last executing test programs: 4.510811151s ago: executing program 0 (id=3093): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x20ae, 0x4}) fcntl$lock(r1, 0x6, &(0x7f0000000580)={0x1, 0x1, 0x9, 0x6}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) semop(0x0, &(0x7f0000000240)=[{0x3}, {0x1, 0xe65b}], 0x2) write$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@none, 0x2}}}, 0xb) 4.507025151s ago: executing program 0 (id=3094): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$inet(0x2, 0xa, 0x0) (async) r2 = socket$inet(0x2, 0xa, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) (async) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0xa88, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xffffffffffffffe0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64], 0x0, 0xa88, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xffffffffffffffe0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x198, 0x194, 0x194, 0x198, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0xc}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "6a13", 0x1}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 4.439907911s ago: executing program 0 (id=3096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.385920401s ago: executing program 0 (id=3099): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0xffba, 0x7, {{0x3d, 0x4, 0x1, 0xc, 0xf4, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @private=0xa010102, {[@timestamp={0x44, 0x20, 0xd5, 0x0, 0x3, [0x0, 0xba, 0xfffffffc, 0x1, 0xe5, 0x3, 0x6]}, @cipso={0x86, 0xe, 0x1, [{0x0, 0x8, "a435160968e5"}]}, @rr={0x7, 0x2b, 0xe7, [@empty, @empty, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @multicast1, @broadcast, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x2d, [@dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102, @multicast1]}, @lsrr={0x83, 0x13, 0x40, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @remote, @local]}, @cipso={0x86, 0x15, 0x2, [{0x5, 0x2}, {0x5, 0xd, "94742fe10d747c412e0306"}]}, @end, @rr={0x7, 0x23, 0x6f, [@multicast1, @remote, @private=0xa010100, @remote, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @lsrr={0x83, 0x2b, 0xe2, [@private=0xa010102, @remote, @broadcast, @remote, @remote, @remote, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newneigh={0x6c, 0x1c, 0x10, 0x70bd27, 0x25dfdbfb, {0x1c, 0x0, 0x0, r3, 0x40, 0x1, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0xc76, 0x2, 0x45ea}}, @NDA_VNI={0x8, 0x7, 0x7}, @NDA_IFINDEX={0x8, 0x8, r2}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x3, 0x8, 0x7}}, @NDA_PROBES={0x8, 0x4, 0xffff}, @NDA_PROTOCOL={0x5, 0xc, 0xd4}, @NDA_SRC_VNI={0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000042) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0xd4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_ACT={0x80, 0x7, [@m_bpf={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x2e}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xd4}}, 0x24040084) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000880)={0xa0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5a}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x20044000) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000280), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) eventfd(0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x7, 0x1) 4.278340152s ago: executing program 0 (id=3105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2cd, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000400)) io_uring_enter(r2, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[r0, r1, r4, r0, r0, r3]}, 0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.677984812s ago: executing program 1 (id=3133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x253ca29b21fabc1a}, 0x801) r3 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000280), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000740)=""/172, 0xac}, {&(0x7f0000000580)=""/127, 0x7f}], 0x5, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x40002021) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x2, &(0x7f0000000900)=r7, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 2.607183353s ago: executing program 1 (id=3136): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000000c0)="800009e9220800ce", 0x8, 0x4004050, &(0x7f0000000040)={0xa, 0x4e23, 0x80000000, @mcast1, 0x9}, 0x1b) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fffffff}]}) 2.439957354s ago: executing program 1 (id=3141): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4000, 0x40000000318, 0x0, 0x1, 0x0, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040)=0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) write$sndseq(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) gettid() write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(r1, 0x407, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000000)='./file0\x00') set_mempolicy_home_node(&(0x7f0000cc6000/0x3000)=nil, 0x3000, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.910778687s ago: executing program 1 (id=3151): io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x13c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x44}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_connmark={0xbc, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x6f, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0xfd, 0xffffffffffffffff, 0x5, 0x6, 0x8000000000000001, 0x81, 0x9}, &(0x7f0000000080)={0x8, 0x80, 0x1, 0x5, 0x8000000000000001, 0x2, 0x1b50, 0xf}, &(0x7f00000000c0)={0x4, 0x7, 0x3, 0x5, 0x7, 0x6, 0x8, 0x7}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000340)={[0x3]}, 0x8}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES64=r1], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) 1.747503818s ago: executing program 1 (id=3154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) msgget(0x3, 0x80) 1.667274999s ago: executing program 1 (id=3156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000020013000300000028bd7000033500003903c83fc42b1c0647099857ec59d52c7366d8c670a9729b19cfffb9e4cc75f214e6b1efa85a5b2b5039967eb6374a71f6"], 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000740)='f2fs_lookup_start\x00', r1, 0x0, 0xff}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) sync() socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0), 0xfe, 0x57c, &(0x7f0000000dc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r10, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.191652912s ago: executing program 2 (id=3168): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000064fdfe5b981700000000000002ff000000850000006d0047972ee0ed71000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_bp={&(0x7f0000000440), 0xb}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x4, 0xa, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() ustat(0x3, &(0x7f0000000040)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.090426763s ago: executing program 2 (id=3174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000020013000300000028bd7000033500003903c83fc42b1c0647099857ec59d52c7366d8c670a9729b19cfffb9e4cc75f214e6b1efa85a5b2b5039967eb6374a71f6"], 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000740)='f2fs_lookup_start\x00', r1, 0x0, 0xff}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) sync() socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0), 0xfe, 0x57c, &(0x7f0000000dc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r11, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.030275913s ago: executing program 4 (id=3175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) msgget(0x3, 0x80) 1.029701603s ago: executing program 4 (id=3176): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4000, 0x40000000318, 0x0, 0x1, 0x0, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040)=0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) write$sndseq(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) gettid() write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(r1, 0x407, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000000)='./file0\x00') set_mempolicy_home_node(&(0x7f0000cc6000/0x3000)=nil, 0x3000, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 932.439273ms ago: executing program 2 (id=3178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0), 0xfe, 0x57c, &(0x7f0000000dc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 747.167555ms ago: executing program 2 (id=3180): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, r1}, 0x94) getxattr(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sync() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x26, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa2}, {}, {}, [@map_fd={0x18, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0xc6, 0x5, 0x9, 0x9, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xffffff01, 0x3c, &(0x7f0000000340)=""/60, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x6, 0x38b, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6, 0x1, r6], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 686.952745ms ago: executing program 3 (id=3182): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'pimreg1\x00', @ifru_names='bridge_slave_0\x00'}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000440)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0xff0f) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0x9468, 0x771}, &(0x7f0000000480)=0x90) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mmap(&(0x7f00009f8000/0x4000)=nil, 0x4000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) 657.124776ms ago: executing program 2 (id=3183): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000080)={{0x1, 0x100, 0x400, 0x5, 0xd, 0x77}, 0x39b, [0x4, 0x101, 0x80000000, 0x7, 0x2, 0x3, 0xffff, 0xea55, 0x1, 0x9, 0xfffffffd, 0x8f, 0x6, 0x5, 0x7fff, 0x4, 0x6, 0x3, 0x8, 0xb2, 0x7fff, 0x4, 0x7fff, 0x6, 0x3ff, 0x401, 0x6, 0x7, 0x51, 0x4, 0x10, 0x9, 0xffffffff, 0xd, 0xffff, 0xd25f, 0x2, 0x3, 0x9, 0x4, 0x6, 0xd22, 0x7fffffff, 0x3, 0x2, 0x630, 0x0, 0x8, 0xffffba2e, 0xdd9, 0x800, 0x100, 0xe0000, 0xffffff88, 0xf0e, 0x4db, 0x4, 0xb63c, 0x4, 0x6, 0x7fff, 0x94b, 0x0, 0x7, 0x9, 0x9, 0x6, 0x9, 0x9, 0xfffffff8, 0x8, 0x6, 0x8, 0x1000, 0xe0000000, 0x5, 0x10001, 0xf, 0x7fffffff, 0xe, 0x6, 0x3ff, 0x5, 0x7, 0x5, 0x42b, 0x0, 0x976, 0xe976, 0x1d, 0x7, 0xa45, 0x6f0, 0x0, 0x6, 0x400, 0x80000000, 0xcc8, 0x7, 0x10001, 0x7, 0x3, 0xb53d, 0x4, 0x7, 0x200, 0x7, 0x80000000, 0x80000000, 0x1ff, 0xe000, 0x4, 0xf, 0x7, 0x1, 0x40, 0x7, 0x8, 0x100000, 0x9, 0x8f31, 0x6, 0x100, 0x101, 0x514a, 0x0, 0x1, 0xff, 0x1000, 0x80, 0xfffffffa, 0x8, 0x80, 0x64, 0xfffffffc, 0x1, 0x4, 0x6, 0x2, 0x9, 0x100, 0x9, 0x6ad, 0x80000000, 0x2, 0x7, 0x36, 0x3, 0x3, 0x6b7eb428, 0x8, 0x1, 0x2, 0x92, 0x0, 0xfff, 0xd064, 0x3eb, 0x6, 0x3, 0x6, 0x5, 0xffff, 0x4, 0x5, 0xface, 0xae, 0x9, 0x9, 0x6, 0x9, 0x10, 0xfff, 0xffff, 0x3, 0x44c92476, 0x7ff, 0xffff, 0xf20406, 0xd6, 0x8, 0xfff80000, 0x2, 0x0, 0x4, 0x4, 0x6, 0x8, 0x4, 0x6, 0x10000, 0x0, 0x0, 0xe2, 0x5, 0x6, 0x6, 0x3, 0x5, 0x6, 0x4, 0xe05e, 0x2, 0x5d3b, 0x1, 0xf53, 0x7, 0xfffffff8, 0x2, 0x1, 0x1c0, 0x9bf7, 0x20000, 0x7, 0x2d, 0x3, 0x80, 0x9, 0x8, 0x80, 0x1, 0x1e5, 0xd, 0xffffffff, 0x7, 0x0, 0x4, 0x3, 0xa17, 0xad, 0xffffff58, 0x0, 0xffff8000, 0xa6a, 0x2, 0x73d, 0x4, 0xfff, 0x3f444726, 0x0, 0x5, 0x9, 0x3, 0x10, 0x1, 0x3, 0x2, 0xac, 0x1, 0x9, 0x1f1e, 0x9, 0x7, 0x100, 0xa5, 0x5, 0x8, 0x3, 0x3f, 0x0, 0x4, 0x5, 0x8, 0x0, 0x2, 0x9, 0x8, 0x4, 0xff, 0x5, 0x5, 0xcc, 0x401, 0x6, 0x0, 0x4, 0xfff, 0xcd, 0xffffb13b, 0x80000000, 0x7, 0x2, 0x3, 0x5c6, 0x1ff, 0xd67, 0x401, 0x6, 0x8, 0xffff, 0x0, 0x8, 0xfffffffb, 0xfd5a, 0x10, 0x1, 0x0, 0x4, 0x0, 0x8, 0x6, 0x1, 0xe19, 0x2, 0x1, 0x5, 0x3, 0x2, 0x6, 0xf1, 0x10000, 0x8, 0x0, 0x1, 0x166, 0x9, 0x7, 0x1, 0x8001, 0x7, 0x5, 0xb8, 0x7fff, 0x6, 0x2, 0x57, 0x7fffffff, 0x0, 0x2, 0x6, 0x406, 0x76e2, 0xe, 0x9, 0x2, 0xb, 0x8, 0xffff, 0x4, 0x4, 0x2, 0x3d377e39, 0xa17, 0x1, 0x5, 0x1, 0xef3, 0x9, 0xd, 0xa, 0xa, 0x1, 0x4, 0x80, 0x2, 0xc, 0x800, 0x5, 0x0, 0x200, 0xb, 0x9, 0xd71f, 0x8000000, 0x6, 0x8, 0x6, 0x7, 0xe5d, 0x800000, 0x50, 0xe0d, 0x5, 0x46d, 0x598, 0x6, 0xe, 0x0, 0x8, 0x2, 0x1, 0x0, 0xfff, 0x209, 0x6, 0x50, 0x1, 0x7, 0x8, 0x0, 0x0, 0x4, 0x8000, 0x8, 0xc, 0x5, 0x3, 0x75b5, 0x4, 0x0, 0x2, 0x5, 0xb, 0x8, 0x7fffffff, 0x3, 0x8, 0x10000, 0x3, 0x800, 0x1, 0x7ff, 0x0, 0x2, 0x5, 0x10001, 0x310086a6, 0x8, 0x1, 0x6, 0x9, 0x7fff, 0x7, 0x5, 0x9, 0x3, 0x2, 0x8, 0x2, 0x8, 0x40, 0x35, 0x1, 0x6, 0x1, 0x0, 0x1, 0xfffffffa, 0x0, 0x50e9, 0xfd6, 0x3, 0x9, 0x0, 0x9, 0x4, 0xfffffff9, 0x0, 0x68e, 0xfffffff8, 0x0, 0xfffffff7, 0x0, 0xa064, 0x2, 0x80000001, 0x8031, 0x5, 0xb, 0x2, 0x13, 0x5, 0x1, 0x0, 0xfffffffd, 0x1, 0x9, 0x0, 0xe0d9, 0x0, 0x80000000, 0x400, 0x0, 0xc1, 0x57, 0x2, 0xc, 0x2, 0x10, 0x1, 0xffffffff, 0x2, 0x7, 0x1, 0x1186, 0x7fffffff, 0x400, 0x4, 0x1, 0xe, 0x2, 0x27, 0xfffffbff, 0x4, 0x7, 0x9, 0x5, 0x7, 0x1, 0xbf, 0x2, 0x1000, 0x3, 0xb, 0x8000, 0xf1b3, 0x4e43, 0x7, 0x2, 0x5, 0x401, 0x0, 0x8, 0x8, 0x1, 0xfffffffa, 0xab74, 0xfff, 0x8, 0x95a8, 0x0, 0x2, 0x2, 0x8, 0x0, 0xc8b00000, 0xb43, 0xa, 0x1, 0x4, 0x7, 0x400, 0x0, 0x4, 0x0, 0x6, 0x0, 0x1, 0x10, 0xfffff801, 0x0, 0x2bc3, 0x5, 0x79, 0xa, 0xfffffff8, 0x0, 0x5, 0x9, 0x0, 0x7, 0xffff, 0xfffffe01, 0x6, 0x1000, 0x2a3ca44b, 0x118, 0x1000, 0x2, 0xd3, 0xd74, 0x80, 0x80000000, 0xfffffffb, 0x0, 0x80000001, 0x7ff, 0x4, 0xffff, 0x10, 0x689970ac, 0xfffffffe, 0xd, 0x9, 0x7, 0x6, 0x58, 0x7, 0x7, 0x8b, 0x2, 0x1, 0x80000000, 0x5, 0x3, 0xff, 0x9, 0x4, 0x1, 0x800, 0x5, 0x8, 0x9, 0x5b6f560a, 0x8, 0x5, 0x7, 0x6, 0x2, 0x7, 0x8, 0xfffffe01, 0x10, 0x2, 0x5, 0x8, 0xfffffffb, 0x10001, 0x0, 0x4, 0x9, 0x3b42, 0x1, 0x2, 0x7fca, 0x9, 0x6, 0x7, 0x8, 0x5, 0x401, 0x4, 0x2, 0x0, 0x0, 0xfffffff4, 0xf, 0xb337, 0x93bb, 0x7, 0xb, 0x9, 0x5, 0x3d3, 0x80, 0x19, 0x9, 0x7ff, 0x8001, 0x80000000, 0x2, 0x5, 0x9, 0x6, 0xffffffff, 0x4, 0x2, 0x1, 0xdd9, 0x116, 0x4, 0x6, 0x2, 0xffffffff, 0x1, 0xeec, 0xf0, 0x10, 0x8, 0x0, 0x3, 0x5, 0x6, 0x1fffe, 0x6, 0x38618000, 0x5, 0x6, 0x0, 0x10000, 0x8, 0x7, 0x5, 0x7fff, 0x0, 0x99fd, 0x5, 0x7, 0x3, 0x0, 0x7577, 0x1, 0x6, 0x5d, 0x901, 0x7, 0x2, 0x3ff, 0xe, 0x6, 0xe4000000, 0x64a4, 0x6, 0x3, 0x7fffffff, 0x7ff, 0x4, 0x2, 0x2, 0x0, 0x3, 0x80000001, 0xffff, 0x1, 0x9, 0xc8a, 0x4, 0x1, 0xf0000000, 0x81, 0xd976, 0x2, 0x563b, 0x3, 0x1, 0xfc2, 0x8, 0x6dc, 0x200, 0xd, 0x9, 0x200, 0x2, 0x7f, 0x200, 0x8000, 0x5e5a8f92, 0xa, 0x101, 0x3, 0x5, 0xfffffff7, 0x0, 0x80000000, 0x7, 0x9, 0x48, 0x8, 0x2d0d30bb, 0x4, 0x6, 0x1, 0x3, 0x3, 0x5, 0x7, 0x6, 0x1, 0x10000, 0x5, 0x9, 0xfffff20b, 0x7, 0x1, 0x1f, 0x5, 0x6, 0x167, 0x3, 0x3, 0x0, 0xffff0001, 0x1, 0xf, 0x400, 0x9, 0xb, 0x12, 0xfffffffa, 0x5, 0x40, 0x2, 0x9, 0x1, 0x1, 0x8, 0x1, 0x1ff, 0x8001, 0x5, 0x8, 0xe82, 0xfffffbd9, 0x0, 0x4f3, 0x5, 0x1ef6, 0xc, 0xad0b, 0x4, 0xfffffffa, 0x8, 0xe, 0x3, 0x0, 0x8, 0x7, 0x100, 0x3ff, 0x100, 0x2, 0xfffff488, 0x9, 0xb1, 0x3ff, 0xbf4, 0x1, 0x6, 0x9, 0x8001, 0x9, 0x6, 0x7, 0x3, 0x6180dd56, 0x0, 0x6, 0x6, 0xa6, 0x5, 0xffffffff, 0xb, 0x10001, 0xea0f, 0x100, 0x10001, 0x7fffffff, 0x9, 0x400, 0x658, 0x7, 0x0, 0x1, 0x8, 0xe4, 0x78eed2db, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x5, 0x0, 0x1, 0x0, 0x7fffffff, 0x3ff, 0x200, 0x3f80000, 0x1000000, 0x2c, 0x7, 0x7fff, 0x1, 0x2, 0x3, 0x10000, 0x800, 0x6, 0x8a84, 0x5588, 0x3, 0x0, 0x8, 0x10000, 0x1, 0x9, 0x0, 0xfff, 0x7f, 0x5, 0xc, 0x5, 0x0, 0x8, 0x300000, 0x7f, 0x3ff, 0x3, 0x1000, 0x5e8, 0x0, 0x2, 0xb2b6, 0xfffffff9, 0x10001, 0x9, 0x145d, 0x6, 0x80, 0x3, 0x7, 0x2, 0x3, 0x1ff, 0x8, 0xb, 0x4, 0x38ce, 0x7, 0xfffffff9, 0x4, 0xbb8b, 0x8001, 0xfffffffe, 0x9, 0x9, 0x6, 0x9, 0x39, 0xd65, 0x0, 0x0, 0xfffffff8, 0x9, 0x40, 0x0, 0xffff, 0x200, 0x7, 0xc, 0x0, 0x6, 0xffffffff, 0x7, 0xfffffff8, 0x13, 0x800, 0x2, 0x3a6, 0xffff8f07, 0x3, 0x10001, 0x80000000, 0xc, 0x1, 0x7, 0xd, 0x9a7, 0x8001, 0x200, 0xfff, 0x4, 0xbe4, 0x3, 0xe, 0x6, 0x0, 0x9, 0x2, 0x8, 0x6, 0x80, 0x9, 0x4, 0x80000001, 0x6, 0x10, 0x40, 0x1, 0xffffffff, 0x9, 0xefb, 0x0, 0x4, 0x1, 0x1, 0x2, 0x5, 0x10000, 0xc, 0x7, 0x4, 0x0, 0x1, 0xff, 0x80, 0x1, 0x7ff, 0x2f3, 0x5, 0x8001, 0x9, 0x0, 0x81, 0x9, 0x2, 0x5, 0xfffffffc, 0x9, 0x5, 0x0, 0x1, 0x9, 0x4, 0x0, 0x6, 0x6, 0x5, 0xb, 0x9, 0x46, 0xfffffff7, 0x5, 0xc, 0x80, 0x6, 0xbe2, 0x8, 0xc, 0x81, 0x8, 0x7fff, 0xa, 0x1, 0x0, 0x9a, 0x11cb, 0x5, 0xfffffff8, 0x777, 0x1, 0x1, 0x5]}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000010c0)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x100010, r0, 0xef6c4000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0xd3cef3d9dcf04032}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x30, 0x140c, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008090) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001340), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, r1, 0xa, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000001480)={0x1, 0x7, 0xc1f}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000a08}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000085) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000001600)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x20004080) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000001780)=0x2) write$char_usb(r0, &(0x7f00000017c0)="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", 0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r7, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x824) socket$unix(0x1, 0x2, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000002900), 0x10, 0x20101) close_range(r2, r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x697d67e8aafd0db2}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002a80), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xc0, r10, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x33, 0x7, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x80) 611.627596ms ago: executing program 2 (id=3184): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x54029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4000, 0x40000000318, 0x0, 0x1, 0x0, 0x101}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000040)=0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2981) write$sndseq(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) gettid() write$P9_RGETLOCK(r2, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) fcntl$setpipe(r1, 0x407, 0x8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) io_setup(0x3ff, &(0x7f0000000500)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r1, &(0x7f0000000000)='./file0\x00') set_mempolicy_home_node(&(0x7f0000cc6000/0x3000)=nil, 0x3000, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 551.970216ms ago: executing program 3 (id=3185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) msgget(0x3, 0x80) 521.987096ms ago: executing program 3 (id=3186): bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe99) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000012}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getgid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1b, 0xc, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r5, &(0x7f0000000280)=""/176, 0xb0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x7, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r7, @ANYRESHEX=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffdf7, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8, 0x0, 0x18d7ffdf}, 0x18) 459.603027ms ago: executing program 4 (id=3187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x509, &(0x7f0000000f80)="$eJzs3cFvG1kZAPBvnDjr7KYkCxyWldiNEKvuCmonG3Y34rBbJASnSkC5h5A4URQnjmKnbaIKpeKMkBACBBc4cUHiD0BC/RMQUiW4VwiBKmjLgUPBaOxxGlw7SVU7zia/n/Q6b9545vveVJ7kzUxmAriwpiPiakSMRMQ7ETGZteeyEvutkn7u0cPbS2lJotG4/o8kkqytva0km76SrVaIiG99PeK7SdJqOKS2u7e+WKmUt7P5Un1jq1Tb3buytrG4Wl4tb87Nzb4//8H8e/Mzfevrh1/9609++Ouvffj7L968v/D3t7+X5juRLTvcj35q7ZN8c1+0jUbE9iCCDcFI1p/8ST6cDD4fAACOlv6O/8mI+FxEPP75sLMBAAAABqHx0UQ8SSIaAAAAwLmVa94Dm+SK2b0AE5HLFYute3g/HR9FpVqrf2GlurO53LpXdiryuZW1Snkmu1d4KvJJOj/brD+df7djfi4iXo2IH0+ON+eLS9XK8rBPfgAAAMAFkY7zJ3Ktejr512Rr/A8AAACcM1PDTgAAAAAYOON/AAAAOP+eHf9PtybJ6OknAwAAAPTbN65dS0uj/f7r5Ru7O+vVG1eWy7X14sbOUnGpur1VXK1WV5vP7Ns4bnuVanXrS7G5c6tUL9fqpdru3sJGdWezvtB8r/dC+UTviQYAAAD66tU37/45iYj9L483S2osW2asDudb7vk+ngwqD+D0jQw7AWBo3OALF5fvP3DcwL5wSnkAAACDc/kzB9f/x+PQ9f9L913/h/PuOa//A+eI6/9wcXVc//vliVZ60hhMMsCpMsYHjjsP0PP6/x/6nwsAADAYE82S5IrZGGAicrliMeJS87UA+WRlrVKeiYhPRMSfJvMvpfOzw04aAAAAAAAAAAAAAAAAAAAAAAAAAD5mGo0kGgAAAMC5FpH7WxIRSRQiJj8/0Xl+YCz592RzGhE3f3H9p7cW6/Xt2bT9nwft9Z9l7e8O4wwGAAAA0Kk9Tm+P4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgnx49vL3ULoea3xp03AdfiYipbvFHo9CcFiIfES8/TmL00HpJRIz0If7+nYh4rVv8JE0rprIsOuPnImJ8yPFf6UN8uMjupsefq92+f7mYbk67f/9Gs/KiHkz3Ov7lDo5/Iz2Of5eO2fZYNn393m9LPePfiXh9tPvxpx1/7AWPv9/59t5er2WNX0Vc7vrzJ/m/WKX6xlaptrt3ZW1jcbW8Wt6cm5t9f/6D+ffmZ0ora5Vy9m/XGD/67O/+e1T/X+4Rfyrrf9LZ/6SVU6PRfZtvdsz/596th5/q9sEk4sEPsnqX///XesXP9v1b2c+BdPnldn2/VT/sjd/88Y2j+r/co/+FI+KnbW/32miHd775/b+0avkTrgEADFJtd299sVIpbx9UCtmS7WcXneVKmvIpBn1p8CGmz8BevQCV9ijqrORzVirDOyYBAACD8fSX/mFnAgAAAAAAAAAAAAAAAAAAABdX++//s2c5FwbxOLHD8dpPF4wkOf3OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc4X8BAAD///O4zEs=") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x503, &(0x7f0000000500)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18b042, 0x0) pwrite64(r6, &(0x7f0000000480)='2', 0x1, 0x8080c61) (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) unshare(0xa000200) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000127bd7000ffdbdf256c00000008000300", @ANYRES32, @ANYBLOB="0c009900fe000000200000000800a1007f000000050019010b000000050018011c000000050019010700000005001801280000000800a0008100000008002201f70000000500190106000000"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x44000000) 277.589318ms ago: executing program 3 (id=3188): syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449) close_range(r0, 0xffffffffffffffff, 0x0) 172.890959ms ago: executing program 4 (id=3189): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000280)=@req3={0xc, 0x47, 0x8004, 0xb603, 0x3, 0xffffffff, 0xfffe0}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x80, 0x7, 0x2, 0x7fff, 0x9, 0xd7b, 0x9, 0x3}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r0, &(0x7f0000000140)="73fbff042e6dfa0300003ef520", 0xd, 0x40040, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x62, 0x6, @multicast}, 0x14) 172.040788ms ago: executing program 3 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = inotify_init1(0x80000) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400004a0) r6 = dup(r4) inotify_rm_watch(r6, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0xc, r8, 0x1, 0x7, 0x6, @random="beda253fba8d"}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000001cc0)={0x528, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x104, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4ca}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '\xb7:/}^+)!%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x4}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x33, 0x5, "f9ef44b81f293d1387bb23ab7321244ffa959a99d92c8d5069080726e580f8320bf4fcfac491e2449e9952646ee900"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "381e4050a5a855f1529653bfff40878a4ad2"}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "dda3a7402439393dfc3ccd782e4fc55ee8fec2c1af34d57d3053c0272840e5ea3d6a71904650b7d1a3cec4528d97487432ceba6e2204b28bbbcc5489050035f8d4767018ab4d67a76847e5e3c80fd46c2edf7089e52a24c9aa08e15bbf2845bb47e3b3a13abf449800f572f33f96bbdfcbf4c4e174902bd92f99479fb88bc4c54040289eea615d9784c2421171cbb4a8840c7cf41788b92a7bb7ad4730c0ea1bc1e85b5e53dd963d1ef7d9700491b721fc11445a7fcffe9793d790fa86b5d01ff1d98be04168e549e84ed3b6dad74f91194807"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8066}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x27, 0x2, 'w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '--,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, 'rfc4106(gcm(aes))\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#,.!-(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9c9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\\xee-!$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2de3}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "332b019b1144ebe45a997c8d8c3f1e6c3a252731f8d00daad58bfee15d741e1056c1d08e2310774874558435f3ebdc317a721e127835818726010ecc7abae89a233a565c12bebc9c4bb12323bce109fabd6120aec80d08afccf165906b03712f37637aee151c35de69f1f8d31f9b88a1282de632d0cdad532cadbf824c764a9ff676634a00851f0b8ec24b2731b864e873c0d758fae21d6772983941fce049b27fc88531e13dd6c3ff6bc9d753bd18018ba0d4939febad8c08"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x28}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "6594744cd8f00237923bf44b10416abe9d16b6101abe407c22003113588e9267513c6d8e138940"}]}]}, 0x528}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000005}, 0x18) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 165.394899ms ago: executing program 4 (id=3191): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0x24, 0x60000000}, 0x50) 116.127929ms ago: executing program 0 (id=3192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 114.783479ms ago: executing program 3 (id=3193): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x51}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX], 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @any, 0xffff}, 0xe) (async) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @any, 0xffff}, 0xe) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x10000, 0xa10, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='rxrpc_propose_ack\x00'}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000003c0)) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000003c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 0s ago: executing program 4 (id=3194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000007c0), 0xfe, 0x57c, &(0x7f0000000dc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) kernel console output (not intermixed with test programs): sim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.426227][ T7660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.462083][T10691] netlink: 131716 bytes leftover after parsing attributes in process `syz.3.2629'. [ 146.714989][T10707] netlink: 'syz.1.2636': attribute type 11 has an invalid length. [ 146.722911][T10707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2636'. [ 146.732069][T10713] loop3: detected capacity change from 0 to 512 [ 146.763292][T10713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.787887][T10717] netlink: 'syz.1.2639': attribute type 10 has an invalid length. [ 146.824960][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.845393][T10724] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.862916][T10731] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 146.904749][T10724] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.942316][T10724] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.969187][T10737] netlink: 'syz.3.2642': attribute type 10 has an invalid length. [ 147.002111][T10724] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.082677][ T7685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.109712][ T7685] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.118008][ T7685] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.146367][ T7685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.232846][T10758] siw: device registration error -23 [ 147.272816][T10764] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 147.380790][T10770] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 147.464321][T10778] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.520865][T10775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10775 comm=syz.3.2660 [ 147.534776][T10778] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.611601][T10778] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.661665][T10778] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.781449][T10799] __nla_validate_parse: 3 callbacks suppressed [ 147.781466][T10799] netlink: 131716 bytes leftover after parsing attributes in process `syz.2.2667'. [ 147.827465][T10804] wireguard0: entered promiscuous mode [ 147.833086][T10804] wireguard0: entered allmulticast mode [ 147.845064][T10803] wireguard0: entered promiscuous mode [ 147.850721][T10803] wireguard0: entered allmulticast mode [ 148.016817][T10810] macvtap1: entered promiscuous mode [ 148.022200][T10810] macvtap1: entered allmulticast mode [ 148.062940][T10810] netlink: 'syz.2.2670': attribute type 10 has an invalid length. [ 148.073224][T10810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.082150][T10810] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 148.356071][T10835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.392065][T10835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.470325][T10845] syz0: rxe_newlink: already configured on bond_slave_0 [ 148.571546][T10835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.602215][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 148.602234][ T29] audit: type=1326 audit(661.584:23220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.631882][ T29] audit: type=1326 audit(661.584:23221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.654953][ T29] audit: type=1326 audit(661.584:23222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.677992][ T29] audit: type=1326 audit(661.584:23223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.701180][ T29] audit: type=1326 audit(661.584:23224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.724200][ T29] audit: type=1326 audit(661.584:23225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.735717][T10857] siw: device registration error -23 [ 148.747308][ T29] audit: type=1326 audit(661.584:23226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.775561][ T29] audit: type=1326 audit(661.584:23227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.798684][ T29] audit: type=1326 audit(661.584:23228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.821662][ T29] audit: type=1326 audit(661.584:23229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 148.846847][T10835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.934949][ T7660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.965503][ T7660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.987046][ T7660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.995904][ T7660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.175030][T10884] netlink: 'syz.2.2701': attribute type 11 has an invalid length. [ 149.182948][T10884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'. [ 149.225968][T10893] xt_hashlimit: max too large, truncated to 1048576 [ 149.252106][T10896] loop4: detected capacity change from 0 to 256 [ 149.284448][T10900] 9pnet_fd: Insufficient options for proto=fd [ 149.308443][T10904] loop4: detected capacity change from 0 to 2048 [ 149.321290][T10904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.335758][T10904] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2709: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 149.337476][ T10] kernel write not supported for file 1303/net/vlan/vlan1 (pid: 10 comm: kworker/0:1) [ 149.359857][T10904] EXT4-fs (loop4): Remounting filesystem read-only [ 149.384750][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.456518][T10912] netlink: 'syz.2.2713': attribute type 11 has an invalid length. [ 149.464487][T10912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2713'. [ 149.519971][T10916] macvtap1: entered promiscuous mode [ 149.525580][T10916] macvtap1: entered allmulticast mode [ 149.653526][T10916] netlink: 'syz.4.2711': attribute type 10 has an invalid length. [ 149.759200][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2719'. [ 150.222800][T10957] siw: device registration error -23 [ 150.223117][T10956] macvtap1: entered promiscuous mode [ 150.234186][T10956] macvtap1: entered allmulticast mode [ 150.337788][T10956] netlink: 'syz.1.2727': attribute type 10 has an invalid length. [ 150.346673][T10964] loop3: detected capacity change from 0 to 1024 [ 150.350586][T10956] $H: (slave batadv0): Error -22 calling dev_set_mtu [ 150.363049][T10964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.392771][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.433074][T10970] loop3: detected capacity change from 0 to 1024 [ 150.452713][T10970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.486259][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.503439][T10976] netlink: 'syz.3.2734': attribute type 10 has an invalid length. [ 150.511381][T10976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2734'. [ 150.520694][T10976] batadv0: entered promiscuous mode [ 150.527131][T10976] bond0: (slave batadv0): Releasing backup interface [ 150.536452][T10976] bridge0: port 1(batadv0) entered blocking state [ 150.543128][T10976] bridge0: port 1(batadv0) entered disabled state [ 150.665940][T10986] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2739'. [ 150.746098][T10992] loop3: detected capacity change from 0 to 8192 [ 150.762559][T10994] veth5: entered promiscuous mode [ 150.762585][T10994] veth5: entered allmulticast mode [ 150.782092][T10992] loop3: p2 p3 p4 [ 150.782140][T10992] loop3: p2 start 164919041 is beyond EOD, truncated [ 150.782239][T10992] loop3: p3 size 66846464 extends beyond EOD, truncated [ 150.783198][T10992] loop3: p4 size 37048832 extends beyond EOD, [ 150.793210][ T7462] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.800154][T10992] truncated [ 150.818938][ T7462] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.953401][T11009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2746'. [ 151.087837][ T7660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.099769][ T7660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.099863][ T7660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.099948][ T7660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.159258][T11022] GUP no longer grows the stack in syz.2.2751 (11022): 200000005000-200000008000 (200000004000) [ 151.159296][T11022] CPU: 1 UID: 0 PID: 11022 Comm: syz.2.2751 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.159405][T11022] Tainted: [W]=WARN [ 151.159414][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 151.159428][T11022] Call Trace: [ 151.159434][T11022] [ 151.159440][T11022] __dump_stack+0x1d/0x30 [ 151.159466][T11022] dump_stack_lvl+0xe8/0x140 [ 151.159486][T11022] dump_stack+0x15/0x1b [ 151.159561][T11022] fixup_user_fault+0x50e/0x560 [ 151.159594][T11022] fault_in_user_writeable+0x5d/0xd0 [ 151.159630][T11022] futex_lock_pi+0x597/0x780 [ 151.159693][T11022] ? __pfx_futex_wake_mark+0x10/0x10 [ 151.159729][T11022] do_futex+0x21f/0x380 [ 151.159860][T11022] __se_sys_futex+0x2ed/0x360 [ 151.159889][T11022] ? xfd_validate_state+0x45/0xf0 [ 151.159913][T11022] __x64_sys_futex+0x78/0x90 [ 151.159994][T11022] x64_sys_call+0x2e48/0x3000 [ 151.160065][T11022] do_syscall_64+0xd2/0x200 [ 151.160088][T11022] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.160119][T11022] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.160210][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.160235][T11022] RIP: 0033:0x7fae4f7aefc9 [ 151.160309][T11022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.160332][T11022] RSP: 002b:00007fae4e217038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 151.160354][T11022] RAX: ffffffffffffffda RBX: 00007fae4fa05fa0 RCX: 00007fae4f7aefc9 [ 151.160368][T11022] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 151.160382][T11022] RBP: 00007fae4f831f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.160395][T11022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.160409][T11022] R13: 00007fae4fa06038 R14: 00007fae4fa05fa0 R15: 00007fff03fe0f18 [ 151.160431][T11022] [ 151.800875][T11045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.881815][T11045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.921822][T11053] macvtap1: entered promiscuous mode [ 151.927454][T11053] macvtap1: entered allmulticast mode [ 151.948572][T11055] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 151.968768][T11045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.008012][T11062] capability: warning: `syz.1.2767' uses 32-bit capabilities (legacy support in use) [ 152.045618][T11053] netlink: 'syz.4.2763': attribute type 10 has an invalid length. [ 152.076079][T11045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.184324][ T296] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.197275][ T7660] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.214583][ T7462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.247940][ T7462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.320200][T11085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2773'. [ 152.362455][T11095] netlink: 'syz.0.2776': attribute type 1 has an invalid length. [ 152.377851][T11095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.390693][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 152.396709][T11067] lo speed is unknown, defaulting to 1000 [ 152.414989][T11095] bond1 (unregistering): Released all slaves [ 152.437874][T11067] lo speed is unknown, defaulting to 1000 [ 152.444496][T11067] lo speed is unknown, defaulting to 1000 [ 152.500967][T11105] macvtap1: entered promiscuous mode [ 152.506550][T11105] macvtap1: entered allmulticast mode [ 152.556034][T11100] bond2: invalid ARP target 0.0.0.0 specified for addition [ 152.556306][T11085] SELinux: ebitmap: truncated map [ 152.563530][T11100] bond2: option arp_ip_target: invalid value (0) [ 152.570736][T11085] SELinux: failed to load policy [ 152.585415][T11100] bond2 (unregistering): Released all slaves [ 152.595893][T11067] vcan0 speed is unknown, defaulting to 1000 [ 152.637062][T11105] netlink: 'syz.4.2778': attribute type 10 has an invalid length. [ 152.689215][T11113] infiniband !yz!: set active [ 152.694113][T11113] infiniband !yz!: added team_slave_0 [ 152.714190][T11113] RDS/IB: !yz!: added [ 152.718418][T11113] smc: adding ib device !yz! with port count 1 [ 152.721171][T11067] chnl_net:caif_netlink_parms(): no params data found [ 152.730294][T11113] smc: ib device !yz! port 1 has no pnetid [ 152.821792][T11067] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.828920][T11067] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.862631][T11067] bridge_slave_0: entered allmulticast mode [ 152.869539][T11067] bridge_slave_0: entered promiscuous mode [ 152.876675][T11067] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.883845][T11067] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.893172][T11067] bridge_slave_1: entered allmulticast mode [ 152.900074][T11067] bridge_slave_1: entered promiscuous mode [ 152.928058][ T7462] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.035210][T11067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.068083][T11067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.121220][T11067] team0: Port device team_slave_0 added [ 153.130593][T11067] team0: Port device team_slave_1 added [ 153.194970][T11145] macvtap1: entered promiscuous mode [ 153.201559][T11145] macvtap1: entered allmulticast mode [ 153.266182][T11067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.273207][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.299258][T11067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.342002][T11146] netlink: 'syz.4.2789': attribute type 10 has an invalid length. [ 153.351912][T11067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.358853][T11067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.385016][T11067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.405987][T11133] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 153.439509][T11067] hsr_slave_0: entered promiscuous mode [ 153.447335][T11067] hsr_slave_1: entered promiscuous mode [ 153.453512][T11067] debugfs: 'hsr0' already exists in 'hsr' [ 153.459238][T11067] Cannot create hsr debugfs directory [ 153.501240][ T7462] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.561429][ T7462] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.652310][ T7462] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.697918][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 153.697938][ T29] audit: type=1326 audit(666.674:23804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.727244][ T29] audit: type=1326 audit(666.674:23805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.750339][ T29] audit: type=1326 audit(666.674:23806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.773368][ T29] audit: type=1326 audit(666.674:23807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.796447][ T29] audit: type=1326 audit(666.674:23808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.819487][ T29] audit: type=1326 audit(666.674:23809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.842585][ T29] audit: type=1326 audit(666.674:23810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.865592][ T29] audit: type=1326 audit(666.674:23811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.888591][ T29] audit: type=1326 audit(666.674:23812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 153.911721][ T29] audit: type=1326 audit(666.674:23813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11167 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f333deaefc9 code=0x7ffc0000 [ 154.158801][T11181] loop3: detected capacity change from 0 to 512 [ 154.181026][T11181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.208153][T11185] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.228375][T11181] EXT4-fs (loop3): 1 truncate cleaned up [ 154.242954][T11181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.293870][ T7462] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 154.303651][ T7462] bond0 (unregistering): Released all slaves [ 154.351242][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 154.388013][ T7462] tipc: Disabling bearer [ 154.393317][ T7462] tipc: Disabling bearer [ 154.398531][ T7462] tipc: Left network mode [ 154.473496][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.533629][T11195] FAULT_INJECTION: forcing a failure. [ 154.533629][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 154.546377][T11195] CPU: 0 UID: 0 PID: 11195 Comm: syz.3.2804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.546409][T11195] Tainted: [W]=WARN [ 154.546416][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.546428][T11195] Call Trace: [ 154.546436][T11195] [ 154.546445][T11195] __dump_stack+0x1d/0x30 [ 154.546470][T11195] dump_stack_lvl+0xe8/0x140 [ 154.546488][T11195] dump_stack+0x15/0x1b [ 154.546503][T11195] should_fail_ex+0x265/0x280 [ 154.546524][T11195] should_failslab+0x8c/0xb0 [ 154.546561][T11195] kmem_cache_alloc_noprof+0x50/0x480 [ 154.546591][T11195] ? mas_alloc_nodes+0x1a2/0x210 [ 154.546627][T11195] mas_alloc_nodes+0x1a2/0x210 [ 154.546658][T11195] mas_preallocate+0x2ca/0x510 [ 154.546694][T11195] __split_vma+0x240/0x650 [ 154.546721][T11195] ? __pfx_cmp_ex_search+0x10/0x10 [ 154.546748][T11195] ? trace_event_reg+0xdc/0x170 [ 154.546774][T11195] vms_gather_munmap_vmas+0x17a/0x7b0 [ 154.546801][T11195] do_vmi_align_munmap+0x1ac/0x3d0 [ 154.546832][T11195] do_vmi_munmap+0x1db/0x220 [ 154.546858][T11195] do_munmap+0x79/0xb0 [ 154.546884][T11195] mremap_to+0x192/0x430 [ 154.546911][T11195] ? mtree_load+0x32c/0x4e0 [ 154.546932][T11195] ? check_prep_vma+0x49c/0x660 [ 154.546962][T11195] __se_sys_mremap+0x632/0xb30 [ 154.546996][T11195] ? fput+0x8f/0xc0 [ 154.547012][T11195] ? ksys_write+0x192/0x1a0 [ 154.547036][T11195] __x64_sys_mremap+0x67/0x80 [ 154.547062][T11195] x64_sys_call+0x2a28/0x3000 [ 154.547086][T11195] do_syscall_64+0xd2/0x200 [ 154.547106][T11195] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.547141][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.547164][T11195] RIP: 0033:0x7f91499aefc9 [ 154.547180][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.547196][T11195] RSP: 002b:00007f914840f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 154.547213][T11195] RAX: ffffffffffffffda RBX: 00007f9149c05fa0 RCX: 00007f91499aefc9 [ 154.547224][T11195] RDX: 0000000000003000 RSI: 0000000000009000 RDI: 0000200000000000 [ 154.547235][T11195] RBP: 00007f914840f090 R08: 0000200000ffb000 R09: 0000000000000000 [ 154.547247][T11195] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 154.547260][T11195] R13: 00007f9149c06038 R14: 00007f9149c05fa0 R15: 00007ffd8a587e58 [ 154.547281][T11195] [ 154.805021][T11199] loop4: detected capacity change from 0 to 512 [ 154.815866][ T7462] hsr_slave_0: left promiscuous mode [ 154.823323][ T7462] hsr_slave_1: left promiscuous mode [ 154.835038][T11199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.862045][ T7462] veth1_macvtap: left promiscuous mode [ 154.867584][ T7462] veth0_macvtap: left promiscuous mode [ 154.873548][ T7462] veth1_vlan: left promiscuous mode [ 154.879183][ T7462] veth0_vlan: left promiscuous mode [ 154.884841][T11197] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2805: corrupted inode contents [ 154.897297][T11197] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2805: mark_inode_dirty error [ 154.918475][T11212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2809'. [ 154.930606][T11208] syz.3.2808: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 154.945270][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.3.2808 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.945326][T11208] Tainted: [W]=WARN [ 154.945333][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.945347][T11208] Call Trace: [ 154.945355][T11208] [ 154.945366][T11208] __dump_stack+0x1d/0x30 [ 154.945523][T11208] dump_stack_lvl+0xe8/0x140 [ 154.945546][T11208] dump_stack+0x15/0x1b [ 154.945566][T11208] warn_alloc+0x12b/0x1a0 [ 154.945606][T11208] ? __rcu_read_unlock+0x4f/0x70 [ 154.945701][T11208] __vmalloc_node_range_noprof+0x9d/0xed0 [ 154.945735][T11208] ? __futex_wait+0x1fa/0x260 [ 154.945761][T11208] ? __pfx_futex_wake_mark+0x10/0x10 [ 154.945801][T11208] ? __rcu_read_unlock+0x4f/0x70 [ 154.945832][T11208] ? avc_has_perm_noaudit+0x1b1/0x200 [ 154.945855][T11208] ? should_fail_ex+0x30/0x280 [ 154.945874][T11208] ? xskq_create+0x36/0xe0 [ 154.945963][T11208] vmalloc_user_noprof+0x7d/0xb0 [ 154.946074][T11208] ? xskq_create+0x80/0xe0 [ 154.946177][T11208] xskq_create+0x80/0xe0 [ 154.946203][T11208] xsk_init_queue+0x95/0xf0 [ 154.946226][T11208] xsk_setsockopt+0x477/0x640 [ 154.946246][T11208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.946264][T11208] __sys_setsockopt+0x184/0x200 [ 154.946323][T11208] __x64_sys_setsockopt+0x64/0x80 [ 154.946434][T11208] x64_sys_call+0x20ec/0x3000 [ 154.946463][T11208] do_syscall_64+0xd2/0x200 [ 154.946484][T11208] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.946594][T11208] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.946627][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.946652][T11208] RIP: 0033:0x7f91499aefc9 [ 154.946671][T11208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.946693][T11208] RSP: 002b:00007f914840f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.946753][T11208] RAX: ffffffffffffffda RBX: 00007f9149c05fa0 RCX: 00007f91499aefc9 [ 154.946766][T11208] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 154.946794][T11208] RBP: 00007f9149a31f91 R08: 0000000000000004 R09: 0000000000000000 [ 154.946869][T11208] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 154.946884][T11208] R13: 00007f9149c06038 R14: 00007f9149c05fa0 R15: 00007ffd8a587e58 [ 154.946957][T11208] [ 154.946982][T11208] Mem-Info: [ 154.953911][T11197] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2805: corrupted inode contents [ 154.958390][T11208] active_anon:25959 inactive_anon:2 isolated_anon:0 [ 154.958390][T11208] active_file:14894 inactive_file:12631 isolated_file:0 [ 154.958390][T11208] unevictable:0 dirty:99 writeback:0 [ 154.958390][T11208] slab_reclaimable:3739 slab_unreclaimable:23760 [ 154.958390][T11208] mapped:31087 shmem:22374 pagetables:1380 [ 154.958390][T11208] sec_pagetables:0 bounce:0 [ 154.958390][T11208] kernel_misc_reclaimable:0 [ 154.958390][T11208] free:1769301 free_pcp:41031 free_cma:0 [ 154.965277][T11197] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.972469][T11208] Node 0 active_anon:103836kB inactive_anon:8kB active_file:59576kB inactive_file:50524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124696kB dirty:396kB writeback:0kB shmem:89496kB kernel_stack:4512kB pagetables:5520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.972548][T11208] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.303084][T11208] lowmem_reserve[]: 0 2881 7859 7859 [ 155.308374][T11208] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 155.339698][T11208] lowmem_reserve[]: 0 0 4978 4978 [ 155.344750][T11208] Node 0 Normal free:4114704kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103720kB inactive_anon:8kB active_file:59576kB inactive_file:50524kB unevictable:0kB writepending:396kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:160852kB local_pcp:114024kB free_cma:0kB [ 155.378099][T11208] lowmem_reserve[]: 0 0 0 0 [ 155.382744][T11208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.395429][T11208] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 155.411563][T11208] Node 0 Normal: 584*4kB (UME) 272*8kB (U) 197*16kB (UME) 397*32kB (UME) 405*64kB (UME) 338*128kB (UME) 179*256kB (UM) 64*512kB (UME) 22*1024kB (UM) 10*2048kB (UM) 953*4096kB (UM) = 4114640kB [ 155.430552][T11208] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 155.439857][T11208] 49889 total pagecache pages [ 155.444525][T11208] 2 pages in swap cache [ 155.448701][T11208] Free swap = 124988kB [ 155.452847][T11208] Total swap = 124996kB [ 155.457034][T11208] 2097051 pages RAM [ 155.460831][T11208] 0 pages HighMem/MovableOnly [ 155.465560][T11208] 81086 pages reserved [ 155.486755][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.565646][T11222] loop4: detected capacity change from 0 to 512 [ 155.576098][T11222] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 155.579416][ T3425] lo speed is unknown, defaulting to 1000 [ 155.590748][ T3425] infiniband s{z2: ib_query_port failed (-19) [ 155.615452][T11067] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.627406][T11067] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.652727][T11067] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.689013][T11067] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.768169][T11067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.784383][T11067] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.801622][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.808775][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.821032][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.828140][ T7685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.952095][T11244] netlink: 'syz.3.2818': attribute type 10 has an invalid length. [ 155.961570][T11244] batadv0: left promiscuous mode [ 155.968181][T11244] bridge0: port 1(batadv0) entered disabled state [ 156.002916][T11244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.019130][T11244] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 156.041325][T11257] lo speed is unknown, defaulting to 1000 [ 156.051263][T11257] lo speed is unknown, defaulting to 1000 [ 156.052569][T11067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.066284][T11257] lo speed is unknown, defaulting to 1000 [ 156.074765][T11256] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.080562][T11257] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.095099][ T7462] IPVS: stop unused estimator thread 0... [ 156.110102][T11257] lo speed is unknown, defaulting to 1000 [ 156.116226][T11257] lo speed is unknown, defaulting to 1000 [ 156.122525][T11257] lo speed is unknown, defaulting to 1000 [ 156.128590][T11257] lo speed is unknown, defaulting to 1000 [ 156.136526][T11257] lo speed is unknown, defaulting to 1000 [ 156.145283][T11256] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.180503][T11067] veth0_vlan: entered promiscuous mode [ 156.194496][T11067] veth1_vlan: entered promiscuous mode [ 156.211299][T11256] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.236545][T11067] veth0_macvtap: entered promiscuous mode [ 156.243798][T11271] loop3: detected capacity change from 0 to 1024 [ 156.253260][T11256] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.283058][T11271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.302008][T11067] veth1_macvtap: entered promiscuous mode [ 156.313079][T11067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.331514][T11067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.366899][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.371365][T11287] program syz.1.2832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.378199][ T7685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.385430][T11287] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 156.407593][ T7736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.453030][ T7736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.463189][ T7736] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.469993][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'. [ 156.499301][T11288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.511108][ T7736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.534571][T11285] lo speed is unknown, defaulting to 1000 [ 156.539741][ T7736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.566348][ T7736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.598581][ T7736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.625116][T11285] lo speed is unknown, defaulting to 1000 [ 156.648988][T11294] lo speed is unknown, defaulting to 1000 [ 156.725697][T11302] blktrace: Concurrent blktraces are not allowed on sg0 [ 156.739466][T11285] vcan0 speed is unknown, defaulting to 1000 [ 156.794578][T11294] lo speed is unknown, defaulting to 1000 [ 156.833901][T11285] lo speed is unknown, defaulting to 1000 [ 156.940760][T11310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.950688][T11294] vcan0 speed is unknown, defaulting to 1000 [ 156.963928][T11310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.975205][T11311] FAULT_INJECTION: forcing a failure. [ 156.975205][T11311] name failslab, interval 1, probability 0, space 0, times 0 [ 156.987938][T11311] CPU: 1 UID: 0 PID: 11311 Comm: syz.0.2837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.988012][T11311] Tainted: [W]=WARN [ 156.988020][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.988034][T11311] Call Trace: [ 156.988040][T11311] [ 156.988048][T11311] __dump_stack+0x1d/0x30 [ 156.988118][T11311] dump_stack_lvl+0xe8/0x140 [ 156.988139][T11311] dump_stack+0x15/0x1b [ 156.988219][T11311] should_fail_ex+0x265/0x280 [ 156.988240][T11311] should_failslab+0x8c/0xb0 [ 156.988271][T11311] __kmalloc_noprof+0xa5/0x570 [ 156.988362][T11311] ? process_vm_rw+0x27c/0x960 [ 156.988459][T11311] ? iovec_from_user+0x179/0x210 [ 156.988488][T11311] process_vm_rw+0x27c/0x960 [ 156.988518][T11311] ? _parse_integer+0x27/0x40 [ 156.988551][T11311] ? kstrtoull+0x111/0x140 [ 156.988692][T11311] __x64_sys_process_vm_writev+0x78/0x90 [ 156.988722][T11311] x64_sys_call+0x2a80/0x3000 [ 156.988743][T11311] do_syscall_64+0xd2/0x200 [ 156.988764][T11311] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.988818][T11311] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.988852][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.988873][T11311] RIP: 0033:0x7f333deaefc9 [ 156.988887][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.988950][T11311] RSP: 002b:00007f333c8ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 156.988989][T11311] RAX: ffffffffffffffda RBX: 00007f333e106090 RCX: 00007f333deaefc9 [ 156.989001][T11311] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000594 [ 156.989013][T11311] RBP: 00007f333c8ee090 R08: 000000000000023a R09: 0000000000000000 [ 156.989026][T11311] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 156.989039][T11311] R13: 00007f333e106128 R14: 00007f333e106090 R15: 00007fff48e31088 [ 156.989116][T11311] [ 157.040023][T11308] lo speed is unknown, defaulting to 1000 [ 157.068471][T11294] lo speed is unknown, defaulting to 1000 [ 157.102404][T11308] lo speed is unknown, defaulting to 1000 [ 157.240039][T11308] vcan0 speed is unknown, defaulting to 1000 [ 157.319379][T11326] loop3: detected capacity change from 0 to 1024 [ 157.331845][T11308] lo speed is unknown, defaulting to 1000 [ 157.378880][T11326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.503622][T11332] lo speed is unknown, defaulting to 1000 [ 157.512805][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.660096][T11332] lo speed is unknown, defaulting to 1000 [ 157.773783][T11355] program syz.4.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.789624][T11359] netlink: 'syz.3.2852': attribute type 1 has an invalid length. [ 157.809974][T11355] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 157.824103][T11332] vcan0 speed is unknown, defaulting to 1000 [ 157.858146][T11362] loop2: detected capacity change from 0 to 512 [ 157.878849][T11359] FAULT_INJECTION: forcing a failure. [ 157.878849][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.892072][T11359] CPU: 0 UID: 0 PID: 11359 Comm: syz.3.2852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.892103][T11359] Tainted: [W]=WARN [ 157.892110][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.892123][T11359] Call Trace: [ 157.892128][T11359] [ 157.892135][T11359] __dump_stack+0x1d/0x30 [ 157.892164][T11359] dump_stack_lvl+0xe8/0x140 [ 157.892208][T11359] dump_stack+0x15/0x1b [ 157.892228][T11359] should_fail_ex+0x265/0x280 [ 157.892245][T11359] should_fail+0xb/0x20 [ 157.892260][T11359] should_fail_usercopy+0x1a/0x20 [ 157.892330][T11359] strncpy_from_user+0x25/0x230 [ 157.892355][T11359] ? bpf_get_stack+0x33/0x50 [ 157.892414][T11359] strncpy_from_user_nofault+0x68/0xf0 [ 157.892440][T11359] bpf_probe_read_compat_str+0xb4/0x130 [ 157.892469][T11359] bpf_prog_95f2e3557e98b35e+0x3e/0x44 [ 157.892485][T11359] bpf_trace_run2+0x107/0x1c0 [ 157.892528][T11359] ? skb_free_head+0xb8/0x150 [ 157.892549][T11359] ? finish_task_switch+0xad/0x2b0 [ 157.892577][T11359] ? skb_free_head+0xb8/0x150 [ 157.892640][T11359] __traceiter_kfree+0x2e/0x50 [ 157.892660][T11359] ? skb_free_head+0xb8/0x150 [ 157.892706][T11359] kfree+0x351/0x400 [ 157.892733][T11359] skb_free_head+0xb8/0x150 [ 157.892774][T11359] skb_release_data+0x33b/0x370 [ 157.892865][T11359] ? ovs_vport_cmd_set+0x19a/0x250 [ 157.892892][T11359] __kfree_skb+0x44/0x150 [ 157.892924][T11359] sk_skb_reason_drop+0xbd/0x270 [ 157.892957][T11359] ovs_vport_cmd_set+0x19a/0x250 [ 157.893048][T11359] genl_family_rcv_msg_doit+0x143/0x1b0 [ 157.893158][T11359] genl_rcv_msg+0x422/0x460 [ 157.893186][T11359] ? __pfx_ovs_vport_cmd_set+0x10/0x10 [ 157.893362][T11359] netlink_rcv_skb+0x123/0x220 [ 157.893468][T11359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.893557][T11359] genl_rcv+0x28/0x40 [ 157.893577][T11359] netlink_unicast+0x5c0/0x690 [ 157.893612][T11359] netlink_sendmsg+0x58b/0x6b0 [ 157.893636][T11359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.893656][T11359] __sock_sendmsg+0x145/0x180 [ 157.893680][T11359] ____sys_sendmsg+0x31e/0x4e0 [ 157.893810][T11359] ___sys_sendmsg+0x17b/0x1d0 [ 157.893841][T11359] __x64_sys_sendmsg+0xd4/0x160 [ 157.893867][T11359] x64_sys_call+0x191e/0x3000 [ 157.893893][T11359] do_syscall_64+0xd2/0x200 [ 157.893925][T11359] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.893951][T11359] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.893982][T11359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.894013][T11359] RIP: 0033:0x7f91499aefc9 [ 157.894029][T11359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.894050][T11359] RSP: 002b:00007f914840f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.894099][T11359] RAX: ffffffffffffffda RBX: 00007f9149c05fa0 RCX: 00007f91499aefc9 [ 157.894111][T11359] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 157.894125][T11359] RBP: 00007f914840f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.894139][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.894153][T11359] R13: 00007f9149c06038 R14: 00007f9149c05fa0 R15: 00007ffd8a587e58 [ 157.894226][T11359] [ 158.040802][T11362] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.220697][T11362] EXT4-fs (loop2): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 158.232034][T11332] lo speed is unknown, defaulting to 1000 [ 158.247403][T11352] lo speed is unknown, defaulting to 1000 [ 158.312563][T11352] lo speed is unknown, defaulting to 1000 [ 158.348912][T11377] netlink: 'syz.3.2856': attribute type 10 has an invalid length. [ 158.381999][T11376] can0: slcan on ptm0. [ 158.413480][T11352] vcan0 speed is unknown, defaulting to 1000 [ 158.469771][T11376] can0 (unregistered): slcan off ptm0. [ 158.475507][T11376] Falling back ldisc for ptm0. [ 158.586780][T11352] lo speed is unknown, defaulting to 1000 [ 158.601983][T11391] loop2: detected capacity change from 0 to 8192 [ 158.686240][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.695058][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.766474][T11352] chnl_net:caif_netlink_parms(): no params data found [ 158.767064][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 158.767077][ T29] audit: type=1326 audit(671.744:24190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.802413][ T29] audit: type=1326 audit(671.744:24191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.825448][ T29] audit: type=1326 audit(671.744:24192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.826395][T11416] netlink: 'syz.3.2869': attribute type 10 has an invalid length. [ 158.848462][ T29] audit: type=1326 audit(671.744:24193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.848553][ T29] audit: type=1326 audit(671.744:24194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.848576][ T29] audit: type=1326 audit(671.744:24195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f604257efc9 code=0x7ffc0000 [ 158.951121][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.958169][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.965616][T11352] bridge_slave_0: entered allmulticast mode [ 158.972057][T11352] bridge_slave_0: entered promiscuous mode [ 158.978899][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.986022][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.993239][T11352] bridge_slave_1: entered allmulticast mode [ 158.999596][T11352] bridge_slave_1: entered promiscuous mode [ 159.016562][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.027081][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.051510][T11352] team0: Port device team_slave_0 added [ 159.058647][T11352] team0: Port device team_slave_1 added [ 159.076064][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.083108][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.109050][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.120825][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.127777][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.153820][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.195430][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 159.204647][T11352] hsr_slave_0: entered promiscuous mode [ 159.211203][T11352] hsr_slave_1: entered promiscuous mode [ 159.217400][T11352] debugfs: 'hsr0' already exists in 'hsr' [ 159.223222][T11352] Cannot create hsr debugfs directory [ 159.278018][T11433] loop2: detected capacity change from 0 to 8192 [ 159.290518][T11432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.322252][T11352] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.343780][T11432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.380663][ T29] audit: type=1326 audit(672.364:24196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b302eefc9 code=0x7ffc0000 [ 159.380782][T11449] FAULT_INJECTION: forcing a failure. [ 159.380782][T11449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.403712][ T29] audit: type=1326 audit(672.364:24197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b302eefc9 code=0x7ffc0000 [ 159.416838][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.1.2884 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.416872][T11449] Tainted: [W]=WARN [ 159.416879][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.416891][T11449] Call Trace: [ 159.416897][T11449] [ 159.416905][T11449] __dump_stack+0x1d/0x30 [ 159.416929][T11449] dump_stack_lvl+0xe8/0x140 [ 159.416990][T11449] dump_stack+0x15/0x1b [ 159.417022][T11449] should_fail_ex+0x265/0x280 [ 159.417044][T11449] should_fail+0xb/0x20 [ 159.417061][T11449] should_fail_usercopy+0x1a/0x20 [ 159.417143][T11449] _copy_from_user+0x1c/0xb0 [ 159.417169][T11449] ___sys_sendmsg+0xc1/0x1d0 [ 159.417204][T11449] __sys_sendmmsg+0x178/0x300 [ 159.417236][T11449] __x64_sys_sendmmsg+0x57/0x70 [ 159.417256][T11449] x64_sys_call+0x1c4a/0x3000 [ 159.417343][T11449] do_syscall_64+0xd2/0x200 [ 159.417363][T11449] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.417421][T11449] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.417455][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.417477][T11449] RIP: 0033:0x7fe41f9fefc9 [ 159.417493][T11449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.417513][T11449] RSP: 002b:00007fe41e467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.417591][T11449] RAX: ffffffffffffffda RBX: 00007fe41fc55fa0 RCX: 00007fe41f9fefc9 [ 159.417605][T11449] RDX: 0000000000000002 RSI: 0000200000000700 RDI: 0000000000000003 [ 159.417617][T11449] RBP: 00007fe41e467090 R08: 0000000000000000 R09: 0000000000000000 [ 159.417631][T11449] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 159.417644][T11449] R13: 00007fe41fc56038 R14: 00007fe41fc55fa0 R15: 00007ffd29e0f398 [ 159.417664][T11449] [ 159.619993][ T29] audit: type=1326 audit(672.434:24198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b302eefc9 code=0x7ffc0000 [ 159.643181][ T29] audit: type=1326 audit(672.444:24199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="syz.2.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b302eefc9 code=0x7ffc0000 [ 159.684909][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.693570][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.693666][T11447] loop2: detected capacity change from 0 to 1024 [ 159.710796][T11432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.723154][T11352] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.742044][T11447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.757571][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 159.771714][T11432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.783658][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.820629][T11463] loop2: detected capacity change from 0 to 8192 [ 159.869133][T11470] loop2: detected capacity change from 0 to 1024 [ 159.877749][T11352] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.895124][T11470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.907432][ T296] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.917252][T11352] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.943482][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.956795][ T296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.968916][ T296] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.982522][ T296] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.014718][T11496] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 160.030516][T11489] macvtap1: entered promiscuous mode [ 160.036033][T11489] macvtap1: entered allmulticast mode [ 160.108870][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 160.131410][T11489] netlink: 'syz.2.2895': attribute type 10 has an invalid length. [ 160.144806][T11489] batadv0: entered allmulticast mode [ 160.167855][T11489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.181190][T11592] siw: device registration error -23 [ 160.186480][T11489] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.217743][T11595] program syz.3.2900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.227608][T11595] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.328972][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 160.348542][T11591] lo speed is unknown, defaulting to 1000 [ 160.372449][T11611] syz0: rxe_newlink: already configured on bond_slave_0 [ 160.390310][T11609] macvtap1: entered promiscuous mode [ 160.399482][T11609] macvtap1: entered allmulticast mode [ 160.494479][T11591] lo speed is unknown, defaulting to 1000 [ 160.511223][T11617] program syz.3.2909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.528751][T11617] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.538999][T11612] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 160.622548][T11591] vcan0 speed is unknown, defaulting to 1000 [ 160.630640][T11621] loop4: detected capacity change from 0 to 8192 [ 160.677873][T11624] program syz.3.2913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.707187][T11624] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.794214][T11630] loop3: detected capacity change from 0 to 1024 [ 160.900694][T11630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.916838][T11352] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.926190][T11586] syz.1.2898 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 160.937359][T11586] CPU: 1 UID: 0 PID: 11586 Comm: syz.1.2898 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.937460][T11586] Tainted: [W]=WARN [ 160.937523][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.937598][T11586] Call Trace: [ 160.937603][T11586] [ 160.937648][T11586] __dump_stack+0x1d/0x30 [ 160.937673][T11586] dump_stack_lvl+0xe8/0x140 [ 160.937696][T11586] dump_stack+0x15/0x1b [ 160.937789][T11586] dump_header+0x81/0x220 [ 160.937832][T11586] oom_kill_process+0x342/0x400 [ 160.937866][T11586] out_of_memory+0x979/0xb80 [ 160.937900][T11586] try_charge_memcg+0x610/0xa10 [ 160.938080][T11586] charge_memcg+0x51/0xc0 [ 160.938102][T11586] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 160.938200][T11586] __read_swap_cache_async+0x17b/0x2d0 [ 160.938223][T11586] swap_cluster_readahead+0x262/0x3c0 [ 160.938247][T11586] swapin_readahead+0xde/0x6f0 [ 160.938267][T11586] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 160.938382][T11586] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 160.938418][T11586] ? __rcu_read_unlock+0x4f/0x70 [ 160.938458][T11586] ? swap_cache_get_folio+0x277/0x280 [ 160.938528][T11586] do_swap_page+0x2ae/0x2370 [ 160.938556][T11586] ? css_rstat_updated+0xb7/0x240 [ 160.938579][T11586] ? __pfx_default_wake_function+0x10/0x10 [ 160.938616][T11586] handle_mm_fault+0x9a5/0x2be0 [ 160.938644][T11586] ? vma_start_read+0x141/0x1f0 [ 160.938682][T11586] do_user_addr_fault+0x630/0x1080 [ 160.938708][T11586] exc_page_fault+0x62/0xa0 [ 160.938809][T11586] asm_exc_page_fault+0x26/0x30 [ 160.938828][T11586] RIP: 0033:0x7fe41f8d58ec [ 160.938842][T11586] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 160.938859][T11586] RSP: 002b:00007ffd29e0f500 EFLAGS: 00010202 [ 160.938874][T11586] RAX: 0000000000000000 RBX: 00007fe41fc55fa0 RCX: 0000000000000000 [ 160.938886][T11586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555951c6808 [ 160.938897][T11586] RBP: 00007fe41fc57da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 160.938909][T11586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000027492 [ 160.938936][T11586] R13: 00007ffd29e0f5f0 R14: ffffffffffffffff R15: 00007ffd29e0f610 [ 160.938953][T11586] [ 160.939039][T11586] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 160.941054][T11352] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.950430][T11586] memory+swap: usage 308008kB, limit 9007199254740988kB, failcnt 0 [ 161.056873][T11631] loop4: detected capacity change from 0 to 32768 [ 161.059292][T11586] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 161.198067][T11586] Memory cgroup stats for /syz1: [ 161.198552][T11586] cache 0 [ 161.206427][T11586] rss 0 [ 161.209190][T11586] shmem 0 [ 161.212223][T11586] mapped_file 0 [ 161.215653][T11586] dirty 0 [ 161.218639][T11586] writeback 0 [ 161.221913][T11586] workingset_refault_anon 31 [ 161.226490][T11586] workingset_refault_file 362 [ 161.231151][T11586] swap 827392 [ 161.234406][T11586] swapcached 16384 [ 161.238116][T11586] pgpgin 266191 [ 161.241570][T11586] pgpgout 266185 [ 161.245089][T11586] pgfault 284748 [ 161.248606][T11586] pgmajfault 25 [ 161.252112][T11586] inactive_anon 16384 [ 161.256075][T11586] active_anon 0 [ 161.259504][T11586] inactive_file 8192 [ 161.263393][T11586] active_file 0 [ 161.266865][T11586] unevictable 0 [ 161.270383][T11586] hierarchical_memory_limit 314572800 [ 161.275737][T11586] hierarchical_memsw_limit 9223372036854771712 [ 161.281892][T11586] total_cache 0 [ 161.285402][T11586] total_rss 0 [ 161.288656][T11586] total_shmem 0 [ 161.292102][T11586] total_mapped_file 0 [ 161.296111][T11586] total_dirty 0 [ 161.299541][T11586] total_writeback 0 [ 161.303343][T11586] total_workingset_refault_anon 31 [ 161.308445][T11586] total_workingset_refault_file 362 [ 161.313636][T11586] total_swap 827392 [ 161.317437][T11586] total_swapcached 16384 [ 161.321683][T11586] total_pgpgin 266191 [ 161.325643][T11586] total_pgpgout 266185 [ 161.329780][T11586] total_pgfault 284748 [ 161.333889][T11586] total_pgmajfault 25 [ 161.337839][T11586] total_inactive_anon 16384 [ 161.342380][T11586] total_active_anon 0 [ 161.346335][T11586] total_inactive_file 8192 [ 161.350739][T11586] total_active_file 0 [ 161.354714][T11586] total_unevictable 0 [ 161.358663][T11586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2898,pid=11586,uid=0 [ 161.373393][T11586] Memory cgroup out of memory: Killed process 11586 (syz.1.2898) total-vm:96144kB, anon-rss:1136kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 161.398040][ T7676] bridge_slave_1: left allmulticast mode [ 161.403747][ T7676] bridge_slave_1: left promiscuous mode [ 161.409370][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.420612][T11640] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 161.421875][T11605] syz.1.2898 (11605) used greatest stack depth: 9016 bytes left [ 161.425871][T11640] loop4: partition table partially beyond EOD, truncated [ 161.445651][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.449842][T11640] loop4: p1 start 196608 is beyond EOD, truncated [ 161.461951][ T7676] bridge_slave_0: left promiscuous mode [ 161.467643][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.477124][T11640] loop4: p3 start 50725632 is beyond EOD, truncated [ 161.509501][T11640] loop4: p5 start 196608 is beyond EOD, truncated [ 161.516331][T11648] loop3: detected capacity change from 0 to 1024 [ 161.532643][T11648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.548348][T11631] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 161.553629][T11631] loop4: partition table partially beyond EOD, truncated [ 161.568382][T11631] loop4: p1 start 196608 is beyond EOD, truncated [ 161.578902][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.588748][T11631] loop4: p3 start 50725632 is beyond EOD, truncated [ 161.604031][T11587] syz.1.2898 (11587) used greatest stack depth: 6376 bytes left [ 161.613042][T11631] loop4: p5 start 196608 is beyond EOD, truncated [ 161.657823][T11656] loop3: detected capacity change from 0 to 8192 [ 161.693302][ T7676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.703045][ T7676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.712697][ T7676] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 161.721584][ T7676] bond0 (unregistering): Released all slaves [ 161.729063][T11591] lo speed is unknown, defaulting to 1000 [ 161.729081][T11352] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.766969][T11352] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.784447][T11665] loop4: detected capacity change from 0 to 1024 [ 161.796761][ T7676] tipc: Disabling bearer [ 161.801798][ T7676] tipc: Left network mode [ 161.814231][T11665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.827032][T11665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.896678][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.921722][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.938099][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.945183][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.987317][T11352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.997867][T11352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.025172][ T7462] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.032307][ T7462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.100641][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.127293][T11694] loop2: detected capacity change from 0 to 1024 [ 162.152819][ T7676] hsr_slave_0: left promiscuous mode [ 162.159252][ T7676] hsr_slave_1: left promiscuous mode [ 162.166759][ T7676] veth1_macvtap: left promiscuous mode [ 162.172466][ T7676] veth0_macvtap: left promiscuous mode [ 162.178081][ T7676] veth1_vlan: left promiscuous mode [ 162.184748][ T7676] veth0_vlan: left promiscuous mode [ 162.185822][T11694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.238658][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.297454][ T7676] team0 (unregistering): Port device team_slave_0 removed [ 162.328959][ T296] smc: removing ib device sz1 [ 162.328972][ T7462] smc: removing ib device !yz! [ 162.334099][T11708] loop4: detected capacity change from 0 to 512 [ 162.339201][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'. [ 162.356525][ T3385] lo speed is unknown, defaulting to 1000 [ 162.362356][ T3385] sz1: Port: 1 Link DOWN [ 162.373211][T11708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.388095][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.2933: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 162.408383][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 162.430445][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 162.456116][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 162.494530][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 162.530528][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 162.532408][T11352] veth0_vlan: entered promiscuous mode [ 162.563074][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 162.586798][T11708] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.2933: lblock 23 mapped to illegal pblock 18 (length 1) [ 162.612035][T11352] veth1_vlan: entered promiscuous mode [ 162.651997][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 162.681739][T11352] veth0_macvtap: entered promiscuous mode [ 162.688767][T11352] veth1_macvtap: entered promiscuous mode [ 162.719019][T11708] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 20: comm syz.4.2933: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 162.723045][T11352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.815580][T11352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.831414][T11737] program syz.3.2939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.842370][ T7685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.891244][ T7685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.932615][ T7676] IPVS: stop unused estimator thread 0... [ 162.939817][T11737] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 163.026771][ T296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.036306][ T296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.167006][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 163.196674][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.206904][T11758] FAULT_INJECTION: forcing a failure. [ 163.206904][T11758] name failslab, interval 1, probability 0, space 0, times 0 [ 163.219614][T11758] CPU: 0 UID: 0 PID: 11758 Comm: syz.0.2945 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.219649][T11758] Tainted: [W]=WARN [ 163.219656][T11758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.219668][T11758] Call Trace: [ 163.219673][T11758] [ 163.219680][T11758] __dump_stack+0x1d/0x30 [ 163.219702][T11758] dump_stack_lvl+0xe8/0x140 [ 163.219728][T11758] dump_stack+0x15/0x1b [ 163.219747][T11758] should_fail_ex+0x265/0x280 [ 163.219768][T11758] should_failslab+0x8c/0xb0 [ 163.219795][T11758] kmem_cache_alloc_noprof+0x50/0x480 [ 163.219825][T11758] ? mas_alloc_nodes+0x1a2/0x210 [ 163.219860][T11758] mas_alloc_nodes+0x1a2/0x210 [ 163.219892][T11758] mas_preallocate+0x2ca/0x510 [ 163.219928][T11758] mmap_region+0xbd4/0x1620 [ 163.219972][T11758] do_mmap+0x9b3/0xbe0 [ 163.219995][T11758] vm_mmap_pgoff+0x17a/0x2e0 [ 163.220030][T11758] ksys_mmap_pgoff+0xc2/0x310 [ 163.220049][T11758] ? __x64_sys_mmap+0x49/0x70 [ 163.220075][T11758] x64_sys_call+0x14a3/0x3000 [ 163.220095][T11758] do_syscall_64+0xd2/0x200 [ 163.220115][T11758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.220143][T11758] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.220172][T11758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.220194][T11758] RIP: 0033:0x7fb3d8c7f003 [ 163.220210][T11758] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 163.220228][T11758] RSP: 002b:00007fb3d76e6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 163.220248][T11758] RAX: ffffffffffffffda RBX: 0000000000000510 RCX: 00007fb3d8c7f003 [ 163.220262][T11758] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 163.220274][T11758] RBP: 0000200000000382 R08: 00000000ffffffff R09: 0000000000000000 [ 163.220285][T11758] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 163.220296][T11758] R13: 00007fb3d76e6ef0 R14: 00007fb3d76e6eb0 R15: 0000200000000340 [ 163.220313][T11758] [ 163.260610][T11761] siw: device registration error -23 [ 163.284380][T11760] loop3: detected capacity change from 0 to 8192 [ 163.477072][T11768] FAULT_INJECTION: forcing a failure. [ 163.477072][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 163.489751][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.4.2946 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.489792][T11768] Tainted: [W]=WARN [ 163.489799][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.489810][T11768] Call Trace: [ 163.489816][T11768] [ 163.489823][T11768] __dump_stack+0x1d/0x30 [ 163.489844][T11768] dump_stack_lvl+0xe8/0x140 [ 163.489918][T11768] dump_stack+0x15/0x1b [ 163.489935][T11768] should_fail_ex+0x265/0x280 [ 163.489954][T11768] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 163.489976][T11768] should_failslab+0x8c/0xb0 [ 163.490003][T11768] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 163.490089][T11768] ? shmem_alloc_inode+0x34/0x50 [ 163.490113][T11768] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 163.490198][T11768] shmem_alloc_inode+0x34/0x50 [ 163.490232][T11768] alloc_inode+0x40/0x170 [ 163.490279][T11768] new_inode+0x1d/0xe0 [ 163.490344][T11768] shmem_get_inode+0x244/0x750 [ 163.490367][T11768] __shmem_file_setup+0x113/0x210 [ 163.490424][T11768] shmem_file_setup+0x3b/0x50 [ 163.490493][T11768] __se_sys_memfd_create+0x2c3/0x590 [ 163.490518][T11768] __x64_sys_memfd_create+0x31/0x40 [ 163.490540][T11768] x64_sys_call+0x2ac2/0x3000 [ 163.490562][T11768] do_syscall_64+0xd2/0x200 [ 163.490614][T11768] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.490641][T11768] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.490671][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.490707][T11768] RIP: 0033:0x7f604257efc9 [ 163.490722][T11768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.490739][T11768] RSP: 002b:00007f6040fe6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 163.490757][T11768] RAX: ffffffffffffffda RBX: 0000000000000470 RCX: 00007f604257efc9 [ 163.490769][T11768] RDX: 00007f6040fe6ef0 RSI: 0000000000000000 RDI: 00007f6042602960 [ 163.490781][T11768] RBP: 0000200000001040 R08: 00007f6040fe6bb7 R09: 00007f6040fe6e40 [ 163.490793][T11768] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 163.490851][T11768] R13: 00007f6040fe6ef0 R14: 00007f6040fe6eb0 R15: 0000200000000700 [ 163.490869][T11768] [ 163.763061][T11784] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 163.775911][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 163.775925][ T29] audit: type=1326 audit(676.754:24545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 163.805412][T11780] loop4: detected capacity change from 0 to 512 [ 163.820996][T11770] loop3: detected capacity change from 0 to 1024 [ 163.838389][ T29] audit: type=1326 audit(676.784:24546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 163.861529][ T29] audit: type=1326 audit(676.784:24547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 163.884577][ T29] audit: type=1326 audit(676.784:24548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91499aefc9 code=0x7ffc0000 [ 163.907584][ T29] audit: type=1326 audit(676.784:24549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f91499af003 code=0x7ffc0000 [ 163.930370][ T29] audit: type=1326 audit(676.784:24550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f91499ada7f code=0x7ffc0000 [ 163.953315][ T29] audit: type=1326 audit(676.794:24551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91499af057 code=0x7ffc0000 [ 163.976689][ T29] audit: type=1326 audit(676.794:24552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91499ad810 code=0x7ffc0000 [ 163.999752][ T29] audit: type=1326 audit(676.794:24554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8c7efc9 code=0x7ffc0000 [ 164.022913][ T29] audit: type=1326 audit(676.794:24555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11781 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d8c7efc9 code=0x7ffc0000 [ 164.047914][T11770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.326648][T11807] loop4: detected capacity change from 0 to 8192 [ 164.326976][T11816] loop2: detected capacity change from 0 to 512 [ 164.336038][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2967'. [ 164.353132][T11816] EXT4-fs: Ignoring removed bh option [ 164.376510][T11816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.387036][T11822] loop4: detected capacity change from 0 to 512 [ 164.406815][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.408253][T11822] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2968: couldn't read orphan inode 26 (err -116) [ 164.428511][T11825] siw: device registration error -23 [ 164.430138][T11822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.475618][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.488541][T11832] loop3: detected capacity change from 0 to 2048 [ 164.501584][T11832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.519222][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.527842][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.643100][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.685247][T11847] loop3: detected capacity change from 0 to 1024 [ 164.701377][T11847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.724186][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.743653][T11851] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.781123][T11851] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.821226][T11851] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.861161][T11851] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.905901][ T7685] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.916655][ T7685] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.927252][ T7685] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.937996][ T7685] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.978403][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.019802][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2979'. [ 165.040427][T11865] FAULT_INJECTION: forcing a failure. [ 165.040427][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 165.053202][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.2.2980 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.053259][T11865] Tainted: [W]=WARN [ 165.053265][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.053277][T11865] Call Trace: [ 165.053282][T11865] [ 165.053290][T11865] __dump_stack+0x1d/0x30 [ 165.053312][T11865] dump_stack_lvl+0xe8/0x140 [ 165.053331][T11865] dump_stack+0x15/0x1b [ 165.053402][T11865] should_fail_ex+0x265/0x280 [ 165.053489][T11865] should_failslab+0x8c/0xb0 [ 165.053635][T11865] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 165.053698][T11865] ? __alloc_skb+0x101/0x320 [ 165.053733][T11865] __alloc_skb+0x101/0x320 [ 165.053760][T11865] netlink_alloc_large_skb+0xbf/0xf0 [ 165.053793][T11865] netlink_sendmsg+0x3cf/0x6b0 [ 165.053824][T11865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.053845][T11865] __sock_sendmsg+0x145/0x180 [ 165.053872][T11865] ____sys_sendmsg+0x31e/0x4e0 [ 165.053921][T11865] ___sys_sendmsg+0x17b/0x1d0 [ 165.053962][T11865] __x64_sys_sendmsg+0xd4/0x160 [ 165.054038][T11865] x64_sys_call+0x191e/0x3000 [ 165.054063][T11865] do_syscall_64+0xd2/0x200 [ 165.054085][T11865] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.054166][T11865] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.054202][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.054259][T11865] RIP: 0033:0x7f2b302eefc9 [ 165.054275][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.054376][T11865] RSP: 002b:00007f2b2ed4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.054395][T11865] RAX: ffffffffffffffda RBX: 00007f2b30545fa0 RCX: 00007f2b302eefc9 [ 165.054407][T11865] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 165.054418][T11865] RBP: 00007f2b2ed4f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.054433][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.054445][T11865] R13: 00007f2b30546038 R14: 00007f2b30545fa0 R15: 00007ffcc1de8c18 [ 165.054526][T11865] [ 165.286742][T11872] program syz.4.2983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.301906][T11872] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.407162][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'. [ 165.493014][T11904] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 165.522558][T11908] program syz.4.2996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.532086][T11908] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 165.589503][T11916] loop2: detected capacity change from 0 to 764 [ 165.596839][T11916] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 165.720699][T11929] loop4: detected capacity change from 0 to 8192 [ 165.725490][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3003'. [ 165.767923][T11935] infiniband syz!: set active [ 165.772777][T11935] infiniband syz!: added team_slave_0 [ 165.820854][T11939] loop4: detected capacity change from 0 to 512 [ 165.829522][T11940] loop0: detected capacity change from 0 to 128 [ 165.836259][T11940] EXT4-fs: Ignoring removed nobh option [ 165.842689][T11935] RDS/IB: syz!: added [ 165.849366][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 165.858742][T11935] smc: adding ib device syz! with port count 1 [ 165.866651][T11939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.881622][T11939] netlink: 'syz.4.3008': attribute type 1 has an invalid length. [ 165.889952][T11940] ext4: Unknown parameter 'fowner' [ 165.896205][T11935] smc: ib device syz! port 1 has no pnetid [ 165.936933][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.069066][T11942] siw: device registration error -23 [ 166.090453][T11947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11947 comm=wޣ [ 166.103051][T11947] FAULT_INJECTION: forcing a failure. [ 166.103051][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 166.115697][T11947] CPU: 1 UID: 0 PID: 11947 Comm: wޣ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.115731][T11947] Tainted: [W]=WARN [ 166.115738][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.115751][T11947] Call Trace: [ 166.115759][T11947] [ 166.115766][T11947] __dump_stack+0x1d/0x30 [ 166.115803][T11947] dump_stack_lvl+0xe8/0x140 [ 166.115825][T11947] dump_stack+0x15/0x1b [ 166.115842][T11947] should_fail_ex+0x265/0x280 [ 166.115884][T11947] should_failslab+0x8c/0xb0 [ 166.115942][T11947] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 166.116014][T11947] ? __alloc_skb+0x101/0x320 [ 166.116071][T11947] __alloc_skb+0x101/0x320 [ 166.116102][T11947] netlink_ack+0xfd/0x500 [ 166.116135][T11947] audit_receive+0xff4/0x2180 [ 166.116160][T11947] ? __netlink_deliver_tap+0x4f5/0x500 [ 166.116246][T11947] ? __netlink_lookup+0x266/0x2a0 [ 166.116270][T11947] netlink_unicast+0x5c0/0x690 [ 166.116305][T11947] netlink_sendmsg+0x58b/0x6b0 [ 166.116380][T11947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.116403][T11947] __sock_sendmsg+0x145/0x180 [ 166.116465][T11947] ____sys_sendmsg+0x31e/0x4e0 [ 166.116549][T11947] ___sys_sendmsg+0x17b/0x1d0 [ 166.116577][T11947] __x64_sys_sendmsg+0xd4/0x160 [ 166.116599][T11947] x64_sys_call+0x191e/0x3000 [ 166.116621][T11947] do_syscall_64+0xd2/0x200 [ 166.116641][T11947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.116730][T11947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.116761][T11947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.116781][T11947] RIP: 0033:0x7f91499aefc9 [ 166.116795][T11947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.116825][T11947] RSP: 002b:00007f914840f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.116845][T11947] RAX: ffffffffffffffda RBX: 00007f9149c05fa0 RCX: 00007f91499aefc9 [ 166.116871][T11947] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 166.116915][T11947] RBP: 00007f914840f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.116928][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.116940][T11947] R13: 00007f9149c06038 R14: 00007f9149c05fa0 R15: 00007ffd8a587e58 [ 166.116957][T11947] [ 166.395748][T11959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3016'. [ 166.454392][T11976] loop4: detected capacity change from 0 to 512 [ 166.462104][T11976] EXT4-fs: Ignoring removed bh option [ 166.494658][T11978] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 166.504260][T11976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.568474][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 166.739169][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.766153][T11997] loop0: detected capacity change from 0 to 512 [ 166.793923][T11997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.897965][T12005] loop3: detected capacity change from 0 to 1024 [ 166.904926][T12005] EXT4-fs: Ignoring removed bh option [ 166.910478][T12005] EXT4-fs: inline encryption not supported [ 166.918636][T12005] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.930738][T12005] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 166.939462][T12005] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3027: lblock 2 mapped to illegal pblock 2 (length 1) [ 166.954407][T12005] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3027: lblock 0 mapped to illegal pblock 48 (length 1) [ 166.968652][T12005] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3027: Failed to acquire dquot type 0 [ 166.980075][T12005] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 166.989612][T12005] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3027: mark_inode_dirty error [ 166.993139][T12016] FAULT_INJECTION: forcing a failure. [ 166.993139][T12016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.010390][T12005] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 167.014127][T12016] CPU: 1 UID: 0 PID: 12016 Comm: syz.4.3033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.014160][T12016] Tainted: [W]=WARN [ 167.014229][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.014241][T12016] Call Trace: [ 167.014292][T12016] [ 167.014300][T12016] __dump_stack+0x1d/0x30 [ 167.014323][T12016] dump_stack_lvl+0xe8/0x140 [ 167.014345][T12016] dump_stack+0x15/0x1b [ 167.014390][T12016] should_fail_ex+0x265/0x280 [ 167.014411][T12016] should_fail+0xb/0x20 [ 167.014428][T12016] should_fail_usercopy+0x1a/0x20 [ 167.014449][T12016] strncpy_from_user+0x25/0x230 [ 167.014519][T12016] ? should_failslab+0x8c/0xb0 [ 167.014550][T12016] setxattr_copy+0x4c/0x160 [ 167.014578][T12016] io_setxattr_prep+0x123/0x1d0 [ 167.014630][T12016] io_submit_sqes+0x5ef/0x1060 [ 167.014692][T12016] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 167.014792][T12016] ? 0xffffffff81000000 [ 167.014813][T12016] ? __rcu_read_unlock+0x4f/0x70 [ 167.014902][T12016] ? get_pid_task+0x96/0xd0 [ 167.015003][T12016] ? proc_fail_nth_write+0x13b/0x160 [ 167.015036][T12016] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 167.015068][T12016] ? vfs_write+0x7e8/0x960 [ 167.015093][T12016] ? __rcu_read_unlock+0x4f/0x70 [ 167.015242][T12016] ? __fget_files+0x184/0x1c0 [ 167.015271][T12016] ? fput+0x8f/0xc0 [ 167.015291][T12016] __x64_sys_io_uring_enter+0x78/0x90 [ 167.015325][T12016] x64_sys_call+0x2df0/0x3000 [ 167.015371][T12016] do_syscall_64+0xd2/0x200 [ 167.015391][T12016] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.015425][T12016] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.015454][T12016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.015509][T12016] RIP: 0033:0x7f604257efc9 [ 167.015525][T12016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.015542][T12016] RSP: 002b:00007f6040fe7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 167.015562][T12016] RAX: ffffffffffffffda RBX: 00007f60427d5fa0 RCX: 00007f604257efc9 [ 167.015576][T12016] RDX: 0000000000000003 RSI: 00000000000046bc RDI: 0000000000000003 [ 167.015605][T12016] RBP: 00007f6040fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.015664][T12016] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 167.015678][T12016] R13: 00007f60427d6038 R14: 00007f60427d5fa0 R15: 00007ffc55b54b48 [ 167.015697][T12016] [ 167.261453][T12005] EXT4-fs (loop3): 1 orphan inode deleted [ 167.267742][T12005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.280235][ T7462] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.295162][ T7462] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:26: Failed to release dquot type 0 [ 167.355335][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.368953][T12028] netlink: 'syz.1.3037': attribute type 10 has an invalid length. [ 167.377401][T12028] $H: (slave batadv0): Error -22 calling dev_set_mtu [ 167.384937][ T3316] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 167.398027][ T3316] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 167.407638][ T3316] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 167.519862][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.528297][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.648197][T12050] team0 (unregistering): Port device team_slave_0 removed [ 167.672947][T12050] team0 (unregistering): Port device team_slave_1 removed [ 167.821680][ T7442] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.843753][T12047] lo speed is unknown, defaulting to 1000 [ 167.873293][ T7442] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.897395][T12047] vcan0 speed is unknown, defaulting to 1000 [ 167.934566][T12058] lo speed is unknown, defaulting to 1000 [ 167.969286][T12047] lo speed is unknown, defaulting to 1000 [ 167.973635][T12058] vcan0 speed is unknown, defaulting to 1000 [ 168.008767][T12058] lo speed is unknown, defaulting to 1000 [ 168.031450][ T7442] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.122992][ T7442] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.323516][ T7442] $H (unregistering): (slave batadv0): Releasing backup interface [ 168.332978][ T7442] batadv0: left promiscuous mode [ 168.338323][ T7442] $H (unregistering): Released all slaves [ 168.349506][ T7442] bond1 (unregistering): Released all slaves [ 168.361095][ T7442] bond0 (unregistering): Released all slaves [ 168.373961][T12047] chnl_net:caif_netlink_parms(): no params data found [ 168.451878][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.458988][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.509487][T12047] bridge_slave_0: entered allmulticast mode [ 168.534586][T12047] bridge_slave_0: entered promiscuous mode [ 168.566876][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.573965][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.589570][T12047] bridge_slave_1: entered allmulticast mode [ 168.596635][T12047] bridge_slave_1: entered promiscuous mode [ 168.687308][ T7442] hsr_slave_0: left promiscuous mode [ 168.693084][ T7442] hsr_slave_1: left promiscuous mode [ 168.701165][ T7442] veth1_macvtap: left promiscuous mode [ 168.706850][ T7442] veth0_macvtap: left promiscuous mode [ 168.712528][ T7442] veth1_vlan: left promiscuous mode [ 168.717932][ T7442] veth0_vlan: left promiscuous mode [ 168.741579][T12080] loop2: detected capacity change from 0 to 512 [ 168.749568][T12080] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 168.758167][T12080] System zones: 1-12 [ 168.764581][T12080] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.3052: corrupted in-inode xattr: e_value size too large [ 168.778924][T12080] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3052: couldn't read orphan inode 15 (err -117) [ 168.792300][T12080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.811558][ T29] kauditd_printk_skb: 1034 callbacks suppressed [ 168.811571][ T29] audit: type=1400 audit(681.794:25584): avc: denied { create } for pid=12079 comm="syz.2.3052" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 168.813332][T12080] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.3052: Unrecognised inode hash code 4 [ 168.830015][ T7685] smc: removing ib device syz0 [ 168.858897][T12080] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3052: Corrupt directory, running e2fsck is recommended [ 168.872613][ T29] audit: type=1400 audit(681.794:25585): avc: denied { write } for pid=12079 comm="syz.2.3052" path="/48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.963213][ T29] audit: type=1400 audit(681.944:25586): avc: denied { setattr } for pid=12079 comm="syz.2.3052" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.998913][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.029041][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.032912][ T29] audit: type=1400 audit(681.974:25587): avc: denied { write } for pid=12079 comm="syz.2.3052" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 169.062563][ T29] audit: type=1400 audit(682.044:25588): avc: denied { create } for pid=12087 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.065648][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.088037][T12088] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 169.098970][ T29] audit: type=1400 audit(682.064:25589): avc: denied { bind } for pid=12087 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 169.117792][ T29] audit: type=1400 audit(682.064:25590): avc: denied { name_bind } for pid=12087 comm="syz.3.3056" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 169.139231][ T29] audit: type=1400 audit(682.064:25591): avc: denied { kexec_image_load } for pid=12087 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 169.158875][ T29] audit: type=1400 audit(682.064:25592): avc: denied { create } for pid=12087 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.178787][ T29] audit: type=1400 audit(682.064:25593): avc: denied { write } for pid=12087 comm="syz.3.3056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.199849][T12047] team0: Port device team_slave_0 added [ 169.247611][T12047] team0: Port device team_slave_1 added [ 169.264845][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.271879][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.297822][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.309432][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.316550][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.342553][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.390173][T12047] hsr_slave_0: entered promiscuous mode [ 169.396172][T12047] hsr_slave_1: entered promiscuous mode [ 169.725831][T12047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.726540][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.744952][T12047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.754444][T12047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.766160][T12047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.778721][T12109] warn_alloc: 5 callbacks suppressed [ 169.778797][T12109] syz.2.3062: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 169.798724][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.2.3062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.798756][T12109] Tainted: [W]=WARN [ 169.798762][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.798774][T12109] Call Trace: [ 169.798781][T12109] [ 169.798791][T12109] __dump_stack+0x1d/0x30 [ 169.798852][T12109] dump_stack_lvl+0xe8/0x140 [ 169.798876][T12109] dump_stack+0x15/0x1b [ 169.798896][T12109] warn_alloc+0x12b/0x1a0 [ 169.798928][T12109] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 169.799053][T12109] __vmalloc_node_range_noprof+0x9d/0xed0 [ 169.799090][T12109] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 169.799192][T12109] ? __rcu_read_unlock+0x4f/0x70 [ 169.799268][T12109] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 169.799331][T12109] ? perf_cgroup_switch+0x10c/0x480 [ 169.799443][T12109] ? update_load_avg+0x1da/0x820 [ 169.799477][T12109] ? __list_add_valid_or_report+0x38/0xe0 [ 169.799514][T12109] ? should_fail_ex+0x30/0x280 [ 169.799535][T12109] ? xskq_create+0x36/0xe0 [ 169.799561][T12109] vmalloc_user_noprof+0x7d/0xb0 [ 169.799597][T12109] ? xskq_create+0x80/0xe0 [ 169.799656][T12109] xskq_create+0x80/0xe0 [ 169.799675][T12109] xsk_init_queue+0x95/0xf0 [ 169.799746][T12109] xsk_setsockopt+0x477/0x640 [ 169.799765][T12109] ? __pfx_xsk_setsockopt+0x10/0x10 [ 169.799835][T12109] __sys_setsockopt+0x184/0x200 [ 169.799883][T12109] __x64_sys_setsockopt+0x64/0x80 [ 169.799978][T12109] x64_sys_call+0x20ec/0x3000 [ 169.800004][T12109] do_syscall_64+0xd2/0x200 [ 169.800054][T12109] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.800084][T12109] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.800117][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.800140][T12109] RIP: 0033:0x7f2b302eefc9 [ 169.800232][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.800253][T12109] RSP: 002b:00007f2b2ed4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 169.800275][T12109] RAX: ffffffffffffffda RBX: 00007f2b30545fa0 RCX: 00007f2b302eefc9 [ 169.800290][T12109] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 169.800304][T12109] RBP: 00007f2b30371f91 R08: 0000000000000004 R09: 0000000000000000 [ 169.800318][T12109] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 169.800333][T12109] R13: 00007f2b30546038 R14: 00007f2b30545fa0 R15: 00007ffcc1de8c18 [ 169.800390][T12109] [ 170.042175][T12109] Mem-Info: [ 170.045483][T12109] active_anon:3572 inactive_anon:3 isolated_anon:0 [ 170.045483][T12109] active_file:12974 inactive_file:12677 isolated_file:0 [ 170.045483][T12109] unevictable:0 dirty:93 writeback:0 [ 170.045483][T12109] slab_reclaimable:3657 slab_unreclaimable:20573 [ 170.045483][T12109] mapped:30174 shmem:204 pagetables:1413 [ 170.045483][T12109] sec_pagetables:0 bounce:0 [ 170.045483][T12109] kernel_misc_reclaimable:0 [ 170.045483][T12109] free:1793670 free_pcp:44407 free_cma:0 [ 170.090442][T12109] Node 0 active_anon:14056kB inactive_anon:12kB active_file:51896kB inactive_file:50708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120696kB dirty:372kB writeback:0kB shmem:816kB kernel_stack:4192kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 170.117804][T12109] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.147489][T12109] lowmem_reserve[]: 0 2881 7859 7859 [ 170.152870][T12109] Node 0 DMA32 free:2946628kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 170.184120][T12109] lowmem_reserve[]: 0 0 4978 4978 [ 170.189268][T12109] Node 0 Normal free:4204504kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14288kB inactive_anon:12kB active_file:51896kB inactive_file:50708kB unevictable:0kB writepending:372kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:173872kB local_pcp:52768kB free_cma:0kB [ 170.222537][T12109] lowmem_reserve[]: 0 0 0 0 [ 170.227071][T12109] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.239898][T12109] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946628kB [ 170.256030][T12109] Node 0 Normal: 1548*4kB (UM) 629*8kB (UME) 528*16kB (UME) 451*32kB (UM) 536*64kB (UM) 469*128kB (UME) 244*256kB (UM) 103*512kB (UME) 52*1024kB (UM) 21*2048kB (UM) 943*4096kB (UM) = 4202424kB [ 170.275209][T12109] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 170.284507][T12109] 26775 total pagecache pages [ 170.289170][T12109] 4 pages in swap cache [ 170.293406][T12109] Free swap = 124496kB [ 170.297563][T12109] Total swap = 124996kB [ 170.301727][T12109] 2097051 pages RAM [ 170.305590][T12109] 0 pages HighMem/MovableOnly [ 170.310270][T12109] 81086 pages reserved [ 170.356493][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.404128][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.423141][T12139] loop2: detected capacity change from 0 to 1024 [ 170.424306][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.436611][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.450839][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.457940][ T7685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.467004][T12139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.515906][T12047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.526307][T12047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.545346][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.562876][T12147] loop9: detected capacity change from 0 to 7 [ 170.577848][T12147] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.597282][T12147] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.605182][T12147] loop9: unable to read partition table [ 170.609534][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.611111][T12147] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 170.611111][T12147] ) failed (rc=-5) [ 170.680371][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 170.689303][T12161] netlink: 'syz.2.3072': attribute type 12 has an invalid length. [ 170.697149][T12161] netlink: 'syz.2.3072': attribute type 13 has an invalid length. [ 170.735048][T12161] vxlan0: entered promiscuous mode [ 170.752112][ T296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.764224][ T296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.790948][ T296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.806596][ T296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.827394][T12047] veth0_vlan: entered promiscuous mode [ 170.861145][T12047] veth1_vlan: entered promiscuous mode [ 170.878968][T12047] veth0_macvtap: entered promiscuous mode [ 170.886848][T12047] veth1_macvtap: entered promiscuous mode [ 170.900611][T12179] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.914420][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.917598][T12175] loop0: detected capacity change from 0 to 1024 [ 170.926395][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.939496][ T7442] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.952498][T12179] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.952910][T12175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.986711][ T7447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.016430][ T7447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.034450][T12179] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.055878][ T7447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.072456][T12179] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.091773][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.108654][T12187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12187 comm=syz.3.3079 [ 171.126685][T12191] Cannot find add_set index 0 as target [ 171.138562][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 171.153219][T12193] loop0: detected capacity change from 0 to 512 [ 171.166270][ T7447] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.175425][T12193] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.175447][ T7442] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.194448][ T7442] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.205415][T12193] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 171.210136][ T7442] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.229130][T12193] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3080: bg 0: block 248: padding at end of block bitmap is not set [ 171.244157][T12193] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3080: Failed to acquire dquot type 1 [ 171.261370][T12193] EXT4-fs (loop0): 1 truncate cleaned up [ 171.271786][T12193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 171.335685][T11352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 171.349985][ T7442] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 1 [ 171.430111][T12217] netlink: 'syz.3.3090': attribute type 10 has an invalid length. [ 171.452831][T12217] team0: Device dummy0 failed to register rx_handler [ 171.478166][T12221] loop2: detected capacity change from 0 to 2048 [ 171.491635][T12217] netlink: 'syz.3.3090': attribute type 10 has an invalid length. [ 171.510379][T12221] loop2: p1 < > p4 [ 171.516154][T12221] loop2: p4 size 8388608 extends beyond EOD, truncated [ 171.589892][T12233] netlink: 'syz.1.3095': attribute type 10 has an invalid length. [ 171.612594][T12233] $H: (slave batadv0): Error -22 calling dev_set_mtu [ 171.621462][T12235] loop2: detected capacity change from 0 to 8192 [ 172.065858][T12260] lo speed is unknown, defaulting to 1000 [ 172.096426][T12251] netlink: 'syz.0.3105': attribute type 4 has an invalid length. [ 172.114887][T12260] vcan0 speed is unknown, defaulting to 1000 [ 172.176164][T12260] lo speed is unknown, defaulting to 1000 [ 172.196885][ T3385] hid_parser_main: 16 callbacks suppressed [ 172.196904][ T3385] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 172.210549][ T3385] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 172.216508][T12255] netlink: 'syz.1.3107': attribute type 27 has an invalid length. [ 172.229695][ T3385] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 172.237980][ T3385] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 172.292813][T12255] $H: left promiscuous mode [ 172.300145][T12255] !60X: left allmulticast mode [ 172.305376][T12255] batadv0: left allmulticast mode [ 172.336837][T12255] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 172.357235][ T3385] lo speed is unknown, defaulting to 1000 [ 172.363018][ T3385] s{z2: Port: 1 Link DOWN [ 172.380195][ T7442] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.432853][ T7442] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.460729][ T7442] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.514718][ T7442] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.528540][T12260] chnl_net:caif_netlink_parms(): no params data found [ 172.585121][T12283] loop4: detected capacity change from 0 to 8192 [ 172.662630][T12260] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.669722][T12260] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.690323][T12260] bridge_slave_0: entered allmulticast mode [ 172.715867][T12260] bridge_slave_0: entered promiscuous mode [ 172.738533][T12260] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.745700][T12260] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.783947][T12302] loop2: detected capacity change from 0 to 2048 [ 172.790558][T12260] bridge_slave_1: entered allmulticast mode [ 172.798109][T12260] bridge_slave_1: entered promiscuous mode [ 172.815137][T12302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.827955][T12302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.860224][T12260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.871431][T12311] netlink: 'syz.4.3120': attribute type 10 has an invalid length. [ 172.879420][T12311] batadv0: entered allmulticast mode [ 172.887491][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.896062][T12311] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 172.905923][T12260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.923431][T12314] loop2: detected capacity change from 0 to 2048 [ 172.944139][T12314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.950073][T12319] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.957875][T12260] team0: Port device team_slave_0 added [ 172.973850][T12260] team0: Port device team_slave_1 added [ 172.984801][T12314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.999926][T12260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.007036][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.033072][T12260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.045060][T12260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.052053][T12260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.078084][T12260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.120187][T12322] infiniband syz0: set active [ 173.124954][T12322] infiniband syz0: added bond_slave_0 [ 173.144658][T12260] hsr_slave_0: entered promiscuous mode [ 173.151010][T12322] RDS/IB: syz0: added [ 173.151297][T12260] hsr_slave_1: entered promiscuous mode [ 173.156342][T12322] smc: adding ib device syz0 with port count 1 [ 173.162066][T12260] debugfs: 'hsr0' already exists in 'hsr' [ 173.167479][T12322] smc: ib device syz0 port 1 has no pnetid [ 173.172448][T12260] Cannot create hsr debugfs directory [ 173.181474][T12330] netlink: 'syz.1.3128': attribute type 16 has an invalid length. [ 173.191696][T12330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3128'. [ 173.374395][T12351] program syz.1.3136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.393140][T12351] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 173.416497][T12260] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.461637][T12260] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.514599][T12359] loop4: detected capacity change from 0 to 1024 [ 173.523120][T12260] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.523222][T12359] EXT4-fs: Ignoring removed bh option [ 173.551322][T12359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.569518][T12359] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.3140: inode #1: comm syz.4.3140: iget: illegal inode # [ 173.582967][T12359] EXT4-fs (loop4): Remounting filesystem read-only [ 173.589468][T12359] EXT4-fs warning (device loop4): ext4_xattr_block_set:2195: inode #19: comm syz.4.3140: dec ref error=-30 [ 173.602447][T12260] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.645007][T12047] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.678556][T12260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.690132][T12371] loop2: detected capacity change from 0 to 1024 [ 173.698608][T12260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.707119][T12371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.719677][ T3402] usb usb8-port1: attempt power cycle [ 173.726949][T12260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.736728][T12260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.762787][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.828679][T12390] loop2: detected capacity change from 0 to 732 [ 173.831035][T12260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.847652][T12260] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.857144][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.864212][ T7442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.880345][T12390] iso9660: Unknown parameter '18446744073709551615' [ 173.889208][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.896272][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.976210][T12260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.991939][T12393] netlink: 'syz.4.3148': attribute type 10 has an invalid length. [ 174.092814][T12260] veth0_vlan: entered promiscuous mode [ 174.110003][T12260] veth1_vlan: entered promiscuous mode [ 174.131444][T12260] veth0_macvtap: entered promiscuous mode [ 174.138712][T12260] veth1_macvtap: entered promiscuous mode [ 174.149617][T12260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.159036][T12260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.206059][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 174.206074][ T29] audit: type=1326 audit(687.184:26177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.251953][ T29] audit: type=1326 audit(687.214:26178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.271411][T12422] syz0: rxe_newlink: already configured on bond_slave_0 [ 174.275137][ T29] audit: type=1326 audit(687.214:26179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.305063][ T29] audit: type=1326 audit(687.214:26180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.328359][ T29] audit: type=1326 audit(687.214:26181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.351354][ T29] audit: type=1326 audit(687.214:26182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.374562][ T29] audit: type=1326 audit(687.214:26183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.397535][ T29] audit: type=1326 audit(687.214:26184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.420558][ T29] audit: type=1326 audit(687.214:26185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.443536][ T29] audit: type=1326 audit(687.214:26186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12416 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9545acefc9 code=0x7ffc0000 [ 174.474287][ T296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.490375][ T296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.500090][ T7462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.509114][ T7462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.561433][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'. [ 174.573868][T12434] loop3: detected capacity change from 0 to 1024 [ 174.601457][T12434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.648406][T12260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.669490][T12444] siw: device registration error -23 [ 174.707466][T12448] loop3: detected capacity change from 0 to 1024 [ 174.742006][T12448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.814831][T12466] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 174.822592][T12260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.839610][T12445] lo speed is unknown, defaulting to 1000 [ 174.898552][T12445] vcan0 speed is unknown, defaulting to 1000 [ 174.944088][T12479] loop2: detected capacity change from 0 to 1024 [ 174.946979][T12445] lo speed is unknown, defaulting to 1000 [ 174.973670][T12479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.068507][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.092193][T12445] chnl_net:caif_netlink_parms(): no params data found [ 175.124228][T12495] loop2: detected capacity change from 0 to 1024 [ 175.154200][T12445] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.161394][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.178956][T12445] bridge_slave_0: entered allmulticast mode [ 175.187582][T12495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.204121][T12445] bridge_slave_0: entered promiscuous mode [ 175.211663][T12445] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.218813][T12445] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.226542][T12445] bridge_slave_1: entered allmulticast mode [ 175.233076][T12445] bridge_slave_1: entered promiscuous mode [ 175.267812][T11067] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.280229][T12445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.314409][T12445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.349905][T12509] loop3: detected capacity change from 0 to 8192 [ 175.376754][T12445] team0: Port device team_slave_0 added [ 175.384832][T12445] team0: Port device team_slave_1 added [ 175.421012][T12445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.428024][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.453947][T12445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.474047][T12445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.481077][T12445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.507057][T12445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.568624][T12445] hsr_slave_0: entered promiscuous mode [ 175.575099][T12445] hsr_slave_1: entered promiscuous mode [ 175.580967][T12445] debugfs: 'hsr0' already exists in 'hsr' [ 175.586691][T12445] Cannot create hsr debugfs directory [ 175.777240][ T3402] usb usb8-port1: unable to enumerate USB device [ 175.972616][T12536] tipc: Started in network mode [ 175.977627][T12536] tipc: Node identity ac14140f, cluster identity 4711 [ 175.992641][T12540] loop4: detected capacity change from 0 to 1024 [ 176.010039][T12536] tipc: New replicast peer: 255.255.255.255 [ 176.016100][T12536] tipc: Enabled bearer , priority 10 [ 176.034270][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 176.034264][T12540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.034398][T12540] ================================================================== [ 176.043165][T12540] BUG: KCSAN: data-race in data_push_tail / string [ 176.043198][T12540] [ 176.043206][T12540] write to 0xffffffff88e53620 of 1 bytes by task 12537 on cpu 0: [ 176.043224][T12540] string+0x187/0x220 [ 176.043250][T12540] vsnprintf+0x532/0x890 [ 176.043276][T12540] vscnprintf+0x41/0x90 [ 176.043299][T12540] printk_sprint+0x30/0x2d0 [ 176.043320][T12540] vprintk_store+0x599/0x860 [ 176.043345][T12540] vprintk_emit+0x10d/0x580 [ 176.043366][T12540] vprintk_default+0x26/0x30 [ 176.043386][T12540] vprintk+0x1d/0x30 [ 176.043412][T12540] _printk+0x79/0xa0 [ 176.043440][T12540] __nla_validate_parse+0x1738/0x1d00 [ 176.043461][T12540] __nla_parse+0x40/0x60 [ 176.043482][T12540] ethnl_parse_bit+0x107/0x480 [ 176.043502][T12540] ethnl_update_bitset32+0xb7b/0xde0 [ 176.043522][T12540] ethnl_update_bitset+0x3a/0x50 [ 176.043542][T12540] ethnl_set_linkmodes+0x373/0x820 [ 176.043569][T12540] ethnl_default_set_doit+0x3f9/0x6c0 [ 176.043593][T12540] genl_family_rcv_msg_doit+0x143/0x1b0 [ 176.043622][T12540] genl_rcv_msg+0x422/0x460 [ 176.043643][T12540] netlink_rcv_skb+0x123/0x220 [ 176.043671][T12540] genl_rcv+0x28/0x40 [ 176.043693][T12540] netlink_unicast+0x5c0/0x690 [ 176.043727][T12540] netlink_sendmsg+0x58b/0x6b0 [ 176.043746][T12540] __sock_sendmsg+0x145/0x180 [ 176.043768][T12540] ____sys_sendmsg+0x31e/0x4e0 [ 176.043798][T12540] ___sys_sendmsg+0x17b/0x1d0 [ 176.043816][T12540] __x64_sys_sendmsg+0xd4/0x160 [ 176.043834][T12540] x64_sys_call+0x191e/0x3000 [ 176.043861][T12540] do_syscall_64+0xd2/0x200 [ 176.043882][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.043902][T12540] [ 176.043908][T12540] read to 0xffffffff88e53620 of 8 bytes by task 12540 on cpu 1: [ 176.043923][T12540] data_push_tail+0xfd/0x420 [ 176.043944][T12540] data_alloc+0xfb/0x2e0 [ 176.043963][T12540] prb_reserve+0x807/0xaf0 [ 176.043980][T12540] vprintk_store+0x56d/0x860 [ 176.044000][T12540] vprintk_emit+0x10d/0x580 [ 176.044024][T12540] vprintk_default+0x26/0x30 [ 176.044047][T12540] vprintk+0x1d/0x30 [ 176.044076][T12540] _printk+0x79/0xa0 [ 176.044108][T12540] __ext4_msg+0x18f/0x1a0 [ 176.044133][T12540] ext4_fill_super+0x2fcb/0x3810 [ 176.044157][T12540] get_tree_bdev_flags+0x291/0x300 [ 176.044184][T12540] get_tree_bdev+0x1f/0x30 [ 176.044207][T12540] ext4_get_tree+0x1c/0x30 [ 176.044229][T12540] vfs_get_tree+0x57/0x1d0 [ 176.044257][T12540] do_new_mount+0x24d/0x660 [ 176.044283][T12540] path_mount+0x4a5/0xb70 [ 176.044309][T12540] __se_sys_mount+0x28c/0x2e0 [ 176.044336][T12540] __x64_sys_mount+0x67/0x80 [ 176.044359][T12540] x64_sys_call+0x2b51/0x3000 [ 176.044380][T12540] do_syscall_64+0xd2/0x200 [ 176.044398][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.044422][T12540] [ 176.044427][T12540] value changed: 0x00000000ffffeeac -> 0x00000a2e272e2733 [ 176.044439][T12540] [ 176.044444][T12540] Reported by Kernel Concurrency Sanitizer on: [ 176.044458][T12540] CPU: 1 UID: 0 PID: 12540 Comm: syz.4.3194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.044494][T12540] Tainted: [W]=WARN [ 176.044503][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.044517][T12540] ================================================================== [ 176.388306][T12047] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.139728][ T10] tipc: Node number set to 2886997007 [ 177.741959][T12445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.750549][T12445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.758818][T12445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.767643][T12445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.798767][T12445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.810230][T12445] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.819305][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.826434][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.837419][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.844497][ T7442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.901711][T12445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.954674][T12445] veth0_vlan: entered promiscuous mode [ 177.962530][T12445] veth1_vlan: entered promiscuous mode [ 177.985117][ T7685] dvmrp1 (unregistering): left allmulticast mode [ 178.091050][ T7685] $H (unregistering): Released all slaves [ 178.099133][ T7685] bond1 (unregistering): Released all slaves [ 178.114841][T12445] veth0_macvtap: entered promiscuous mode [ 178.121730][T12445] veth1_macvtap: entered promiscuous mode [ 178.132247][T12445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.144146][T12445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.153255][ T7685] tipc: Disabling bearer [ 178.158479][ T7685] tipc: Left network mode [ 178.160650][ T7442] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.172173][ T7442] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.181276][ T7442] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.190124][ T7676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.258110][ T7685] hsr_slave_0: left promiscuous mode [ 178.264029][ T7685] hsr_slave_1: left promiscuous mode [ 178.269502][ T7685] batman_adv: batadv0: Removing interface: veth1_vlan