last executing test programs: 7.802639923s ago: executing program 4 (id=213): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300f19c3e0008000000b7040000000000008500000003000000950000000000000014b7fb58237ef09f058b4950d8e93cce453276f6b8e5dd547710295c0b192d1f424e17528f3ac94abb57574b6ab5c3c08d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 7.758472804s ago: executing program 1 (id=214): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000000) 7.3655557s ago: executing program 3 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.821995029s ago: executing program 1 (id=218): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x44, 0x20048044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getpeername$inet6(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, 0x0, 0x0, 0x5412, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) eventfd2(0x2, 0x80000) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000240)=0x200) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 5.71404544s ago: executing program 3 (id=221): r0 = syz_open_dev$evdev(&(0x7f00000004c0), 0x3, 0x400) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 5.215235545s ago: executing program 1 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}, 0x36) 5.125823708s ago: executing program 0 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x5, @loopback, 0xfffffefc}, r3, 0x400}}, 0xfdf7) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) 5.125354949s ago: executing program 4 (id=224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='ext4_es_find_extent_range_enter\x00', r0, 0x0, 0x400000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x526, &(0x7f0000000f40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) 5.112770385s ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000014) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 5.048318128s ago: executing program 3 (id=226): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000001540)={[{@resgid}, {@errors_remount}, {@noload}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x16}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 4.083397374s ago: executing program 0 (id=227): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.074225771s ago: executing program 2 (id=228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000000) 3.504068021s ago: executing program 1 (id=229): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) set_mempolicy(0x8000, 0x0, 0xd) 3.454309666s ago: executing program 3 (id=230): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 3.416790598s ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 3.309559093s ago: executing program 2 (id=232): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x44, 0x20048044, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) getpeername$inet6(r1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) eventfd2(0x2, 0x80000) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000240)=0x200) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 3.113740965s ago: executing program 0 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001580)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10012, r2, 0x0) 2.46029621s ago: executing program 1 (id=234): socket(0x5, 0x800, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 2.236322817s ago: executing program 3 (id=235): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x6, &(0x7f0000000580)=@raw=[@jmp={0x5, 0x0, 0x7, 0xa, 0x9, 0x2, 0x10}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9531, 0x0, 0x0, 0x0, 0xd28}], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x9, 0x80000) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000640)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1c}, @void, @val={0xc, 0x99, {0x6, 0x67}}}}, [""]}, 0x28}}, 0x44) io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x60b13e, 0x0, 0x6, 0x3a2}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000000c0)=0x7fc4, 0x4) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket(0x3, 0x8, 0x0) 2.154306171s ago: executing program 0 (id=236): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000540)="390000fa", 0x4}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.871327474s ago: executing program 4 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.788551011s ago: executing program 2 (id=238): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f00000000c0)) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) open_by_handle_at(r1, &(0x7f00000032c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0xffffffff, 0x6, 0x3, 0x10001}}, 0x82) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x9b, &(0x7f0000000380)=""/155, 0x41000, 0x5, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xc, 0xff, 0x5e8ffc24}, 0x10, 0x8196, 0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x4, 0x3, 0x9}, {0x2, 0x4, 0x8}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000200000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) fadvise64(r4, 0x7f, 0x655, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 890.928526ms ago: executing program 0 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x48080) 729.529567ms ago: executing program 4 (id=240): syz_emit_ethernet(0x76, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x3) 508.16447ms ago: executing program 2 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 395.539154ms ago: executing program 3 (id=242): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2, 0x40, 0x2b}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b920837b05e201295e6924310b1074c1d20fd3d0f84fd167c483c7ad53d43821ae4c6b68ef1fd311cbf623dc48ff3c15b98412f6a483793c3b1825c3ca3f12b5553125d1d6c643e301aae3b0eb9eda40b6ccfc1037c9c05185aa9e8021fa7c625862ae222c9d7e9e3f79f392dd62fa0a1229f4b8404e6fa08f98140bb45fbf8edaf46c494e88a86f591efbb7dcad60f87dd2f21ba57ade3ac801fae991d3905108be", @ANYRESOCT=r1, @ANYBLOB="0200000000000000000007000000080009000200000008000b0000000100"], 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x50, r0, 0xd4230000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x9, 0x2) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x10000, 0x1000, 0x101, 0x1}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x10c) fcntl$setlease(r3, 0x400, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xfffc}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x80000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 253.77013ms ago: executing program 1 (id=243): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088d0}, 0x4000000) 225.476625ms ago: executing program 0 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff81", 0x0, 0x6, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 87.414322ms ago: executing program 4 (id=245): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 0s ago: executing program 2 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r3}]}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 203.767797][ T5783] cgroup: Unknown subsys name 'net' [ 203.917374][ T5783] cgroup: Unknown subsys name 'cpuset' [ 203.933495][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 211.107428][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 217.752508][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.765395][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.798943][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.830619][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.839352][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.849994][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.858167][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.868210][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.881329][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.896153][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.896194][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.917629][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.928178][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.939318][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.940685][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.965559][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.975528][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.009352][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.027723][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.084786][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.257623][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.267446][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.347423][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.362462][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.416946][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.510028][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 219.648165][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 220.019388][ T5812] Bluetooth: hci0: command tx timeout [ 220.025396][ T5812] Bluetooth: hci2: command tx timeout [ 220.081250][ T5805] Bluetooth: hci1: command tx timeout [ 220.157472][ T5805] Bluetooth: hci3: command tx timeout [ 220.476407][ T5805] Bluetooth: hci4: command tx timeout [ 220.970168][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.978886][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.986905][ T5799] bridge_slave_0: entered allmulticast mode [ 220.995597][ T5799] bridge_slave_0: entered promiscuous mode [ 221.028718][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 221.053669][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.061427][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.069280][ T5803] bridge_slave_0: entered allmulticast mode [ 221.078231][ T5803] bridge_slave_0: entered promiscuous mode [ 221.109432][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 221.133842][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 221.157507][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.165209][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.173242][ T5799] bridge_slave_1: entered allmulticast mode [ 221.183405][ T5799] bridge_slave_1: entered promiscuous mode [ 221.309475][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.317716][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.325396][ T5803] bridge_slave_1: entered allmulticast mode [ 221.335744][ T5803] bridge_slave_1: entered promiscuous mode [ 221.667136][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.734225][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.755116][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.852109][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.077116][ T5805] Bluetooth: hci2: command tx timeout [ 222.082815][ T5812] Bluetooth: hci0: command tx timeout [ 222.157941][ T5812] Bluetooth: hci1: command tx timeout [ 222.226441][ T5803] team0: Port device team_slave_0 added [ 222.241095][ T5812] Bluetooth: hci3: command tx timeout [ 222.380319][ T5803] team0: Port device team_slave_1 added [ 222.401642][ T5799] team0: Port device team_slave_0 added [ 222.546546][ T5799] team0: Port device team_slave_1 added [ 222.557515][ T5812] Bluetooth: hci4: command tx timeout [ 222.782399][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.791076][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.818123][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.882220][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.889686][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.916288][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.929858][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.937516][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.945149][ T5808] bridge_slave_0: entered allmulticast mode [ 222.956589][ T5808] bridge_slave_0: entered promiscuous mode [ 222.970798][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.978156][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.004921][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.017894][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.025694][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.033720][ T5808] bridge_slave_1: entered allmulticast mode [ 223.043943][ T5808] bridge_slave_1: entered promiscuous mode [ 223.136557][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.143859][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.170744][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.301855][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.310073][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.318499][ T5816] bridge_slave_0: entered allmulticast mode [ 223.327843][ T5816] bridge_slave_0: entered promiscuous mode [ 223.347635][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.355537][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.365707][ T5816] bridge_slave_1: entered allmulticast mode [ 223.376623][ T5816] bridge_slave_1: entered promiscuous mode [ 223.476279][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.483888][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.491955][ T5802] bridge_slave_0: entered allmulticast mode [ 223.502044][ T5802] bridge_slave_0: entered promiscuous mode [ 223.519882][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.528179][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.535875][ T5802] bridge_slave_1: entered allmulticast mode [ 223.546965][ T5802] bridge_slave_1: entered promiscuous mode [ 223.649596][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.674125][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.792641][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.818208][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.909270][ T5803] hsr_slave_0: entered promiscuous mode [ 223.919363][ T5803] hsr_slave_1: entered promiscuous mode [ 224.031325][ T5799] hsr_slave_0: entered promiscuous mode [ 224.040873][ T5799] hsr_slave_1: entered promiscuous mode [ 224.049785][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 224.056166][ T5799] Cannot create hsr debugfs directory [ 224.075365][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.101576][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.156537][ T5812] Bluetooth: hci0: command tx timeout [ 224.162514][ T5812] Bluetooth: hci2: command tx timeout [ 224.196851][ T5816] team0: Port device team_slave_0 added [ 224.214528][ T5816] team0: Port device team_slave_1 added [ 224.237784][ T5805] Bluetooth: hci1: command tx timeout [ 224.268302][ T5808] team0: Port device team_slave_0 added [ 224.316380][ T5805] Bluetooth: hci3: command tx timeout [ 224.390155][ T5808] team0: Port device team_slave_1 added [ 224.404806][ T5802] team0: Port device team_slave_0 added [ 224.550815][ T5802] team0: Port device team_slave_1 added [ 224.646224][ T5805] Bluetooth: hci4: command tx timeout [ 224.662709][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.670274][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.697029][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.757074][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.764232][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.791374][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.870611][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.880489][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.907244][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.964548][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.971951][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.998630][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.080971][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.088629][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.115320][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.230765][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.238246][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.265781][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.588543][ T5802] hsr_slave_0: entered promiscuous mode [ 225.598318][ T5802] hsr_slave_1: entered promiscuous mode [ 225.606553][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 225.612577][ T5802] Cannot create hsr debugfs directory [ 225.657364][ T5816] hsr_slave_0: entered promiscuous mode [ 225.668153][ T5816] hsr_slave_1: entered promiscuous mode [ 225.676307][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 225.682510][ T5816] Cannot create hsr debugfs directory [ 225.773073][ T5808] hsr_slave_0: entered promiscuous mode [ 225.784092][ T5808] hsr_slave_1: entered promiscuous mode [ 225.793693][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 225.799871][ T5808] Cannot create hsr debugfs directory [ 226.236397][ T5805] Bluetooth: hci2: command tx timeout [ 226.242128][ T5812] Bluetooth: hci0: command tx timeout [ 226.318595][ T5805] Bluetooth: hci1: command tx timeout [ 226.396519][ T5805] Bluetooth: hci3: command tx timeout [ 226.716278][ T5805] Bluetooth: hci4: command tx timeout [ 226.968470][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.093877][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.148165][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.186510][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.370916][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.403233][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.434181][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.466631][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.505638][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.534087][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.580918][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.638697][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.922282][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.992438][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.078975][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.147088][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.200828][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.301512][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.353298][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.435852][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.898806][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.953946][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.147732][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.233662][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.307792][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.315380][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.338356][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.382411][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.390198][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.504297][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.512141][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.529580][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.537522][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.729807][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.809645][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.934564][ T4097] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.942309][ T4097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.093501][ T4097] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.101371][ T4097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.260114][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.374257][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.444295][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.452232][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.550650][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.596605][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.630707][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.638465][ T3987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.914392][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.922264][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.951297][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.959060][ T3987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.052478][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.527224][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.636641][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.968400][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.133579][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.360554][ T5803] veth0_vlan: entered promiscuous mode [ 233.417278][ T5799] veth0_vlan: entered promiscuous mode [ 233.478852][ T5803] veth1_vlan: entered promiscuous mode [ 233.574391][ T5799] veth1_vlan: entered promiscuous mode [ 233.702017][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.906903][ T5808] veth0_vlan: entered promiscuous mode [ 234.017455][ T5803] veth0_macvtap: entered promiscuous mode [ 234.048060][ T5799] veth0_macvtap: entered promiscuous mode [ 234.096037][ T5808] veth1_vlan: entered promiscuous mode [ 234.174473][ T5799] veth1_macvtap: entered promiscuous mode [ 234.201606][ T5803] veth1_macvtap: entered promiscuous mode [ 234.402156][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.492948][ T5802] veth0_vlan: entered promiscuous mode [ 234.522365][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.548727][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.659309][ T4097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.679178][ T5808] veth0_macvtap: entered promiscuous mode [ 234.705800][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.715242][ T4097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.732807][ T5802] veth1_vlan: entered promiscuous mode [ 234.752702][ T3640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.814807][ T3640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.827576][ T5808] veth1_macvtap: entered promiscuous mode [ 234.917220][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.924603][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.944382][ T3640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.983232][ T3484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.028671][ T3484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.077873][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.191040][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.248665][ T5802] veth0_macvtap: entered promiscuous mode [ 235.328602][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.380471][ T5802] veth1_macvtap: entered promiscuous mode [ 235.493298][ T1895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.567370][ T1895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.605707][ T1895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.622923][ T1895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.674990][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.737375][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.840440][ T3913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.891003][ T3913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.936868][ T3913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.960281][ T3913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.272659][ T5816] veth0_vlan: entered promiscuous mode [ 236.394032][ T5816] veth1_vlan: entered promiscuous mode [ 236.843804][ T5816] veth0_macvtap: entered promiscuous mode [ 236.975225][ T5816] veth1_macvtap: entered promiscuous mode [ 237.258112][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.365664][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.475074][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.562801][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.644492][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.690158][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.254260][ T3913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.262700][ T3913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.576610][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.584701][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.741510][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.751596][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.982460][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.991985][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.171694][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 243.329440][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.338062][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.594288][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.602886][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.972096][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.984662][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.193104][ T5985] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3'. [ 244.203304][ T5985] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'. [ 244.212820][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 244.435115][ T4097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.443646][ T4097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.470629][ T5990] loop2: detected capacity change from 0 to 512 [ 244.577408][ T30] audit: type=1326 audit(1765697180.313:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36358f749 code=0x0 [ 244.652689][ T5990] EXT4-fs (loop2): too many log groups per flexible block group [ 244.661731][ T5990] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 244.711113][ T5990] EXT4-fs (loop2): mount failed [ 244.876826][ T30] audit: type=1326 audit(1765697180.623:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.097175][ T30] audit: type=1326 audit(1765697180.863:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.321546][ T30] audit: type=1326 audit(1765697180.933:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.344788][ T30] audit: type=1326 audit(1765697180.933:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.367588][ T30] audit: type=1326 audit(1765697180.933:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.390038][ T30] audit: type=1326 audit(1765697180.933:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.417074][ T30] audit: type=1326 audit(1765697180.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.441121][ T30] audit: type=1326 audit(1765697180.933:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 245.463926][ T30] audit: type=1326 audit(1765697180.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5994 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 246.149516][ T5999] loop3: detected capacity change from 0 to 2048 [ 246.246968][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.255003][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.692846][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.755134][ T3640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.763787][ T3640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.303757][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.701153][ T6022] mmap: syz.1.12 (6022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 248.089757][ T6028] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.930692][ T6038] loop4: detected capacity change from 0 to 512 [ 248.986661][ T6038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.088678][ T6042] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 249.135599][ T6042] team0: Port device dummy0 added [ 249.269592][ T6045] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 249.277326][ T6038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.277798][ T6038] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.670081][ T6045] team0: Port device dummy0 removed [ 249.829878][ T6045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.320431][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.282407][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 251.282496][ T30] audit: type=1326 audit(1765697187.043:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.307043][ T30] audit: type=1326 audit(1765697187.073:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.324134][ T30] audit: type=1326 audit(1765697187.073:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.324422][ T30] audit: type=1326 audit(1765697187.083:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.326664][ T30] audit: type=1326 audit(1765697187.083:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.328496][ T30] audit: type=1326 audit(1765697187.093:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.386021][ T30] audit: type=1326 audit(1765697187.143:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 251.399234][ T30] audit: type=1326 audit(1765697187.163:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71d7d865e7 code=0x7ffc0000 [ 251.423470][ T30] audit: type=1326 audit(1765697187.163:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71d7d2b829 code=0x7ffc0000 [ 251.423762][ T30] audit: type=1326 audit(1765697187.183:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f71d7d865e7 code=0x7ffc0000 [ 251.862311][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 251.879523][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 251.890786][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 252.570102][ T6071] qrtr: Invalid version 196 [ 253.089634][ T6076] loop4: detected capacity change from 0 to 512 [ 253.169372][ T6076] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.248133][ T6079] netlink: 'syz.0.34': attribute type 10 has an invalid length. [ 253.276362][ T6079] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.332360][ T6076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.731294][ T6076] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.33: path /4/file0: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 253.846919][ T6076] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.33: path /4/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 254.125197][ T5816] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 254.237119][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.901927][ T6095] loop3: detected capacity change from 0 to 764 [ 254.994565][ T6095] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 255.115766][ T6101] loop2: detected capacity change from 0 to 256 [ 255.873313][ T6110] loop3: detected capacity change from 0 to 128 [ 256.596908][ T6110] syz.3.46: attempt to access beyond end of device [ 256.596908][ T6110] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 256.611179][ T6110] syz.3.46: attempt to access beyond end of device [ 256.611179][ T6110] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 256.625830][ T6110] syz.3.46: attempt to access beyond end of device [ 256.625830][ T6110] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 256.644840][ T6110] syz.3.46: attempt to access beyond end of device [ 256.644840][ T6110] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 256.659660][ T6110] syz.3.46: attempt to access beyond end of device [ 256.659660][ T6110] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 256.673803][ T6110] syz.3.46: attempt to access beyond end of device [ 256.673803][ T6110] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 256.692521][ T6110] syz.3.46: attempt to access beyond end of device [ 256.692521][ T6110] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 256.708286][ T6110] syz.3.46: attempt to access beyond end of device [ 256.708286][ T6110] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 256.722616][ T6110] syz.3.46: attempt to access beyond end of device [ 256.722616][ T6110] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 256.736963][ T6110] syz.3.46: attempt to access beyond end of device [ 256.736963][ T6110] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 258.336254][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 258.597225][ T6136] Zero length message leads to an empty skb [ 258.797064][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.805459][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.813928][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.822477][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.831044][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.839585][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.848022][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.856479][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.864726][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 258.873185][ T6135] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 259.351714][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 259.558950][ T6147] loop3: detected capacity change from 0 to 256 [ 260.040944][ T6147] FAT-fs (loop3): Directory bread(block 64) failed [ 260.048266][ T6147] FAT-fs (loop3): Directory bread(block 65) failed [ 260.062490][ T6147] FAT-fs (loop3): Directory bread(block 66) failed [ 260.071656][ T6147] FAT-fs (loop3): Directory bread(block 67) failed [ 260.081438][ T6147] FAT-fs (loop3): Directory bread(block 68) failed [ 260.089041][ T6147] FAT-fs (loop3): Directory bread(block 69) failed [ 260.096206][ T6147] FAT-fs (loop3): Directory bread(block 70) failed [ 260.103000][ T6147] FAT-fs (loop3): Directory bread(block 71) failed [ 260.110135][ T6147] FAT-fs (loop3): Directory bread(block 72) failed [ 260.117146][ T6147] FAT-fs (loop3): Directory bread(block 73) failed [ 263.460874][ T6193] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 264.617451][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 264.824027][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 264.824123][ T30] audit: type=1326 audit(1765697200.583:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.853968][ T30] audit: type=1326 audit(1765697200.583:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.882878][ T30] audit: type=1326 audit(1765697200.583:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.907788][ T30] audit: type=1326 audit(1765697200.583:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.931931][ T30] audit: type=1326 audit(1765697200.583:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.955094][ T30] audit: type=1326 audit(1765697200.583:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5645d8f749 code=0x7ffc0000 [ 264.988370][ T30] audit: type=1326 audit(1765697200.583:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5645d8f783 code=0x7ffc0000 [ 265.018086][ T30] audit: type=1326 audit(1765697200.623:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5645d8e1ff code=0x7ffc0000 [ 265.041009][ T30] audit: type=1326 audit(1765697200.623:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5645d8f7d7 code=0x7ffc0000 [ 265.064012][ T30] audit: type=1326 audit(1765697200.673:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.0.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5645d8df90 code=0x7ffc0000 [ 265.804724][ T6212] sd 0:0:1:0: device reset [ 265.901462][ T6216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.417742][ T6229] loop4: detected capacity change from 0 to 2368 [ 270.469884][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 270.469972][ T30] audit: type=1326 audit(1765697206.233:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 270.764575][ T30] audit: type=1326 audit(1765697206.273:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 271.060721][ T6264] syz.2.113: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.076952][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.2.113 Not tainted syzkaller #0 PREEMPT(none) [ 271.077123][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.077235][ T6264] Call Trace: [ 271.077302][ T6264] [ 271.077384][ T6264] __dump_stack+0x26/0x30 [ 271.077601][ T6264] dump_stack_lvl+0x1df/0x270 [ 271.077807][ T6264] dump_stack+0x1e/0x25 [ 271.077985][ T6264] warn_alloc+0x470/0x6a0 [ 271.078200][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.078437][ T6264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.078686][ T6264] __vmalloc_node_range_noprof+0x142/0x2d90 [ 271.078869][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.079109][ T6264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.079417][ T6264] ? should_fail_ex+0x45/0x8a0 [ 271.079607][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.079850][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.080070][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.080329][ T6264] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 271.080681][ T6264] ? __kmalloc_cache_noprof+0x984/0x1730 [ 271.080904][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.081199][ T6264] ? kmsan_get_metadata+0xfb/0x160 [ 271.081517][ T6264] vmalloc_user_noprof+0xce/0x140 [ 271.081746][ T6264] ? xskq_create+0x11d/0x290 [ 271.081975][ T6264] xskq_create+0x11d/0x290 [ 271.082259][ T6264] xsk_init_queue+0xfd/0x1d0 [ 271.082523][ T6264] xsk_setsockopt+0x7f6/0xfe0 [ 271.082786][ T6264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.083004][ T6264] __sys_setsockopt+0x43e/0x580 [ 271.083221][ T6264] __x64_sys_setsockopt+0xf4/0x1a0 [ 271.083433][ T6264] x64_sys_call+0x28e3/0x3e70 [ 271.083644][ T6264] do_syscall_64+0xd9/0xf80 [ 271.083833][ T6264] ? clear_bhb_loop+0x40/0x90 [ 271.084014][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.084190][ T6264] RIP: 0033:0x7f2c3718f749 [ 271.084328][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.084469][ T6264] RSP: 002b:00007f2c38060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.084626][ T6264] RAX: ffffffffffffffda RBX: 00007f2c373e5fa0 RCX: 00007f2c3718f749 [ 271.084746][ T6264] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 271.084857][ T6264] RBP: 00007f2c37213f91 R08: 0000000000000004 R09: 0000000000000000 [ 271.084967][ T6264] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.085071][ T6264] R13: 00007f2c373e6038 R14: 00007f2c373e5fa0 R15: 00007ffd4ec80648 [ 271.085233][ T6264] [ 271.085291][ T6264] Mem-Info: [ 271.375621][ T6264] active_anon:9236 inactive_anon:0 isolated_anon:0 [ 271.375621][ T6264] active_file:3468 inactive_file:39885 isolated_file:0 [ 271.375621][ T6264] unevictable:768 dirty:61 writeback:0 [ 271.375621][ T6264] slab_reclaimable:4947 slab_unreclaimable:19984 [ 271.375621][ T6264] mapped:29542 shmem:4223 pagetables:1484 [ 271.375621][ T6264] sec_pagetables:0 bounce:0 [ 271.375621][ T6264] kernel_misc_reclaimable:0 [ 271.375621][ T6264] free:373171 free_pcp:7266 free_cma:0 [ 271.429447][ T6264] Node 0 active_anon:36332kB inactive_anon:0kB active_file:13872kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118168kB dirty:244kB writeback:0kB shmem:14880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5600kB pagetables:5568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.463970][ T6264] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.495478][ T6264] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.533171][ T6264] lowmem_reserve[]: 0 928 1241 1241 1241 [ 271.541691][ T6264] Node 0 DMA32 free:571980kB boost:0kB min:36804kB low:46004kB high:55204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10608kB inactive_anon:0kB active_file:9728kB inactive_file:75904kB unevictable:0kB writepending:176kB zspages:0kB present:3129332kB managed:950632kB mlocked:0kB bounce:0kB free_pcp:21920kB local_pcp:5788kB free_cma:0kB [ 271.575503][ T6264] lowmem_reserve[]: 0 0 312 312 312 [ 271.581728][ T6264] Node 0 Normal free:16188kB boost:0kB min:12980kB low:16224kB high:19468kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22188kB inactive_anon:0kB active_file:4144kB inactive_file:83436kB unevictable:1536kB writepending:68kB zspages:0kB present:1048580kB managed:320476kB mlocked:0kB bounce:0kB free_pcp:11148kB local_pcp:5492kB free_cma:0kB [ 271.615572][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 271.621027][ T6264] Node 1 Normal free:900420kB boost:0kB min:40156kB low:50192kB high:60228kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:991232kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:0kB free_cma:0kB [ 271.660677][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 271.668220][ T6264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 271.681632][ T6264] Node 0 DMA32: 3*4kB (UM) 6*8kB (UME) 3*16kB (M) 3*32kB (M) 2*64kB (M) 6*128kB (UME) 4*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 137*4096kB (M) = 571980kB [ 271.700687][ T6264] Node 0 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (E) 1*32kB (M) 2*64kB (U) 1*128kB (U) 2*256kB (UE) 0*512kB 7*1024kB (UME) 4*2048kB (ME) 0*4096kB = 16188kB [ 271.718867][ T6264] Node 1 Normal: 5*4kB (UME) 16*8kB (UME) 16*16kB (UME) 29*32kB (UME) 13*64kB (UME) 8*128kB (UME) 7*256kB (UM) 3*512kB (UE) 1*1024kB (M) 4*2048kB (UM) 216*4096kB (ME) = 900468kB [ 271.747917][ T6264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.758168][ T6264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.767849][ T6264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.777998][ T6264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.788424][ T6264] 44702 total pagecache pages [ 271.788496][ T6264] 0 pages in swap cache [ 271.788558][ T6264] Free swap = 124996kB [ 271.797691][ T6264] Total swap = 124996kB [ 271.801927][ T6262] net_ratelimit: 45 callbacks suppressed [ 271.802004][ T6262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.806512][ T6264] 2097051 pages RAM [ 271.839485][ T6264] 0 pages HighMem/MovableOnly [ 271.844363][ T6264] 1530442 pages reserved [ 271.850939][ T6264] 0 pages cma reserved [ 273.000097][ T30] audit: type=1326 audit(1765697208.713:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.023661][ T30] audit: type=1326 audit(1765697208.713:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.284350][ T30] audit: type=1326 audit(1765697208.813:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.307615][ T30] audit: type=1326 audit(1765697208.833:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.330949][ T30] audit: type=1326 audit(1765697208.833:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.354660][ T30] audit: type=1326 audit(1765697208.833:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.385128][ T30] audit: type=1326 audit(1765697208.843:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 273.408175][ T30] audit: type=1326 audit(1765697208.843:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 274.276645][ T5890] kernel write not supported for file [eventfd] (pid: 5890 comm: kworker/0:5) [ 275.165308][ T6301] loop3: detected capacity change from 0 to 2048 [ 275.429778][ T6301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 275.564629][ T6301] EXT4-fs (loop3): shut down requested (0) [ 275.735068][ T6310] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 276.053997][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 276.743336][ T6317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.136'. [ 280.070406][ T6336] loop2: detected capacity change from 0 to 1024 [ 280.118759][ T6336] ======================================================= [ 280.118759][ T6336] WARNING: The mand mount option has been deprecated and [ 280.118759][ T6336] and is ignored by this kernel. Remove the mand [ 280.118759][ T6336] option from the mount to silence this warning. [ 280.118759][ T6336] ======================================================= [ 280.664560][ T6336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 280.678045][ T6336] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.816758][ T6335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.823283][ T6335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 280.869790][ T6335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 280.893528][ T6335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.902108][ T6335] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.935219][ T6335] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.968109][ T6335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.982850][ T6335] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.996345][ T6335] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 281.017223][ T6335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.023959][ T6335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 281.060108][ T6335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 281.071416][ T6335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.079421][ T6335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 281.095650][ T6335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 281.917387][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.967068][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 282.069657][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 282.069745][ T30] audit: type=1326 audit(1765697217.833:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.106844][ T30] audit: type=1326 audit(1765697217.843:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.130682][ T30] audit: type=1326 audit(1765697217.843:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.153925][ T30] audit: type=1326 audit(1765697217.843:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.182588][ T30] audit: type=1326 audit(1765697217.843:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.207628][ T30] audit: type=1326 audit(1765697217.843:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.230589][ T30] audit: type=1326 audit(1765697217.893:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.253655][ T30] audit: type=1326 audit(1765697217.893:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.282488][ T30] audit: type=1326 audit(1765697217.893:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.307378][ T30] audit: type=1326 audit(1765697217.923:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 282.411236][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 282.966168][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.982412][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 282.991912][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 283.007976][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 283.046939][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.053925][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.127552][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.584105][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 283.595205][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 283.604891][ T6372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 283.877564][ T6379] loop2: detected capacity change from 0 to 2048 [ 284.005134][ T5812] Bluetooth: hci0: command 0x0c1a tx timeout [ 284.140215][ T6379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.289505][ T6389] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.569705][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.038955][ T5812] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.070150][ T6397] fuse: Unknown parameter '0x0000000000000003' [ 285.116696][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.118396][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.196313][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.839035][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 286.078252][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.109134][ T6408] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.267863][ T6418] program syz.1.168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.472624][ T6408] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.774420][ T6408] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.087796][ T6408] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.116454][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.196437][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.199030][ T5812] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.264199][ T6425] loop3: detected capacity change from 0 to 2048 [ 287.276319][ T5812] Bluetooth: hci4: command 0x0c1a tx timeout [ 287.468310][ T1895] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.538033][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.788441][ T3849] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.863527][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.864373][ T6435] tipc: Started in network mode [ 287.878596][ T6435] tipc: Node identity ac14140f, cluster identity 4711 [ 287.886696][ T6435] tipc: New replicast peer: 255.255.255.255 [ 287.897507][ T6435] tipc: Enabled bearer , priority 10 [ 287.917068][ T3849] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.031258][ T3849] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.007068][ T11] tipc: Node number set to 2886997007 [ 289.033273][ T6442] syz.0.176 uses obsolete (PF_INET,SOCK_PACKET) [ 289.382384][ C1] hrtimer: interrupt took 253200 ns [ 291.059730][ T6459] loop4: detected capacity change from 0 to 128 [ 291.353599][ T6462] bio_check_eod: 23 callbacks suppressed [ 291.353688][ T6462] syz.4.184: attempt to access beyond end of device [ 291.353688][ T6462] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 291.442244][ T6462] syz.4.184: attempt to access beyond end of device [ 291.442244][ T6462] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 291.457140][ T6462] syz.4.184: attempt to access beyond end of device [ 291.457140][ T6462] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 291.472149][ T6462] syz.4.184: attempt to access beyond end of device [ 291.472149][ T6462] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 291.486322][ T6462] syz.4.184: attempt to access beyond end of device [ 291.486322][ T6462] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 291.669837][ T6461] loop2: detected capacity change from 0 to 2048 [ 291.710344][ T6462] syz.4.184: attempt to access beyond end of device [ 291.710344][ T6462] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 291.822266][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.043335][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.700437][ T6481] loop2: detected capacity change from 0 to 512 [ 292.787960][ T6481] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.189: corrupted in-inode xattr: invalid ea_ino [ 292.804576][ T6481] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.189: couldn't read orphan inode 15 (err -117) [ 292.821906][ T6481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.858097][ T6481] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.157489][ T6483] loop4: detected capacity change from 0 to 512 [ 293.252007][ T6483] EXT4-fs: Ignoring removed i_version option [ 293.258947][ T6483] EXT4-fs: Ignoring removed bh option [ 293.539233][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.632679][ T6483] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.499203][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.443717][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.451328][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.677670][ T6497] capability: warning: `syz.3.197' uses 32-bit capabilities (legacy support in use) [ 297.089414][ T6499] loop3: detected capacity change from 0 to 512 [ 297.901334][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.915566][ T6499] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.138916][ T6497] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #12: comm syz.3.197: directory missing '.' [ 298.831971][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.145683][ T6511] loop4: detected capacity change from 0 to 128 [ 300.695086][ T6514] syz.4.202: attempt to access beyond end of device [ 300.695086][ T6514] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 300.820977][ T6511] syz.4.202: attempt to access beyond end of device [ 300.820977][ T6511] loop4: rw=8912896, sector=145, nr_sectors = 8 limit=128 [ 300.837574][ T6511] syz.4.202: attempt to access beyond end of device [ 300.837574][ T6511] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 301.097946][ T6515] loop3: detected capacity change from 0 to 764 [ 301.205140][ T6511] syz.4.202: attempt to access beyond end of device [ 301.205140][ T6511] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 301.280981][ T6515] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 301.404510][ T6511] syz.4.202: attempt to access beyond end of device [ 301.404510][ T6511] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 301.515209][ T6515] Symlink component flag not implemented [ 301.522142][ T6515] Symlink component flag not implemented (7) [ 301.561305][ T6511] syz.4.202: attempt to access beyond end of device [ 301.561305][ T6511] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 303.413337][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 303.422889][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 305.257170][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 305.257263][ T30] audit: type=1326 audit(1765697240.963:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 305.286720][ T30] audit: type=1326 audit(1765697240.973:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 305.309832][ T30] audit: type=1326 audit(1765697240.973:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 306.195592][ T30] audit: type=1326 audit(1765697241.153:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 306.225106][ T30] audit: type=1326 audit(1765697241.153:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43858f749 code=0x7ffc0000 [ 306.251760][ T30] audit: type=1326 audit(1765697241.173:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb438591667 code=0x7ffc0000 [ 306.276153][ T30] audit: type=1326 audit(1765697241.173:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb4385915dc code=0x7ffc0000 [ 306.299187][ T30] audit: type=1326 audit(1765697241.223:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb438591514 code=0x7ffc0000 [ 306.321865][ T30] audit: type=1326 audit(1765697241.253:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb438591514 code=0x7ffc0000 [ 306.348237][ T30] audit: type=1326 audit(1765697241.253:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.4.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb43858e3aa code=0x7ffc0000 [ 306.877566][ T6544] loop2: detected capacity change from 0 to 2048 [ 306.951453][ T6544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.062434][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 307.071967][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 307.087308][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 307.096710][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 307.334492][ T5799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.479775][ T6553] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 308.048203][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 308.125739][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 308.235492][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 308.261292][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.271681][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.631985][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.661211][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.247943][ T14] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.262773][ T14] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.283847][ T14] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.330810][ T14] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.804038][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 309.813424][ T6577] netlink: 196 bytes leftover after parsing attributes in process `syz.2.225'. [ 309.898113][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 309.908049][ T6577] netlink: 196 bytes leftover after parsing attributes in process `syz.2.225'. [ 309.949180][ T6582] loop3: detected capacity change from 0 to 512 [ 310.063066][ T6585] loop4: detected capacity change from 0 to 512 [ 310.079001][ T6582] ------------[ cut here ]------------ [ 310.084975][ T6582] EA inode 11 i_nlink=2 [ 310.085077][ T6582] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x73c/0x800, CPU#0: syz.3.226/6582 [ 310.085678][ T6585] EXT4-fs: Ignoring removed i_version option [ 310.090203][ T6582] Modules linked in: [ 310.090323][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.3.226 Not tainted syzkaller #0 PREEMPT(none) [ 310.102227][ T6585] EXT4-fs: Ignoring removed bh option [ 310.107834][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.107943][ T6582] RIP: 0010:ext4_xattr_inode_update_ref+0x7b6/0x800 [ 310.154947][ T6582] Code: 06 00 00 44 89 b3 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 e4 75 38 45 85 ff 75 40 48 8b 7d c0 48 8b 75 d0 8b 55 b0 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 ef e8 c8 39 57 ff 45 85 ff 0f [ 310.175637][ T6582] RSP: 0018:ffff888023b6f178 EFLAGS: 00010246 [ 310.182213][ T6582] RAX: 0000000000000000 RBX: ffff888053a6acd0 RCX: 0000000000aaa73a [ 310.190940][ T6582] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff9273c0f0 [ 310.199631][ T6582] RBP: ffff888023b6f200 R08: ffffea000000000f R09: 0000000000000000 [ 310.208174][ T6582] R10: ffff88802336f0c0 R11: ffffffff8348dab1 R12: 0000000000000000 [ 310.216647][ T6582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.224861][ T6582] FS: 00007fa3643f66c0(0000) GS:ffff8881aacfa000(0000) knlGS:0000000000000000 [ 310.241557][ T6582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.250570][ T6582] CR2: 000000110c321579 CR3: 0000000052270000 CR4: 00000000003526f0 [ 310.259192][ T6582] Call Trace: [ 310.262722][ T6582] [ 310.266145][ T6582] ext4_xattr_inode_dec_ref_all+0xffb/0x1730 [ 310.272657][ T6582] ? errseq_check+0x6f/0xd0 [ 310.277921][ T6582] ext4_xattr_delete_inode+0xd0d/0x14b0 [ 310.284052][ T6582] ext4_evict_inode+0x1d28/0x23d0 [ 310.289716][ T6582] ? __pfx_ext4_evict_inode+0x10/0x10 [ 310.295594][ T6582] evict+0x6a9/0xca0 [ 310.300094][ T6582] ? kmsan_get_metadata+0xfb/0x160 [ 310.305746][ T6582] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 310.312627][ T6582] iput+0xc6f/0x1070 [ 310.318007][ T6582] ext4_process_orphan+0x49a/0x520 [ 310.323482][ T6582] ext4_orphan_cleanup+0x10a6/0x1e30 [ 310.329336][ T6582] ext4_fill_super+0xa5d3/0xae50 [ 310.341945][ T6582] ? kmsan_get_metadata+0xfb/0x160 [ 310.350364][ T6582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.356894][ T6582] ? sb_set_blocksize+0x24e/0x390 [ 310.362338][ T6582] get_tree_bdev_flags+0x6e6/0x920 [ 310.368259][ T6582] ? __pfx_ext4_fill_super+0x10/0x10 [ 310.373892][ T6582] ? __pfx_ext4_fill_super+0x10/0x10 [ 310.379840][ T6582] ? __pfx_ext4_get_tree+0x10/0x10 [ 310.385280][ T6582] get_tree_bdev+0x38/0x50 [ 310.390319][ T6582] ext4_get_tree+0x35/0x40 [ 310.395064][ T6582] vfs_get_tree+0xb3/0x5c0 [ 310.401947][ T6582] do_new_mount+0x879/0x1700 [ 310.408289][ T6582] ? kmsan_get_metadata+0xfb/0x160 [ 310.413976][ T6582] path_mount+0x749/0x1fb0 [ 310.419076][ T6582] ? user_path_at+0x241/0x3e0 [ 310.424084][ T6582] __se_sys_mount+0x6f7/0x7e0 [ 310.429367][ T6582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 310.442854][ T6582] ? kmsan_get_metadata+0xfb/0x160 [ 310.450972][ T6582] __x64_sys_mount+0xe4/0x150 [ 310.456281][ T6582] x64_sys_call+0x38cb/0x3e70 [ 310.461308][ T6582] do_syscall_64+0xd9/0xf80 [ 310.466678][ T6582] ? clear_bhb_loop+0x40/0x90 [ 310.471786][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.481381][ T6582] RIP: 0033:0x7fa363590eea [ 310.486965][ T6582] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.507474][ T6582] RSP: 002b:00007fa3643f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.516517][ T6582] RAX: ffffffffffffffda RBX: 00007fa3643f5ef0 RCX: 00007fa363590eea [ 310.524768][ T6582] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa3643f5eb0 [ 310.533221][ T6582] RBP: 0000200000000180 R08: 00007fa3643f5ef0 R09: 0000000000800700 [ 310.549259][ T6582] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 310.560214][ T6582] R13: 00007fa3643f5eb0 R14: 000000000000046f R15: 000000000000002c [ 310.569008][ T6582] [ 310.572273][ T6582] ---[ end trace 0000000000000000 ]--- [ 310.578687][ T6582] EXT4-fs (loop3): 1 orphan inode deleted [ 310.587237][ T6582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.682759][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.733365][ T6585] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.180909][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.250691][ T5816] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.567169][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 311.567254][ T30] audit: type=1326 audit(1765697247.333:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.728985][ T30] audit: type=1326 audit(1765697247.363:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.752340][ T30] audit: type=1326 audit(1765697247.363:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.778350][ T30] audit: type=1326 audit(1765697247.363:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.802148][ T30] audit: type=1326 audit(1765697247.383:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.825258][ T30] audit: type=1326 audit(1765697247.403:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.848252][ T30] audit: type=1326 audit(1765697247.403:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.874900][ T30] audit: type=1326 audit(1765697247.403:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.899663][ T30] audit: type=1326 audit(1765697247.413:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 311.922942][ T30] audit: type=1326 audit(1765697247.413:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6596 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71d7d8f749 code=0x7ffc0000 [ 312.242407][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.231'. [ 313.031144][ T6616] program syz.0.236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.661962][ T6632] ===================================================== [ 314.669541][ T6632] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 314.677121][ T6632] batadv_get_vid+0x2d0/0x3b0 [ 314.682118][ T6632] batadv_interface_tx+0x2e8/0x1dd0 [ 314.687788][ T6632] dev_hard_start_xmit+0x22f/0xa30 [ 314.693207][ T6632] __dev_queue_xmit+0x2ac0/0x58f0 [ 314.698767][ T6632] __bpf_redirect+0x162d/0x1760 [ 314.703955][ T6632] bpf_clone_redirect+0x4b5/0x6d0 [ 314.709603][ T6632] ___bpf_prog_run+0x1297/0xeba0 [ 314.714769][ T6632] __bpf_prog_run512+0xc5/0x100 [ 314.720108][ T6632] bpf_test_run+0x496/0xe00 [ 314.724862][ T6632] bpf_prog_test_run_skb+0x2377/0x3200 [ 314.731236][ T6632] bpf_prog_test_run+0x5c2/0xa40 [ 314.736542][ T6632] __sys_bpf+0x873/0xeb0 [ 314.740976][ T6632] __x64_sys_bpf+0xa4/0xf0 [ 314.745635][ T6632] x64_sys_call+0x31c3/0x3e70 [ 314.750801][ T6632] do_syscall_64+0xd9/0xf80 [ 314.755522][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.761866][ T6632] [ 314.764376][ T6632] Uninit was created at: [ 314.769127][ T6632] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 314.775392][ T6632] kmalloc_reserve+0x13c/0x4b0 [ 314.780581][ T6632] pskb_expand_head+0x1fc/0x15d0 [ 314.786088][ T6632] skb_ensure_writable+0x44e/0x510 [ 314.791403][ T6632] bpf_clone_redirect+0x310/0x6d0 [ 314.796905][ T6632] ___bpf_prog_run+0x1297/0xeba0 [ 314.802053][ T6632] __bpf_prog_run512+0xc5/0x100 [ 314.807258][ T6632] bpf_test_run+0x496/0xe00 [ 314.812071][ T6632] bpf_prog_test_run_skb+0x2377/0x3200 [ 314.817899][ T6632] bpf_prog_test_run+0x5c2/0xa40 [ 314.823027][ T6632] __sys_bpf+0x873/0xeb0 [ 314.827902][ T6632] __x64_sys_bpf+0xa4/0xf0 [ 314.832617][ T6632] x64_sys_call+0x31c3/0x3e70 [ 314.837890][ T6632] do_syscall_64+0xd9/0xf80 [ 314.842702][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.849083][ T6632] [ 314.851555][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.244 Tainted: G W syzkaller #0 PREEMPT(none) [ 314.862885][ T6632] Tainted: [W]=WARN [ 314.867101][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.877658][ T6632] ===================================================== [ 314.884832][ T6632] Disabling lock debugging due to kernel taint [ 314.891528][ T6632] Kernel panic - not syncing: kmsan.panic set ... [ 314.898286][ T6632] CPU: 0 UID: 0 PID: 6632 Comm: syz.0.244 Tainted: G B W syzkaller #0 PREEMPT(none) [ 314.909315][ T6632] Tainted: [B]=BAD_PAGE, [W]=WARN [ 314.914563][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.924771][ T6632] Call Trace: [ 314.928175][ T6632] [ 314.931318][ T6632] __dump_stack+0x26/0x30 [ 314.935894][ T6632] dump_stack_lvl+0x53/0x270 [ 314.940720][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 314.947015][ T6632] dump_stack+0x1e/0x25 [ 314.951406][ T6632] vpanic+0x435/0xd30 [ 314.955754][ T6632] panic+0x15d/0x160 [ 314.959939][ T6632] kmsan_report+0x31c/0x320 [ 314.964716][ T6632] ? __msan_warning+0x1b/0x30 [ 314.969796][ T6632] ? batadv_get_vid+0x2d0/0x3b0 [ 314.974878][ T6632] ? batadv_interface_tx+0x2e8/0x1dd0 [ 314.980659][ T6632] ? dev_hard_start_xmit+0x22f/0xa30 [ 314.986249][ T6632] ? __dev_queue_xmit+0x2ac0/0x58f0 [ 314.991693][ T6632] ? __bpf_redirect+0x162d/0x1760 [ 314.996963][ T6632] ? bpf_clone_redirect+0x4b5/0x6d0 [ 315.002668][ T6632] ? ___bpf_prog_run+0x1297/0xeba0 [ 315.008077][ T6632] ? __bpf_prog_run512+0xc5/0x100 [ 315.013401][ T6632] ? bpf_test_run+0x496/0xe00 [ 315.018577][ T6632] ? bpf_prog_test_run_skb+0x2377/0x3200 [ 315.024628][ T6632] ? bpf_prog_test_run+0x5c2/0xa40 [ 315.030035][ T6632] ? __sys_bpf+0x873/0xeb0 [ 315.034888][ T6632] ? __x64_sys_bpf+0xa4/0xf0 [ 315.039878][ T6632] ? x64_sys_call+0x31c3/0x3e70 [ 315.045045][ T6632] ? do_syscall_64+0xd9/0xf80 [ 315.049937][ T6632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.056294][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.062377][ T6632] ? do_syscall_64+0x81/0xf80 [ 315.067352][ T6632] ? filter_irq_stacks+0x49/0x190 [ 315.073123][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.078479][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.084593][ T6632] ? batadv_interface_tx+0x11/0x1dd0 [ 315.090209][ T6632] ? filter_irq_stacks+0x49/0x190 [ 315.095699][ T6632] ? stack_depot_save_flags+0x35/0x790 [ 315.101608][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.107092][ T6632] __msan_warning+0x1b/0x30 [ 315.112036][ T6632] batadv_get_vid+0x2d0/0x3b0 [ 315.116990][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.123144][ T6632] batadv_interface_tx+0x2e8/0x1dd0 [ 315.128560][ T6632] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 315.135219][ T6632] ? __pfx_batadv_interface_tx+0x10/0x10 [ 315.141053][ T6632] dev_hard_start_xmit+0x22f/0xa30 [ 315.146409][ T6632] __dev_queue_xmit+0x2ac0/0x58f0 [ 315.151740][ T6632] ? skb_release_data+0xa12/0xac0 [ 315.156962][ T6632] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 315.163449][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.168811][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.174956][ T6632] ? __dev_queue_xmit+0x277/0x58f0 [ 315.180308][ T6632] __bpf_redirect+0x162d/0x1760 [ 315.185468][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.191280][ T6632] bpf_clone_redirect+0x4b5/0x6d0 [ 315.196588][ T6632] ___bpf_prog_run+0x1297/0xeba0 [ 315.201862][ T6632] __bpf_prog_run512+0xc5/0x100 [ 315.206925][ T6632] ? kmsan_internal_poison_memory+0x78/0x90 [ 315.213840][ T6632] ? kmsan_internal_poison_memory+0x4a/0x90 [ 315.219997][ T6632] ? kmsan_slab_alloc+0xde/0x160 [ 315.225208][ T6632] ? kmem_cache_alloc_noprof+0x970/0x1750 [ 315.231259][ T6632] ? slab_build_skb+0x5c/0x5a0 [ 315.236319][ T6632] ? bpf_prog_test_run_skb+0x751/0x3200 [ 315.242115][ T6632] ? bpf_prog_test_run+0x5c2/0xa40 [ 315.247528][ T6632] ? __sys_bpf+0x873/0xeb0 [ 315.252140][ T6632] ? __x64_sys_bpf+0xa4/0xf0 [ 315.257009][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.262396][ T6632] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 315.268978][ T6632] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 315.275572][ T6632] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 315.281603][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.287146][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.292594][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.297953][ T6632] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 315.304545][ T6632] ? kmsan_get_metadata+0x150/0x160 [ 315.310085][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.316165][ T6632] ? __pfx___bpf_prog_run512+0x10/0x10 [ 315.321897][ T6632] ? __pfx___bpf_prog_run512+0x10/0x10 [ 315.327678][ T6632] bpf_test_run+0x496/0xe00 [ 315.332479][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.337849][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.343232][ T6632] ? bpf_test_run+0x2f7/0xe00 [ 315.348132][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.353506][ T6632] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 315.359843][ T6632] bpf_prog_test_run_skb+0x2377/0x3200 [ 315.365547][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 315.370939][ T6632] ? __rcu_read_unlock+0x6d/0xd0 [ 315.376331][ T6632] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 315.382364][ T6632] bpf_prog_test_run+0x5c2/0xa40 [ 315.387613][ T6632] __sys_bpf+0x873/0xeb0 [ 315.392521][ T6632] __x64_sys_bpf+0xa4/0xf0 [ 315.397189][ T6632] x64_sys_call+0x31c3/0x3e70 [ 315.402099][ T6632] do_syscall_64+0xd9/0xf80 [ 315.406830][ T6632] ? clear_bhb_loop+0x40/0x90 [ 315.411713][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.417887][ T6632] RIP: 0033:0x7f5645d8f749 [ 315.422451][ T6632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.442542][ T6632] RSP: 002b:00007f5646c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.452133][ T6632] RAX: ffffffffffffffda RBX: 00007f5645fe5fa0 RCX: 00007f5645d8f749 [ 315.460384][ T6632] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 315.469012][ T6632] RBP: 00007f5645e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 315.477247][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.485476][ T6632] R13: 00007f5645fe6038 R14: 00007f5645fe5fa0 R15: 00007ffd01f29868 [ 315.493685][ T6632] [ 315.496988][ T6632] Kernel Offset: disabled [ 315.501555][ T6632] Rebooting in 86400 seconds..