last executing test programs: 6m1.797642778s ago: executing program 4 (id=2246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000b40)={{r1}, r2, 0xa, @unused=[0x7, 0x22c4, 0x2, 0x8000000000000000], @name="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"}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a30000000000c00078008001240fffffffd05000500020000000500040000000000050001000700000015000300686173683a69702c706f72742c6e657400000000a9b919023cd2c33af91312fd5f5d7ad75aa6e65669ac3b80ba2cb984b300344003f4672ae7457a06ffe62c73aad0fb89e8281c77c37d5f3b4630c66ce00b432165c1bd3aed0379cc9a506a4e69e9c5b3d96d89c9ab547853d2aeefb2e2e15250e44f8d7b28fec42f5f6979420548218337404886af85833705f91c76d24aad05939c0577e19b4921baea8ad80981f582bed23dac4590b973bfb34cb8c2bf8487036aba8956d81d288ac80f0eb05b69f539407cf461dc093e4031c8e2908a146097a0f928902e7dff20b4e97ff163357b4c480ad47b85d9513256bd31ae1deb19baf84a64cc5ef5a7a0ffb22493d6fc63fe57"], 0x5c}}, 0x0) 6m1.764414941s ago: executing program 4 (id=2248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) (fail_nth: 5) 6m1.574830586s ago: executing program 4 (id=2251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b8008"], 0x184}}, 0x0) 6m1.428207698s ago: executing program 4 (id=2252): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310325bd7000fadbdf250b0000003ece82b0b67c582894534f33ca08000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(&(0x7f0000000000)='9p\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r3 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000811) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$ARCH_SET_GS(0x1e, r4, 0x0, 0x1001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc6042, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r7, 0x5602, &(0x7f0000000000)={0x0, "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"}) 5m59.506960853s ago: executing program 4 (id=2263): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x4, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8000161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m59.374900904s ago: executing program 4 (id=2265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (fail_nth: 1) 5m58.501801485s ago: executing program 32 (id=2265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (fail_nth: 1) 4m34.306446657s ago: executing program 2 (id=3131): futex(0x0, 0x5, 0x10000000, 0x0, &(0x7f0000000000), 0x40000000) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") write$selinux_load(0xffffffffffffffff, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "5278ecc6fd82df21e7a70810cb3bdb488bb6b9a9ce0aa61e72b2e3fd94f21d68487c6d4713c76593c3de18d6912488006bf47e4c9d05b5a8ac29ef0d412c9253d6a5e11420e679eddcec3b88844420908a4ace99f5bdcc3129c95188e6f779dfac51efd1e66d2b6878f51b55f4c065b62ffca856bda7c8f24c79503eae4c991fee25c9ea034838935cb554b732379eadf9dc2e4e30c2ad157cbf076d6a55a9081eab5f8859a4e43df73615b4545d63989e175772f3ee597aef7731a082eb39d91526"}, 0xd2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r2, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r2}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 4m34.044907058s ago: executing program 2 (id=3134): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) shmdt(0x0) shmdt(0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0xc0800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) r0 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x4, 0x7, 0x1, 0x0, 0x5, 0x600, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext, 0x8000, 0x8000, 0xc38e2e3d, 0x4, 0x9, 0x2, 0xdcc, 0x0, 0x80000001, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xe, r0, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4m33.986661553s ago: executing program 2 (id=3135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x83}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x70000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44880}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b00090000000014"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x5453, 0x0) 4m33.985462273s ago: executing program 2 (id=3137): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x105000, 0x2) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x200, 0x1, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0xc5, [@empty, @private=0xa010102, @remote]}, @noop, @cipso={0x86, 0x31, 0x2, [{0x0, 0xf, "02325726152398b2ca61e9de92"}, {0x0, 0xe, "963671471b907b46f3bbcf07"}, {0x5, 0xe, "b944e2996d4e0cde7d1c4407"}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x8, r3}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080)={[], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HDvd7KZNChygEqXQouwK1k4a2kY9lCIhOFUCyn0JiRNFceIodtpNVEFWHDgiIQRInMqFCxInTkioEheOCKkSnEGAQAi2cEACdirb4+xuMk6yG8fOJt8nTea955n3v+doxn7jp5kALqxnIuLViLiTpum1iJjIygvZErudpbXde7ffWmgtSaTp6/9IIsnKunWlbY/FlWy3SxHxlS9GfD05GLexvbM6X6tVN7N8pbm2UWls71xfWZtfri5X12dnZ16ce2nuhbnpvvRzPCJe+fxfvv+dn3zhlV9++s0/3vjb1W8kWXns68cDKh72YqfrpfZ7ce8Omw8Z7CwqtnuYGcvbYuRAya1TbhMAAL19ICI+ERHXYiJGDv86CwAAADyC0s+Ox/+S7m93B4z2KAcAAAAeIYX2HNikUM7m+45HoVAuR3sO74ficqFWbzQ/tVTfWl/szJWdjFJhaaVWnc7mCk9GKWnlZ9rpu/nn9+VnI+LJiPjexFg7X16o1xaHffEDAAAALogr+8b//57ojP8BAACAc2Zy2A0AAAAATp3xPwAAAJx/xv8AAABwrn3ptddaS9p9/vXiG9tbq/U3ri9WG6vlta2F8kJ9c6O8XK8vt+/Zt3ZUfbV6feMzsb51s9KsNpqVxvbOjbX61nrzxsp9j8AGAAAABujJj73z+yQidl8eay8to8fb9ZibAWdVcS+VZOucw/oPT3TWfx5Qo4CBGBl2A4ChKQ67AcDQlIbdAGDokiNe7zl55zfZ+uP9bQ8AANB/Ux/J//3/6OuCu4UBNA84RQ5iALh42t/zjzuT15cFOFdKZgDChXfi3/+PlKYP1CAAAKDvxttLUihnl/fGo1AolyMebz8WoJQsrdSq0xHxRET8bqL0WCs/094zOXLMAAAAAAAAAAAAAAAAAAAAAAAAAAB0pGkSKQAAAHCuRRT+mvyqcy//qYnnxvdfHxhN/jMR2SNC3/zR6z+4Od9sbs60yv+5V978YVb+/DCuYAAAAMCFUHyQjbvj9O44HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD66b3bby10l0HG/fvnImIyL34xLrXXl6IUEZf/lUTxnv2SiBjpQ/yx1p8P58VPWs3aC5kXf+ztk8ffvXVo/JjM3oW8+FdOHh4utHda559X846/QjzTXucff8WI+/IPq/f5L/bOfyM9jv/HjxnjqXd/VukZ/1bEU8X88083ftIj/rN5Ff782weKvvbVnZ1e8dO3I6ZyP3+S+2JVmmsblcb2zvWVtfnl6nJ1fXZ25sW5l+ZemJuuLK3Uqtnf3Bjf/egv7hzW/8s94k8e0f/ncuobzSn7/7s3b3+wkyzlxb/6bE78X/842+Jg/EL22ffJLN16faqb3u2k7/X0T3/79GH9X+zR/6P+/1d7VbrPtS9/60/H3BQAGIDG9s7qfK1W3TwbiZej7zW3RvhD79ejl/hveiaacbqJb/a1wjRN09YxdYJ6khjcm5Ac3tRhn5kAAIB+u/ulf9gtAQAAAAAAAAAAAAAAAAAAgItrEHca2x9zdy+V9OMW2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffF+AAAA///0iOAC") r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) unshare(0x28000600) socket(0x2, 0x800, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x1000005, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x1008, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x400, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x82, 0xd, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x84ac, 0xd9a, 0x5, 0x82a2, 0xfff, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmmsg(r1, &(0x7f00000030c0), 0x1, 0x9200000000000000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r5, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c94522e546f93f6dedf11f1509685636", 0x10}) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) 4m33.590540245s ago: executing program 2 (id=3143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 4m33.062384837s ago: executing program 2 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 4m33.056696998s ago: executing program 33 (id=3148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000001714000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 2.935100333s ago: executing program 0 (id=6813): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) mkdirat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x7) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x150}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) getpeername(r5, 0x0, &(0x7f0000000000)=0x5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x3, {0x0, 0x0, 0x0, r11, {}, {}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4, 0x8}, {0xfff1, 0x5}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x8}}, @TCA_RATE={0x6, 0x5, {0xa, 0x60}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41880}, 0x20000080) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4093, 0xffd}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}, 0xffffffff}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x400, 0x4) sendmmsg$inet(r8, &(0x7f00000004c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x2, 0x400c004) 2.876651677s ago: executing program 0 (id=6816): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = dup3(r2, r1, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.666449444s ago: executing program 0 (id=6823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) close(r2) 2.638824037s ago: executing program 0 (id=6826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYRESHEX], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (fail_nth: 3) 2.393947446s ago: executing program 0 (id=6829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 2.312335323s ago: executing program 0 (id=6834): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x400000008000f28, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000040)={0x5, 0x4, 0x10000, 0x77c, 0x8}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x0, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x6}]}, 0xf8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r7, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 2.014712637s ago: executing program 5 (id=6849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000"], 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.966613871s ago: executing program 1 (id=6851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="4e3d68d72e662d9a56ef5a1563e001119a2cc39cc67ea55a54460297ad69fc40a657a5aeb8b873ffb06609e70faa42922f1a1886aa7e577bb569eed935e8e138b6cff04328abae53945332556401f6873e8a9615a4fd46a2414fd0ac46b49e9b6b1b85d3474aa4b9a75826fdfa62a8ad977cdb1963697ccc", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24040018}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000020207b1af8fe00000000010400000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095c28e546de4ee7f1bd112a5cde7d035913d2e152367f9ee2bfee1a3bd1d3a7b5695a939288c95fadde76fb4a7682bbf2894b5cd57c6fbafaf71b279ff035fbb52ac3fa526f549cdf38f5b561c88ba187ad85511d558a4f11b8ef4683b68b5f1a0abbbf0b5fdecaada265baf68a73b704dd8900776a074a9331f64dcc3b9cb534e7302"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="97aea348de7479a4baf31084f308e8f0a6b63aee4d47397cc36ed0e949e5f73ae57c3f433ef3696380abc0ac9ebfdbe5a0a63c48b2e9967f0e61ac97e0586a239b6cbec38a7ab83438b583d66630356f9c82c5f16b33502b8979c7a5e4e5ed3304ad17177d47bff4", @ANYBLOB="af6f6e4a3b49600da1783949573b7872cc9b98f760ae2b58cf2f6aebcc6eb32d32b7bee3e4cd610d02"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000740)=ANY=[@ANYBLOB="0a2ca75ba17d130e07314b31ecd7e74471", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.948712092s ago: executing program 5 (id=6853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) close(r2) 1.909654496s ago: executing program 5 (id=6856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="4e3d68d72e662d9a56ef5a1563e001119a2cc39cc67ea55a54460297ad69fc40a657a5aeb8b873ffb06609e70faa42922f1a1886aa7e577bb569eed935e8e138b6cff04328abae53945332556401f6873e8a9615a4fd46a2414fd0ac46b49e9b6b1b85d3474aa4b9a75826fdfa62a8ad977cdb1963697ccc", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24040018}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000020207b1af8fe00000000010400000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095c28e546de4ee7f1bd112a5cde7d035913d2e152367f9ee2bfee1a3bd1d3a7b5695a939288c95fadde76fb4a7682bbf2894b5cd57c6fbafaf71b279ff035fbb52ac3fa526f549cdf38f5b561c88ba187ad85511d558a4f11b8ef4683b68b5f1a0abbbf0b5fdecaada265baf68a73b704dd8900776a074a9331f64dcc3b9cb534e7302"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r3, @ANYRESHEX, @ANYBLOB="97aea348de7479a4baf31084f308e8f0a6b63aee4d47397cc36ed0e949e5f73ae57c3f433ef3696380abc0ac9ebfdbe5a0a63c48b2e9967f0e61ac97e0586a239b6cbec38a7ab83438b583d66630356f9c82c5f16b33502b8979c7a5e4e5ed3304ad17177d47bff4", @ANYBLOB="af6f6e4a3b49600da1783949573b7872cc9b98f760ae2b58cf2f6aebcc6eb32d32b7bee3e4cd610d02"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000740)=ANY=[@ANYBLOB="0a2ca75ba17d130e07314b31ecd7e74471", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.097236791s ago: executing program 1 (id=6876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef01"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) (fail_nth: 6) 1.073750434s ago: executing program 1 (id=6877): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.047909445s ago: executing program 5 (id=6878): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) lseek(r0, 0x7, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe77, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffffffffffd}}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) wait4(0x0, 0x0, 0x40000000, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b8008000900000000000800090000000000080009000000000008000900000000005c000b8008000a"], 0x184}}, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@fwd={0xd}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xfffffffa}}, @fwd={0xa}, @struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x7, [{0xe, 0x4, 0x1}, {0x7, 0x3, 0x3}, {0xf, 0x3, 0x4}, {0x0, 0x5, 0xffffff00}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/60, 0x97, 0x3c, 0x0, 0x7}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b00000018000180140002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.004386639s ago: executing program 1 (id=6880): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='fsi_slave_invalid_cfam\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000040), 0x106, 0x2}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="060fe7419a28e1a3f8d81666b75e65ba8aae54aa91c8a3b30dda52f094af030d19547ec8733393621d094aa9deb57cbc289f3b727fbc668d1bb60410494b091d38d190f8faa3c5db01bb23ef794a0678f37a371edf5dfeaedd476a6a40fdf3dab68728d7a81a4369496a8f41"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x46}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 1.000088759s ago: executing program 5 (id=6881): bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x9, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 951.197853ms ago: executing program 6 (id=6883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) 921.324256ms ago: executing program 6 (id=6884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 898.053957ms ago: executing program 6 (id=6885): bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x9, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 875.125829ms ago: executing program 1 (id=6886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="4e3d68d72e662d9a56ef5a1563e001119a2cc39cc67ea55a54460297ad69fc40a657a5aeb8b873ffb06609e70faa42922f1a1886aa7e577bb569eed935e8e138b6cff04328abae53945332556401f6873e8a9615a4fd46a2414fd0ac46b49e9b6b1b85d3474aa4b9a75826fdfa62a8ad977cdb1963697ccc", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24040018}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000020207b1af8fe00000000010400000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095c28e546de4ee7f1bd112a5cde7d035913d2e152367f9ee2bfee1a3bd1d3a7b5695a939288c95fadde76fb4a7682bbf2894b5cd57c6fbafaf71b279ff035fbb52ac3fa526f549cdf38f5b561c88ba187ad85511d558a4f11b8ef4683b68b5f1a0abbbf0b5fdecaada265baf68a73b704dd8900776a074a9331f64dcc3b9cb534e7302"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="97aea348de7479a4baf31084f308e8f0a6b63aee4d47397cc36ed0e949e5f73ae57c3f433ef3696380abc0ac9ebfdbe5a0a63c48b2e9967f0e61ac97e0586a239b6cbec38a7ab83438b583d66630356f9c82c5f16b33502b8979c7a5e4e5ed3304ad17177d47bff4", @ANYBLOB="af6f6e4a3b49600da1783949573b7872cc9b98f760ae2b58cf2f6aebcc6eb32d32b7bee3e4cd610d02"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000740)=ANY=[@ANYBLOB="0a2ca75ba17d130e07314b31ecd7e74471", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 743.00909ms ago: executing program 5 (id=6888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="4e3d68d72e662d9a56ef5a1563e001119a2cc39cc67ea55a54460297ad69fc40a657a5aeb8b873ffb06609e70faa42922f1a1886aa7e577bb569eed935e8e138b6cff04328abae53945332556401f6873e8a9615a4fd46a2414fd0ac46b49e9b6b1b85d3474aa4b9a75826fdfa62a8ad977cdb1963697ccc", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24040018}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000020207b1af8fe00000000010400000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095c28e546de4ee7f1bd112a5cde7d035913d2e152367f9ee2bfee1a3bd1d3a7b5695a939288c95fadde76fb4a7682bbf2894b5cd57c6fbafaf71b279ff035fbb52ac3fa526f549cdf38f5b561c88ba187ad85511d558a4f11b8ef4683b68b5f1a0abbbf0b5fdecaada265baf68a73b704dd8900776a074a9331f64dcc3b9cb534e7302"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESOCT=r3, @ANYRESHEX, @ANYBLOB="97aea348de7479a4baf31084f308e8f0a6b63aee4d47397cc36ed0e949e5f73ae57c3f433ef3696380abc0ac9ebfdbe5a0a63c48b2e9967f0e61ac97e0586a239b6cbec38a7ab83438b583d66630356f9c82c5f16b33502b8979c7a5e4e5ed3304ad17177d47bff4", @ANYBLOB="af6f6e4a3b49600da1783949573b7872cc9b98f760ae2b58cf2f6aebcc6eb32d32b7bee3e4cd610d02"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x1) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000740)=ANY=[@ANYBLOB="0a2ca75ba17d130e07314b31ecd7e74471", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 644.689308ms ago: executing program 3 (id=6890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket(0x1e, 0x80004, 0x0) r2 = socket(0x1e, 0x4, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = dup3(r2, r1, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 634.394769ms ago: executing program 6 (id=6891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 572.318154ms ago: executing program 6 (id=6892): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 549.259065ms ago: executing program 6 (id=6893): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c09, 0x3) 545.877236ms ago: executing program 3 (id=6894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000004000085"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) unshare(0x22020600) r2 = syz_io_uring_setup(0x10c, &(0x7f0000001800)={0x0, 0x40ed, 0x8, 0xffffffff, 0xbffffff9}, &(0x7f00000003c0)=0x0, &(0x7f0000001780)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_setup(0x2fc7, &(0x7f00000004c0)={0x0, 0x8b05, 0x400, 0x2, 0xe3, 0x0, r2}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r5, r4, &(0x7f0000000540)=@IORING_OP_MADVISE={0x19, 0x41, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17, 0x1}) io_uring_enter(r2, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) 522.101838ms ago: executing program 3 (id=6895): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x1000, &(0x7f0000001240)="0332b2a1320da25dcb8ce3af0e8d87bdbb2c6aeca41e84b139597b142b2bacbe55049a51be1defbfa8ce6722a94707176d173cd9dbee62e3f05326659ac6400d744555dcc7b4ee667c17e9a605a25f09b006677ed3b97e7312c5e11b1a5b01e7a6e5fc94de5163f260850e2f305b9a6797b8ef25ee534eb8190f0bbf10a5af4951f95a56af9fcc9902e2296f84e8add53d42c98f4045f0e072cb370b6b1bfbb76e371addb6bf8b9abc0fd922f33287d572b0844b6000f45430e5e571247eb511ab4baed345048daedf3302641ebda7b5aca7088f24641b5e2c4d9bf9806753f946c970df2ec4c93f9c8d8e1916e567a4c3f0f5af8ebd798830f00be43b9de5a06d80f0541212efe609d787c21d41bdf4c835fba94426df10af31794212aa6ca96e01ef43242ed11fc916da6fcf780e1f349d3b834eb92447b43be77343513539e74ab0b45dbc413b0829e63d5ea206e99da80e9cf6c54c1dc318789fb973e68fb05c238444446a2ca9b60ac4978eef1007a76fa01050d722be7266aa04ce1b9f1af7b026af828c4ad589a18f7723c86273f01d344f819422219452b51f179340823b4c60fec4a28da993ac19afd9f499cadde10a91522877aa653a68406c5f25f2ff1a0dfd453648e094ae427fbe205b29d52a8879255fda6ee066322f4e3d39880968a4b4767f97c0699ce1a6dea65bb820f9eed2e48553921b2d269fd1096e1517aa23dec6d703c13a503e693117bb5243ee5ff6abcd3c9c63bdab4ae67f102f740fbafde187f2b96e66f2aacd779821303e0c60f2908c146e25a8077a3af96b5f36a280c66cd210afb9610a4f8226162cbfb93ab10f36b686a82b3193d6091b504940aa982318aaa6c8872c4030a1bc1a49c8a3c9f5a48625cb35f0444d4415a2f92ebd001080f026950ff20be589b757d08b1411657d9efbef3b56b7313da8c8cde4e83ee7103a0b3a58587f204446e9ba201a7c38b5538aaec775b1c19a7fc672bf5bf54589fdb9956bc3dbd4f7dde12509604cfe5057ec54bfe72e087155832cd92745be61bc9850ea1add237b7b5298a9e9a556f162f77508fca2961493d3feafad5e7f42626c3d215927a77b1f99620a23d31b08e9a7ab75bd1f42c20600173464845aac6f9fc7db68f19b2cb73803331f1840b33f5567e759fec6bd62910f6cd029322c19a3873c8d6e1ffde9610ec460f94f9cc21c94f4fff0eff0a70681d2cb2998190d3d49c56def879f3f16fa8e678aa8d34924e9da3199ea9fa3ab5e6df675e8bfbb61949badfe6381e2502548e8e147c4bbd89ad9612845cdd3670b2d48554d6da684394dde5ca1cfe6b665c3a9355bab29b2aaf4cb3e0fd0a06a6efe6485a8e26c5d4f465564c1c942ee668210331703fb64639939de7aeeee8d08d48bed97d3daf97ccbe3b0917c6272b77c5abc68e0f60f4d7001ad1da5b7c8b3966e8c3200850f1124e2f13c60f174de8f01d6d629a89dd47e8eb94d997b39a760505a1cfc9c97e92b34dd7a6b9831889059c35ec98dd5d1f729a62a243520dcb8aa9eb0011cdc370ec500597fde5c80e250567dc44747ca270e96dd34149385ed8b38fd11d7135afe2616ab41349666787e9966357dcae993acedffb7134fd1f76fee7c6241b01793a7a8320cd0e1b8be608701fd2de1099c15e7f7cfe018f3a60e54b457747539a428e34e5cf9932146df588c03f44eb06be0b566bd1f2ff7105bcd4d0651f139d735fce0ccebe93211c85a2a2f0737923f8aa2a9d76b3b1d248220b3082a907456a51e673145bf191ce6f06a35cfc935d28315ed3a453056a0ba42cda2eb3067a5ef22f1648f71e8cd13a741858b33d786d5a38cbb2764343a84475fd4e33d08975962b02a7ba04208ac4eaa74e8f157d05a3d4fd0eec50ab0d618251a61ddc0ebd54d21a676cec9c65e019013f892e534b05c14ed52dd0b2d40cf99df308569244fb512fcce769ea8c0a640e6b88388181d69d9b2424bcacafcd845d6d445a65285481ab6ef1783f010b0a2bcb7a99770926e66959ee04d88e892b41ba1b51d960a35e4e131efdd539f5ef17674096a389518d3f6637b65ed6f78719a413e141e5b6854a6d319bd5f9a04a0972a3acc6a711f9c83774a572887b11ae5909cd23f3dee248b2891830606cae46fe0c46ad57eebec3b9951ed6172335e11b90916132f24e4d3f1aaf300d516edf654962533e4fef392cefe704d53bc89aee3da792ceb976dceaa8ee6446d9c4b5b3847d74276d4509fb88375cdf54322856d65bd3a80ecb9b142a641656c3ef81b29ae4ec299f2f3d96e2a653852910115230ab6c725ecbc0661316c0d0416f9417d0503f7dd9c4e8e3576d6ee02dda2dd7ea1afbdf698d472e3cadc248e5aa2d3aca63dcff8b06c4fd7ccd02d8fc0b1bf99efb85d71ebed45f11ec29ede6557fc636bdc2b2de86af875b6dc688b9d6fc98acf07904f4059078cc9f3e386d6adef652ad2c10b5a2068f5a5112d4d1767e24741ce7413a32c6d643008b7af89ae48c79938e82735be05a41b37925bba2258e41a6992b9cc47e6cebb97ccb9fe3752606a74f7c995e10303e9ba4fce231c3fe88e6d5b30c4cade7b001038a87deb90e5751a04cf946ed80ac7b2696421a575ecad9d7c61de06965fd1a05bbe6078f14ea337404f6e26fee19946fba739e0e44c90543de48b57824a57f878df94178d48fa918b6bb1a7e46a956bf15463eadc7f869c5d598ec7ca2f787e833cad518bced57109fa4568c337ed7bb23cb37403b06d91121c1a56e31ea0922e2e1fd3aa517e2369b985d94022fd4c036e78458881cd8f2ce040e4396f135f9c0fcb84274d13e725f928f39b535794efbccbac82340b7c570925110f80789621def0d41e8cdeb260e27939ca4db2b8f04964a44ffde42f421e0b16f0f4816ed7f14d3196614e52feaa8dc3aa6133a807442a9878917488d05f1e3cb51dc14854546eba477ab4f9df7bcd474229d22997e9c2637b2cb8b558f2f32096698dcdb9344990853956821b684d19a0e74c32128f1c7132fa65b76665334118a8d5991c119530357a72c4383cd71d2680baa44b346842fa68c2267c23d880517251d9d98e9fbe232356c81231aa2d7f4ea54573c75f32bff18b10f2f5b3f7ab6a7853e7f035cf9eb2ff2f2b050ff3c50d83d9e5bf3034f6b408464855758b3a728f0b501a67b9c38d85c46cc82fce1aaf45016179b2a902c9fcd0ddbece9ad6662f7b22495e9f592872da75077675e8dc50a525e190b06d0e443c244cd0bf2ae810519756a16008bbda105d2b88048ca7d0eafa746016bb6569dfa23f04954f7454172eddf21afda36336942a7f87315b2fef966cbb51028949280c83a73aac72318ad920980b2b1564a0dc8eb1f8c4b1a020297456a174a0a3e83ce8af34e75b7f18eb11c76fd19d6f5c80fc463745026324673f2ed518c3e8cdf4fc07b6992691f24cc920f8286f82c6f51091b18a1925bb3efa3315aad0c0d32af038408c50ef0004d33f50806228cc5f601cb2d944b073fb21d1191c2f063c14b65c923e1c05fbb87ad6bd7cf04593b2fafd5af6d0dd8160b30544394929e21efb8ffafe922dc93e0fcb3d77d83b05cb232792d1c4e2e1b8d6be6150c6b984f78f5e5993896e7ed444b53b01ec31adf5a92611e1283414bf0f9c29e1d54a07f09d0fc2739f066dfac5f88863cf4d8ed9cb32a0e8a60844d3fa8a744f091fba3fba3c8f07aaf150ce8740dadde13caa0b86bc71885e2b22d43dc5e7090f45a7bee8a5a1ed4620771176a5ed03c3f3a292c9ab5a951b03875d16a93f0046253fbb9f38fc55074ab878d6fa7650ccbdc748c1444adf6c5028dc0f2d9c24e025dbb8e931281a17e7deef878ab94f0053dc3b780ad828d98301902044724be5198f3193a2355aafddcd85915207948ef33f79ecd48213f8c0513020bcd0253e17c2b78a7a4fcc47aab60f007229688f123c14c8280f49a3d8a1909d418a2f03e82efb7e1bd2fc4a17cad2eea65c144ff6e589078323671662543e0578acef0a327a036b3560837133852f27c95fb66799b7cf206c2a71b9a168e7ac6ffa52609f2b4ca865080618222b8d3199e39cc1e495c2b530246b575016325f37ade8221d60f7db45e75999afc379759dcda3e420a2d247ec3148be311aec728c61526da295e1975ffbcee93331654f31a7e3647cba6a3b266a5784f6e1243427fd0099f5ca4aeffcf0bd11f72a48741a58b18981026969e2f5dabb3810534529ff59f2e890c4ebacf233a8f16f125790160fbb429a8c78cbe837bed4450cb4666aca7c5be83c81a26da9a4eb0d1a5019e540a8050dd3483b0469f102e9b143151cf929633c2d4d09b56038a4dc74cfeec2ed57cf488e1830f416adbd13eba408c28c1b8c0a9be69ac13f6d121bce14c3f59c359de47401c52b3161f29439346b02a8e04ab8b25f1b6abc9f82df77b3eae6d38d656b4e733a37cde8fadb024c93e9aa5645db24210fc3aedad6245ae79a399919d0120a1ded270f8ead6fd2159e7fa2eeeb1140e20960d04f2b2be0e4fbf031a0fc7c60143747a2d72d062befc480b0031fbc75a6cb2e1448d5c568640e05de3c4400500660844fe933cb670d5c2468f63040ea0e0bcf3bfa334a87f9332dc24c947b596f45410e372f4f85bc97915c35fbfe3ac57421ef82774c1c072ab6378844a3a980cb82daf9cdc81c48ec3ec56683bef60471561c50d0f1703bfc641d4d059fb43725318ee33934fdb9423aa807e700dc314d8ba3f47a43a43eab9c507f5a05f66f68adba00be423c8be5e834b4f7546fee509173dc180294ab5dd392bb1c5e81db6e640d9540127db93e19eabbbb61e969463781e4b3cccaa8a9a838a03bcfe3a84476da112f142ad3938943cc93d37e3f7e71984313dc969c7455e63ca5ba31ac0c7b1971b713d74fdf4e50d1cb4924c61d3e5fc503bb38c5d360419498e171a5cb3785645f0724a012f627fc9d3bdb96eeba1dffacac4005dbff0888990288d73f538d6d151fbd135b869a65e27612b96b142b4169949fb7647af5d9ef6639602fcba6e6639c8143042a502c528f92a5708993d124153c37a09dc74768ec27d9f94c12556124379a3b565705dec98a602a59da80524c8c8ecf51f6eaa27379a719844a773a87f70aa87618ab67968699dd1252a50dd9935570259139c1ca9dabf3b98375c5c945aac757fcf5f74aac8a91cf9cb272b4e26c7c2b71b9034a791a5e5ce53ff79e71d26a35c3c4abd7b57d6984e3ed2cfd29edc830bfe1b108d4436bb0d28ad74c11029e1d3530f5581a4c17c91a9c512fc6c236b2dbb63c1abd5ffdea2659a00508ccae7eb78770bd0381687a125c89baefbed9ac10f70ea759c9bdfd48cb6e7fc2df857eedf399d9e4913810a3b998f504b8048c2696e2428a49000dec594895846337157e1495640d048e43147babcc018f48e367942da396f32abf72c79c8b23995b0994f88753fb33a83547459fe81d6ac7fea3eb813839d0a1389109d0d809241f2c87f1e8dc38edc80907c1c4568f22c1e0fe5d4f1117521cb80c1f6d29217f94368b14f7b8ce0f020f0a54673605420ee5a50294ac82d2bc20b2d6e76f6e24a7243358badf7cc6a6025160839cdc1c6ebab51ecaa2471e2a2384a22f68890ed6fce5b73620f725d5de8cea8c6cf86ed631d8528f763489b1255e5aaecfe804db206e9717268403967fcfd9266baeb274e71ef257536547f8438b4170b38d83481d78a4cb8ce7d73a56415ca8041b36346cba93aecb85f10c5282"}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x8000, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x1, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xffffffff}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xe39d}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x6, 0x1, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x400}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x4}, {0x0, 0x2}, {}, {0x2}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x40000000}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{0x1}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 487.384511ms ago: executing program 3 (id=6896): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='fsi_slave_invalid_cfam\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b646edef69853362ac34071", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000040), 0x106, 0x2}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="060fe7419a28e1a3f8d81666b75e65ba8aae54aa91c8a3b30dda52f094af030d19547ec8733393621d094aa9deb57cbc289f3b727fbc668d1bb60410494b091d38d190f8faa3c5db01bb23ef794a0678f37a371edf5dfeaedd476a6a40fdf3dab68728d7a81a4369496a8f41"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x46}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 152.307308ms ago: executing program 3 (id=6897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 11.779009ms ago: executing program 3 (id=6898): bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x9, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=default,uni_xlate=1,shortname=lower,nonumtail=0,shor|name=win95,shortname=win95,shortname=lower,\x00'], 0x11, 0x24b, &(0x7f0000000500)="$eJzs2s9rHGUYB/BnYktiSroRf9GC+KIH9TI0OXtoDi2IOYg2QhWkUzPRJeNu2FkCK2Jz0qt/gmfx6E2QHr3k4l/gwZO55NiDOLLZTZvIitjW7KKfz2Uf9t3v8Ly8y8tzmIPXv/pke6vOt4p+zGVZzF2NvbiXxXLMxbG9eO2Vmz++8M7N995cW1+/9nZK19durKymlC6++MP7n3370t3+hXe/u/j9fOwvf3BwuPrL/nP7lw5+v/Fxu07tOnW6/VSk291uv7hdlWmzXW/nKb1VlUVdpnanLnun1req7s7OIBWdzaXFnV5Z16noDNJ2OUj9bur3Bqn4qGh3Up7naWkxeBQb39xrmjhszt+Kpmme/Dou3I2ln6MV2VMpe/pq9uyt7Pm97NJh07Sm3Sr/Cuf//3biUl+IqL7c3djdGH2O1tfaTdNUUcaVaMVvMfybjI3q62+sX7uSjizHF9Wdcf7O7sYTo/xWtGOYX4lWLE/Or4zy6XR+PhZP5lejFc9Mzq9OzC/Eqy+fyOfRip8+jG5UsRnD7IP85yspnR82eyp/+eh3AAD/NXm6b+L8lud/tT7K35+v/n4+/NN8di4un5vu3omoB59uF1VV9h6+OH7U0TfZcfEID3yMxUJEPFR8cwaan2YxPz7UWenn8Ra/jnc3K/3MYjGd+4iz9eDQp90JAAAAAAAAAAAA/8RZvE447T0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz7Y8AAAD//720ykw=") bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 0s ago: executing program 1 (id=6899): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): 17][ T12] hsr_slave_1: left promiscuous mode [ 575.009837][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.017319][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.037337][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.044802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.074247][ T12] team_slave_0: left promiscuous mode [ 575.079707][ T12] team_slave_1: left promiscuous mode [ 575.087752][ T12] veth1_macvtap: left promiscuous mode [ 575.093323][ T12] veth0_macvtap: left promiscuous mode [ 575.099089][ T12] veth1_vlan: left promiscuous mode [ 575.104337][ T12] veth0_vlan: left promiscuous mode [ 575.258473][ T12] team0 (unregistering): Port device team_slave_1 removed [ 575.273080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 575.313511][T26398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.321292][T26398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.347344][T26398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.360931][T26398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.367974][T26398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.393982][T26398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.406033][T26496] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 575.406033][T26496] program syz.6.5979 not setting count and/or reply_len properly [ 575.408726][T16171] lo speed is unknown, defaulting to 1000 [ 575.428906][T16171] infiniband syz0: ib_query_port failed (-19) [ 575.479558][T26398] hsr_slave_0: entered promiscuous mode [ 575.493921][T26398] hsr_slave_1: entered promiscuous mode [ 575.664361][ T12] IPVS: stop unused estimator thread 0... [ 575.843556][T26539] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 575.843556][T26539] program syz.0.5986 not setting count and/or reply_len properly [ 575.965701][T26398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.979667][T26398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.998849][T26398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.025802][T26398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 576.056264][T26566] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 576.056264][T26566] program syz.5.5990 not setting count and/or reply_len properly [ 576.113856][T26398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.130680][T26398] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.159038][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.166190][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.207510][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.214661][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.236518][T26398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.247102][T26398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.340391][T26611] random: crng reseeded on system resumption [ 576.615386][T26398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.762945][T26398] veth0_vlan: entered promiscuous mode [ 576.778201][T26398] veth1_vlan: entered promiscuous mode [ 576.802053][T26398] veth0_macvtap: entered promiscuous mode [ 576.810384][T26398] veth1_macvtap: entered promiscuous mode [ 576.829757][T26398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.848075][T26398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.861042][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.874951][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.875515][T26639] __nla_validate_parse: 32 callbacks suppressed [ 576.875534][T26639] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6002'. [ 576.899352][T26639] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6002'. [ 576.911964][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6002'. [ 576.923459][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.943229][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.138045][T26655] FAULT_INJECTION: forcing a failure. [ 577.138045][T26655] name failslab, interval 1, probability 0, space 0, times 0 [ 577.151006][T26655] CPU: 1 UID: 0 PID: 26655 Comm: syz.5.6006 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 577.151082][T26655] Tainted: [W]=WARN [ 577.151092][T26655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.151109][T26655] Call Trace: [ 577.151117][T26655] [ 577.151127][T26655] __dump_stack+0x1d/0x30 [ 577.151157][T26655] dump_stack_lvl+0xe8/0x140 [ 577.151183][T26655] dump_stack+0x15/0x1b [ 577.151205][T26655] should_fail_ex+0x265/0x280 [ 577.151294][T26655] should_failslab+0x8c/0xb0 [ 577.151327][T26655] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 577.151373][T26655] ? shmem_alloc_inode+0x34/0x50 [ 577.151397][T26655] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 577.151419][T26655] shmem_alloc_inode+0x34/0x50 [ 577.151502][T26655] alloc_inode+0x3d/0x170 [ 577.151531][T26655] new_inode+0x1d/0xe0 [ 577.151563][T26655] shmem_get_inode+0x244/0x750 [ 577.151594][T26655] shmem_mknod+0x46/0x180 [ 577.151633][T26655] shmem_create+0x34/0x50 [ 577.151663][T26655] ? __pfx_shmem_create+0x10/0x10 [ 577.151694][T26655] path_openat+0x1105/0x2170 [ 577.151729][T26655] do_filp_open+0x109/0x230 [ 577.151761][T26655] do_sys_openat2+0xa6/0x110 [ 577.151796][T26655] __x64_sys_openat+0xf2/0x120 [ 577.151859][T26655] x64_sys_call+0x2e9c/0x2ff0 [ 577.151883][T26655] do_syscall_64+0xd2/0x200 [ 577.151905][T26655] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 577.151954][T26655] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 577.151982][T26655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.152025][T26655] RIP: 0033:0x7fdfc4afeb69 [ 577.152091][T26655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.152175][T26655] RSP: 002b:00007fdfc3167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.152200][T26655] RAX: ffffffffffffffda RBX: 00007fdfc4d25fa0 RCX: 00007fdfc4afeb69 [ 577.152217][T26655] RDX: 0000000000004040 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 577.152234][T26655] RBP: 00007fdfc3167090 R08: 0000000000000000 R09: 0000000000000000 [ 577.152250][T26655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.152266][T26655] R13: 0000000000000000 R14: 00007fdfc4d25fa0 R15: 00007fffac079de8 [ 577.152306][T26655] [ 577.809080][T26672] lo speed is unknown, defaulting to 1000 [ 577.814933][T26672] lo speed is unknown, defaulting to 1000 [ 577.821083][T26672] lo speed is unknown, defaulting to 1000 [ 577.827667][T26672] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 578.474222][T26673] lo speed is unknown, defaulting to 1000 [ 578.501818][T26672] lo speed is unknown, defaulting to 1000 [ 578.535318][T26672] lo speed is unknown, defaulting to 1000 [ 578.541492][T26672] lo speed is unknown, defaulting to 1000 [ 578.547611][T26672] lo speed is unknown, defaulting to 1000 [ 578.919778][T26672] lo speed is unknown, defaulting to 1000 [ 578.926196][T26672] lo speed is unknown, defaulting to 1000 [ 578.932517][T26672] lo speed is unknown, defaulting to 1000 [ 578.938736][T26673] siw: device registration error -23 [ 579.045416][T26677] siw: device registration error -23 [ 579.173492][ T1885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.183967][ T1885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.236410][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 579.236427][ T29] audit: type=1326 audit(1754199873.069:21425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.266977][ T29] audit: type=1326 audit(1754199873.069:21426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.291015][ T29] audit: type=1326 audit(1754199873.109:21427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.315421][ T29] audit: type=1326 audit(1754199873.109:21428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.339258][ T29] audit: type=1326 audit(1754199873.109:21429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.344637][T26692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6017'. [ 579.363664][ T29] audit: type=1326 audit(1754199873.109:21430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.396330][ T29] audit: type=1326 audit(1754199873.109:21431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.398151][T26693] netlink: 'syz.5.6017': attribute type 1 has an invalid length. [ 579.419964][ T29] audit: type=1326 audit(1754199873.109:21432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.420003][ T29] audit: type=1326 audit(1754199873.109:21433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.475651][ T29] audit: type=1326 audit(1754199873.109:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26681 comm="syz.1.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 579.512953][T26651] chnl_net:caif_netlink_parms(): no params data found [ 579.559652][T26690] netlink: 'syz.1.6016': attribute type 10 has an invalid length. [ 579.576359][ T1885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.587074][ T1885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.625299][T26696] netlink: 'syz.3.6018': attribute type 10 has an invalid length. [ 579.641844][ T1885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.652388][ T1885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.818032][ T1885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.828398][ T1885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.840337][T26651] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.848092][T26651] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.965977][T26714] siw: device registration error -23 [ 580.280116][T26651] bridge_slave_0: entered allmulticast mode [ 580.286845][T26651] bridge_slave_0: entered promiscuous mode [ 580.294041][T26651] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.301145][T26651] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.316600][T26651] bridge_slave_1: entered allmulticast mode [ 580.323443][T26651] bridge_slave_1: entered promiscuous mode [ 580.332293][T26717] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 580.332293][T26717] program syz.1.6023 not setting count and/or reply_len properly [ 580.434910][T26713] lo speed is unknown, defaulting to 1000 [ 580.460975][ T1885] bridge_slave_1: left allmulticast mode [ 580.466839][ T1885] bridge_slave_1: left promiscuous mode [ 580.472525][ T1885] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.490761][ T1885] bridge_slave_0: left allmulticast mode [ 580.496521][ T1885] bridge_slave_0: left promiscuous mode [ 580.502201][ T1885] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.563886][T26729] random: crng reseeded on system resumption [ 580.684459][ T1885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.700932][ T1885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.720632][ T1885] bond0 (unregistering): Released all slaves [ 580.750803][T26732] team_slave_0: entered promiscuous mode [ 580.756554][T26732] team_slave_1: entered promiscuous mode [ 580.765338][T26732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.782038][T26651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.829193][T26651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.911085][T26651] team0: Port device team_slave_0 added [ 580.934041][T26651] team0: Port device team_slave_1 added [ 580.981242][ T1885] hsr_slave_0: left promiscuous mode [ 580.993311][ T1885] hsr_slave_1: left promiscuous mode [ 581.006319][ T1885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.013957][ T1885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.022126][ T1885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.029608][ T1885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.041651][ T1885] team_slave_0: left promiscuous mode [ 581.047088][ T1885] team_slave_1: left promiscuous mode [ 581.052771][ T1885] veth1_macvtap: left promiscuous mode [ 581.058448][ T1885] veth0_macvtap: left promiscuous mode [ 581.064038][ T1885] veth1_vlan: left promiscuous mode [ 581.071214][ T1885] veth0_vlan: left promiscuous mode [ 581.165763][ T1885] team0 (unregistering): Port device team_slave_1 removed [ 581.179928][ T1885] team0 (unregistering): Port device team_slave_0 removed [ 581.217690][T26765] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 581.227254][T26651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.234324][T26651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.260573][T26651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.275522][T26651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.282569][T26651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.308533][T26651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.329402][T26772] random: crng reseeded on system resumption [ 581.364769][T26651] hsr_slave_0: entered promiscuous mode [ 581.371267][T26651] hsr_slave_1: entered promiscuous mode [ 581.377792][T26651] debugfs: 'hsr0' already exists in 'hsr' [ 581.383571][T26651] Cannot create hsr debugfs directory [ 581.490644][ T1885] IPVS: stop unused estimator thread 0... [ 581.724262][T26798] FAULT_INJECTION: forcing a failure. [ 581.724262][T26798] name failslab, interval 1, probability 0, space 0, times 0 [ 581.737033][T26798] CPU: 0 UID: 0 PID: 26798 Comm: syz.3.6044 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 581.737094][T26798] Tainted: [W]=WARN [ 581.737104][T26798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.737192][T26798] Call Trace: [ 581.737200][T26798] [ 581.737209][T26798] __dump_stack+0x1d/0x30 [ 581.737230][T26798] dump_stack_lvl+0xe8/0x140 [ 581.737310][T26798] dump_stack+0x15/0x1b [ 581.737327][T26798] should_fail_ex+0x265/0x280 [ 581.737415][T26798] ? __pfx_proc_self_get_link+0x10/0x10 [ 581.737447][T26798] ? proc_self_get_link+0x97/0x110 [ 581.737553][T26798] should_failslab+0x8c/0xb0 [ 581.737593][T26798] __kmalloc_cache_noprof+0x4c/0x320 [ 581.737674][T26798] ? __pfx_proc_self_get_link+0x10/0x10 [ 581.737704][T26798] proc_self_get_link+0x97/0x110 [ 581.737738][T26798] pick_link+0x47d/0x830 [ 581.737792][T26798] step_into+0x7b6/0x820 [ 581.737818][T26798] ? inode_permission+0x106/0x310 [ 581.737850][T26798] link_path_walk+0x571/0x900 [ 581.737926][T26798] path_openat+0x1de/0x2170 [ 581.737945][T26798] ? _parse_integer_limit+0x170/0x190 [ 581.738069][T26798] do_filp_open+0x109/0x230 [ 581.738097][T26798] do_sys_openat2+0xa6/0x110 [ 581.738140][T26798] __x64_sys_openat+0xf2/0x120 [ 581.738198][T26798] x64_sys_call+0x2e9c/0x2ff0 [ 581.738279][T26798] do_syscall_64+0xd2/0x200 [ 581.738315][T26798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 581.738360][T26798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 581.738382][T26798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.738410][T26798] RIP: 0033:0x7f349f03d4d0 [ 581.738430][T26798] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 581.738492][T26798] RSP: 002b:00007f349d69ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 581.738543][T26798] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f349f03d4d0 [ 581.738556][T26798] RDX: 0000000000000002 RSI: 00007f349d69efa0 RDI: 00000000ffffff9c [ 581.738573][T26798] RBP: 00007f349d69efa0 R08: 0000000000000000 R09: 0000000000000000 [ 581.738590][T26798] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 581.738606][T26798] R13: 0000000000000000 R14: 00007f349f265fa0 R15: 00007fffb652e498 [ 581.738630][T26798] [ 582.083995][T26811] lo speed is unknown, defaulting to 1000 [ 582.089821][T26811] lo speed is unknown, defaulting to 1000 [ 582.096053][T26811] lo speed is unknown, defaulting to 1000 [ 582.103033][T26811] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 582.115439][T26811] lo speed is unknown, defaulting to 1000 [ 582.121792][T26811] lo speed is unknown, defaulting to 1000 [ 582.128325][T26811] lo speed is unknown, defaulting to 1000 [ 582.134950][T26811] lo speed is unknown, defaulting to 1000 [ 582.141190][T26811] lo speed is unknown, defaulting to 1000 [ 582.269976][T26651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 582.320442][T26651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 582.381815][T26651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 582.417442][T26651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 582.500390][T26651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.512968][T26651] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.542689][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.549837][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.605117][T26833] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6049'. [ 582.614366][T26833] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6049'. [ 582.647695][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.654826][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.663869][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6049'. [ 582.714440][T26844] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6053'. [ 582.746406][T26844] 0·: renamed from 71· (while UP) [ 582.759574][T26844] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 582.788554][T26651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.855727][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6056'. [ 582.946657][T26651] veth0_vlan: entered promiscuous mode [ 582.960008][T26651] veth1_vlan: entered promiscuous mode [ 582.984295][T26651] veth0_macvtap: entered promiscuous mode [ 582.994154][T26651] veth1_macvtap: entered promiscuous mode [ 583.012744][T26651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.025836][T26651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.039573][ T176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.049503][ T176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.066232][ T176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.092385][ T176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.388257][T26888] lo speed is unknown, defaulting to 1000 [ 583.511095][T26896] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6063'. [ 583.514898][T26894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6062'. [ 583.520141][T26896] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6063'. [ 583.605962][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6065'. [ 583.638672][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6063'. [ 583.767864][T26913] sg_write: process 1556 (syz.3.6069) changed security contexts after opening file descriptor, this is not allowed. [ 583.854079][T26916] lo speed is unknown, defaulting to 1000 [ 583.993992][T26922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.050601][T26913] vlan3: entered allmulticast mode [ 584.055920][T26913] bond1: entered allmulticast mode [ 585.017922][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 585.017938][ T29] audit: type=1400 audit(1754199878.830:21828): avc: denied { ioctl } for pid=26950 comm="syz.1.6081" path="socket:[78810]" dev="sockfs" ino=78810 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.049106][ T29] audit: type=1400 audit(1754199878.830:21829): avc: denied { bind } for pid=26950 comm="syz.1.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.068522][ T29] audit: type=1326 audit(1754199878.840:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26950 comm="syz.1.6081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x0 [ 585.205653][T26959] siw: device registration error -23 [ 585.862801][T26971] netlink: 'syz.1.6085': attribute type 1 has an invalid length. [ 585.884961][ T29] audit: type=1400 audit(1754199879.059:21831): avc: denied { mounton } for pid=26958 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 585.906877][ T29] audit: type=1326 audit(1754199879.676:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 585.930554][ T29] audit: type=1326 audit(1754199879.676:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 585.954243][ T29] audit: type=1326 audit(1754199879.676:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 585.977984][ T29] audit: type=1326 audit(1754199879.676:21835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f39c043eba3 code=0x7ffc0000 [ 586.001418][ T29] audit: type=1326 audit(1754199879.745:21836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26965 comm="syz.0.6084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f39c043d61f code=0x7ffc0000 [ 586.073043][ T29] audit: type=1326 audit(1754199879.785:21837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26970 comm="syz.1.6085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 586.282822][T26986] lo speed is unknown, defaulting to 1000 [ 586.517069][T26987] lo speed is unknown, defaulting to 1000 [ 587.239695][ T1885] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.249555][ T1885] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.350700][ T1885] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.360557][ T1885] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.404449][T26958] lo speed is unknown, defaulting to 1000 [ 587.445574][ T1885] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.455549][ T1885] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.538551][ T1885] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.548492][ T1885] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.610667][T26958] chnl_net:caif_netlink_parms(): no params data found [ 587.750223][T26958] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.757567][T26958] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.765217][T26958] bridge_slave_0: entered allmulticast mode [ 587.771854][T26958] bridge_slave_0: entered promiscuous mode [ 587.779088][T26958] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.786225][T26958] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.793865][T26958] bridge_slave_1: entered allmulticast mode [ 587.801391][T26958] bridge_slave_1: entered promiscuous mode [ 587.915470][T27022] netlink: 'syz.1.6095': attribute type 1 has an invalid length. [ 587.971209][T27026] __nla_validate_parse: 8 callbacks suppressed [ 587.971228][T27026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6096'. [ 587.988457][T27026] netlink: 'syz.1.6096': attribute type 1 has an invalid length. [ 588.021836][ T1885] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 588.080513][ T1885] bond0 (unregistering): Released all slaves [ 588.102055][ T1885] bond1 (unregistering): Released all slaves [ 588.198196][T26958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.216238][T26958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.259253][T26958] team0: Port device team_slave_0 added [ 588.275208][T26958] team0: Port device team_slave_1 added [ 588.348552][T26958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.355585][T26958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.381690][T26958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.441863][ T1885] hsr_slave_0: left promiscuous mode [ 588.449491][ T1885] hsr_slave_1: left promiscuous mode [ 588.457325][ T1885] veth1_macvtap: left promiscuous mode [ 588.463908][ T1885] veth0_macvtap: left promiscuous mode [ 588.474716][ T1885] veth1_vlan: left promiscuous mode [ 588.482490][ T1885] veth0_vlan: left promiscuous mode [ 590.684055][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 590.684079][ T29] audit: type=1326 audit(1754199884.523:21938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.714048][ T29] audit: type=1326 audit(1754199884.543:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.737814][ T29] audit: type=1326 audit(1754199884.543:21940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.761588][ T29] audit: type=1326 audit(1754199884.543:21941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.785255][ T29] audit: type=1326 audit(1754199884.543:21942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.808918][ T29] audit: type=1326 audit(1754199884.543:21943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.832541][ T29] audit: type=1326 audit(1754199884.543:21944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.856127][ T29] audit: type=1326 audit(1754199884.543:21945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.879779][ T29] audit: type=1326 audit(1754199884.543:21946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.903426][ T29] audit: type=1326 audit(1754199884.543:21947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27072 comm="syz.1.6107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 590.976721][T26958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.983706][T26958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.009821][T26958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.048444][T27039] lo speed is unknown, defaulting to 1000 [ 591.079701][T27056] lo speed is unknown, defaulting to 1000 [ 591.149536][T26958] hsr_slave_0: entered promiscuous mode [ 591.170073][T26958] hsr_slave_1: entered promiscuous mode [ 591.179834][T26958] debugfs: 'hsr0' already exists in 'hsr' [ 591.185618][T26958] Cannot create hsr debugfs directory [ 591.407990][ T1885] IPVS: stop unused estimator thread 0... [ 591.604351][T26958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 591.634102][T26958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 591.662208][T26958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 591.686294][T26958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 591.710590][T27116] lo speed is unknown, defaulting to 1000 [ 591.816124][T27135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 591.861424][T26958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.958731][T26958] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.112545][T27139] netlink: 'syz.6.6115': attribute type 10 has an invalid length. [ 592.178683][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.185827][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.226609][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.233795][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.378647][T27153] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6118'. [ 592.387816][T27153] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6118'. [ 592.401738][T27149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6116'. [ 592.433044][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6118'. [ 592.454546][T26958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.783434][T27178] lo speed is unknown, defaulting to 1000 [ 592.930370][T27178] siw: device registration error -23 [ 593.078672][T26958] veth0_vlan: entered promiscuous mode [ 593.089197][T26958] veth1_vlan: entered promiscuous mode [ 593.114549][T26958] veth0_macvtap: entered promiscuous mode [ 593.139849][T26958] veth1_macvtap: entered promiscuous mode [ 593.170865][T26958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.196935][T26958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.223175][ T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.251960][ T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.271422][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.551712][T27190] lo speed is unknown, defaulting to 1000 [ 593.627510][T27190] siw: device registration error -23 [ 593.694718][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.056793][T27230] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6125'. [ 594.107053][T27230] 0·: renamed from 71· (while UP) [ 594.124189][T27230] 0·: failed to rename [ 594.140213][T27230] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 594.304223][T27204] block device autoloading is deprecated and will be removed. [ 594.655106][T27288] random: crng reseeded on system resumption [ 594.668165][T27293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.697288][T27293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.731257][T27293] bond_slave_1: entered promiscuous mode [ 594.756655][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6131'. [ 594.819060][T27293] bond0: (slave bond_slave_1): Releasing backup interface [ 594.831771][T27204] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 594.855405][T27204] vhci_hcd: invalid port number 253 [ 594.860677][T27204] vhci_hcd: invalid port number 253 [ 594.861599][T27308] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 594.898313][T27293] bond_slave_1 (unregistering): left promiscuous mode [ 595.241864][T27338] lo speed is unknown, defaulting to 1000 [ 595.319388][T27342] siw: device registration error -23 [ 596.032451][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 596.032486][ T29] audit: type=1400 audit(1754199889.861:22193): avc: denied { unlink } for pid=24365 comm="syz-executor" name="file0" dev="tmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 596.074917][T27344] bridge0: entered allmulticast mode [ 596.139988][ T29] audit: type=1400 audit(1754199889.920:22194): avc: denied { relabelfrom } for pid=27343 comm="syz.0.6139" name="" dev="pipefs" ino=80653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 596.162839][ T29] audit: type=1400 audit(1754199889.920:22195): avc: denied { relabelto } for pid=27343 comm="syz.0.6139" name="" dev="pipefs" ino=80653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:wireless_device_t:s0" [ 596.190358][ T29] audit: type=1400 audit(1754199889.960:22196): avc: denied { setopt } for pid=27345 comm="syz.5.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 596.210300][ T29] audit: type=1400 audit(1754199889.960:22197): avc: denied { create } for pid=27345 comm="syz.5.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 596.229935][ T29] audit: type=1400 audit(1754199889.970:22198): avc: denied { write } for pid=27345 comm="syz.5.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 596.259008][ T29] audit: type=1400 audit(1754199889.970:22199): avc: denied { write } for pid=27345 comm="syz.5.6140" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 596.282727][ T29] audit: type=1326 audit(1754199889.970:22200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.0.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 596.306389][ T29] audit: type=1326 audit(1754199889.970:22201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.0.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 596.341700][T27346] random: crng reseeded on system resumption [ 596.439948][T27350] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6142'. [ 596.449078][T27350] 0·: renamed from 71· (while UP) [ 596.460048][T27350] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 596.618860][ T29] audit: type=1326 audit(1754199890.159:22202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27347 comm="syz.0.6141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f39c043eb69 code=0x7ffc0000 [ 596.848294][T27379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6148'. [ 596.863228][T27379] netlink: 'syz.5.6148': attribute type 1 has an invalid length. [ 596.907938][T27383] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6149'. [ 596.917048][T27383] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6149'. [ 597.000353][T27383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6149'. [ 597.165420][T27411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6151'. [ 597.228277][T27416] siw: device registration error -23 [ 597.304933][T27420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.315722][T27420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.326943][T27420] bond_slave_1: entered promiscuous mode [ 597.333301][T27420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6154'. [ 597.381807][T27420] bond0: (slave bond_slave_1): Releasing backup interface [ 597.441815][T27420] bond_slave_1 (unregistering): left promiscuous mode [ 597.662653][T27434] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6159'. [ 597.673152][T27434] netlink: 'syz.6.6159': attribute type 1 has an invalid length. [ 597.676683][T27431] lo speed is unknown, defaulting to 1000 [ 598.469838][T27453] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 598.469838][T27453] program syz.0.6164 not setting count and/or reply_len properly [ 598.675462][T27442] lo speed is unknown, defaulting to 1000 [ 598.735126][T27455] 0·: renamed from hsr0 (while UP) [ 598.756312][T27455] 0·: entered allmulticast mode [ 598.761500][T27455] hsr_slave_0: entered allmulticast mode [ 598.767232][T27455] hsr_slave_1: entered allmulticast mode [ 598.791586][T27455] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 598.816757][T27458] netlink: 'syz.3.6166': attribute type 10 has an invalid length. [ 599.104790][T27468] __nla_validate_parse: 1 callbacks suppressed [ 599.104835][T27468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6170'. [ 599.155755][T27470] netlink: 'syz.5.6171': attribute type 10 has an invalid length. [ 599.176845][T27473] netlink: 'syz.1.6170': attribute type 1 has an invalid length. [ 599.767714][T27489] bridge0: port 3(batadv1) entered blocking state [ 599.774263][T27489] bridge0: port 3(batadv1) entered disabled state [ 599.801914][T27489] batadv1: entered allmulticast mode [ 599.823482][T27489] batadv1: entered promiscuous mode [ 599.925630][T27491] lo speed is unknown, defaulting to 1000 [ 600.063083][T27491] siw: device registration error -23 [ 600.287510][ T176] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 600.296845][ T176] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 600.364433][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6183'. [ 600.375259][T27504] netlink: 'syz.1.6183': attribute type 1 has an invalid length. [ 600.678261][T27530] lo speed is unknown, defaulting to 1000 [ 600.979038][T27535] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 601.304638][T27546] lo speed is unknown, defaulting to 1000 [ 601.537197][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 601.537240][ T29] audit: type=1326 audit(1754199895.339:22545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.642892][T27551] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6193'. [ 601.662082][ T29] audit: type=1326 audit(1754199895.379:22546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.685786][ T29] audit: type=1326 audit(1754199895.379:22547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.709545][ T29] audit: type=1326 audit(1754199895.379:22548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.733173][ T29] audit: type=1326 audit(1754199895.379:22549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.756859][ T29] audit: type=1326 audit(1754199895.379:22550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.780598][ T29] audit: type=1326 audit(1754199895.379:22551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.804265][ T29] audit: type=1326 audit(1754199895.379:22552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.827913][ T29] audit: type=1326 audit(1754199895.379:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.851952][ T29] audit: type=1326 audit(1754199895.379:22554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.3.6192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 601.997828][T27551] 0·: renamed from hsr0 (while UP) [ 602.051967][T27551] 0·: entered allmulticast mode [ 602.056950][T27551] hsr_slave_0: entered allmulticast mode [ 602.062725][T27551] hsr_slave_1: entered allmulticast mode [ 602.095060][T27551] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 602.268372][T27560] netlink: 'syz.6.6197': attribute type 10 has an invalid length. [ 602.348556][T27566] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 602.348556][T27566] program syz.1.6199 not setting count and/or reply_len properly [ 602.611341][T27598] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6208'. [ 602.628433][T27598] 1·: renamed from 70· (while UP) [ 602.636780][T27598] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 603.057449][T27648] sg_write: data in/out 196608/1 bytes for SCSI command 0xdb-- guessing data in; [ 603.057449][T27648] program syz.6.6212 not setting count and/or reply_len properly [ 603.407580][T27687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.425058][T27687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.439428][T27687] bond_slave_1: entered promiscuous mode [ 603.453707][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6222'. [ 603.520905][T27687] bond0: (slave bond_slave_1): Releasing backup interface [ 603.537960][T27687] bond_slave_1 (unregistering): left promiscuous mode [ 603.667005][T27705] lo speed is unknown, defaulting to 1000 [ 603.803108][T27705] siw: device registration error -23 [ 604.351293][T27755] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6235'. [ 604.427083][T27764] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6239'. [ 604.436721][T27764] 1·: renamed from 70· (while UP) [ 604.444182][T27764] 1·: failed to rename [ 604.448396][T27764] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 605.182377][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.192776][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.256735][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.267170][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.302911][T27853] lo speed is unknown, defaulting to 1000 [ 605.331357][T27882] lo speed is unknown, defaulting to 1000 [ 605.358429][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.368903][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.427610][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.438096][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.458152][T27853] chnl_net:caif_netlink_parms(): no params data found [ 605.496628][T27903] random: crng reseeded on system resumption [ 605.528088][T27853] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.535359][T27853] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.546625][T27853] bridge_slave_0: entered allmulticast mode [ 605.559793][T27853] bridge_slave_0: entered promiscuous mode [ 605.570135][T27853] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.577377][T27853] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.585096][T27853] bridge_slave_1: entered allmulticast mode [ 605.591771][T27853] bridge_slave_1: entered promiscuous mode [ 605.621247][T27853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.643067][T27853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.659547][ T37] bridge_slave_1: left allmulticast mode [ 605.665264][ T37] bridge_slave_1: left promiscuous mode [ 605.671149][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.681162][ T37] bridge_slave_0: left allmulticast mode [ 605.686933][ T37] bridge_slave_0: left promiscuous mode [ 605.692655][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.797035][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.808548][ T37] bond0 (unregistering): Released all slaves [ 605.829805][T27930] random: crng reseeded on system resumption [ 605.837724][T27853] team0: Port device team_slave_0 added [ 605.849667][T27853] team0: Port device team_slave_1 added [ 605.915573][T27853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.922625][T27853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.948707][T27853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.971094][ T37] hsr_slave_0: left promiscuous mode [ 605.990922][ T37] hsr_slave_1: left promiscuous mode [ 605.999049][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.006509][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.030806][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.038300][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.066308][ T37] team_slave_0: left promiscuous mode [ 606.071772][ T37] team_slave_1: left promiscuous mode [ 606.081853][ T37] veth1_macvtap: left promiscuous mode [ 606.091961][ T37] veth0_macvtap: left promiscuous mode [ 606.098407][ T37] veth1_vlan: left promiscuous mode [ 606.103980][ T37] veth0_vlan: left promiscuous mode [ 606.248694][ T37] team0 (unregistering): Port device team_slave_1 removed [ 606.265545][ T37] team0 (unregistering): Port device team_slave_0 removed [ 606.305301][T27853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.312331][T27853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.338384][T27853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.350991][T27968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.363760][T27968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.380648][T27963] block device autoloading is deprecated and will be removed. [ 606.412044][T27853] hsr_slave_0: entered promiscuous mode [ 606.419665][T27853] hsr_slave_1: entered promiscuous mode [ 606.446482][T27853] debugfs: 'hsr0' already exists in 'hsr' [ 606.452255][T27853] Cannot create hsr debugfs directory [ 606.458220][T27965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'. [ 606.582505][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 606.582524][ T29] audit: type=1400 audit(1754199900.371:23046): avc: denied { add_name } for pid=27972 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.614713][ T29] audit: type=1400 audit(1754199900.371:23047): avc: denied { create } for pid=27972 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 606.637426][ T29] audit: type=1400 audit(1754199900.371:23048): avc: denied { write } for pid=27972 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.link" dev="tmpfs" ino=43078 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 606.663854][ T29] audit: type=1400 audit(1754199900.371:23049): avc: denied { append } for pid=27972 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" dev="tmpfs" ino=43078 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 606.688444][ T29] audit: type=1400 audit(1754199900.391:23050): avc: denied { remove_name } for pid=27989 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=43078 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.712192][ T29] audit: type=1400 audit(1754199900.391:23051): avc: denied { unlink } for pid=27989 comm="rm" name="resolv.conf.eth9.link" dev="tmpfs" ino=43078 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 606.738515][ T29] audit: type=1400 audit(1754199900.431:23052): avc: denied { read write } for pid=26398 comm="syz-executor" name="loop1" dev="devtmpfs" ino=5269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.763038][ T29] audit: type=1400 audit(1754199900.431:23053): avc: denied { open } for pid=26398 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=5269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.788640][ T29] audit: type=1400 audit(1754199900.431:23054): avc: denied { ioctl } for pid=26398 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=5269 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.814578][ T29] audit: type=1400 audit(1754199900.491:23055): avc: denied { unlink } for pid=26651 comm="syz-executor" name="file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.844965][T27994] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6268'. [ 606.868898][T27994] 0·: renamed from hsr0 (while UP) [ 606.878964][T27994] 0·: failed to rename [ 606.883122][T27994] 0·: entered allmulticast mode [ 606.888063][T27994] hsr_slave_0: entered allmulticast mode [ 606.893780][T27994] hsr_slave_1: entered allmulticast mode [ 606.904125][T27994] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 606.924193][T28015] random: crng reseeded on system resumption [ 606.939621][ T37] IPVS: stop unused estimator thread 0... [ 607.001255][T28018] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6272'. [ 607.010576][T28018] 1·: renamed from 70· (while UP) [ 607.017674][T28018] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 607.096145][T28029] loop1: detected capacity change from 0 to 128 [ 607.105079][T28029] vfat: Unknown parameter 'shor|name' [ 607.145544][T28034] netlink: 'syz.5.6275': attribute type 32 has an invalid length. [ 607.157530][T28034] (unnamed net_device) (uninitialized): option coupled_control: invalid value (6) [ 607.185792][T27853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 607.220928][T27853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 607.224247][T27853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 607.245450][T27853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 607.305211][T28042] netlink: 'syz.0.6277': attribute type 10 has an invalid length. [ 607.387728][T27853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.446051][T27853] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.460022][T10670] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.467173][T10670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.501865][T10670] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.508999][T10670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.540836][T28073] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6284'. [ 607.562399][T28073] 0·: renamed from 71· (while UP) [ 607.569655][T28073] 0·: failed to rename [ 607.576081][T28073] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 607.688746][T28087] bridge0: port 4(batadv2) entered blocking state [ 607.695908][T28087] bridge0: port 4(batadv2) entered disabled state [ 607.708144][T28087] batadv2: entered allmulticast mode [ 607.717800][T28087] batadv2: entered promiscuous mode [ 607.739168][T27853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.796627][T28100] loop1: detected capacity change from 0 to 128 [ 607.808430][T28100] vfat: Unknown parameter 'shor|name' [ 607.969689][T27853] veth0_vlan: entered promiscuous mode [ 607.979199][T27853] veth1_vlan: entered promiscuous mode [ 608.002805][T27853] veth0_macvtap: entered promiscuous mode [ 608.011542][T27853] veth1_macvtap: entered promiscuous mode [ 608.025469][T27853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.038200][T27853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.049741][ T1885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.063054][ T1885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.103230][ T1885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.127122][ T1885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.128991][T28125] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6296'. [ 608.146387][T28125] 1·: renamed from 70· (while UP) [ 608.153714][T28125] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 608.192041][T10670] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 608.201385][T10670] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 608.230657][T28131] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6252'. [ 608.246766][T28136] loop1: detected capacity change from 0 to 1024 [ 608.260213][T28136] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 608.270928][T28131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6252'. [ 608.291589][T28136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.436377][T26398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.521268][T28165] loop1: detected capacity change from 0 to 128 [ 608.529094][T28165] vfat: Unknown parameter 'shor|name' [ 608.631727][T28175] bridge0: port 3(batadv1) entered blocking state [ 608.638342][T28175] bridge0: port 3(batadv1) entered disabled state [ 608.645452][T28175] batadv1: entered allmulticast mode [ 608.651343][T28175] batadv1: entered promiscuous mode [ 608.656137][T28178] loop1: detected capacity change from 0 to 1024 [ 608.679934][T28178] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 608.688403][T28180] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6318'. [ 608.698825][T28180] 0·: renamed from hsr0 (while UP) [ 608.707242][T28178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.707900][T28180] 0·: entered allmulticast mode [ 608.724373][T28180] hsr_slave_0: entered allmulticast mode [ 608.730036][T28180] hsr_slave_1: entered allmulticast mode [ 608.736469][T28180] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 608.796901][T28187] netlink: 'syz.6.6320': attribute type 10 has an invalid length. [ 608.838846][T26398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.145635][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 609.155295][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 609.328206][T28206] 0·: renamed from 71· (while UP) [ 609.335004][T28206] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 609.499281][T28217] random: crng reseeded on system resumption [ 609.664863][T28222] __nla_validate_parse: 1 callbacks suppressed [ 609.664878][T28222] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6331'. [ 609.684141][T28222] 0·: renamed from 71· (while UP) [ 609.691272][T28222] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 609.730646][T28225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6332'. [ 609.741122][T28225] netlink: 'syz.5.6332': attribute type 1 has an invalid length. [ 609.744453][T28227] bridge0: port 3(batadv1) entered blocking state [ 609.755617][T28227] bridge0: port 3(batadv1) entered disabled state [ 609.763340][T28227] batadv1: entered allmulticast mode [ 609.769706][T28227] batadv1: entered promiscuous mode [ 609.811802][T28229] netlink: 'syz.1.6334': attribute type 10 has an invalid length. [ 609.903746][T28242] random: crng reseeded on system resumption [ 609.975081][T28250] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6343'. [ 609.985007][T28250] 1·: renamed from 70· (while UP) [ 609.993574][T28250] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 610.081381][T28259] bridge0: port 3(batadv1) entered blocking state [ 610.087895][T28259] bridge0: port 3(batadv1) entered disabled state [ 610.095564][T28259] batadv1: entered allmulticast mode [ 610.102111][T28259] batadv1: entered promiscuous mode [ 610.145361][T28260] lo speed is unknown, defaulting to 1000 [ 610.248851][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 610.258130][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 610.592367][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 610.601650][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 610.718156][T28276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.726877][T28276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.736993][T28276] bond_slave_1: entered promiscuous mode [ 610.745432][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6349'. [ 610.765963][T28276] bond0: (slave bond_slave_1): Releasing backup interface [ 610.793379][T28276] bond_slave_1 (unregistering): left promiscuous mode [ 610.887848][T28283] FAULT_INJECTION: forcing a failure. [ 610.887848][T28283] name failslab, interval 1, probability 0, space 0, times 0 [ 610.900603][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.3.6352 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 610.900643][T28283] Tainted: [W]=WARN [ 610.900651][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.900666][T28283] Call Trace: [ 610.900675][T28283] [ 610.900685][T28283] __dump_stack+0x1d/0x30 [ 610.900777][T28283] dump_stack_lvl+0xe8/0x140 [ 610.900804][T28283] dump_stack+0x15/0x1b [ 610.900904][T28283] should_fail_ex+0x265/0x280 [ 610.900948][T28283] should_failslab+0x8c/0xb0 [ 610.900979][T28283] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 610.901090][T28283] ? shmem_alloc_inode+0x34/0x50 [ 610.901120][T28283] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 610.901147][T28283] shmem_alloc_inode+0x34/0x50 [ 610.901174][T28283] alloc_inode+0x3d/0x170 [ 610.901258][T28283] new_inode+0x1d/0xe0 [ 610.901329][T28283] shmem_get_inode+0x244/0x750 [ 610.901358][T28283] __shmem_file_setup+0x113/0x210 [ 610.901429][T28283] shmem_file_setup+0x3b/0x50 [ 610.901467][T28283] __se_sys_memfd_create+0x2c3/0x590 [ 610.901495][T28283] __x64_sys_memfd_create+0x31/0x40 [ 610.901577][T28283] x64_sys_call+0x2abe/0x2ff0 [ 610.901685][T28283] do_syscall_64+0xd2/0x200 [ 610.901797][T28283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 610.901890][T28283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 610.901975][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.901995][T28283] RIP: 0033:0x7f09d3b8eb69 [ 610.902011][T28283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.902116][T28283] RSP: 002b:00007f09d21eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 610.902148][T28283] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f09d3b8eb69 [ 610.902166][T28283] RDX: 00007f09d21eeef0 RSI: 0000000000000000 RDI: 00007f09d3c12784 [ 610.902183][T28283] RBP: 0000200000000640 R08: 00007f09d21eebb7 R09: 00007f09d21eee40 [ 610.902199][T28283] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 610.902211][T28283] R13: 00007f09d21eeef0 R14: 00007f09d21eeeb0 R15: 00002000000001c0 [ 610.902230][T28283] [ 611.167922][T28292] random: crng reseeded on system resumption [ 611.335317][T28314] bridge0: port 3(batadv1) entered blocking state [ 611.341829][T28314] bridge0: port 3(batadv1) entered disabled state [ 611.348590][T28314] batadv1: entered allmulticast mode [ 611.354906][T28314] batadv1: entered promiscuous mode [ 611.403789][T28317] lo speed is unknown, defaulting to 1000 [ 611.607640][ T29] kauditd_printk_skb: 975 callbacks suppressed [ 611.607658][ T29] audit: type=1400 audit(1754199905.374:24029): avc: denied { create } for pid=28337 comm="syz.1.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 611.627139][T28338] siw: device registration error -23 [ 611.637344][ T29] audit: type=1400 audit(1754199905.384:24030): avc: denied { create } for pid=28337 comm="syz.1.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 611.659349][ T29] audit: type=1400 audit(1754199905.384:24031): avc: denied { write } for pid=28337 comm="syz.1.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 611.708263][ T29] audit: type=1400 audit(1754199905.474:24032): avc: denied { read } for pid=28342 comm="syz.0.6374" dev="nsfs" ino=4026532912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 611.729752][ T29] audit: type=1400 audit(1754199905.474:24033): avc: denied { open } for pid=28342 comm="syz.0.6374" path="net:[4026532912]" dev="nsfs" ino=4026532912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 611.753942][ T29] audit: type=1400 audit(1754199905.474:24034): avc: denied { ioctl } for pid=28342 comm="syz.0.6374" path="socket:[83575]" dev="sockfs" ino=83575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 611.779864][ T29] audit: type=1400 audit(1754199905.474:24035): avc: denied { module_request } for pid=28342 comm="syz.0.6374" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 611.802269][ T29] audit: type=1400 audit(1754199905.504:24036): avc: denied { sys_module } for pid=28342 comm="syz.0.6374" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 611.823970][ T29] audit: type=1400 audit(1754199905.554:24037): avc: denied { mounton } for pid=28342 comm="syz.0.6374" path="/64" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 611.846325][ T29] audit: type=1326 audit(1754199905.554:24038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.1.6375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 611.849189][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 611.879219][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 611.940602][T28354] random: crng reseeded on system resumption [ 612.012224][T28358] bridge0: port 4(batadv2) entered blocking state [ 612.018780][T28358] bridge0: port 4(batadv2) entered disabled state [ 612.036347][T28362] program syz.3.6381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 612.040894][T28358] batadv2: entered allmulticast mode [ 612.051044][T28362] FAULT_INJECTION: forcing a failure. [ 612.051044][T28362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.052147][T28358] batadv2: entered promiscuous mode [ 612.064276][T28362] CPU: 0 UID: 0 PID: 28362 Comm: syz.3.6381 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 612.064323][T28362] Tainted: [W]=WARN [ 612.064333][T28362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.064362][T28362] Call Trace: [ 612.064371][T28362] [ 612.064384][T28362] __dump_stack+0x1d/0x30 [ 612.064412][T28362] dump_stack_lvl+0xe8/0x140 [ 612.064441][T28362] dump_stack+0x15/0x1b [ 612.064529][T28362] should_fail_ex+0x265/0x280 [ 612.064579][T28362] should_fail+0xb/0x20 [ 612.064620][T28362] should_fail_usercopy+0x1a/0x20 [ 612.064648][T28362] _copy_to_user+0x20/0xa0 [ 612.064706][T28362] scsi_ioctl+0x13c8/0x14d0 [ 612.064736][T28362] ? avc_has_perm+0xf7/0x180 [ 612.064771][T28362] ? file_has_perm+0x324/0x370 [ 612.064818][T28362] ? do_vfs_ioctl+0x866/0xe10 [ 612.064845][T28362] sg_ioctl+0xdf6/0x1360 [ 612.064937][T28362] ? __pfx_sg_ioctl+0x10/0x10 [ 612.064962][T28362] __se_sys_ioctl+0xcb/0x140 [ 612.065075][T28362] __x64_sys_ioctl+0x43/0x50 [ 612.065182][T28362] x64_sys_call+0x1816/0x2ff0 [ 612.065213][T28362] do_syscall_64+0xd2/0x200 [ 612.065246][T28362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 612.065324][T28362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 612.065355][T28362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.065384][T28362] RIP: 0033:0x7f09d3b8eb69 [ 612.065405][T28362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.065491][T28362] RSP: 002b:00007f09d21ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.065524][T28362] RAX: ffffffffffffffda RBX: 00007f09d3db5fa0 RCX: 00007f09d3b8eb69 [ 612.065542][T28362] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 612.065560][T28362] RBP: 00007f09d21ef090 R08: 0000000000000000 R09: 0000000000000000 [ 612.065575][T28362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.065593][T28362] R13: 0000000000000000 R14: 00007f09d3db5fa0 R15: 00007ffc00375978 [ 612.065620][T28362] [ 612.371205][T28373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6386'. [ 612.372523][T28369] siw: device registration error -23 [ 612.410843][T28373] netlink: 'syz.0.6386': attribute type 1 has an invalid length. [ 612.516916][ T176] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 612.526272][ T176] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 612.591576][T28398] lo speed is unknown, defaulting to 1000 [ 612.639348][T28401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.662060][T28401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.681005][T28403] block device autoloading is deprecated and will be removed. [ 612.741152][T28406] FAULT_INJECTION: forcing a failure. [ 612.741152][T28406] name failslab, interval 1, probability 0, space 0, times 0 [ 612.753885][T28406] CPU: 1 UID: 0 PID: 28406 Comm: syz.6.6395 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 612.753983][T28406] Tainted: [W]=WARN [ 612.753992][T28406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.754056][T28406] Call Trace: [ 612.754065][T28406] [ 612.754075][T28406] __dump_stack+0x1d/0x30 [ 612.754100][T28406] dump_stack_lvl+0xe8/0x140 [ 612.754118][T28406] dump_stack+0x15/0x1b [ 612.754134][T28406] should_fail_ex+0x265/0x280 [ 612.754282][T28406] ? __io_uring_add_tctx_node+0xbf/0x2d0 [ 612.754324][T28406] should_failslab+0x8c/0xb0 [ 612.754356][T28406] __kmalloc_cache_noprof+0x4c/0x320 [ 612.754460][T28406] __io_uring_add_tctx_node+0xbf/0x2d0 [ 612.754572][T28406] __io_uring_add_tctx_node_from_submit+0x69/0xc0 [ 612.754616][T28406] __se_sys_io_uring_enter+0x195b/0x1b70 [ 612.754690][T28406] ? 0xffffffff81000000 [ 612.754707][T28406] ? __rcu_read_unlock+0x4f/0x70 [ 612.754750][T28406] ? get_pid_task+0x96/0xd0 [ 612.754833][T28406] ? proc_fail_nth_write+0x13b/0x160 [ 612.754899][T28406] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 612.754924][T28406] ? vfs_write+0x75e/0x8e0 [ 612.754945][T28406] ? __rcu_read_unlock+0x4f/0x70 [ 612.754995][T28406] ? __fget_files+0x184/0x1c0 [ 612.755083][T28406] ? fput+0x8f/0xc0 [ 612.755121][T28406] __x64_sys_io_uring_enter+0x78/0x90 [ 612.755217][T28406] x64_sys_call+0x2de1/0x2ff0 [ 612.755242][T28406] do_syscall_64+0xd2/0x200 [ 612.755272][T28406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 612.755304][T28406] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 612.755324][T28406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.755425][T28406] RIP: 0033:0x7fe7d6b4eb69 [ 612.755441][T28406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.755460][T28406] RSP: 002b:00007fe7d5142038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 612.755479][T28406] RAX: ffffffffffffffda RBX: 00007fe7d6d76160 RCX: 00007fe7d6b4eb69 [ 612.755580][T28406] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000003 [ 612.755597][T28406] RBP: 00007fe7d5142090 R08: 0000000000000000 R09: 0000000000000e00 [ 612.755613][T28406] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 612.755629][T28406] R13: 0000000000000000 R14: 00007fe7d6d76160 R15: 00007ffc0c9fe7f8 [ 612.755649][T28406] [ 613.001151][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6397'. [ 613.012337][T28407] random: crng reseeded on system resumption [ 613.395554][T28422] netlink: 'syz.3.6402': attribute type 10 has an invalid length. [ 613.624658][T28433] lo speed is unknown, defaulting to 1000 [ 613.672637][T28439] siw: device registration error -23 [ 614.045626][T28454] netlink: 'syz.6.6410': attribute type 10 has an invalid length. [ 614.305786][T28461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6415'. [ 614.407180][T28470] bridge0: port 4(batadv2) entered blocking state [ 614.413848][T28470] bridge0: port 4(batadv2) entered disabled state [ 614.431434][T28470] batadv2: entered allmulticast mode [ 614.449972][T28470] batadv2: entered promiscuous mode [ 614.537233][T28461] lo speed is unknown, defaulting to 1000 [ 614.694491][T28488] FAULT_INJECTION: forcing a failure. [ 614.694491][T28488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.707678][T28488] CPU: 0 UID: 0 PID: 28488 Comm: syz.1.6425 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 614.707714][T28488] Tainted: [W]=WARN [ 614.707722][T28488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.707739][T28488] Call Trace: [ 614.707748][T28488] [ 614.707759][T28488] __dump_stack+0x1d/0x30 [ 614.707811][T28488] dump_stack_lvl+0xe8/0x140 [ 614.707837][T28488] dump_stack+0x15/0x1b [ 614.707854][T28488] should_fail_ex+0x265/0x280 [ 614.707919][T28488] should_fail+0xb/0x20 [ 614.708021][T28488] should_fail_usercopy+0x1a/0x20 [ 614.708043][T28488] strncpy_from_user+0x25/0x230 [ 614.708082][T28488] strncpy_from_user_nofault+0x68/0xf0 [ 614.708182][T28488] bpf_probe_read_user_str+0x2a/0x70 [ 614.708214][T28488] bpf_prog_9deb4dd9eeaa7b3b+0x46/0x4e [ 614.708232][T28488] bpf_trace_run2+0x104/0x1c0 [ 614.708262][T28488] ? selinux_release_secctx+0x45/0x80 [ 614.708360][T28488] ? selinux_release_secctx+0x45/0x80 [ 614.708423][T28488] kfree+0x27b/0x320 [ 614.708452][T28488] ? security_sid_to_context+0x27/0x40 [ 614.708582][T28488] selinux_release_secctx+0x45/0x80 [ 614.708607][T28488] security_release_secctx+0x42/0x60 [ 614.708639][T28488] audit_log_task_context+0xb3/0x190 [ 614.708681][T28488] audit_log_task+0xf4/0x250 [ 614.708866][T28488] audit_seccomp+0x61/0x100 [ 614.708899][T28488] ? __seccomp_filter+0x68c/0x10d0 [ 614.708928][T28488] __seccomp_filter+0x69d/0x10d0 [ 614.708958][T28488] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 614.709036][T28488] ? vfs_write+0x75e/0x8e0 [ 614.709126][T28488] ? __rcu_read_unlock+0x4f/0x70 [ 614.709147][T28488] ? __fget_files+0x184/0x1c0 [ 614.709249][T28488] __secure_computing+0x82/0x150 [ 614.709323][T28488] syscall_trace_enter+0xcf/0x1e0 [ 614.709366][T28488] do_syscall_64+0xac/0x200 [ 614.709397][T28488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 614.709427][T28488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 614.709447][T28488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.709529][T28488] RIP: 0033:0x7f2949a2eb69 [ 614.709548][T28488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.709572][T28488] RSP: 002b:00007f294808f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 614.709598][T28488] RAX: ffffffffffffffda RBX: 00007f2949c55fa0 RCX: 00007f2949a2eb69 [ 614.709611][T28488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.709624][T28488] RBP: 00007f294808f090 R08: 0000000000000000 R09: 0000000000000000 [ 614.709688][T28488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.709704][T28488] R13: 0000000000000000 R14: 00007f2949c55fa0 R15: 00007fffe5e039d8 [ 614.709760][T28488] [ 614.989557][ T31] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 614.998880][ T31] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 615.227863][T28499] siw: device registration error -23 [ 616.031677][T28508] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6432'. [ 616.046469][T28508] 0·: renamed from 71· (while UP) [ 616.105047][T28514] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6435'. [ 616.114088][T28514] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6435'. [ 616.129671][T28508] 0·: failed to rename [ 616.133844][T28508] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 616.163508][T28514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6435'. [ 616.308818][T28534] random: crng reseeded on system resumption [ 616.379366][T28537] block device autoloading is deprecated and will be removed. [ 616.459575][T28540] siw: device registration error -23 [ 616.675090][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 616.675109][ T29] audit: type=1400 audit(1754199910.429:24426): avc: denied { unlink } for pid=26958 comm="syz-executor" name="file0" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 616.938940][T28551] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6450'. [ 616.968353][ T29] audit: type=1400 audit(1754199910.708:24427): avc: denied { create } for pid=28546 comm="syz.0.6448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 616.988249][ T29] audit: type=1400 audit(1754199910.718:24428): avc: denied { write } for pid=28546 comm="syz.0.6448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 617.034837][T28551] 1·: renamed from 70· (while UP) [ 617.130200][T28551] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 617.194857][T28559] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6454'. [ 617.203993][T28559] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6454'. [ 617.206893][ T29] audit: type=1400 audit(1754199910.957:24429): avc: denied { write } for pid=28560 comm="syz.3.6455" name="raw" dev="proc" ino=4026533579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 617.242317][ T29] audit: type=1400 audit(1754199910.997:24430): avc: denied { ioctl } for pid=28560 comm="syz.3.6455" path="socket:[84980]" dev="sockfs" ino=84980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 617.242366][ T29] audit: type=1400 audit(1754199910.997:24431): avc: denied { ioctl } for pid=28560 comm="syz.3.6455" path="socket:[84978]" dev="sockfs" ino=84978 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 617.243235][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6454'. [ 617.362231][T28565] block device autoloading is deprecated and will be removed. [ 617.423256][T28574] random: crng reseeded on system resumption [ 617.535193][ T29] audit: type=1400 audit(1754199911.276:24432): avc: denied { read write } for pid=26398 comm="syz-executor" name="loop1" dev="devtmpfs" ino=5298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.560022][ T29] audit: type=1400 audit(1754199911.276:24433): avc: denied { open } for pid=26398 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=5298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.584563][ T29] audit: type=1400 audit(1754199911.276:24434): avc: denied { ioctl } for pid=26398 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=5298 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.627883][ T29] audit: type=1326 audit(1754199911.376:24435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.1.6461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 617.761947][T28582] lo speed is unknown, defaulting to 1000 [ 617.795638][T28582] siw: device registration error -23 [ 618.058558][T28591] lo speed is unknown, defaulting to 1000 [ 618.073334][T28594] loop1: detected capacity change from 0 to 1024 [ 618.080467][T28594] EXT4-fs: Ignoring removed nobh option [ 618.086225][T28594] EXT4-fs: Ignoring removed bh option [ 618.152832][T28600] siw: device registration error -23 [ 618.278654][T28594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.445555][T28604] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6468'. [ 618.454752][T28604] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6468'. [ 618.673503][T28607] bridge0: port 4(batadv2) entered blocking state [ 618.680497][T28607] bridge0: port 4(batadv2) entered disabled state [ 618.693705][T28607] batadv2: entered allmulticast mode [ 618.700062][T28607] batadv2: entered promiscuous mode [ 618.778625][T26398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.862526][T28611] bridge0: port 5(batadv3) entered blocking state [ 618.869237][T28611] bridge0: port 5(batadv3) entered disabled state [ 618.880667][T28611] batadv3: entered allmulticast mode [ 618.886577][T28611] batadv3: entered promiscuous mode [ 618.896070][T28618] bridge0: port 5(batadv3) entered blocking state [ 618.902741][T28618] bridge0: port 5(batadv3) entered disabled state [ 618.909448][T28618] batadv3: entered allmulticast mode [ 618.915400][T28618] batadv3: entered promiscuous mode [ 618.978477][T28622] netlink: 'syz.6.6476': attribute type 1 has an invalid length. [ 619.002256][T28626] netlink: 'syz.5.6479': attribute type 10 has an invalid length. [ 619.124122][T28636] bridge0: port 4(batadv2) entered blocking state [ 619.130807][T28636] bridge0: port 4(batadv2) entered disabled state [ 619.146448][T28636] batadv2: entered allmulticast mode [ 619.160642][T28636] batadv2: entered promiscuous mode [ 619.179296][ T1885] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 619.188598][ T1885] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 619.240861][T28648] lo speed is unknown, defaulting to 1000 [ 619.454696][ T31] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 619.464071][ T31] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 619.510197][T28657] 1·: renamed from 70· (while UP) [ 619.558507][T28657] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 619.597605][ T31] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 619.607132][ T31] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 619.653606][ T31] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 619.662920][ T31] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 619.735832][T28662] netlink: 'syz.3.6493': attribute type 1 has an invalid length. [ 619.779877][T28670] netlink: 'syz.1.6497': attribute type 10 has an invalid length. [ 620.027832][T28690] netlink: 'syz.6.6506': attribute type 1 has an invalid length. [ 620.383226][T28711] lo speed is unknown, defaulting to 1000 [ 620.708052][T28717] 0·: renamed from 71· (while UP) [ 620.717425][T28717] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 620.771469][T28723] netlink: 'syz.3.6521': attribute type 1 has an invalid length. [ 620.855673][T28729] block device autoloading is deprecated and will be removed. [ 621.164975][T28755] __nla_validate_parse: 13 callbacks suppressed [ 621.164993][T28755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6534'. [ 621.182572][T28755] netlink: 'syz.5.6534': attribute type 1 has an invalid length. [ 621.352616][T28768] block device autoloading is deprecated and will be removed. [ 621.541353][T28773] lo speed is unknown, defaulting to 1000 [ 621.601105][T28773] siw: device registration error -23 [ 621.738890][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 621.738906][ T29] audit: type=1400 audit(1754199915.474:24835): avc: denied { create } for pid=28776 comm="syz.6.6540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 621.822144][ T29] audit: type=1326 audit(1754199915.554:24836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28774 comm="syz.1.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 621.847820][ T29] audit: type=1326 audit(1754199915.554:24837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28774 comm="syz.1.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 621.947913][ T29] audit: type=1326 audit(1754199915.684:24838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 621.971781][ T29] audit: type=1326 audit(1754199915.684:24839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 621.995695][ T29] audit: type=1326 audit(1754199915.684:24840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 622.019707][ T29] audit: type=1326 audit(1754199915.684:24841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 622.043426][ T29] audit: type=1326 audit(1754199915.684:24842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 622.067392][ T29] audit: type=1326 audit(1754199915.684:24843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 622.091043][ T29] audit: type=1326 audit(1754199915.684:24844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28784 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d3b8eb69 code=0x7ffc0000 [ 622.133750][T28792] netlink: 'syz.3.6545': attribute type 10 has an invalid length. [ 622.172682][T28795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6546'. [ 622.183351][T28795] netlink: 'syz.5.6546': attribute type 1 has an invalid length. [ 622.392601][T28805] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6549'. [ 622.401744][T28805] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6549'. [ 622.425813][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6549'. [ 622.566137][T28811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.576309][T28811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.588248][T28811] bond_slave_1: entered promiscuous mode [ 622.594226][T28811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6552'. [ 622.617102][T28811] bond0: (slave bond_slave_1): Releasing backup interface [ 622.626380][T28811] bond_slave_1 (unregistering): left promiscuous mode [ 622.963548][T28821] loop3: detected capacity change from 0 to 1024 [ 622.970552][T28821] EXT4-fs: Ignoring removed orlov option [ 623.000401][T28821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.017424][T28821] EXT4-fs: Ignoring sb option on remount [ 623.023126][T28821] EXT4-fs: Ignoring removed orlov option [ 623.028860][T28821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.035666][T28821] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 623.043771][T28821] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 623.115499][T28821] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6554: bg 0: block 88: padding at end of block bitmap is not set [ 623.256411][T26958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.345222][T28830] block device autoloading is deprecated and will be removed. [ 623.404982][T28841] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6561'. [ 623.414153][T28841] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6561'. [ 623.431174][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6561'. [ 623.550060][T28854] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6567'. [ 623.559266][T28854] 0·: renamed from 71· (while UP) [ 623.567330][T28854] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 623.624491][T28860] 1·: renamed from 70· (while UP) [ 623.631779][T28860] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 623.704044][T28865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.716039][T28865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.726564][T28865] bond_slave_1: entered promiscuous mode [ 623.738567][T28865] bond0: (slave bond_slave_1): Releasing backup interface [ 623.753582][T28865] bond_slave_1 (unregistering): left promiscuous mode [ 623.798072][T28869] bridge0: port 6(batadv4) entered blocking state [ 623.804849][T28869] bridge0: port 6(batadv4) entered disabled state [ 623.811944][T28869] batadv4: entered allmulticast mode [ 623.818094][T28869] batadv4: entered promiscuous mode [ 624.145544][T28886] 1·: renamed from 70· (while UP) [ 624.153071][T28886] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 624.238373][T28892] random: crng reseeded on system resumption [ 624.306250][T10670] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 624.315648][T10670] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 624.393001][T28899] netlink: 'syz.3.6589': attribute type 1 has an invalid length. [ 624.457604][T28908] bridge0: port 7(batadv5) entered blocking state [ 624.464328][T28908] bridge0: port 7(batadv5) entered disabled state [ 624.471264][T28908] batadv5: entered allmulticast mode [ 624.477296][T28908] batadv5: entered promiscuous mode [ 624.509149][T28914] bridge0: port 8(batadv6) entered blocking state [ 624.515779][T28914] bridge0: port 8(batadv6) entered disabled state [ 624.524459][T28914] batadv6: entered allmulticast mode [ 624.531122][T28914] batadv6: entered promiscuous mode [ 624.553590][T28916] netlink: 'syz.0.6597': attribute type 10 has an invalid length. [ 624.644658][T28925] netlink: 'syz.6.6601': attribute type 1 has an invalid length. [ 624.809973][T28937] 1·: renamed from 70· (while UP) [ 624.890228][T28937] 1·: failed to rename [ 624.894494][T28937] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 624.909893][T28935] lo speed is unknown, defaulting to 1000 [ 624.916500][T28939] siw: device registration error -23 [ 625.077831][T28942] bridge0: port 5(batadv3) entered blocking state [ 625.084555][T28942] bridge0: port 5(batadv3) entered disabled state [ 625.127930][T28942] batadv3: entered allmulticast mode [ 625.143518][T28942] batadv3: entered promiscuous mode [ 625.224107][ T1885] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 625.233478][ T1885] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 625.242706][ T1885] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 625.252181][ T1885] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 625.317759][T28955] netlink: 'syz.1.6610': attribute type 10 has an invalid length. [ 625.392095][T28957] 0·: renamed from 71· (while UP) [ 625.399979][T28957] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 625.488103][T28967] 1·: renamed from 70· (while UP) [ 625.495650][T28967] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 625.574140][T28971] 0·: renamed from 71· (while UP) [ 625.596465][T28971] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 625.613083][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 625.622343][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 625.697391][T28978] netlink: 'syz.0.6620': attribute type 10 has an invalid length. [ 625.752150][T28980] netlink: 'syz.6.6621': attribute type 10 has an invalid length. [ 625.832010][T28983] netlink: 'syz.0.6623': attribute type 10 has an invalid length. [ 626.323699][T29001] siw: device registration error -23 [ 626.869320][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 626.869334][ T29] audit: type=1400 audit(1754199920.601:25268): avc: denied { create } for pid=29004 comm="syz.6.6630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 626.896470][T29005] __nla_validate_parse: 19 callbacks suppressed [ 626.896483][T29005] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6630'. [ 626.933143][T29005] 1·: renamed from 70· (while UP) [ 627.097146][ T29] audit: type=1400 audit(1754199920.621:25269): avc: denied { setopt } for pid=29004 comm="syz.6.6630" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 627.134971][T29005] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 627.171050][ T29] audit: type=1400 audit(1754199920.880:25270): avc: denied { remount } for pid=29010 comm="syz.1.6632" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.257826][ T29] audit: type=1326 audit(1754199920.980:25271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.281572][ T29] audit: type=1326 audit(1754199920.980:25272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.513591][ T29] audit: type=1326 audit(1754199921.040:25273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.537404][ T29] audit: type=1326 audit(1754199921.040:25274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.561107][ T29] audit: type=1326 audit(1754199921.040:25275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.584766][ T29] audit: type=1326 audit(1754199921.040:25276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.608419][ T29] audit: type=1326 audit(1754199921.040:25277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29015 comm="syz.6.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7d6b4eb69 code=0x7ffc0000 [ 627.733194][T29022] bridge0: port 9(batadv7) entered blocking state [ 627.739982][T29022] bridge0: port 9(batadv7) entered disabled state [ 627.772846][T29022] batadv7: entered allmulticast mode [ 627.793590][T29022] batadv7: entered promiscuous mode [ 627.865206][T29026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6638'. [ 628.234849][T29045] FAULT_INJECTION: forcing a failure. [ 628.234849][T29045] name failslab, interval 1, probability 0, space 0, times 0 [ 628.247523][T29045] CPU: 0 UID: 0 PID: 29045 Comm: syz.5.6642 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 628.247562][T29045] Tainted: [W]=WARN [ 628.247571][T29045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.247588][T29045] Call Trace: [ 628.247596][T29045] [ 628.247607][T29045] __dump_stack+0x1d/0x30 [ 628.247680][T29045] dump_stack_lvl+0xe8/0x140 [ 628.247705][T29045] dump_stack+0x15/0x1b [ 628.247736][T29045] should_fail_ex+0x265/0x280 [ 628.247769][T29045] should_failslab+0x8c/0xb0 [ 628.247840][T29045] kmem_cache_alloc_noprof+0x50/0x310 [ 628.247909][T29045] ? alloc_empty_file+0x76/0x200 [ 628.248053][T29045] alloc_empty_file+0x76/0x200 [ 628.248140][T29045] path_openat+0x68/0x2170 [ 628.248162][T29045] ? mntput+0x4b/0x80 [ 628.248190][T29045] ? terminate_walk+0x27f/0x2a0 [ 628.248225][T29045] ? path_openat+0x1bf8/0x2170 [ 628.248326][T29045] ? _parse_integer_limit+0x170/0x190 [ 628.248368][T29045] do_filp_open+0x109/0x230 [ 628.248402][T29045] do_open_execat+0xd8/0x260 [ 628.248421][T29045] alloc_bprm+0x25/0x350 [ 628.248519][T29045] do_execveat_common+0x12e/0x750 [ 628.248552][T29045] __x64_sys_execve+0x5c/0x70 [ 628.248605][T29045] x64_sys_call+0x2716/0x2ff0 [ 628.248628][T29045] do_syscall_64+0xd2/0x200 [ 628.248650][T29045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 628.248676][T29045] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 628.248727][T29045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.248748][T29045] RIP: 0033:0x7fdfc4afeb69 [ 628.248766][T29045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.248786][T29045] RSP: 002b:00007fdfc3125038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 628.248807][T29045] RAX: ffffffffffffffda RBX: 00007fdfc4d26160 RCX: 00007fdfc4afeb69 [ 628.248822][T29045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 628.248893][T29045] RBP: 00007fdfc3125090 R08: 0000000000000000 R09: 0000000000000000 [ 628.248909][T29045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.248926][T29045] R13: 0000000000000000 R14: 00007fdfc4d26160 R15: 00007fffac079de8 [ 628.248949][T29045] [ 628.917966][T29051] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6646'. [ 628.931150][T29060] bridge0: port 5(batadv3) entered blocking state [ 628.937744][T29060] bridge0: port 5(batadv3) entered disabled state [ 628.957274][T29060] batadv3: entered allmulticast mode [ 628.963755][T29060] batadv3: entered promiscuous mode [ 628.978369][T29062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6650'. [ 629.080849][ T12] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 629.090470][ T12] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 629.184022][T29074] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6656'. [ 629.224309][T29074] 0·: renamed from 71· (while UP) [ 629.251780][T29074] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 629.444352][ T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 629.453672][ T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 629.762546][T29098] netlink: 'syz.6.6667': attribute type 10 has an invalid length. [ 630.012545][T29112] siw: device registration error -23 [ 630.091621][T29111] lo speed is unknown, defaulting to 1000 [ 630.702362][T29120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.729237][T29120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.779539][T29120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6675'. [ 631.067591][T29136] netlink: 'syz.3.6677': attribute type 10 has an invalid length. [ 631.482847][T29151] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6686'. [ 631.491905][T29151] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6686'. [ 631.504056][T29151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6686'. [ 631.579756][T29152] siw: device registration error -23 [ 631.854514][T29155] lo speed is unknown, defaulting to 1000 [ 631.982847][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 631.982865][ T29] audit: type=1400 audit(1754199925.699:25521): avc: denied { write } for pid=29158 comm="syz.0.6689" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.013027][ T29] audit: type=1400 audit(1754199925.699:25522): avc: denied { open } for pid=29158 comm="syz.0.6689" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 632.309716][T29169] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6693'. [ 632.347824][T29169] 0·: renamed from 71· (while UP) [ 632.372548][ T29] audit: type=1326 audit(1754199925.759:25523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.396278][ T29] audit: type=1326 audit(1754199925.759:25524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.419952][ T29] audit: type=1326 audit(1754199925.769:25525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.443550][ T29] audit: type=1326 audit(1754199925.769:25526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.467290][ T29] audit: type=1326 audit(1754199925.769:25527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.490939][ T29] audit: type=1326 audit(1754199925.769:25528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.514866][ T29] audit: type=1326 audit(1754199925.769:25529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.538562][ T29] audit: type=1326 audit(1754199925.769:25530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29157 comm="syz.5.6688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfc4afeb69 code=0x7ffc0000 [ 632.655159][T29169] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 632.761750][T29177] lo speed is unknown, defaulting to 1000 [ 632.768086][T29175] siw: device registration error -23 [ 632.916063][T29190] netlink: 'syz.6.6701': attribute type 10 has an invalid length. [ 633.009828][T29179] lo speed is unknown, defaulting to 1000 [ 633.041443][T29195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.263995][T29209] siw: device registration error -23 [ 634.038405][T29231] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6716'. [ 634.059548][T29231] 0·: renamed from 71· (while UP) [ 634.079296][T29231] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 634.139865][T29244] FAULT_INJECTION: forcing a failure. [ 634.139865][T29244] name failslab, interval 1, probability 0, space 0, times 0 [ 634.152640][T29244] CPU: 1 UID: 0 PID: 29244 Comm: syz.0.6721 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 634.152673][T29244] Tainted: [W]=WARN [ 634.152681][T29244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.152697][T29244] Call Trace: [ 634.152706][T29244] [ 634.152715][T29244] __dump_stack+0x1d/0x30 [ 634.152798][T29244] dump_stack_lvl+0xe8/0x140 [ 634.152822][T29244] dump_stack+0x15/0x1b [ 634.152843][T29244] should_fail_ex+0x265/0x280 [ 634.152880][T29244] ? audit_log_d_path+0x8d/0x150 [ 634.152959][T29244] should_failslab+0x8c/0xb0 [ 634.152985][T29244] __kmalloc_cache_noprof+0x4c/0x320 [ 634.153019][T29244] audit_log_d_path+0x8d/0x150 [ 634.153048][T29244] audit_log_d_path_exe+0x42/0x70 [ 634.153143][T29244] audit_log_task+0x1e9/0x250 [ 634.153179][T29244] audit_seccomp+0x61/0x100 [ 634.153273][T29244] ? __seccomp_filter+0x68c/0x10d0 [ 634.153301][T29244] __seccomp_filter+0x69d/0x10d0 [ 634.153341][T29244] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 634.153369][T29244] ? vfs_write+0x75e/0x8e0 [ 634.153394][T29244] __secure_computing+0x82/0x150 [ 634.153418][T29244] syscall_trace_enter+0xcf/0x1e0 [ 634.153511][T29244] do_syscall_64+0xac/0x200 [ 634.153540][T29244] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 634.153563][T29244] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 634.153583][T29244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.153633][T29244] RIP: 0033:0x7f39c043eb69 [ 634.153653][T29244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.153671][T29244] RSP: 002b:00007f39beaa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 634.153694][T29244] RAX: ffffffffffffffda RBX: 00007f39c0665fa0 RCX: 00007f39c043eb69 [ 634.153711][T29244] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 634.153802][T29244] RBP: 00007f39beaa7090 R08: 0000000000000000 R09: 0000000000000000 [ 634.153814][T29244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.153827][T29244] R13: 0000000000000000 R14: 00007f39c0665fa0 R15: 00007ffd4ef6e568 [ 634.153851][T29244] [ 634.455110][T29251] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6723'. [ 634.464186][T29251] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6723'. [ 634.513848][T29251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6723'. [ 635.235094][T29275] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6733'. [ 635.282546][T29275] 1·: renamed from 70· (while UP) [ 635.295842][T29275] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 635.413118][T29295] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6742'. [ 635.438470][T29295] 0·: renamed from 71· (while UP) [ 635.452506][T29295] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 635.617715][T29307] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6748'. [ 635.626765][T29307] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6748'. [ 635.652721][T29307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6748'. [ 635.908166][T29316] block device autoloading is deprecated and will be removed. [ 636.308220][T29340] netlink: 'syz.6.6760': attribute type 10 has an invalid length. [ 637.023270][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 637.023289][ T29] audit: type=1400 audit(1754199930.727:26048): avc: denied { create } for pid=29361 comm="syz.3.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 637.331626][T29364] __nla_validate_parse: 2 callbacks suppressed [ 637.331647][T29364] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6770'. [ 637.425733][ T29] audit: type=1400 audit(1754199930.807:26049): avc: denied { create } for pid=29363 comm="syz.6.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 637.445652][ T29] audit: type=1400 audit(1754199930.817:26050): avc: denied { connect } for pid=29363 comm="syz.6.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 637.465547][ T29] audit: type=1400 audit(1754199930.817:26051): avc: denied { create } for pid=29363 comm="syz.6.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 637.485147][ T29] audit: type=1400 audit(1754199931.017:26052): avc: denied { create } for pid=29363 comm="syz.6.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.504912][ T29] audit: type=1400 audit(1754199931.017:26053): avc: denied { create } for pid=29361 comm="syz.3.6769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 637.525359][ T29] audit: type=1400 audit(1754199931.027:26054): avc: denied { setopt } for pid=29363 comm="syz.6.6770" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.545830][ T29] audit: type=1400 audit(1754199931.027:26055): avc: denied { write } for pid=29363 comm="syz.6.6770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 637.565322][ T29] audit: type=1326 audit(1754199931.097:26056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 637.589140][ T29] audit: type=1326 audit(1754199931.097:26057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29365 comm="syz.1.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 637.654619][T29364] 1·: renamed from 70· (while UP) [ 637.738887][T29364] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 637.763616][T29370] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6773'. [ 637.782639][T29372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6774'. [ 637.792102][T29370] 1·: renamed from 70· (while UP) [ 637.804395][T29370] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 637.906841][T29379] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6777'. [ 637.916024][T29379] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6777'. [ 637.960803][T29379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 638.034203][T29386] block device autoloading is deprecated and will be removed. [ 638.046026][T29383] block device autoloading is deprecated and will be removed. [ 638.100944][T29394] netlink: 'syz.1.6780': attribute type 10 has an invalid length. [ 638.151108][T29398] netlink: 'syz.5.6783': attribute type 10 has an invalid length. [ 638.183392][T29402] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6784'. [ 638.193057][T29402] 0·: renamed from 71· (while UP) [ 638.201167][T29402] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 638.321027][T29411] loop3: detected capacity change from 0 to 128 [ 638.327929][T29411] vfat: Unknown parameter 'shor|name' [ 638.947903][T29421] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 638.954531][T29421] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 638.955302][T29422] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6792'. [ 638.962080][T29421] vhci_hcd vhci_hcd.0: Device attached [ 638.971018][T29422] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6792'. [ 638.996246][T29423] vhci_hcd: connection closed [ 639.001276][ T1885] vhci_hcd: stop threads [ 639.010467][ T1885] vhci_hcd: release socket [ 639.015250][ T1885] vhci_hcd: disconnect device [ 639.020209][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6792'. [ 639.084791][T29432] 1·: renamed from 70· (while UP) [ 639.091595][T29432] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 639.191026][T29438] netlink: 'syz.0.6797': attribute type 10 has an invalid length. [ 639.221041][T29444] netlink: 'syz.5.6801': attribute type 10 has an invalid length. [ 639.248452][T29445] netlink: 'syz.6.6800': attribute type 10 has an invalid length. [ 639.283882][T29447] 0·: renamed from 71· (while UP) [ 639.293687][T29447] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 639.813736][T29492] 0·: renamed from 71· (while UP) [ 639.822135][T29492] 0·: failed to rename [ 639.827363][T29492] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 639.901353][T29500] FAULT_INJECTION: forcing a failure. [ 639.901353][T29500] name failslab, interval 1, probability 0, space 0, times 0 [ 639.914333][T29500] CPU: 1 UID: 0 PID: 29500 Comm: syz.0.6826 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 639.914433][T29500] Tainted: [W]=WARN [ 639.914442][T29500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.914458][T29500] Call Trace: [ 639.914466][T29500] [ 639.914475][T29500] __dump_stack+0x1d/0x30 [ 639.914499][T29500] dump_stack_lvl+0xe8/0x140 [ 639.914518][T29500] dump_stack+0x15/0x1b [ 639.914557][T29500] should_fail_ex+0x265/0x280 [ 639.914592][T29500] ? __se_sys_mount+0xef/0x2e0 [ 639.914658][T29500] should_failslab+0x8c/0xb0 [ 639.914687][T29500] __kmalloc_cache_noprof+0x4c/0x320 [ 639.914722][T29500] ? memdup_user+0x99/0xd0 [ 639.914800][T29500] __se_sys_mount+0xef/0x2e0 [ 639.914822][T29500] ? fput+0x8f/0xc0 [ 639.914852][T29500] ? ksys_write+0x192/0x1a0 [ 639.914880][T29500] __x64_sys_mount+0x67/0x80 [ 639.914902][T29500] x64_sys_call+0x2b4d/0x2ff0 [ 639.915016][T29500] do_syscall_64+0xd2/0x200 [ 639.915110][T29500] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 639.915144][T29500] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 639.915170][T29500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.915196][T29500] RIP: 0033:0x7f39c043eb69 [ 639.915211][T29500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.915277][T29500] RSP: 002b:00007f39beaa7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 639.915361][T29500] RAX: ffffffffffffffda RBX: 00007f39c0665fa0 RCX: 00007f39c043eb69 [ 639.915379][T29500] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 639.915396][T29500] RBP: 00007f39beaa7090 R08: 0000200000000080 R09: 0000000000000000 [ 639.915411][T29500] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 639.915427][T29500] R13: 0000000000000000 R14: 00007f39c0665fa0 R15: 00007ffd4ef6e568 [ 639.915451][T29500] [ 640.676852][T29574] 0·: renamed from 71· (while UP) [ 640.684065][T29574] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 640.863461][T29593] loop3: detected capacity change from 0 to 2048 [ 640.912024][T29598] loop3: detected capacity change from 0 to 1024 [ 640.919305][T29597] FAULT_INJECTION: forcing a failure. [ 640.919305][T29597] name failslab, interval 1, probability 0, space 0, times 0 [ 640.932061][T29597] CPU: 1 UID: 0 PID: 29597 Comm: syz.6.6865 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 640.932102][T29597] Tainted: [W]=WARN [ 640.932111][T29597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.932127][T29597] Call Trace: [ 640.932148][T29597] [ 640.932156][T29597] __dump_stack+0x1d/0x30 [ 640.932178][T29597] dump_stack_lvl+0xe8/0x140 [ 640.932197][T29597] dump_stack+0x15/0x1b [ 640.932235][T29597] should_fail_ex+0x265/0x280 [ 640.932277][T29597] should_failslab+0x8c/0xb0 [ 640.932308][T29597] kmem_cache_alloc_noprof+0x50/0x310 [ 640.932351][T29597] ? getname_flags+0x80/0x3b0 [ 640.932383][T29597] getname_flags+0x80/0x3b0 [ 640.932410][T29597] user_path_at+0x28/0x130 [ 640.932450][T29597] do_fchmodat+0x9c/0x180 [ 640.932552][T29597] __x64_sys_fchmodat+0x42/0x50 [ 640.932639][T29597] x64_sys_call+0x288d/0x2ff0 [ 640.932667][T29597] do_syscall_64+0xd2/0x200 [ 640.932697][T29597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 640.932705][T29598] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 640.932802][T29597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.932851][T29597] RIP: 0033:0x7fe7d6b4eb69 [ 640.932883][T29597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.932915][T29597] RSP: 002b:00007fe7d51b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 640.932945][T29597] RAX: ffffffffffffffda RBX: 00007fe7d6d75fa0 RCX: 00007fe7d6b4eb69 [ 640.932963][T29597] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 640.932981][T29597] RBP: 00007fe7d51b7090 R08: 0000000000000000 R09: 0000000000000000 [ 640.932997][T29597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.933014][T29597] R13: 0000000000000000 R14: 00007fe7d6d75fa0 R15: 00007ffc0c9fe7f8 [ 640.933116][T29597] [ 641.130765][T29598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.163882][T26958] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.190046][T29612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.199680][T29612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.476608][T29631] 1·: renamed from 70· (while UP) [ 641.484458][T29631] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 641.764898][T29654] loop3: detected capacity change from 0 to 512 [ 642.060891][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 642.060909][ T29] audit: type=1400 audit(1754199935.727:26726): avc: denied { ioctl } for pid=29677 comm="syz.3.6895" path="socket:[89395]" dev="sockfs" ino=89395 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 642.107102][ T29] audit: type=1326 audit(1754199935.787:26727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29662 comm="syz.5.6888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfc4afeb69 code=0x0 [ 642.214123][T29685] siw: device registration error -23 [ 642.227493][ T29] audit: type=1400 audit(1754199935.907:26728): avc: denied { read write } for pid=29673 comm="syz.6.6893" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 642.251275][ T29] audit: type=1400 audit(1754199935.907:26729): avc: denied { open } for pid=29673 comm="syz.6.6893" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 642.274976][ T29] audit: type=1400 audit(1754199935.907:26730): avc: denied { write } for pid=29673 comm="syz.6.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 642.539328][T29691] FAULT_INJECTION: forcing a failure. [ 642.539328][T29691] name failslab, interval 1, probability 0, space 0, times 0 [ 642.539327][ T29] audit: type=1326 audit(1754199936.226:26731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29690 comm="syz.1.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2949a2eb69 code=0x7ffc0000 [ 642.539492][ T29] ================================================================== [ 642.552020][ T29] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 642.552077][ T29] [ 642.552085][ T29] write to 0xffffffff88e220d0 of 43 bytes by task 29691 on cpu 1: [ 642.552104][ T29] vsnprintf+0x2ce/0x890 [ 642.552113][T29691] CPU: 1 UID: 0 PID: 29691 Comm: syz.1.6899 Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 642.552141][ T29] vscnprintf+0x41/0x90 [ 642.552172][ T29] printk_sprint+0x30/0x2d0 [ 642.552197][T29691] Tainted: [W]=WARN [ 642.552206][T29691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.552222][T29691] Call Trace: [ 642.552207][ T29] vprintk_store+0x599/0x860 [ 642.552231][T29691] [ 642.552240][T29691] __dump_stack+0x1d/0x30 [ 642.552248][ T29] vprintk_emit+0x178/0x650 [ 642.552265][T29691] dump_stack_lvl+0xe8/0x140 [ 642.552272][ T29] vprintk_default+0x26/0x30 [ 642.552291][T29691] dump_stack+0x15/0x1b [ 642.552298][ T29] vprintk+0x1d/0x30 [ 642.552329][ T29] _printk+0x79/0xa0 [ 642.552356][ T29] should_fail_ex+0x24d/0x280 [ 642.552314][T29691] should_fail_ex+0x265/0x280 [ 642.552391][ T29] should_failslab+0x8c/0xb0 [ 642.552404][T29691] should_failslab+0x8c/0xb0 [ 642.552424][ T29] kmem_cache_alloc_node_noprof+0x57/0x320 [ 642.552436][T29691] kmem_cache_alloc_node_noprof+0x57/0x320 [ 642.552463][ T29] __alloc_skb+0x101/0x320 [ 642.552493][ T29] audit_log_start+0x380/0x6c0 [ 642.552521][ T29] audit_seccomp+0x48/0x100 [ 642.552551][ T29] __seccomp_filter+0x69d/0x10d0 [ 642.552544][T29691] ? __alloc_skb+0x101/0x320 [ 642.552578][ T29] __secure_computing+0x82/0x150 [ 642.552597][ T29] syscall_trace_enter+0xcf/0x1e0 [ 642.552619][ T29] do_syscall_64+0xac/0x200 [ 642.552637][T29691] __alloc_skb+0x101/0x320 [ 642.552648][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.552677][ T29] [ 642.552673][T29691] ? audit_log_start+0x365/0x6c0 [ 642.552686][ T29] read to 0xffffffff88e220e0 of 8 bytes by task 29 on cpu 0: [ 642.552708][ T29] data_push_tail+0xfd/0x420 [ 642.552713][T29691] audit_log_start+0x380/0x6c0 [ 642.552747][ T29] data_alloc+0xbf/0x2b0 [ 642.552779][ T29] prb_reserve+0x808/0xaf0 [ 642.552781][T29691] audit_seccomp+0x48/0x100 [ 642.552815][T29691] ? __seccomp_filter+0x68c/0x10d0 [ 642.552823][ T29] vprintk_store+0x56d/0x860 [ 642.552862][ T29] vprintk_emit+0x178/0x650 [ 642.552880][ T29] vprintk_default+0x26/0x30 [ 642.552897][ T29] vprintk+0x1d/0x30 [ 642.552844][T29691] __seccomp_filter+0x69d/0x10d0 [ 642.552924][ T29] _printk+0x79/0xa0 [ 642.552936][T29691] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 642.552959][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 642.552977][ T29] kauditd_send_queue+0x273/0x2c0 [ 642.552995][ T29] kauditd_thread+0x421/0x630 [ 642.553026][ T29] kthread+0x489/0x510 [ 642.553040][T29691] ? vfs_write+0x75e/0x8e0 [ 642.553052][ T29] ret_from_fork+0xdd/0x150 [ 642.553069][T29691] ? __rcu_read_unlock+0x4f/0x70 [ 642.553080][ T29] ret_from_fork_asm+0x1a/0x30 [ 642.553110][ T29] [ 642.553097][T29691] ? __fget_files+0x184/0x1c0 [ 642.553117][ T29] value changed: 0x0000000100001165 -> 0x676e6963726f6620 [ 642.553134][ T29] [ 642.553141][ T29] Reported by Kernel Concurrency Sanitizer on: [ 642.553134][T29691] __secure_computing+0x82/0x150 [ 642.553160][ T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Tainted: G W 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(voluntary) [ 642.553194][ T29] Tainted: [W]=WARN [ 642.553202][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.553215][ T29] ================================================================== [ 642.553163][T29691] syscall_trace_enter+0xcf/0x1e0 [ 642.553266][T29691] do_syscall_64+0xac/0x200 [ 642.553288][T29691] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 642.553311][T29691] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 642.553387][T29691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.553411][T29691] RIP: 0033:0x7f2949a2eb69 [ 642.553430][T29691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.553454][T29691] RSP: 002b:00007f294808f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 642.553476][T29691] RAX: ffffffffffffffda RBX: 00007f2949c55fa0 RCX: 00007f2949a2eb69 [ 642.553564][T29691] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffffff [ 642.553582][T29691] RBP: 00007f294808f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.553600][T29691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.553618][T29691] R13: 0000000000000000 R14: 00007f2949c55fa0 R15: 00007fffe5e039d8 [ 642.553645][T29691] [ 642.553666][T29691] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 642.577076][ T29] audit: type=1326 audit(1754199936.226:26732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29690 comm="syz.1.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2949a2d4d0 code=0x7ffc0000 [ 642.577123][ T29] audit: type=1326 audit(1754199936.226:26733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29690 comm="syz.1.6899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2949a2d61f code=0x7ffc0000 [ 642.585216][T29691] audit: out of memory in audit_log_start [ 642.687023][T29692] loop3: detected capacity change from 0 to 128 [ 643.109320][T29692] vfat: Unknown parameter 'shor|name'