0 [ 204.186730][T14184] rss 0 [ 204.189513][T14184] shmem 0 [ 204.192545][T14184] mapped_file 0 [ 204.196029][T14184] dirty 0 [ 204.198984][T14184] writeback 4096 [ 204.208759][T14184] workingset_refault_anon 1540 [ 204.214987][T14184] workingset_refault_file 33 [ 204.219655][T14184] swap 98304 [ 204.223606][T14184] swapcached 28672 [ 204.227344][T14184] pgpgin 253963 [ 204.231166][T14184] pgpgout 253955 [ 204.234755][T14184] pgfault 224053 [ 204.238321][T14184] pgmajfault 203 [ 204.241882][T14184] inactive_anon 12288 [ 204.245907][T14184] active_anon 16384 [ 204.249723][T14184] inactive_file 4096 [ 204.253663][T14184] active_file 0 [ 204.257307][T14184] unevictable 0 [ 204.260794][T14184] hierarchical_memory_limit 314572800 [ 204.266227][T14184] hierarchical_memsw_limit 9223372036854771712 [ 204.272450][T14184] total_cache 0 [ 204.276069][T14184] total_rss 0 [ 204.279360][T14184] total_shmem 0 [ 204.282941][T14184] total_mapped_file 0 [ 204.286932][T14184] total_dirty 0 [ 204.290403][T14184] total_writeback 4096 [ 204.294543][T14184] total_workingset_refault_anon 1540 [ 204.299847][T14184] total_workingset_refault_file 33 [ 204.305011][T14184] total_swap 98304 [ 204.308738][T14184] total_swapcached 28672 [ 204.313077][T14184] total_pgpgin 253963 [ 204.317070][T14184] total_pgpgout 253955 [ 204.321154][T14184] total_pgfault 224053 [ 204.325321][T14184] total_pgmajfault 203 [ 204.329532][T14184] total_inactive_anon 12288 [ 204.330614][T14255] loop6: detected capacity change from 0 to 4096 [ 204.334088][T14184] total_active_anon 16384 [ 204.334099][T14184] total_inactive_file 4096 [ 204.346664][T14255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.349251][T14184] total_active_file 0 [ 204.349263][T14184] total_unevictable 0 [ 204.349273][T14184] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 204.363641][T14255] FAULT_INJECTION: forcing a failure. [ 204.363641][T14255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.365779][T14184] ,cpuset= [ 204.369756][T14255] CPU: 1 UID: 0 PID: 14255 Comm: syz.6.3972 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.369874][T14255] Tainted: [W]=WARN [ 204.369883][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.369908][T14255] Call Trace: [ 204.369918][T14255] [ 204.369931][T14255] __dump_stack+0x1d/0x30 [ 204.370000][T14255] dump_stack_lvl+0xe8/0x140 [ 204.370049][T14255] dump_stack+0x15/0x1b [ 204.370079][T14255] should_fail_ex+0x265/0x280 [ 204.370106][T14255] should_fail_alloc_page+0xf2/0x100 [ 204.370185][T14255] __alloc_frozen_pages_noprof+0xff/0x360 [ 204.370238][T14255] alloc_pages_mpol+0xb3/0x260 [ 204.370265][T14255] folio_alloc_noprof+0x97/0x150 [ 204.370311][T14255] filemap_alloc_folio_noprof+0x66/0x210 [ 204.370356][T14255] __filemap_get_folio+0x28f/0x650 [ 204.370433][T14255] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 204.370466][T14255] ext4_write_begin+0x2fe/0xeb0 [ 204.370515][T14255] ext4_da_write_begin+0x1fb/0x6e0 [ 204.370601][T14255] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 204.370664][T14255] generic_perform_write+0x184/0x490 [ 204.370700][T14255] ext4_buffered_write_iter+0x1ee/0x3c0 [ 204.370730][T14255] ? ext4_file_write_iter+0xfe/0xf60 [ 204.370815][T14255] ext4_file_write_iter+0x387/0xf60 [ 204.370843][T14255] ? kstrtouint_from_user+0x9f/0xf0 [ 204.370870][T14255] ? 0xffffffff81000000 [ 204.370900][T14255] ? __rcu_read_unlock+0x4f/0x70 [ 204.370974][T14255] ? __seccomp_filter+0x23a/0x1250 [ 204.371011][T14255] ? avc_policy_seqno+0x15/0x30 [ 204.371036][T14255] ? selinux_file_permission+0x1e4/0x320 [ 204.371083][T14255] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 204.371165][T14255] vfs_write+0x52a/0x960 [ 204.371274][T14255] __x64_sys_pwrite64+0xfd/0x150 [ 204.371315][T14255] x64_sys_call+0xc4d/0x3000 [ 204.371347][T14255] do_syscall_64+0xd2/0x200 [ 204.371376][T14255] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.371414][T14255] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.371585][T14255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.371616][T14255] RIP: 0033:0x7f2647daf749 [ 204.371636][T14255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.371661][T14255] RSP: 002b:00007f2646817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 204.371687][T14255] RAX: ffffffffffffffda RBX: 00007f2648005fa0 RCX: 00007f2647daf749 [ 204.371705][T14255] RDX: 00000000ffffff07 RSI: 0000200000000140 RDI: 0000000000000007 [ 204.371723][T14255] RBP: 00007f2646817090 R08: 0000000000000000 R09: 0000000000000000 [ 204.371814][T14255] R10: 0000000008000c61 R11: 0000000000000246 R12: 0000000000000001 [ 204.371832][T14255] R13: 00007f2648006038 R14: 00007f2648005fa0 R15: 00007ffe2d6389b8 [ 204.371863][T14255] [ 204.666570][T14184] /,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3945,pid=14184,uid=0 [ 204.676092][T14184] Memory cgroup out of memory: Killed process 14184 (syz.3.3945) total-vm:104208kB, anon-rss:1136kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 204.694441][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.704609][T14257] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 204.712963][T14257] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 204.735499][T14260] FAULT_INJECTION: forcing a failure. [ 204.735499][T14260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.748811][T14260] CPU: 0 UID: 0 PID: 14260 Comm: syz.6.3976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.748851][T14260] Tainted: [W]=WARN [ 204.748860][T14260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.748922][T14260] Call Trace: [ 204.748931][T14260] [ 204.748942][T14260] __dump_stack+0x1d/0x30 [ 204.748971][T14260] dump_stack_lvl+0xe8/0x140 [ 204.748993][T14260] dump_stack+0x15/0x1b [ 204.749010][T14260] should_fail_ex+0x265/0x280 [ 204.749029][T14260] should_fail_alloc_page+0xf2/0x100 [ 204.749131][T14260] __alloc_frozen_pages_noprof+0xff/0x360 [ 204.749178][T14260] alloc_pages_bulk_noprof+0x4a6/0x530 [ 204.749217][T14260] ? __kmalloc_noprof+0x2a2/0x570 [ 204.749326][T14260] ? copy_splice_read+0xc2/0x660 [ 204.749362][T14260] copy_splice_read+0xf3/0x660 [ 204.749438][T14260] ? __pfx_copy_splice_read+0x10/0x10 [ 204.749460][T14260] splice_direct_to_actor+0x26f/0x680 [ 204.749489][T14260] ? __pfx_direct_splice_actor+0x10/0x10 [ 204.749526][T14260] do_splice_direct+0xda/0x150 [ 204.749559][T14260] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 204.749591][T14260] do_sendfile+0x380/0x650 [ 204.749685][T14260] __x64_sys_sendfile64+0x105/0x150 [ 204.749727][T14260] x64_sys_call+0x2bb4/0x3000 [ 204.749753][T14260] do_syscall_64+0xd2/0x200 [ 204.749774][T14260] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.749850][T14260] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.749929][T14260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.749951][T14260] RIP: 0033:0x7f2647daf749 [ 204.749969][T14260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.749992][T14260] RSP: 002b:00007f2646817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 204.750014][T14260] RAX: ffffffffffffffda RBX: 00007f2648005fa0 RCX: 00007f2647daf749 [ 204.750030][T14260] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 204.750057][T14260] RBP: 00007f2646817090 R08: 0000000000000000 R09: 0000000000000000 [ 204.750073][T14260] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 204.750089][T14260] R13: 00007f2648006038 R14: 00007f2648005fa0 R15: 00007ffe2d6389b8 [ 204.750111][T14260] [ 205.018883][T11000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.111910][T14274] lo speed is unknown, defaulting to 1000 [ 205.123245][T14280] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 205.131603][T14280] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 205.165363][T14278] ALSA: seq fatal error: cannot create timer (-19) [ 205.178904][T14285] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 205.208940][T14285] netlink: 'syz.2.3987': attribute type 10 has an invalid length. [ 205.280517][T14292] FAULT_INJECTION: forcing a failure. [ 205.280517][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.293724][T14292] CPU: 1 UID: 0 PID: 14292 Comm: syz.6.3989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.293757][T14292] Tainted: [W]=WARN [ 205.293842][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.293858][T14292] Call Trace: [ 205.293866][T14292] [ 205.293898][T14292] __dump_stack+0x1d/0x30 [ 205.293925][T14292] dump_stack_lvl+0xe8/0x140 [ 205.293945][T14292] dump_stack+0x15/0x1b [ 205.294019][T14292] should_fail_ex+0x265/0x280 [ 205.294038][T14292] should_fail+0xb/0x20 [ 205.294053][T14292] should_fail_usercopy+0x1a/0x20 [ 205.294076][T14292] _copy_to_user+0x20/0xa0 [ 205.294139][T14292] bpf_verifier_vlog+0x36e/0x5b0 [ 205.294205][T14292] __btf_verifier_log+0x7f/0xb0 [ 205.294272][T14292] ? should_fail_ex+0xdb/0x280 [ 205.294294][T14292] ? btf_parse_hdr+0x219/0x3b0 [ 205.294331][T14292] btf_parse_hdr+0x22b/0x3b0 [ 205.294416][T14292] btf_new_fd+0x246/0x790 [ 205.294512][T14292] bpf_btf_load+0x112/0x130 [ 205.294537][T14292] __sys_bpf+0x357/0x7c0 [ 205.294591][T14292] __x64_sys_bpf+0x41/0x50 [ 205.294625][T14292] x64_sys_call+0x2aee/0x3000 [ 205.294654][T14292] do_syscall_64+0xd2/0x200 [ 205.294701][T14292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.294734][T14292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 205.294807][T14292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.294834][T14292] RIP: 0033:0x7f2647daf749 [ 205.294853][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.294875][T14292] RSP: 002b:00007f2646817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.294975][T14292] RAX: ffffffffffffffda RBX: 00007f2648005fa0 RCX: 00007f2647daf749 [ 205.294990][T14292] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 205.295005][T14292] RBP: 00007f2646817090 R08: 0000000000000000 R09: 0000000000000000 [ 205.295020][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.295035][T14292] R13: 00007f2648006038 R14: 00007f2648005fa0 R15: 00007ffe2d6389b8 [ 205.295136][T14292] [ 205.620927][T14301] netlink: 'syz.3.3992': attribute type 12 has an invalid length. [ 205.670188][T14312] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 205.678567][T14312] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 205.773147][T14321] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 205.797723][T14327] ALSA: seq fatal error: cannot create timer (-19) [ 205.833518][T14321] netlink: 'syz.6.4001': attribute type 10 has an invalid length. [ 205.841370][T14321] __nla_validate_parse: 7 callbacks suppressed [ 205.841389][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4001'. [ 205.904926][T14334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4005'. [ 205.928834][T14334] program syz.2.4005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.959469][T14339] FAULT_INJECTION: forcing a failure. [ 205.959469][T14339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.964961][T14334] can: request_module (can-proto-0) failed. [ 205.972691][T14339] CPU: 0 UID: 0 PID: 14339 Comm: syz.0.4006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.972737][T14339] Tainted: [W]=WARN [ 205.972747][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.972774][T14339] Call Trace: [ 205.972786][T14339] [ 205.972867][T14339] __dump_stack+0x1d/0x30 [ 205.972897][T14339] dump_stack_lvl+0xe8/0x140 [ 205.972925][T14339] dump_stack+0x15/0x1b [ 205.972949][T14339] should_fail_ex+0x265/0x280 [ 205.973002][T14339] should_fail+0xb/0x20 [ 205.973023][T14339] should_fail_usercopy+0x1a/0x20 [ 205.973053][T14339] _copy_from_iter+0xd2/0xe80 [ 205.973083][T14339] ? rep_movs_alternative+0x4a/0x90 [ 205.973120][T14339] ? _copy_from_iter+0x170/0xe80 [ 205.973149][T14339] copy_page_from_iter+0x178/0x2a0 [ 205.973238][T14339] skb_copy_datagram_from_iter+0x232/0x490 [ 205.973273][T14339] unix_stream_sendmsg+0x62c/0xb90 [ 205.973325][T14339] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 205.973366][T14339] __sock_sendmsg+0x145/0x180 [ 205.973436][T14339] ____sys_sendmsg+0x31e/0x4e0 [ 205.973465][T14339] ___sys_sendmsg+0x17b/0x1d0 [ 205.973509][T14339] __x64_sys_sendmsg+0xd4/0x160 [ 205.973541][T14339] x64_sys_call+0x191e/0x3000 [ 205.973596][T14339] do_syscall_64+0xd2/0x200 [ 205.973692][T14339] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 205.973769][T14339] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 205.973817][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.973846][T14339] RIP: 0033:0x7fef3c3cf749 [ 205.973895][T14339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.973919][T14339] RSP: 002b:00007fef3ae2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.973945][T14339] RAX: ffffffffffffffda RBX: 00007fef3c625fa0 RCX: 00007fef3c3cf749 [ 205.973963][T14339] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 205.973980][T14339] RBP: 00007fef3ae2f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.973998][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.974013][T14339] R13: 00007fef3c626038 R14: 00007fef3c625fa0 R15: 00007ffeedf8e168 [ 205.974057][T14339] [ 206.267562][T14351] lo speed is unknown, defaulting to 1000 [ 206.351529][T14380] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 206.394057][T14380] netlink: 'syz.1.4014': attribute type 10 has an invalid length. [ 206.401975][T14380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4014'. [ 206.420415][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 206.420433][ T29] audit: type=1326 audit(1764373691.162:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 206.451225][T14390] FAULT_INJECTION: forcing a failure. [ 206.451225][T14390] name failslab, interval 1, probability 0, space 0, times 0 [ 206.463988][T14390] CPU: 0 UID: 0 PID: 14390 Comm: syz.0.4017 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.464061][T14390] Tainted: [W]=WARN [ 206.464069][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.464083][T14390] Call Trace: [ 206.464090][T14390] [ 206.464098][T14390] __dump_stack+0x1d/0x30 [ 206.464123][T14390] dump_stack_lvl+0xe8/0x140 [ 206.464146][T14390] dump_stack+0x15/0x1b [ 206.464286][T14390] should_fail_ex+0x265/0x280 [ 206.464305][T14390] should_failslab+0x8c/0xb0 [ 206.464341][T14390] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 206.464386][T14390] ? __alloc_skb+0x101/0x320 [ 206.464425][T14390] __alloc_skb+0x101/0x320 [ 206.464457][T14390] ? audit_log_start+0x342/0x720 [ 206.464492][T14390] audit_log_start+0x3a0/0x720 [ 206.464514][T14390] audit_seccomp+0x48/0x100 [ 206.464552][T14390] ? __seccomp_filter+0x82d/0x1250 [ 206.464585][T14390] __seccomp_filter+0x83e/0x1250 [ 206.464684][T14390] ? poll_select_finish+0x39d/0x3f0 [ 206.464720][T14390] __secure_computing+0x82/0x150 [ 206.464754][T14390] syscall_trace_enter+0xcf/0x1e0 [ 206.464788][T14390] do_syscall_64+0xac/0x200 [ 206.464851][T14390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.464880][T14390] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.464913][T14390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.464997][T14390] RIP: 0033:0x7fef3c3ce15c [ 206.465016][T14390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.465044][T14390] RSP: 002b:00007fef3ae2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.465118][T14390] RAX: ffffffffffffffda RBX: 00007fef3c625fa0 RCX: 00007fef3c3ce15c [ 206.465206][T14390] RDX: 000000000000000f RSI: 00007fef3ae2f0a0 RDI: 0000000000000003 [ 206.465221][T14390] RBP: 00007fef3ae2f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.465242][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.465257][T14390] R13: 00007fef3c626038 R14: 00007fef3c625fa0 R15: 00007ffeedf8e168 [ 206.465279][T14390] [ 206.465290][T14390] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 206.631258][ T29] audit: type=1326 audit(1764373691.192:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef3c3cdf90 code=0x7ffc0000 [ 206.637863][T14390] audit: out of memory in audit_log_start [ 206.710089][ T29] audit: type=1326 audit(1764373691.192:12976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef3c3ce1ff code=0x7ffc0000 [ 206.733518][ T29] audit: type=1326 audit(1764373691.192:12977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 206.870650][ T29] audit: type=1326 audit(1764373691.382:12978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fef3c3ce1ff code=0x7ffc0000 [ 206.894217][ T29] audit: type=1326 audit(1764373691.382:12979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef3c3ce3aa code=0x7ffc0000 [ 206.917768][ T29] audit: type=1326 audit(1764373691.382:12980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 206.941404][ T29] audit: type=1326 audit(1764373691.382:12981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14386 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef3c3cf749 code=0x7ffc0000 [ 207.025295][T14399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.036793][T14399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.159628][T14408] loop3: detected capacity change from 0 to 8192 [ 207.242154][T14408] lo speed is unknown, defaulting to 1000 [ 207.281073][T14430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.308238][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4022'. [ 207.492424][T14458] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4032'. [ 207.520451][T14460] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 207.544700][T14462] program syz.6.4032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.569231][T14458] loop6: detected capacity change from 0 to 512 [ 207.585509][T14460] netlink: 'syz.2.4031': attribute type 10 has an invalid length. [ 207.593547][T14460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4031'. [ 207.620288][T14466] lo speed is unknown, defaulting to 1000 [ 207.638474][T14458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.738654][T14458] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.757552][T14484] loop2: detected capacity change from 0 to 1024 [ 207.779049][T14458] can: request_module (can-proto-0) failed. [ 207.796352][ T7617] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 207.882479][ T7617] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 207.884664][T14484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.894992][ T7617] EXT4-fs (loop6): This should not happen!! Data will be lost [ 207.894992][ T7617] [ 207.916777][ T7617] EXT4-fs (loop6): Total free blocks count 0 [ 207.922823][ T7617] EXT4-fs (loop6): Free/Dirty block details [ 207.928750][ T7617] EXT4-fs (loop6): free_blocks=65280 [ 207.934173][ T7617] EXT4-fs (loop6): dirty_blocks=1 [ 207.939287][ T7617] EXT4-fs (loop6): Block reservation details [ 207.945360][ T7617] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 207.960519][ T9292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.997246][T12301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.060952][T14513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4039'. [ 208.106721][T14515] netlink: 'syz.1.4040': attribute type 12 has an invalid length. [ 208.256590][T14536] ALSA: seq fatal error: cannot create timer (-19) [ 208.289413][T14525] lo speed is unknown, defaulting to 1000 [ 208.407018][T14570] loop3: detected capacity change from 0 to 164 [ 208.429419][T14570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 208.458050][T14575] FAULT_INJECTION: forcing a failure. [ 208.458050][T14575] name failslab, interval 1, probability 0, space 0, times 0 [ 208.470794][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.1.4049 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.470829][T14575] Tainted: [W]=WARN [ 208.470836][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.470849][T14575] Call Trace: [ 208.470908][T14575] [ 208.470915][T14575] __dump_stack+0x1d/0x30 [ 208.470939][T14575] dump_stack_lvl+0xe8/0x140 [ 208.470960][T14575] dump_stack+0x15/0x1b [ 208.470978][T14575] should_fail_ex+0x265/0x280 [ 208.470998][T14575] should_failslab+0x8c/0xb0 [ 208.471047][T14575] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 208.471078][T14575] ? __alloc_skb+0x101/0x320 [ 208.471173][T14575] __alloc_skb+0x101/0x320 [ 208.471204][T14575] netlink_alloc_large_skb+0xbf/0xf0 [ 208.471237][T14575] netlink_sendmsg+0x3cf/0x6b0 [ 208.471260][T14575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.471341][T14575] __sock_sendmsg+0x145/0x180 [ 208.471442][T14575] ____sys_sendmsg+0x31e/0x4e0 [ 208.471521][T14575] ___sys_sendmsg+0x17b/0x1d0 [ 208.471555][T14575] __x64_sys_sendmsg+0xd4/0x160 [ 208.471579][T14575] x64_sys_call+0x191e/0x3000 [ 208.471640][T14575] do_syscall_64+0xd2/0x200 [ 208.471698][T14575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.471728][T14575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.471772][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.471794][T14575] RIP: 0033:0x7fd7d89cf749 [ 208.471810][T14575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.471829][T14575] RSP: 002b:00007fd7d7437038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.471848][T14575] RAX: ffffffffffffffda RBX: 00007fd7d8c25fa0 RCX: 00007fd7d89cf749 [ 208.471861][T14575] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 208.471874][T14575] RBP: 00007fd7d7437090 R08: 0000000000000000 R09: 0000000000000000 [ 208.471918][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.471931][T14575] R13: 00007fd7d8c26038 R14: 00007fd7d8c25fa0 R15: 00007ffc39938558 [ 208.471962][T14575] [ 208.684007][T14571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.736895][T14571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.748845][T14583] netlink: 'syz.1.4052': attribute type 12 has an invalid length. [ 208.787299][T14587] lo speed is unknown, defaulting to 1000 [ 208.799461][T14571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.864697][T14571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.912560][T14626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4059'. [ 208.932070][T14628] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 208.944006][ T8449] ================================================================== [ 208.952122][ T8449] BUG: KCSAN: data-race in alloc_pid / copy_process [ 208.958743][ T8449] [ 208.961080][ T8449] read-write to 0xffffffff8685ff98 of 4 bytes by task 8481 on cpu 0: [ 208.969152][ T8449] alloc_pid+0x539/0x720 [ 208.973410][ T8449] copy_process+0xe25/0x2000 [ 208.978012][ T8449] kernel_clone+0x16c/0x5c0 [ 208.982528][ T8449] user_mode_thread+0x7d/0xb0 [ 208.987657][ T8449] call_usermodehelper_exec_work+0x41/0x160 [ 208.993555][ T8449] process_scheduled_works+0x4ce/0x9d0 [ 208.999035][ T8449] worker_thread+0x582/0x770 [ 209.003633][ T8449] kthread+0x489/0x510 [ 209.007719][ T8449] ret_from_fork+0x122/0x1b0 [ 209.012337][ T8449] ret_from_fork_asm+0x1a/0x30 [ 209.017129][ T8449] [ 209.019482][ T8449] read to 0xffffffff8685ff98 of 4 bytes by task 8449 on cpu 1: [ 209.027044][ T8449] copy_process+0x17fc/0x2000 [ 209.031746][ T8449] kernel_clone+0x16c/0x5c0 [ 209.036362][ T8449] user_mode_thread+0x7d/0xb0 [ 209.041055][ T8449] call_usermodehelper_exec_work+0x41/0x160 [ 209.046958][ T8449] process_scheduled_works+0x4ce/0x9d0 [ 209.052438][ T8449] worker_thread+0x582/0x770 [ 209.057042][ T8449] kthread+0x489/0x510 [ 209.061119][ T8449] ret_from_fork+0x122/0x1b0 [ 209.065737][ T8449] ret_from_fork_asm+0x1a/0x30 [ 209.070513][ T8449] [ 209.072835][ T8449] value changed: 0x80000133 -> 0x80000134 [ 209.078552][ T8449] [ 209.080874][ T8449] Reported by Kernel Concurrency Sanitizer on: [ 209.087028][ T8449] CPU: 1 UID: 0 PID: 8449 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.098621][ T8449] Tainted: [W]=WARN [ 209.102439][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.112510][ T8449] Workqueue: events_unbound call_usermodehelper_exec_work [ 209.119634][ T8449] ================================================================== [ 209.136644][T14640] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 209.143308][T14640] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.151621][T14640] vhci_hcd vhci_hcd.0: Device attached [ 209.157183][ T7617] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.170869][ T7617] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.189021][ T7617] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.197816][ T7617] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.207746][T14641] vhci_hcd: connection closed [ 209.208080][ T7617] vhci_hcd: stop threads [ 209.217176][ T7617] vhci_hcd: release socket [ 209.221605][ T7617] vhci_hcd: disconnect device