last executing test programs: 11m7.622344099s ago: executing program 32 (id=342): fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x5, 0xce, &(0x7f00000003c0)=""/206, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000080), 0x0}, 0x20) 8m8.614846594s ago: executing program 33 (id=935): inotify_add_watch(0xffffffffffffffff, 0x0, 0x52000775) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x281}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152c, &(0x7f0000001f80)="$eJzs3AuYTtUaOPD3XWvtMSS+JrkMa6138yWXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSUJyS9b/mfB3OnX+dc7pn/OceX/Ps59Z76y91n73936Xtfcz833TZUitxrWrNyQi+I/g+R9JABALAAMAIC8ABABQPq58XFZ/TolJ/9lB2J/rgdTLnQG7nLj+2RvXP3vj+mdvXP/sjeufvXH9szeuf/bG9WcsO9s4tdBVvGXfje//Z2f8+f8/JLPMmC9Wl7mmK0DMHx3C9c/euP7/s4I/shPXP3vj+mdXsZc7AfZfgF//2UGOf9rD9c/euP6MZWeX+/7z5d4g8l/2GBzOeb4wf9X5M8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjf4FT/hIFABfblzsvxhhjjDHGGGOM/Xl8jsudAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBAFdCHsgLEbgK4uBqyAfXQH4oAAWhEMRDYSgCGgxYIAihKBSDKFwLxeE6KAEloRSUBgdlIAGuh7JwA5SDG6E83AQV4GaoCJWgMlSBW6Aq3ArV4DaoDrdDDagJtaA23AF14E6oC3dBPbgb6sM9cC/cBw3gfmgID0AjeBAaw0PQBB6GptAMmkMLaPlvjX8OesDz0BN6QRL0hj7wAvSFftAfXoQB8BIMhJdhELwCyTAYhsCrMBReg2HwOgyHETAS3oBR8CaMhjEwFsZBCoyHCfAWTIS3YRK8A5NhCqTCVJgG78J0mAEz4T2YBe/DbJgDc2EepMEHMB8WQDp8CAvhI8iARbAYlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtvhY9gBn8BO2AW74VPYA5/9i+NP/sP4rggIKFCgQoUxGIOxGIu5MBfmxtyYB/NgBCMYh3GYD/NhfsyPBbEgxmM8FsEiaNAgIWFRLIpRjGJxLI4lsASWwlLo0GECJmBZvAHLYTksj+WxAlbAilgJK2EVrIJVsSpWw2pYHatjDayBtbAW3oF3YG+si3WxHtbD+lj/4u0pbIgNsRE2wsbYGJtgE2yKTbE5NseW2BJbYStsja2xLbbFdtgO22N7TMRE7IAdsCN2xE7YCTtjZ+yCXbArdsNumc/lAHwen8deWEP0xj7YB/tico7++CK+iC/hQHwZX8ZXMBkH4xB8FV/F13AYnsDhOAJH4kisKt7E0TgGSYzDFEzBCTgBJ+JEzEr0HZyCqTgVp+E0nI4zcAa+h7PwfXwf5+AcnIdpmIbzcQGmYzouxJOYgYtwMS7BpbgMl+IKXIkrcDWuwdW4DtfhBtyAm3ATbsEtuA234ceoAPAT3IW7MBn34B7ci3txH+7D/bgfMzETD+ABPIgH8RAewsN4GI/gUTyGR/E4HscTeBJP4Sk8g2fwLD4T/1Wjj0uuSgaRRQklYkSMiBWxIpfIJXKL3CKPyCMiIiLiRJzIJ/KJ/CK/KCgKingRL4qIIsIII0iEMQAgoiIqioviooQoIUqJUsIJJxJEgigryopyopwoL24SFcTNoqKoJNq4KqKKqCraumriNlFdVBc1RE1RS9QWtUUdUUfUFXVFPVFP1Bf1xb3iPtFA9Mb++IDIqkxjMRibiCHYVDQT8sI7WCsxDFuLNqKteEyMwOHYXrRyieJJ0UGMxo7ib2IMPi06i3HYRTwruopuort4TvQQrV1P0UtMwt6ij5iCfUU/0V+8KKZjTfEezspZS7wiksVgMUS8Kubha2KYeF0MFyPESPGGGCXeFKPFGDFWjBMpYryYIN4SE8XbYpJ4R0wWU0SqmCqmiXfFdDFDzBTviVnifTFbzBFzxTyRJj4Q88UCkS4+FAvFRyJDLBKLxRKxVCwTy8UKsVKsEqvFGrFWrBPrxQaxUWwSm0UsbBXbxHbxsdghPhE7xS6xW3wq9ojPxF7xudgnvhD7xZciU3wlDoivxUHxjTgkvhWHxXfiiDgqjonvxXHxgzghTopT4rQ4I34UZ8VP4pzwAiRKIaVUMpAxMoeMlTllLnmFzC2DC4/uVTJOXi3zyWtkfllAFpSFZLwsLItILY20kmQoi8piMiqvlcXldbKELClLydLSyTIyQV4vy8obZDl5oywvb5IV5M2yoqwkK8sq8hZZVd4qIXL+GDVkTVlL1pZ3yCS4U9aVd8l68m5ZX94j75X3yQbyftlQPiAbyQdlY/mQbCIflk1lM9lctpAt5SOylXxUtpZtZFv5mGwnH5ft5RMyUT4pO0h/4SnytOwsn5Fd5LOyq+wmu8uf5DnpZU/ZS0JvkH3kC7Kv7Cf7xwKAfEkOlC/LQfIVmSwHyyHyVTlUviaHydflcDlCjpRvyFHyTTlajpFj5TiZIsfLCfItOVG+LSfJd+RkOUWmyqmyvxzw80wzpfzd8W/9xvhBPx99g9woN8nNcovcKrfJ7fJjuUPukDvlTrlb7pZ75B65V+6V++Q+uV/ul5kyUx6QB+RBeVAekofkYXlYHpFH5Wn5vTwuf5An5El5Up6WZ+QZefbCYwAKlVBSKRWoGJVDxaqcKpe6QuVWV6o8Kq+KqKtUnLpa5VPXqPyqgCqoCql4VVgVUVoZZRWpUBVVxVRUXYsXnjCqlCqtnCqjEtT1/8p4VVxdp0qokr8YfzG/pH+SX0vVUrVSrVRr1Vq1VW1VO9VOtVftVaJKVB1UB9VRdVSdVCfVWXVWXVSXrOeD6q66qx6qh+qpeqoklaT6qBdUX9VP9VcvqgHqJTVQDVSD1CCVrJLVEDVEDVVD1TA1TA1Xw9VINVKNUqPUaDVajVVjVYpKURPUBDVRTVST1CQ1WU1WqSpVTVPT1HQ1Xc1UM9UsNUvNVrPVXDVXpak0NV/NV+kqXS1UC1WGWqQWqSVqiVqmlqkVaoVapVapNWqNWqfWqQy1UW1Um9VmtVVtVdvVdrVD7VA7xU61W+1We9QetVftVfvUPrVf7VeZKlMdUAfUQXVQHVKH1GF1WB1RR9QxdUwdV8fVCXVCnVKn1Bl1Rp1VZ9U5dS5r2ReIQAQqUEFMEBPEBrFBriBXkDvIHeQJ8gSRIBLEBXFBvuCaIH9QICgYFArig8JBkUAHJrCBuFD0aHBtUDy4LigRlAxKBaUDF5QJEoLrg7LBDUG54MagfHBTUCG4OagYVAoqB1WCW4Kqwa1BteC2oHpwe1AjqBnUCmoHdwR1gjuDusFdQb3g7qB+cE9wb3Bf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmQbOgedAiaPmnzu/9iQKPup66l07SvXUf/YLuq/vp/vpFPUC/pAfql/Ug/YpO1oP1EP2qHqpf08P063q4HqFH6jf0KP2mHq3H6LF6nE7R4/UE/ZaeqN/Wk/Q7erKeolP1VD1Nv6un6xl6pn5Pz9Lv69l6jp6r5+k0/YGerxfodP2hXqg/0hl6kV6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q4/1jv0J3qn3qV360/1Hv2Z3qs/1/v0F3q//lJn6q/0Af21Pqi/0Yf0t/qw/k4f0Uf1Mf29Pq5/0Cf0SX1Kn9Zn9I/6rP5Jn9M+a3Gf9fFulFEmxsSYWBNrcplcJrfJbfKYPCZiIibOxJl8Jp/Jb/KbgqagiTfxpogpYrKQIVPUFDVREzXFTXFTwpQwpUwp44wzCSbBlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3GJuMbeaW81t5jZzu7nd1DQ1TW1T29QxdUxdU9fUM/VMfVPf3GvuNQ1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1Nc9PStDStTCvT2rQ2bU1b0860M+1Ne5NoEk0H08F0NB1NJ9PJdDadTRfTxXQ1XU130930MD1MT9PTJJkk08f0MX1NX9Pf9DcDzAAz0Aw0g8wgk2ySzRAzxAw1Q80wM8wMNyPMyKyFqnnTjDZjzFgzzqSYFDPBTDATzUQzyUwyk81kk2pSzTQzzUw3081MM9PMMrPMbDPbzDVzTZpJM/PNfJNu0s1Cs9BkmAyz2Cw2S81Ss9wsNyvNSrParDZrYa1Zb9abjWaj2Ww2m61mq9lutpsdZofZaXaa3Wa32WP2mL1mr9ln9pn9Zr/JNJnmgDlgDpqD5pA5ZA6bw+aIOWKOmWPmuDluTpgT5pQ5Zc6YAhc+L72JtTltLnuFzW2vtHlsXvuPcUFbyMbbwraI1Ta/LfCL2FhrS9iStpQtbZ0tYxPs9b+KK9pKtrKtYm+xVe2tttqv4jr2TlvX3mXr2bttbXvHL+L69h6btTppgAhgm9lGtoVtbB+yTezDtqltZpvbFradfdy2t0/YRPuk7WCf+lU83y6wK+0qu9qusTvtLnvKnrYH7Tf2jP3R9rS97AD7kh1oX7aD7Cs22Q7+VTzSvmFH2TftaDvGjrXjfhVPtlNsqp1qp9l37XQ741dxmv3AzrLpdradY+faeT/HWTml2w/tQvuRzbABLLZL7FK7zC63Ky7m6vPadXa93WB32E/sZrvFbrXb7PaLC2G7y+62n9o99jN7wH5t99kv7H57yGbar36Os87vkP3WHrbf2SP2qD1mv7fH7Q/q4uisc//e/mTPWW+BkIAkKQoohnJQLOWkXHQF5aYrKQ/lpQhdRXF0NeWjayg/FaCCVIjiqTAVIU2GLBGFVJSKUZSupYvplaLS5KgMJdD1VJZuoHJ0I5Wnm6gC3UwVqRJVpip0C1WlW6ka3UbV6XaqQTWpFtWmO6gO3Ul16S6qR3dTfbqH7qX7qAHdTw3pAWpED1Jjeoia0MPUlJpRc2pBLekRakWPUmtqQ23pMWpHj1N7eoIS6UnqQE9RR/obdaKnqTM9Q13oWepK3ag7PUc96HnqSb0oiXpTH3qB+lI/6k8v0gB6iQbSyzSIXqFkGkxD6FUaSq/RMHqdhtMIGklv0Ch6k0bTGBpL4yiFxtMEeosm0ts0id6hyTSFUmkqTaN3aTrNoJn0Hs2i92k2zaG5NI/S6AOaTwsonT6khfQRZdAiWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7fQx7aBPaCftot30Ke2hzwjpc9pHX9B++pIy6Ss6QF/TQfqGDtG3vhd9R0foKB2j7+k4/UAn6CSdotN0hn6ks/QTnSNPEGIoQhmqMAhjwhxhbJgzzBVeEeYOrwzzhHnDSHhVGBdeHeYLrwnzhwXCgmGhMD4sHBYJdWhCG1IYhkXDYmE0vDYsHl4XlghLhqXC0qELy4QJ4fVh2fCGsFx4Y1g+vCmsEN4cVgwrhQ/dXSW8Jawa3hpWC28Lq4e3hzXCmmGtsHZ4R1gnvDOsG94V1gvvDsuF94T3hveFDcL7w4bhA2Gj8MGwcfhQ2CR8OGwaNgubhy3CluEjYavw0bB12CZsGz4WtgsfD9uHT4SJ4ZNhh/Cpn/vvWfDP+5PC3mGf8IXwhdD7u+Tc6LxoWvSD6Pzogmh69MPowuhH0Yzoouji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iao97VzgEMnnHTKBS7G5XCxLqfL5a5wud2VLo/L6yLuKhfnrnb53DUuvyvgCrpCLt4VdkWcdsZZRy50RV0xF3XXuuLuOlfClXSlXGnnXBmX4Fq4lq6la+Ueda1dG9fWPeYec4+7x90T7gn3pOvgnnId3d9cJ/e06+yecc+4Z11X1811d8+5Hm58nvOvySTXx/VxfV1f19/1dwPcADfQDXSD3CCX7JLdEDfEDXVD3TA3zA13w91IN9KNcqPcaDfajXVjXYpLcRPcBDfRTXST3CQ32U12qS7VTXPT3HQ33VWdcf4os91sN9fNdWkuzc13WWvGdLfQLXQZLsMtdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W13290Ot8Pt9HnPT+r2uL1ur9vn9rn97kuX6b5yB9zX7qD7xh1y37rD7jt3xB11x9z37rj7wZ1wJ90pd9qdcT+6s+4nd855lxIZH5kQeSsyMfJ2ZFLknaxZI6mRqZFpkXcj0yMzIjMj70VmRd6PzI7MicyNzIukRT6IzI8siKRHPowsjHwUyYgsiiyOLIksjSyLeF94c+iL+mI+6q/1xf11voQv6Uv50t75Mj7BX+/L+ht8OX+jL+9v8hX8zb6ir+Qr+4d9U9/MN/ctfEv/iG/lH/WtfRvf1j/m2/nHfXv/hE/0T/oO/inf0f/Nd/JP+87+Gd/FP+u7+m6+u3/O9/DP+56+l0/yvX0f/4Lv6/v5/v5FP8C/5Af6l/0g/4pP9oP9EP+qH+pf88P86364H+FHxrzhR128RIZxPsWP9xP8W36if9tP8u/4yX6KT/VT/TT/rp/uZ/iZ/j0/y7/vZ/s5fq6f59P8B36+X+DT/Yd+of/IZ/hFF28q++V+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/nt/mO/w3/id/pdfrf/1O/xn/m9/nO/z3/h9/svfab/yh/wX/uD/ht/yH/rD/vv/BF/1B/z3/vj/gd/wp/0p/xpf8b/6M/6n/w5/p81xhhjjLE/ZPylpvhlz/nb+b1/Y4z4u537AMCVWwpl/n1/1opybf7z7X4ivl0EAJ7s1eWBi1uNGklJSRf2zZAQFJuTte6+ND4GLsWLoC08DonQBsr+Zv79RLcz9DvzR28CyPV3Y2LhUnxp/s8BMOk35n/ksZHzK4Sn4v4f888BKFHs0piccCleBG1/vr/SBsr9k/wLtPqd/HN+kQLQ+u/G5IZL8aX8E+BReAoSf7EnY4wxxhhjjDF2Xj9RudPF68+Lf/H5W9fn8erSmBxwKf6963PGGGOMMcYYY4xdfk936/7EI4mJbTr9641qv7+P+mMTxvxWVxP4dxPjxr/V8B7g/xYOAP7DCQGyGvKvPItNf8mxki+8dP6xa+lpH8B/Ryn/jMZlfmNijDHGGGOM/ekuLfp/+Xt1uRJijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayof/0O97gD3xL3+U+R8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+z8BAAD//9t19x0=") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x1ff) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xdb, 0x200b}, {0x1ff}]}, 0x18, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 7m35.549865323s ago: executing program 34 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(r0, 0x0, 0x1c, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) 6m2.323179607s ago: executing program 5 (id=1405): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 6m1.808410068s ago: executing program 5 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r5}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000580)={0x3, 0x2}) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 5m58.307963926s ago: executing program 5 (id=1416): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 5m57.163043292s ago: executing program 5 (id=1419): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x801, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x0, 0x11291}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) 5m49.662264079s ago: executing program 5 (id=1435): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 5m44.696523602s ago: executing program 5 (id=1446): r0 = socket(0x25, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) 5m29.053698962s ago: executing program 35 (id=1446): r0 = socket(0x25, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) 5m15.702134761s ago: executing program 1 (id=1533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a2703000000000000000000000000000000000000000000000000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m15.569410128s ago: executing program 1 (id=1534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000007ac0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000007a00)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@minixdf}, {@barrier_val={'barrier', 0x3d, 0x8000000000000001}}, {@auto_da_alloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@dioread_nolock}, {@bh}, {@i_version}], [{@flag='posixacl'}, {@dont_hash}]}, 0xfe, 0x55c, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x10) 5m13.363253686s ago: executing program 1 (id=1540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 5m8.247384454s ago: executing program 1 (id=1577): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 5m7.53449729s ago: executing program 1 (id=1581): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0x4c303, 0x10, 0x2, 0x110}, &(0x7f0000000100), &(0x7f0000000140)) r3 = epoll_create(0xaf2) epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) write(0xffffffffffffffff, 0x0, 0x0) 5m5.969968329s ago: executing program 1 (id=1586): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) creat(0x0, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 4m50.772079239s ago: executing program 36 (id=1586): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) creat(0x0, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 2m47.780719597s ago: executing program 2 (id=2073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m45.447860779s ago: executing program 2 (id=2083): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x800000002400}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3c) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0xf, 0xc340) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2m44.743209385s ago: executing program 2 (id=2084): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.531413074s ago: executing program 2 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 2m44.218507087s ago: executing program 2 (id=2089): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b7225788208"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401010000000000000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x20040805}, 0x24000000) 2m43.934007531s ago: executing program 2 (id=2091): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m28.846418973s ago: executing program 37 (id=2091): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m15.90160951s ago: executing program 9 (id=2592): r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) migrate_pages(r0, 0x5, 0x0, 0x0) 1m15.477044396s ago: executing program 9 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080), 0x0) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0x18, r1, 0x341, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) 1m13.597013052s ago: executing program 9 (id=2601): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7b, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m11.378267664s ago: executing program 9 (id=2611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 1m10.578212002s ago: executing program 9 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 1m9.006752293s ago: executing program 9 (id=2624): r0 = socket(0x25, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) 53.654241921s ago: executing program 38 (id=2624): r0 = socket(0x25, 0x1, 0x3) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) 4.188329215s ago: executing program 0 (id=2933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") 4.158766433s ago: executing program 8 (id=2934): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$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") chdir(&(0x7f0000000380)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.909644891s ago: executing program 8 (id=2938): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc", 0x1) 3.743078861s ago: executing program 0 (id=2941): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x50b, &(0x7f0000000a00)="$eJzs3cFvHFcZAPBvxt7YTlzWBQ6lEm1Ei5wKsmvHtLU4REFC3CoB5W4se21ZXnst77qNrapyxR+AhBAcOHHigsQfgIR64V4hVYI7QghU0QQOHIBFszsbb5zdtQVeb7L+/aSXefNmPN/3stnJvJmXTABX1s2IuBcRExHxWkQU8/Y0L3HcLtl+Dx+8t5aVJJrNt/+WRJK3dY6V5Msb+Y9NR8R3k64NXeqHR9ur1WplP18vN3b2yvXDo9tbO6ublc3K7tLS4hvLby6/vrxwYX29+80//+SHv/jW3d989d0/rvz11vtZWrP5tu5+XKR21wut34uOyYjYH0awEZjI+1M45/5TQ84HAIDBsmv8z0bEl1rX/8WYaF3NAQAAAOOkmUT8K4loAgAAAGMrbc2BTdJSPhdgNtK0VGrP4f18XE+rtXrjKxu1g9319lzZuSikG1vVykI+V3guCkm2vtiqn6zfObW+FBHPR8SPizPJxlRUSmu16vqob34AAADAFXHj1Pj/H8X2+B8AAAAYM3OjTgAAAAAYOuN/AAAAGH99x/+JlwEAAADAGPj2W29lpdl5//X6O4cH27V3bq9X6tulnYO10lptf6+0WattViultdrOWcer1mp7X4vdg/vlRqXeKNcPj1Z2age7jZXWe71XKp33RN8bes8AAACAjudf/vAPSUQcf32mVTLX8m2FkWYGDFt69i4zXfVkmLkAl2ti1AkAI/O/TfA1LRjGwVlj/E+bzZ7tzw0lG2AUzhrYT/fb8NHF5wIAAAzH/Bf6P/8Hxts5nv/34F/vwDjw/B+uLk/y4eoyxx/o8fz/saHB4Of/fSYJAQAAT5XZVknSUv4scDbStFRqz++fi0KysVWtLETEZyLi98XCVLa+OOqkAQAAAAAAAAAAAAAAAAAAAAAAAOAZ02wm0Tzt2pNNAAAAwLMrIv1Lkr//a7746uzp+wPXkn8WW8uIePdnb//0/mqjsb+YtX9aPHlrWN5+59JvXwAAAACZ3z6+2hmnd8bxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCBmkl7ufbwwXtrlxn4k29ExFxEFrdT2lsmY7q1nI5CRFz/exKTXT+X5TtxAfGPP4iIF3rFT7K0Yi7P4nT8NCJmRhz/xgXEh6vsw+z8c6/X9y+Nm61l7+/fZF7+X5/c7Hf+Sx+d/yb6nP+eO2eMFz/+Vblv/A8iXpzsff7pxE/6xH9lYNTCo9r3v3d01G+v5s8j5qN3/O5Y5cbOXrl+eHR7a2d1s7JZ2V1aWnxj+c3l15cXyhtb1Ur+a88YP/rir/8zqP/X+8SfO6P/rw7s/4l/f3z/weeeaH3/Tif+rVd6f/4vDIif/Zn4ckRM5evz+d8JyXG73u2lX/7upUH9X+/T/7M+/1vn7P9r3/nBn865KwBwCeqHR9ur1Wplf2Dlozh7n8urdK5DnpZ8smuhrHL38oJ2bj1c5JFfzo431ORn4qn4vFTOUxnhSQkAABiKk4v+7tZ0dAkBAAAAAAAAAAAAAAAAAADAFXQZ/53YqPsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAe/w0AAP//W1PGlg==") r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.414488634s ago: executing program 0 (id=2949): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r1) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.357251032s ago: executing program 3 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000580)={0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) 2.974962278s ago: executing program 0 (id=2954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000001780)) personality(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f00000000c0)) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.974617959s ago: executing program 4 (id=2955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.905395312s ago: executing program 6 (id=2956): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001af55695100005800c0008"], 0x34}}, 0x8081) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.712635888s ago: executing program 7 (id=2957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.503974133s ago: executing program 0 (id=2958): socket$inet6_udp(0xa, 0x2, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x10, 0x2004}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 2.503428397s ago: executing program 4 (id=2959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 2.502778845s ago: executing program 6 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 2.443063745s ago: executing program 7 (id=2961): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.431190116s ago: executing program 8 (id=2962): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, 0x0, 0x0, 0x7ffeedc0, 0x0) close(r1) 2.272596462s ago: executing program 7 (id=2963): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2.252354503s ago: executing program 6 (id=2964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.238264084s ago: executing program 3 (id=2965): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x5}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {}, {0x20, 0x1}}, 0x5c, 0x3) 2.165094147s ago: executing program 8 (id=2966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x6c) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000040), 0x80000000002, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.084414172s ago: executing program 3 (id=2967): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") 2.083644003s ago: executing program 4 (id=2968): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001580)='.log\x00', 0x474605, 0x61) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) poll(&(0x7f00000015c0)=[{0xffffffffffffffff, 0x500}, {r0, 0x4428}, {r1, 0x1000}], 0x3, 0x8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001600)='sched_switch\x00', r2, 0x0, 0x4000000a}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001340)={0x0, r2}, 0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000001540)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001640)='qrtr_ns_service_announce_del\x00', r7, 0x0, 0x4804}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001240)={'batadv_slave_1\x00', 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x15, &(0x7f0000001100)=ANY=[@ANYBLOB="18ed5cff44297e9c000500200000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000183900000200000000000000000000008bb3000004000000852000000400000085000000b3000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='GPL\x00', 0x2, 0x20, &(0x7f0000001200)=""/32, 0x40f00, 0x40, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000001280)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000012c0)=[r4], &(0x7f0000001300)=[{0x2, 0x5, 0x3, 0x1}, {0x0, 0x1, 0xe, 0xc}], 0x10, 0xffff}, 0x94) r12 = dup(r9) ioctl$TIOCL_SETSEL(r12, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) poll(&(0x7f00000002c0)=[{r3, 0x2}], 0x1, 0xfa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") 2.083343645s ago: executing program 7 (id=2969): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.983072927s ago: executing program 6 (id=2970): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = open(0x0, 0x40c1, 0x170) fgetxattr(r1, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(0x0, 0xf, 0xc340) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.93226846s ago: executing program 7 (id=2971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal(0xffffffffffffffff, 0xfffffffb, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f00000201c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250f"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854) 1.896293875s ago: executing program 3 (id=2972): lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.873278348s ago: executing program 8 (id=2973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0000"], 0x48) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) 1.7632059s ago: executing program 6 (id=2974): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) write$ppp(r0, &(0x7f0000000200)="bc", 0x1) 1.708131535s ago: executing program 4 (id=2975): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.6308578s ago: executing program 4 (id=2976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}]}}}]}, 0x4c}}, 0x12) 1.612027005s ago: executing program 3 (id=2977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 1.577947944s ago: executing program 7 (id=2978): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1280, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000540)='./file0\x00') renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 448.216087ms ago: executing program 8 (id=2979): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 447.764651ms ago: executing program 3 (id=2980): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000}) 447.452106ms ago: executing program 0 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x8ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 54.786514ms ago: executing program 4 (id=2982): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r1, r1, 0x0, 0xb) 0s ago: executing program 6 (id=2983): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x60000006}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)={0x2000}) kernel console output (not intermixed with test programs): _adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.965958][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 577.965981][ T30] audit: type=1326 audit(1763324099.564:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.048698][ T30] audit: type=1326 audit(1763324099.564:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.173449][T11459] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 578.181164][ T30] audit: type=1326 audit(1763324099.564:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.488585][ T30] audit: type=1326 audit(1763324099.604:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.512287][ T30] audit: type=1326 audit(1763324099.634:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.550966][ T30] audit: type=1326 audit(1763324099.634:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.630138][ T30] audit: type=1326 audit(1763324099.634:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.699982][ T30] audit: type=1326 audit(1763324099.634:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.787062][T11483] loop7: detected capacity change from 0 to 512 [ 578.836201][T11483] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 578.853650][ T30] audit: type=1326 audit(1763324099.634:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 578.889222][T11483] EXT4-fs (loop7): 1 truncate cleaned up [ 578.910383][T11483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.951287][T11370] hsr_slave_0: entered promiscuous mode [ 579.039215][T11370] hsr_slave_1: entered promiscuous mode [ 579.045877][T11370] debugfs: 'hsr0' already exists in 'hsr' [ 579.046393][ T30] audit: type=1326 audit(1763324099.634:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 579.075165][T11370] Cannot create hsr debugfs directory [ 580.761117][ T9077] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.579734][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 581.701351][T11511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1676'. [ 582.088800][T11517] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1679'. [ 583.154591][T11527] loop8: detected capacity change from 0 to 512 [ 583.219650][T11527] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 583.301758][T11527] EXT4-fs (loop8): 1 truncate cleaned up [ 583.344811][T11527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.528815][ T9383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.863056][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1687'. [ 589.169019][T11558] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1692'. [ 589.360749][T11370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.423994][T11370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.268865][T11569] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 590.278596][T11569] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 590.288744][T11569] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 590.353347][T11370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.381701][T11370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.703307][T11581] loop8: detected capacity change from 0 to 512 [ 590.723076][T11581] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 590.780852][T11581] EXT4-fs (loop8): 1 truncate cleaned up [ 590.800312][T11581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.852962][T11370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.953779][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.001766][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.009223][ T9005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.032032][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.039595][ T9005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.629965][T11370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.968928][T11370] veth0_vlan: entered promiscuous mode [ 592.039503][T11370] veth1_vlan: entered promiscuous mode [ 592.061709][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1703'. [ 592.284277][T11370] veth0_macvtap: entered promiscuous mode [ 592.351541][T11370] veth1_macvtap: entered promiscuous mode [ 592.435725][T11370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.466982][T11370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.516268][ T3012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.527669][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.556651][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.596992][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.067047][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.080420][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.197457][ T9005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.226631][ T9005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.239608][T11613] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1707'. [ 593.484369][T11619] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 593.506585][T11619] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1624'. [ 593.526317][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1624'. [ 596.210968][T11638] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1713'. [ 596.653283][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.661154][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.878479][T11649] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1719'. [ 596.917269][ T9383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.278752][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.296124][T11638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.035366][ T6006] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.083208][ T6006] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.128245][ T6006] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.158281][ T6006] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.822023][T11688] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1732'. [ 600.961710][T11706] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1737'. [ 601.284267][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.292673][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.005798][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.200506][ T9003] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.255583][ T9003] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.299645][ T9003] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.351557][ T9003] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.061847][T11732] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1747'. [ 606.590755][T11758] ALSA: seq fatal error: cannot create timer (-19) [ 608.238556][T11780] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1763'. [ 611.417435][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1774'. [ 611.473992][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1774'. [ 611.483053][T11818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1774'. [ 612.309928][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 615.445171][T11855] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1788'. [ 617.178188][T11870] loop6: detected capacity change from 0 to 128 [ 617.966306][T11887] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1798'. [ 618.001275][T11887] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1798'. [ 618.169758][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 619.642833][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1805'. [ 622.233880][T11937] loop8: detected capacity change from 0 to 128 [ 622.713063][T11936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1813'. [ 622.953559][T11936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1813'. [ 623.439114][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 623.533843][T11950] loop6: detected capacity change from 0 to 512 [ 623.544331][T11950] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 623.562632][T11950] EXT4-fs (loop6): 1 truncate cleaned up [ 623.570310][T11950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.730279][ T7115] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.028221][T11965] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1821'. [ 628.419635][T11995] loop9: detected capacity change from 0 to 128 [ 628.863673][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.873284][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.294269][T12008] loop9: detected capacity change from 0 to 512 [ 630.302802][T12008] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 630.324575][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'. [ 630.341715][T12008] EXT4-fs (loop9): 1 truncate cleaned up [ 630.349560][T12008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.457338][T10932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.129866][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1848'. [ 639.128137][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1864'. [ 639.416234][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1866'. [ 639.471943][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1866'. [ 641.387469][T12136] loop9: detected capacity change from 0 to 1024 [ 641.407916][T12136] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.457134][T12136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.430397][T10932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.598591][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 643.139255][T12173] netlink: 2 bytes leftover after parsing attributes in process `syz.9.1885'. [ 643.334238][T12173] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.342352][T12173] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.978801][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.995547][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.939534][T12174] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 645.064250][ T9003] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.335328][ T9003] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.436450][ T9003] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.479504][ T9003] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.182699][T12217] x_tables: duplicate underflow at hook 1 [ 651.438429][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 651.918981][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1912'. [ 651.983293][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1912'. [ 653.059110][T12281] x_tables: duplicate underflow at hook 1 [ 653.240030][T12291] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1919'. [ 653.251069][T12291] netlink: 'syz.9.1919': attribute type 72 has an invalid length. [ 653.259075][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1919'. [ 654.689671][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1924'. [ 654.707933][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1924'. [ 654.912948][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1925'. [ 656.519900][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 656.944788][T12332] syz.3.1932 uses obsolete (PF_INET,SOCK_PACKET) [ 658.861181][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1938'. [ 658.902393][T12356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1938'. [ 660.797662][T12376] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1943'. [ 663.293474][T12413] x_tables: duplicate underflow at hook 1 [ 664.214144][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1958'. [ 664.302334][T12425] netlink: 2 bytes leftover after parsing attributes in process `syz.8.1959'. [ 664.383927][T12422] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1958'. [ 666.858235][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1967'. [ 668.147529][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1970'. [ 668.362114][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1975'. [ 668.541217][T12479] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1977'. [ 668.552016][T12479] netlink: 'syz.3.1977': attribute type 72 has an invalid length. [ 668.559903][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 669.716583][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 669.716609][ T30] audit: type=1326 audit(1763324191.314:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 669.806078][ T30] audit: type=1326 audit(1763324191.314:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 669.891485][ T30] audit: type=1326 audit(1763324191.314:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 669.967611][ T30] audit: type=1326 audit(1763324191.314:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.001884][ T30] audit: type=1326 audit(1763324191.314:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.030207][ T30] audit: type=1326 audit(1763324191.314:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.055095][ T30] audit: type=1326 audit(1763324191.314:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.078222][ T30] audit: type=1326 audit(1763324191.314:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.106873][ T30] audit: type=1326 audit(1763324191.314:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 670.166845][ T30] audit: type=1326 audit(1763324191.314:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12494 comm="syz.2.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 671.803425][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1990'. [ 672.160759][T12530] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1993'. [ 672.174378][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 672.619750][T12535] x_tables: duplicate underflow at hook 1 [ 673.854133][T12544] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1996'. [ 674.212599][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.220134][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.352030][T12544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.456347][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 674.630259][T12544] bridge2: left allmulticast mode [ 674.677228][T12544] ipip0: left promiscuous mode [ 674.682293][T12544] ipip0: left allmulticast mode [ 675.115224][ T8994] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.298175][ T8994] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.310092][ T8994] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.319531][ T8994] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.406222][ T8994] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.415199][ T8994] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.469379][ T8994] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.489341][ T8994] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.891367][T12572] macvtap0: refused to change device tx_queue_len [ 675.986921][T12574] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2008'. [ 676.010623][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2008'. [ 676.160948][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 676.160970][ T30] audit: type=1326 audit(1763324197.764:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 676.208456][T12581] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2011'. [ 676.279362][ T30] audit: type=1326 audit(1763324197.794:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 676.318988][ T30] audit: type=1326 audit(1763324197.794:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 676.344283][ T30] audit: type=1326 audit(1763324197.794:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.107720][ T30] audit: type=1326 audit(1763324197.794:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.266379][ T30] audit: type=1326 audit(1763324197.804:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.319285][ T30] audit: type=1326 audit(1763324197.804:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.342709][ T30] audit: type=1326 audit(1763324197.804:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.426021][ T30] audit: type=1326 audit(1763324197.804:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 677.505144][ T30] audit: type=1326 audit(1763324197.804:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12577 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e38f6c9 code=0x7ffc0000 [ 678.671260][T12613] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2023'. [ 683.115190][T12682] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2043'. [ 683.452141][T12692] serio: Serial port ttyS3 [ 684.881563][T12713] macvtap0: refused to change device tx_queue_len [ 686.271507][T12731] tipc: Started in network mode [ 686.276764][T12731] tipc: Node identity ac14141b, cluster identity 4711 [ 686.283866][T12731] tipc: New replicast peer: 255.255.255.255 [ 686.290528][T12731] tipc: Enabled bearer , priority 10 [ 687.000113][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 687.000135][ T30] audit: type=1326 audit(1763324208.604:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.186305][ T30] audit: type=1326 audit(1763324208.634:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.275105][ T30] audit: type=1326 audit(1763324208.654:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.299524][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2064'. [ 687.316798][T12740] netlink: 'syz.8.2064': attribute type 30 has an invalid length. [ 687.352645][ T30] audit: type=1326 audit(1763324208.654:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.408637][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.429747][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.459896][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.489296][ T30] audit: type=1326 audit(1763324208.654:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.532598][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.583576][ T30] audit: type=1326 audit(1763324208.664:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 687.640883][T10991] tipc: Node number set to 2886997019 [ 688.005336][ T30] audit: type=1326 audit(1763324208.664:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 688.027884][ T30] audit: type=1326 audit(1763324208.664:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 688.137239][ T30] audit: type=1326 audit(1763324208.674:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 688.166048][ T30] audit: type=1326 audit(1763324208.674:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 689.177356][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2074'. [ 689.447358][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2076'. [ 689.927333][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2077'. [ 690.310038][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.319416][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.699388][T12798] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2082'. [ 692.007413][T12809] xt_NFQUEUE: number of total queues is 0 [ 692.123317][T12811] macvtap0: refused to change device tx_queue_len [ 692.358765][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 692.465564][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 692.740154][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2092'. [ 694.694678][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 694.694700][ T30] audit: type=1326 audit(1763324216.274:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 694.809609][ T30] audit: type=1326 audit(1763324216.284:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 694.855603][ T30] audit: type=1326 audit(1763324216.284:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.357677][T12852] macvtap0: refused to change device tx_queue_len [ 695.395305][ T30] audit: type=1326 audit(1763324216.284:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.531665][ T30] audit: type=1326 audit(1763324216.284:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.668510][ T30] audit: type=1326 audit(1763324216.284:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.751586][ T30] audit: type=1326 audit(1763324216.284:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.825414][ T30] audit: type=1326 audit(1763324216.284:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.892672][ T30] audit: type=1326 audit(1763324216.284:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 695.967257][ T30] audit: type=1326 audit(1763324216.284:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.9.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 696.567242][T12871] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2107'. [ 698.084419][T12881] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.239431][T12881] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.460990][T12881] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.601490][T12881] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.758101][ T12] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.796204][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.842048][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2116'. [ 698.886949][ T8994] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.929626][ T12] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.533190][T12918] x_tables: duplicate underflow at hook 1 [ 700.550213][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 700.983291][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2136'. [ 701.684203][T12958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2139'. [ 703.175481][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 703.175507][ T30] audit: type=1326 audit(1763324224.764:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.275548][ T30] audit: type=1326 audit(1763324224.814:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.376611][ T30] audit: type=1326 audit(1763324224.814:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.440083][ T30] audit: type=1326 audit(1763324224.814:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.467114][ T30] audit: type=1326 audit(1763324224.814:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.470734][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2150'. [ 703.489919][ T30] audit: type=1326 audit(1763324224.814:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.522407][ T30] audit: type=1326 audit(1763324224.814:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 703.566936][ T30] audit: type=1326 audit(1763324224.904:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 704.315097][ T30] audit: type=1326 audit(1763324224.904:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 704.339334][ T30] audit: type=1326 audit(1763324224.904:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12974 comm="syz.7.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 707.088369][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2165'. [ 707.156621][T13030] macvtap0: refused to change device tx_queue_len [ 708.369034][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 708.369057][ T30] audit: type=1326 audit(1763324229.974:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f02a8386567 code=0x7ffc0000 [ 708.478312][ T30] audit: type=1326 audit(1763324229.974:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02a832b789 code=0x7ffc0000 [ 708.566176][ T30] audit: type=1326 audit(1763324229.974:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 708.636079][ T30] audit: type=1326 audit(1763324229.974:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 709.805073][ T30] audit: type=1326 audit(1763324230.044:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 710.290427][T13069] macvtap0: refused to change device tx_queue_len [ 710.393498][ T30] audit: type=1326 audit(1763324230.044:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 710.416329][ T30] audit: type=1326 audit(1763324230.044:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 710.446002][ T30] audit: type=1326 audit(1763324230.044:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 710.470725][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 710.482348][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 710.492996][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 710.501821][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 710.510749][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.540535][ T30] audit: type=1326 audit(1763324230.044:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 710.572786][ T30] audit: type=1326 audit(1763324230.054:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13033 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 711.232498][T13094] pim6reg: entered allmulticast mode [ 711.289548][T13097] pim6reg: left allmulticast mode [ 712.049340][T13071] chnl_net:caif_netlink_parms(): no params data found [ 712.180363][T13114] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 712.607090][ T5836] Bluetooth: hci0: command tx timeout [ 712.858079][T12823] Set syz1 is full, maxelem 65536 reached [ 713.795527][T13146] netlink: 'syz.9.2205': attribute type 13 has an invalid length. [ 714.361750][ T9005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.374276][ T9005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.391864][ T9005] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 714.401957][ T9005] bond0 (unregistering): Released all slaves [ 714.494064][T13146] gretap0: refused to change device tx_queue_len [ 714.501009][T13146] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 714.676117][ T5836] Bluetooth: hci0: command tx timeout [ 714.868629][T13071] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.875843][T13071] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.931278][T13071] bridge_slave_0: entered allmulticast mode [ 714.970227][T13071] bridge_slave_0: entered promiscuous mode [ 715.016196][ T9005] tipc: Disabling bearer [ 715.026160][ T9005] tipc: Left network mode [ 715.138563][T13071] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.151161][T13071] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.160913][T13071] bridge_slave_1: entered allmulticast mode [ 715.169123][T13071] bridge_slave_1: entered promiscuous mode [ 715.369686][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 715.369708][ T30] audit: type=1326 audit(1763324236.964:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 715.462285][ T30] audit: type=1326 audit(1763324236.964:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 715.486765][ T30] audit: type=1326 audit(1763324237.004:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 715.510321][ T30] audit: type=1326 audit(1763324237.014:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 715.533081][ T30] audit: type=1326 audit(1763324237.014:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 715.781096][ T30] audit: type=1326 audit(1763324237.014:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 716.259459][ T30] audit: type=1326 audit(1763324237.014:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 716.323822][T13071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.335565][ T30] audit: type=1326 audit(1763324237.014:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 716.369669][T13071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.394272][ T30] audit: type=1326 audit(1763324237.014:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 716.456028][ T30] audit: type=1326 audit(1763324237.024:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13165 comm="syz.9.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 716.665779][T13071] team0: Port device team_slave_0 added [ 716.766163][ T5836] Bluetooth: hci0: command tx timeout [ 716.848084][T13173] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2215'. [ 716.849312][T13173] netlink: 180 bytes leftover after parsing attributes in process `syz.9.2215'. [ 716.867364][T13071] team0: Port device team_slave_1 added [ 716.996559][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2220'. [ 718.028117][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2221'. [ 718.104858][T13197] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2221'. [ 718.279322][ T9005] hsr_slave_0: left promiscuous mode [ 718.293316][ T9005] hsr_slave_1: left promiscuous mode [ 718.319953][ T9005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.368985][ T9005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.926114][ T5836] Bluetooth: hci0: command tx timeout [ 721.265402][ T9005] team0 (unregistering): Port device team_slave_1 removed [ 721.326049][ T9005] team0 (unregistering): Port device team_slave_0 removed [ 721.961085][T13071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.969270][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.995682][T13071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.146517][T13205] tipc: New replicast peer: 255.255.255.255 [ 722.153010][T13205] tipc: Enabled bearer , priority 10 [ 722.206961][T13071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.214030][T13071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.277351][T13071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.358073][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 722.358094][ T30] audit: type=1326 audit(1763324243.964:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 722.466243][ T30] audit: type=1326 audit(1763324244.004:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 722.521522][ T30] audit: type=1326 audit(1763324244.004:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 722.592279][ T30] audit: type=1326 audit(1763324244.004:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13249 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 722.721421][T13071] hsr_slave_0: entered promiscuous mode [ 722.747649][T13071] hsr_slave_1: entered promiscuous mode [ 722.754130][T13071] debugfs: 'hsr0' already exists in 'hsr' [ 722.785969][T13071] Cannot create hsr debugfs directory [ 722.791943][T13266] netlink: 'syz.9.2249': attribute type 12 has an invalid length. [ 722.800912][T13266] netlink: 'syz.9.2249': attribute type 29 has an invalid length. [ 722.819278][T13266] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2249'. [ 722.856333][T13270] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2250'. [ 722.904305][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2252'. [ 723.124686][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2252'. [ 723.835789][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2255'. [ 725.601833][T13071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 725.651039][T13071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 725.714298][T13071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 725.769456][T13071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.856353][ T30] audit: type=1326 audit(1763324247.454:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 725.927275][ T30] audit: type=1326 audit(1763324247.454:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 726.012394][ T30] audit: type=1326 audit(1763324247.454:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 726.096055][ T30] audit: type=1326 audit(1763324247.454:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 726.154819][ T30] audit: type=1326 audit(1763324247.454:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 726.173422][T13071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.222580][ T30] audit: type=1326 audit(1763324247.454:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13320 comm="syz.6.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02a838f703 code=0x7ffc0000 [ 726.262197][T13071] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.342188][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.349504][ T9005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.440170][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.447424][ T9005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.855495][T13351] macvtap0: refused to change device tx_queue_len [ 726.873842][T10991] kernel read not supported for file /vcs (pid: 10991 comm: kworker/1:16) [ 727.175693][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2282'. [ 728.589463][T13377] x_tables: duplicate underflow at hook 1 [ 729.586168][T13386] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2289'. [ 729.937908][T13071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.996676][T13426] x_tables: duplicate underflow at hook 1 [ 731.890890][T13071] veth0_vlan: entered promiscuous mode [ 731.904624][T13071] veth1_vlan: entered promiscuous mode [ 731.962404][T13071] veth0_macvtap: entered promiscuous mode [ 731.982235][T13071] veth1_macvtap: entered promiscuous mode [ 732.053876][T13071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.092075][T13071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.128699][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.166169][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.368131][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.377188][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.639936][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.650028][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.715606][ T9003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.738066][ T9003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.977328][T13442] netlink: 'syz.3.2308': attribute type 30 has an invalid length. [ 733.467842][T13451] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2310'. [ 733.570022][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.577908][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.748182][T13451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.762876][T13451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.022241][ T67] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.061672][ T67] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.101956][ T67] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.135537][ T67] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.346446][T13459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2313'. [ 734.795414][T13465] x_tables: duplicate underflow at hook 1 [ 737.027475][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2320'. [ 737.061824][T13478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2320'. [ 738.813509][T13503] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2325'. [ 738.834494][T13498] syz_tun: entered allmulticast mode [ 738.917805][T13497] syz_tun: left allmulticast mode [ 739.135011][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.142544][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.590714][T13503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.933592][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 739.933618][ T30] audit: type=1326 audit(1763324261.484:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.006241][ T30] audit: type=1326 audit(1763324261.584:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.061855][T13510] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 740.061855][T13510] program syz.4.2330 not setting count and/or reply_len properly [ 740.091378][ T30] audit: type=1326 audit(1763324261.584:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.140658][ T30] audit: type=1326 audit(1763324261.584:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.210775][ T30] audit: type=1326 audit(1763324261.584:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.292378][ T30] audit: type=1326 audit(1763324261.584:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.335358][ T30] audit: type=1326 audit(1763324261.584:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.393429][ T3012] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.413193][ T30] audit: type=1326 audit(1763324261.594:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 740.484733][ T3012] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.807034][ T30] audit: type=1326 audit(1763324261.594:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 741.167507][ T30] audit: type=1326 audit(1763324261.594:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13506 comm="syz.3.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 741.332046][ T3012] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.371202][ T3012] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.687877][T13586] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2358'. [ 745.253802][T13595] netlink: 204 bytes leftover after parsing attributes in process `syz.7.2363'. [ 745.970482][T13610] macvtap0: refused to change device tx_queue_len [ 748.676255][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 748.676278][ T30] audit: type=1326 audit(1763324270.254:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.710927][T13642] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2379'. [ 748.791378][ T30] audit: type=1326 audit(1763324270.264:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.815429][ T30] audit: type=1326 audit(1763324270.264:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.838702][ T30] audit: type=1326 audit(1763324270.264:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.861204][ T30] audit: type=1326 audit(1763324270.274:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.895007][ T30] audit: type=1326 audit(1763324270.274:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.918623][ T30] audit: type=1326 audit(1763324270.274:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.942078][ T30] audit: type=1326 audit(1763324270.274:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 748.999456][ T30] audit: type=1326 audit(1763324270.274:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 749.044807][ T30] audit: type=1326 audit(1763324270.274:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13635 comm="syz.9.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57eef8f6c9 code=0x7ffc0000 [ 749.182679][T13654] macvtap0: refused to change device tx_queue_len [ 750.022856][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2399'. [ 750.693242][T13702] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2405'. [ 750.719503][ T9003] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.742731][ T9003] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.774984][ T9003] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.811427][ T9003] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.721678][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.731573][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.776617][T13712] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2408'. [ 752.263603][T13721] 9pnet_fd: Insufficient options for proto=fd [ 752.533028][T13729] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2417'. [ 752.568830][T13729] hsr_slave_0: left promiscuous mode [ 752.580531][T13729] hsr_slave_1: left promiscuous mode [ 752.682841][T13736] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2421'. [ 753.813793][T13756] 9pnet_fd: Insufficient options for proto=fd [ 753.844819][T13762] warn_alloc: 1 callbacks suppressed [ 753.844846][T13762] syz.9.2430: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 753.878959][T13762] CPU: 1 UID: 0 PID: 13762 Comm: syz.9.2430 Not tainted syzkaller #0 PREEMPT(full) [ 753.878998][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.879014][T13762] Call Trace: [ 753.879024][T13762] [ 753.879034][T13762] dump_stack_lvl+0x189/0x250 [ 753.879080][T13762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.879117][T13762] ? __pfx__printk+0x10/0x10 [ 753.879144][T13762] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 753.879181][T13762] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 753.879222][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.879252][T13762] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 753.879290][T13762] warn_alloc+0x214/0x310 [ 753.879326][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.879354][T13762] ? stack_depot_save_flags+0x40/0x860 [ 753.879418][T13762] ? __pfx_warn_alloc+0x10/0x10 [ 753.879462][T13762] ? kasan_save_track+0x3e/0x80 [ 753.879499][T13762] ? __kasan_kmalloc+0x93/0xb0 [ 753.879541][T13762] ? xsk_setsockopt+0x4dc/0x8d0 [ 753.879572][T13762] ? do_sock_setsockopt+0x17c/0x1b0 [ 753.879598][T13762] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 753.879623][T13762] ? do_syscall_64+0xfa/0xfa0 [ 753.879661][T13762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.879698][T13762] __vmalloc_node_range_noprof+0x125/0x12d0 [ 753.879782][T13762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 753.879824][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.879851][T13762] ? __kasan_kmalloc+0x93/0xb0 [ 753.879890][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.879926][T13762] vmalloc_user_noprof+0xad/0xf0 [ 753.879967][T13762] ? xskq_create+0xbf/0x170 [ 753.880005][T13762] xskq_create+0xbf/0x170 [ 753.880069][T13762] xsk_init_queue+0xb0/0x110 [ 753.880110][T13762] xsk_setsockopt+0x4dc/0x8d0 [ 753.880244][T13762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 753.880301][T13762] ? __pfx_aa_sk_perm+0x10/0x10 [ 753.880336][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.880370][T13762] ? aa_sock_opt_perm+0xff/0x1b0 [ 753.880413][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.880441][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.880469][T13762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 753.880502][T13762] do_sock_setsockopt+0x17c/0x1b0 [ 753.880535][T13762] __x64_sys_setsockopt+0x13f/0x1b0 [ 753.880567][T13762] do_syscall_64+0xfa/0xfa0 [ 753.880603][T13762] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.880641][T13762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.880674][T13762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.880707][T13762] ? exc_page_fault+0xab/0x100 [ 753.880746][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.880771][T13762] RIP: 0033:0x7f57eef8f6c9 [ 753.880802][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.880824][T13762] RSP: 002b:00007f57efd66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 753.880851][T13762] RAX: ffffffffffffffda RBX: 00007f57ef1e5fa0 RCX: 00007f57eef8f6c9 [ 753.880870][T13762] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 753.880884][T13762] RBP: 00007f57ef011f91 R08: 0000000000000004 R09: 0000000000000000 [ 753.880900][T13762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.880916][T13762] R13: 00007f57ef1e6038 R14: 00007f57ef1e5fa0 R15: 00007fffbbb32ba8 [ 753.880959][T13762] [ 753.880973][T13762] Mem-Info: [ 754.286065][T13762] active_anon:6397 inactive_anon:0 isolated_anon:0 [ 754.286065][T13762] active_file:17795 inactive_file:40150 isolated_file:0 [ 754.286065][T13762] unevictable:20545 dirty:228 writeback:0 [ 754.286065][T13762] slab_reclaimable:12022 slab_unreclaimable:108995 [ 754.286065][T13762] mapped:35726 shmem:1640 pagetables:1716 [ 754.286065][T13762] sec_pagetables:0 bounce:0 [ 754.286065][T13762] kernel_misc_reclaimable:0 [ 754.286065][T13762] free:1269806 free_pcp:12812 free_cma:0 [ 754.408547][T13771] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 754.426070][T13762] Node 0 active_anon:27388kB inactive_anon:0kB active_file:71180kB inactive_file:160396kB unevictable:80644kB isolated(anon):0kB isolated(file):0kB mapped:144304kB dirty:912kB writeback:0kB shmem:6324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:6620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 754.474407][T13776] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 754.486312][T13771] team0: Port device dummy0 added [ 754.498997][T13762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 754.541424][T13776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 754.576259][T13776] team0: Failed to send options change via netlink (err -105) [ 754.586561][T13776] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 754.605554][T13776] team0: Port device dummy0 removed [ 754.620669][T13762] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.654589][T13776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 754.711331][T13780] tipc: Enabled bearer , priority 0 [ 754.727337][T13780] syzkaller0: entered promiscuous mode [ 754.736735][T13762] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 754.742876][T13762] Node 0 DMA32 free:1157804kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27688kB inactive_anon:0kB active_file:71180kB inactive_file:160396kB unevictable:83144kB writepending:912kB zspages:0kB present:3129332kB managed:2565152kB mlocked:2500kB bounce:0kB free_pcp:39000kB local_pcp:17604kB free_cma:0kB [ 754.776884][T13780] syzkaller0: entered allmulticast mode [ 754.816578][T13762] lowmem_reserve[]: 0 0 0 0 0 [ 754.834641][T13762] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.881693][T13780] tipc: Resetting bearer [ 754.909246][T13779] tipc: Resetting bearer [ 754.926579][T13762] lowmem_reserve[]: 0 0 0 0 0 [ 754.931459][T13762] Node 1 Normal free:3905960kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7492kB local_pcp:4096kB free_cma:0kB [ 755.106686][T13762] lowmem_reserve[]: 0 0 0 0 0 [ 755.120156][T13779] tipc: Disabling bearer [ 755.212809][T13762] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 755.500401][T13762] Node 0 DMA32: 1998*4kB (UME) 541*8kB (UM) 376*16kB (ME) 1354*32kB (UM) 1022*64kB (UM) 696*128kB (UM) 513*256kB (UME) 254*512kB (UME) 120*1024kB (UME) 15*2048kB (UME) 128*4096kB (UM) = 1155424kB [ 755.724225][T13762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 755.787118][T13762] Node 1 Normal: 166*4kB (UME) 50*8kB (UME) 44*16kB (UME) 240*32kB (UME) 83*64kB (UME) 24*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3905960kB [ 755.808073][T13762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 755.824416][T13762] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 755.834393][T13762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 755.858171][T13762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 755.886115][T13762] 83902 total pagecache pages [ 755.900252][T13762] 0 pages in swap cache [ 755.917640][T13762] Free swap = 124996kB [ 755.932794][T13762] Total swap = 124996kB [ 755.945829][T13762] 2097051 pages RAM [ 755.958869][T13762] 0 pages HighMem/MovableOnly [ 755.968664][T13762] 424121 pages reserved [ 755.972879][T13762] 0 pages cma reserved [ 756.339140][T13804] 9pnet_fd: Insufficient options for proto=fd [ 756.388422][T13806] macvtap0: refused to change device tx_queue_len [ 756.553598][T13809] pim6reg1: entered promiscuous mode [ 756.579491][T13809] pim6reg1: entered allmulticast mode [ 756.795598][T13815] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2452'. [ 756.957646][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2454'. [ 757.136308][T13820] netlink: 'syz.7.2454': attribute type 30 has an invalid length. [ 757.972314][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.016616][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.025676][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.087786][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.310276][T13852] pim6reg1: entered promiscuous mode [ 760.337616][T13852] pim6reg1: entered allmulticast mode [ 761.368529][T13864] x_tables: duplicate underflow at hook 1 [ 761.528419][T13870] tipc: Enabling of bearer rejected, already enabled [ 762.517863][ T10] hid_parser_main: 22 callbacks suppressed [ 762.517992][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 762.552303][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 762.567844][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.483353][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.493696][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.501525][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.509091][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.516653][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.524614][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.532399][ T10] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 763.553903][ T10] hid-generic 0000:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 769.262733][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 769.262756][ T30] audit: type=1326 audit(1763324290.864:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 769.359469][ T30] audit: type=1326 audit(1763324290.864:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 769.476105][ T30] audit: type=1326 audit(1763324290.874:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 769.558031][ T30] audit: type=1326 audit(1763324290.874:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz.6.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 771.761218][T14013] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2525'. [ 771.816086][T14013] netlink: 'syz.9.2525': attribute type 30 has an invalid length. [ 771.901344][ T9005] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.924389][ T9005] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.952483][ T9005] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.981237][ T9005] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.348467][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2533'. [ 772.446615][T14029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2533'. [ 773.411842][ T30] audit: type=1326 audit(1763324295.014:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 773.506144][ T30] audit: type=1326 audit(1763324295.014:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 773.586103][ T30] audit: type=1326 audit(1763324295.014:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb60f58f6c9 code=0x7ffc0000 [ 773.660386][ T30] audit: type=1326 audit(1763324295.014:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb60f58f703 code=0x7ffc0000 [ 773.661091][T14045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.740377][ T30] audit: type=1326 audit(1763324295.014:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb60f58e17f code=0x7ffc0000 [ 773.825999][ T30] audit: type=1326 audit(1763324295.044:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14038 comm="syz.7.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb60f58f757 code=0x7ffc0000 [ 774.020833][T14052] netlink: 'syz.6.2540': attribute type 12 has an invalid length. [ 774.053750][T14052] netlink: 'syz.6.2540': attribute type 29 has an invalid length. [ 774.067417][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2536'. [ 774.067481][T14052] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2540'. [ 774.917767][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 774.917790][ T30] audit: type=1326 audit(1763324296.524:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.006076][ T30] audit: type=1326 audit(1763324296.524:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.085991][ T30] audit: type=1326 audit(1763324296.524:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.446081][ T30] audit: type=1326 audit(1763324296.524:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.679422][ T30] audit: type=1326 audit(1763324297.274:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.740188][ T30] audit: type=1326 audit(1763324297.274:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.6.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 775.964491][T14097] tipc: Enabled bearer , priority 0 [ 776.003148][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2562'. [ 776.055043][T14093] tipc: Resetting bearer [ 776.203789][T14100] syzkaller0: entered promiscuous mode [ 776.210568][T14100] syzkaller0: entered allmulticast mode [ 776.332003][T14091] tipc: Resetting bearer [ 776.466813][T14091] tipc: Disabling bearer [ 777.784734][T14127] netlink: 'syz.9.2571': attribute type 3 has an invalid length. [ 778.322750][T14142] Driver unsupported XDP return value 0 on prog (id 1086) dev N/A, expect packet loss! [ 779.348956][ T30] audit: type=1326 audit(1763324300.954:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 779.386748][T14155] mmap: syz.4.2583 (14155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 779.626722][ T30] audit: type=1326 audit(1763324300.974:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.149069][ T30] audit: type=1326 audit(1763324300.974:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.213866][ T30] audit: type=1326 audit(1763324300.994:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.242263][ T30] audit: type=1326 audit(1763324301.054:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.312487][ T30] audit: type=1326 audit(1763324301.054:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.350886][T14164] netlink: 'syz.9.2586': attribute type 4 has an invalid length. [ 780.399763][T14164] netlink: 'syz.9.2586': attribute type 4 has an invalid length. [ 780.427130][ T30] audit: type=1326 audit(1763324301.064:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.490626][ T30] audit: type=1326 audit(1763324301.064:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.580406][ T30] audit: type=1326 audit(1763324301.084:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.4.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.726908][ T30] audit: type=1326 audit(1763324302.324:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.806035][ T30] audit: type=1326 audit(1763324302.324:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 780.917226][ T30] audit: type=1326 audit(1763324302.324:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.4.2591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff6e58f6c9 code=0x7ffc0000 [ 785.305819][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 785.305841][ T30] audit: type=1326 audit(1763324306.904:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.446217][ T30] audit: type=1326 audit(1763324306.904:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.469740][T14225] can: request_module (can-proto-0) failed. [ 785.531774][ T30] audit: type=1326 audit(1763324306.904:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f193798f703 code=0x7ffc0000 [ 785.595055][ T30] audit: type=1326 audit(1763324306.904:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f193798f703 code=0x7ffc0000 [ 785.656453][T14238] tipc: Started in network mode [ 785.670719][T14238] tipc: Node identity 42d41054cf81, cluster identity 4711 [ 785.699278][T14238] tipc: Enabled bearer , priority 0 [ 785.702611][ T30] audit: type=1326 audit(1763324306.904:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.739533][ T30] audit: type=1326 audit(1763324306.904:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.767061][T14241] syzkaller0: entered promiscuous mode [ 785.770164][ T30] audit: type=1326 audit(1763324306.964:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.799224][T14241] syzkaller0: entered allmulticast mode [ 785.809036][ T30] audit: type=1326 audit(1763324306.964:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.833433][ T30] audit: type=1326 audit(1763324306.964:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.895363][T14238] tipc: Resetting bearer [ 785.908835][ T30] audit: type=1326 audit(1763324307.134:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14224 comm="syz.3.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193798f6c9 code=0x7ffc0000 [ 785.966490][T14234] tipc: Resetting bearer [ 786.035412][T14234] tipc: Disabling bearer [ 789.030715][T14264] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2624'. [ 790.102838][T14300] tipc: Enabling of bearer rejected, already enabled [ 790.789648][T14281] syz.9.2624: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 790.934070][T14281] CPU: 0 UID: 0 PID: 14281 Comm: syz.9.2624 Not tainted syzkaller #0 PREEMPT(full) [ 790.934108][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.934126][T14281] Call Trace: [ 790.934136][T14281] [ 790.934149][T14281] dump_stack_lvl+0x189/0x250 [ 790.934196][T14281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.934233][T14281] ? __pfx__printk+0x10/0x10 [ 790.934261][T14281] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 790.934298][T14281] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 790.934342][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.934372][T14281] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 790.934412][T14281] warn_alloc+0x214/0x310 [ 790.934461][T14281] ? __pfx_warn_alloc+0x10/0x10 [ 790.934510][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.934539][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.934567][T14281] ? __get_vm_area_node+0x28f/0x300 [ 790.934605][T14281] ? xskq_create+0xbf/0x170 [ 790.934646][T14281] __vmalloc_node_range_noprof+0x690/0x12d0 [ 790.934728][T14281] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 790.934771][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.934799][T14281] ? __kasan_kmalloc+0x93/0xb0 [ 790.934841][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.934876][T14281] vmalloc_user_noprof+0xad/0xf0 [ 790.934914][T14281] ? xskq_create+0xbf/0x170 [ 790.934950][T14281] xskq_create+0xbf/0x170 [ 790.934990][T14281] xsk_init_queue+0xb0/0x110 [ 790.935027][T14281] xsk_setsockopt+0x57b/0x8d0 [ 790.935064][T14281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 790.935106][T14281] ? __pfx_aa_sk_perm+0x10/0x10 [ 790.935140][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.935174][T14281] ? aa_sock_opt_perm+0xff/0x1b0 [ 790.935217][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.935271][T14281] ? srso_alias_return_thunk+0x5/0xfbef5 [ 790.935300][T14281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 790.935342][T14281] do_sock_setsockopt+0x17c/0x1b0 [ 790.935376][T14281] __x64_sys_setsockopt+0x13f/0x1b0 [ 790.935412][T14281] do_syscall_64+0xfa/0xfa0 [ 790.935452][T14281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.935476][T14281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 790.935509][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.935535][T14281] RIP: 0033:0x7f57eef8f6c9 [ 790.935557][T14281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.935580][T14281] RSP: 002b:00007f57efd45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 790.935606][T14281] RAX: ffffffffffffffda RBX: 00007f57ef1e6090 RCX: 00007f57eef8f6c9 [ 790.935625][T14281] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 790.935640][T14281] RBP: 00007f57ef011f91 R08: 0000000000000004 R09: 0000000000000000 [ 790.935656][T14281] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 790.935672][T14281] R13: 00007f57ef1e6128 R14: 00007f57ef1e6090 R15: 00007fffbbb32ba8 [ 790.935715][T14281] [ 791.420888][T14281] Mem-Info: [ 791.469148][T14281] active_anon:18175 inactive_anon:0 isolated_anon:0 [ 791.469148][T14281] active_file:20040 inactive_file:40168 isolated_file:0 [ 791.469148][T14281] unevictable:20545 dirty:112 writeback:0 [ 791.469148][T14281] slab_reclaimable:12380 slab_unreclaimable:110903 [ 791.469148][T14281] mapped:48225 shmem:13690 pagetables:1902 [ 791.469148][T14281] sec_pagetables:0 bounce:0 [ 791.469148][T14281] kernel_misc_reclaimable:0 [ 791.469148][T14281] free:1100663 free_pcp:17780 free_cma:0 [ 792.056015][T14281] Node 0 active_anon:62600kB inactive_anon:0kB active_file:80160kB inactive_file:160468kB unevictable:80644kB isolated(anon):0kB isolated(file):0kB mapped:183000kB dirty:448kB writeback:0kB shmem:43324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13296kB pagetables:7164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 792.158748][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2645'. [ 792.201568][T14281] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 792.356063][T14281] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 792.408975][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 792.490522][T14281] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 792.511402][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2649'. [ 792.783530][T14281] Node 0 DMA32 free:500020kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72584kB inactive_anon:0kB active_file:80160kB inactive_file:160468kB unevictable:80644kB writepending:516kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:75200kB local_pcp:26184kB free_cma:0kB [ 793.580624][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2652'. [ 793.646307][T14281] lowmem_reserve[]: 0 0 0 0 0 [ 793.651151][T14281] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 794.028557][T14281] lowmem_reserve[]: 0 0 0 0 0 [ 794.054159][T14281] Node 1 Normal free:3907008kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6608kB local_pcp:2464kB free_cma:0kB [ 794.221337][T14281] lowmem_reserve[]: 0 0 0 0 0 [ 794.273010][T14281] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 794.346156][T14281] Node 0 DMA32: 1*4kB (E) 2*8kB (ME) 2*16kB (UM) 1*32kB (U) 22*64kB (UE) 21*128kB (UE) 11*256kB (UM) 29*512kB (UM) 11*1024kB (UM) 4*2048kB (UME) 106*4096kB (M) = 475476kB [ 794.462721][T14281] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 794.667940][T14281] Node 1 Normal: 168*4kB (UME) 50*8kB (UME) 45*16kB (UME) 252*32kB (UME) 91*64kB (UME) 23*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3907008kB [ 795.160392][T14281] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.288826][T14281] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.298741][T14281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 795.368018][T14281] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 795.564378][T14281] 98254 total pagecache pages [ 795.666261][T14281] 1 pages in swap cache [ 795.739944][T14281] Free swap = 124992kB [ 795.804867][T14281] Total swap = 124996kB [ 795.864991][T14281] 2097051 pages RAM [ 795.877400][T14281] 0 pages HighMem/MovableOnly [ 795.882132][T14281] 424121 pages reserved [ 795.917063][T14281] 0 pages cma reserved [ 796.303029][T14380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 796.429949][T14380] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 796.707873][T14380] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 796.876530][T14380] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 796.999679][T14380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.030034][T14380] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 797.227286][T14380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 797.233894][T14380] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 797.339747][T14380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.356072][T14380] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 797.473572][T14380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.486273][T14380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 797.543645][T14380] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 797.797726][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 798.757212][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 799.077571][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 799.236427][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 799.401281][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 799.476284][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 799.896316][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 801.330090][ T5143] Bluetooth: hci6: command 0x0406 tx timeout [ 801.336727][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 801.343903][ T5143] Bluetooth: hci5: command 0x0406 tx timeout [ 801.713240][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 801.719638][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 803.802777][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 803.953122][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 803.965221][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 803.974044][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 803.985111][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 803.993727][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.156012][ T5836] Bluetooth: hci3: command tx timeout [ 806.574986][T14464] chnl_net:caif_netlink_parms(): no params data found [ 807.964524][T14264] warn_alloc: 2 callbacks suppressed [ 807.964546][T14264] syz.9.2624: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 807.988411][T14264] CPU: 1 UID: 0 PID: 14264 Comm: syz.9.2624 Not tainted syzkaller #0 PREEMPT(full) [ 807.988450][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.988467][T14264] Call Trace: [ 807.988481][T14264] [ 807.988495][T14264] dump_stack_lvl+0x189/0x250 [ 807.988548][T14264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.988587][T14264] ? __pfx__printk+0x10/0x10 [ 807.988619][T14264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 807.988662][T14264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 807.988705][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.988738][T14264] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 807.988773][T14264] warn_alloc+0x214/0x310 [ 807.988830][T14264] ? __pfx_warn_alloc+0x10/0x10 [ 807.988890][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.988926][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.988960][T14264] ? __get_vm_area_node+0x28f/0x300 [ 807.989005][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989053][T14264] __vmalloc_node_range_noprof+0x690/0x12d0 [ 807.989113][T14264] ? alloc_vmap_area+0xda0/0x14c0 [ 807.989176][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.989217][T14264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 807.989263][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989298][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.989326][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.989359][T14264] ? __get_vm_area_node+0x28f/0x300 [ 807.989400][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989445][T14264] __vmalloc_node_range_noprof+0x578/0x12d0 [ 807.989490][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989533][T14264] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 807.989604][T14264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 807.989649][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989696][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.989731][T14264] ? rcu_is_watching+0x15/0xb0 [ 807.989767][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989806][T14264] __kvmalloc_node_noprof+0x674/0x910 [ 807.989849][T14264] ? hash_netiface_create+0x358/0xfe0 [ 807.989884][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.989914][T14264] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 807.989954][T14264] ? hash_netiface_create+0x2fe/0xfe0 [ 807.990002][T14264] hash_netiface_create+0x358/0xfe0 [ 807.990051][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990089][T14264] ? __nla_parse+0x40/0x60 [ 807.990119][T14264] ? __pfx_hash_netiface_create+0x10/0x10 [ 807.990161][T14264] ip_set_create+0xa97/0x1940 [ 807.990202][T14264] ? ip_set_create+0x4a2/0x1940 [ 807.990255][T14264] ? __pfx_ip_set_create+0x10/0x10 [ 807.990335][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990376][T14264] nfnetlink_rcv_msg+0xb4d/0x1130 [ 807.990417][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990446][T14264] ? __kernel_text_address+0xd/0x40 [ 807.990484][T14264] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 807.990554][T14264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 807.990639][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990668][T14264] ? __lock_acquire+0xab9/0xd20 [ 807.990718][T14264] netlink_rcv_skb+0x208/0x470 [ 807.990746][T14264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 807.990800][T14264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.990842][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990872][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990902][T14264] ? security_capable+0x7e/0x2e0 [ 807.990943][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.990980][T14264] nfnetlink_rcv+0x282/0x2590 [ 807.991021][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991053][T14264] ? is_bpf_text_address+0x26/0x2b0 [ 807.991091][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991125][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991155][T14264] ? __kernel_text_address+0xd/0x40 [ 807.991194][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991224][T14264] ? unwind_get_return_address+0x4d/0x90 [ 807.991257][T14264] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 807.991293][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991323][T14264] ? arch_stack_walk+0xfc/0x150 [ 807.991373][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991402][T14264] ? stack_trace_save+0x9c/0xe0 [ 807.991437][T14264] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 807.991475][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991506][T14264] ? stack_depot_save_flags+0x40/0x860 [ 807.991557][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991587][T14264] ? __lock_acquire+0xab9/0xd20 [ 807.991619][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991676][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991706][T14264] ? __lock_acquire+0xab9/0xd20 [ 807.991745][T14264] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.991775][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991811][T14264] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.991850][T14264] netlink_unicast+0x82f/0x9e0 [ 807.991903][T14264] ? __pfx_netlink_unicast+0x10/0x10 [ 807.991948][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.991978][T14264] ? skb_put+0x11b/0x210 [ 807.992002][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992038][T14264] netlink_sendmsg+0x805/0xb30 [ 807.992086][T14264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.992119][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992150][T14264] ? aa_sock_msg_perm+0xf1/0x1d0 [ 807.992193][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992222][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992254][T14264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.992284][T14264] __sock_sendmsg+0x21c/0x270 [ 807.992327][T14264] ____sys_sendmsg+0x505/0x830 [ 807.992367][T14264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.992411][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992442][T14264] ? import_iovec+0x74/0xa0 [ 807.992483][T14264] ___sys_sendmsg+0x21f/0x2a0 [ 807.992518][T14264] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.992558][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992633][T14264] ? __fget_files+0x2a/0x420 [ 807.992657][T14264] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.992688][T14264] ? __fget_files+0x3a0/0x420 [ 807.992731][T14264] __x64_sys_sendmsg+0x19b/0x260 [ 807.992766][T14264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.992822][T14264] ? do_syscall_64+0xbe/0xfa0 [ 807.992868][T14264] do_syscall_64+0xfa/0xfa0 [ 807.992909][T14264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.992934][T14264] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 807.992968][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.992994][T14264] RIP: 0033:0x7f57eef8f6c9 [ 807.993017][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.993039][T14264] RSP: 002b:00007f57efd66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.993066][T14264] RAX: ffffffffffffffda RBX: 00007f57ef1e5fa0 RCX: 00007f57eef8f6c9 [ 807.993091][T14264] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 807.993108][T14264] RBP: 00007f57ef011f91 R08: 0000000000000000 R09: 0000000000000000 [ 807.993125][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.993140][T14264] R13: 00007f57ef1e6038 R14: 00007f57ef1e5fa0 R15: 00007fffbbb32ba8 [ 807.993186][T14264] [ 807.993196][T14264] Mem-Info: [ 808.122672][T14521] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 808.196971][ T5836] Bluetooth: hci3: command tx timeout [ 808.247517][T14264] active_anon:6036 inactive_anon:0 isolated_anon:0 [ 808.247517][T14264] active_file:20040 inactive_file:40175 isolated_file:0 [ 808.247517][T14264] unevictable:20545 dirty:214 writeback:0 [ 808.247517][T14264] slab_reclaimable:12431 slab_unreclaimable:110675 [ 808.247517][T14264] mapped:41616 shmem:1382 pagetables:1902 [ 808.247517][T14264] sec_pagetables:0 bounce:0 [ 808.247517][T14264] kernel_misc_reclaimable:0 [ 808.247517][T14264] free:1165864 free_pcp:18057 free_cma:0 [ 808.313163][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2713'. [ 808.320131][T14264] Node 0 active_anon:24144kB inactive_anon:0kB active_file:80160kB inactive_file:160496kB unevictable:80644kB isolated(anon):0kB isolated(file):0kB mapped:166464kB dirty:852kB writeback:0kB shmem:3992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13384kB pagetables:7464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 808.825413][T14264] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 808.881778][T14264] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 808.925076][T14264] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 808.935825][T14264] Node 0 DMA32 free:796388kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24044kB inactive_anon:0kB active_file:80160kB inactive_file:160496kB unevictable:80644kB writepending:852kB zspages:0kB present:3129332kB managed:2565152kB mlocked:0kB bounce:0kB free_pcp:61860kB local_pcp:43832kB free_cma:0kB [ 809.083958][T14264] lowmem_reserve[]: 0 0 0 0 0 [ 809.095400][T14264] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 809.216544][T14264] lowmem_reserve[]: 0 0 0 0 0 [ 809.221677][T14264] Node 1 Normal free:3907008kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6616kB local_pcp:2464kB free_cma:0kB [ 809.375034][T14264] lowmem_reserve[]: 0 0 0 0 0 [ 809.391615][T14264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 809.458723][T14264] Node 0 DMA32: 1673*4kB (UME) 1254*8kB (UME) 900*16kB (UM) 607*32kB (UM) 302*64kB (UME) 360*128kB (UME) 530*256kB (UME) 148*512kB (UME) 32*1024kB (UME) 9*2048kB (UM) 106*4096kB (M) = 812788kB [ 809.528886][T14264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 809.563557][T14264] Node 1 Normal: 168*4kB (UME) 50*8kB (UME) 45*16kB (UME) 252*32kB (UME) 91*64kB (UME) 23*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3907008kB [ 809.611668][T14264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.635531][T14264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 809.661912][T14264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 809.685298][T14264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 809.708432][T14264] 79110 total pagecache pages [ 809.721849][T14264] 1 pages in swap cache [ 809.733733][T14264] Free swap = 124992kB [ 809.761579][T14264] Total swap = 124996kB [ 809.768472][T14264] 2097051 pages RAM [ 809.776139][T14264] 0 pages HighMem/MovableOnly [ 809.781046][T14264] 424121 pages reserved [ 809.785231][T14264] 0 pages cma reserved [ 809.816326][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.824717][T14464] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.846120][T14464] bridge_slave_0: entered allmulticast mode [ 809.863054][T14464] bridge_slave_0: entered promiscuous mode [ 809.891706][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.929530][T14464] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.951539][T14464] bridge_slave_1: entered allmulticast mode [ 809.982621][T14464] bridge_slave_1: entered promiscuous mode [ 810.210596][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.285513][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.288255][ T5836] Bluetooth: hci3: command tx timeout [ 811.008856][T14464] team0: Port device team_slave_0 added [ 811.078019][T14464] team0: Port device team_slave_1 added [ 811.421390][T14567] netlink: 'syz.6.2728': attribute type 4 has an invalid length. [ 811.474436][T14569] netlink: 'syz.6.2728': attribute type 4 has an invalid length. [ 811.553172][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.709626][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.739686][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.753101][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.761038][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.787418][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.164134][T14464] hsr_slave_0: entered promiscuous mode [ 812.217420][T14464] hsr_slave_1: entered promiscuous mode [ 812.259680][T14464] debugfs: 'hsr0' already exists in 'hsr' [ 812.265486][T14464] Cannot create hsr debugfs directory [ 812.376916][ T5836] Bluetooth: hci3: command tx timeout [ 813.096449][T14602] binfmt_misc: register: failed to install interpreter file ./file0 [ 813.168827][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.175341][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.307203][T14607] netlink: 'syz.3.2742': attribute type 4 has an invalid length. [ 813.415506][T14609] netlink: 'syz.3.2742': attribute type 4 has an invalid length. [ 815.030206][ T6006] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.529298][ T6006] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.063094][T14628] tipc: New replicast peer: 255.255.255.255 [ 816.069713][T14628] tipc: Enabled bearer , priority 10 [ 816.139776][ T6006] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.313568][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 816.313591][ T30] audit: type=1326 audit(1763324337.911:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 816.418571][ T30] audit: type=1326 audit(1763324337.941:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 816.475154][ T6006] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.509204][ T30] audit: type=1326 audit(1763324337.971:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 816.600274][ T30] audit: type=1326 audit(1763324337.971:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 816.716014][ T30] audit: type=1326 audit(1763324337.971:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 816.801348][T14643] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2751'. [ 817.006775][T14464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 817.099598][T14464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 817.183411][T14464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 817.277050][ T30] audit: type=1326 audit(1763324337.971:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 817.300540][ T30] audit: type=1326 audit(1763324337.971:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 817.324697][ T30] audit: type=1326 audit(1763324337.981:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 817.371153][ T30] audit: type=1326 audit(1763324337.981:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 817.406863][T14464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 817.446241][ T30] audit: type=1326 audit(1763324337.981:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14629 comm="syz.6.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 818.729574][ T6006] bridge_slave_1: left allmulticast mode [ 818.735465][ T6006] bridge_slave_1: left promiscuous mode [ 818.756950][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.818764][ T6006] bridge_slave_0: left allmulticast mode [ 818.824469][ T6006] bridge_slave_0: left promiscuous mode [ 818.857198][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.859997][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.871493][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.882747][ T6006] bond0 (unregistering): Released all slaves [ 819.917481][T14665] tipc: Enabling of bearer rejected, failed to enable media [ 821.315241][T14464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.556018][T14706] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2768'. [ 822.231506][T14464] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.248192][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.255534][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.352392][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.407272][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.628719][T14713] netlink: 'syz.7.2770': attribute type 4 has an invalid length. [ 822.711850][T14714] netlink: 'syz.7.2770': attribute type 4 has an invalid length. [ 824.509102][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 824.584481][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 825.414545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.421958][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.511693][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 825.549189][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 829.288508][T14464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.409327][T14464] veth0_vlan: entered promiscuous mode [ 829.446268][T14464] veth1_vlan: entered promiscuous mode [ 829.520159][T14464] veth0_macvtap: entered promiscuous mode [ 829.550395][T14464] veth1_macvtap: entered promiscuous mode [ 829.595014][T14464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.627645][T14464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.682118][ T9003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.702782][ T9003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.729477][ T9003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.756803][ T9003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.777901][T14787] netlink: 'syz.6.2794': attribute type 1 has an invalid length. [ 829.817428][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 829.954497][ T9003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.975226][ T9003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.256693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.264601][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.595036][T14806] lo speed is unknown, defaulting to 1000 [ 830.658131][T14806] lo speed is unknown, defaulting to 1000 [ 830.689067][T14806] lo speed is unknown, defaulting to 1000 [ 830.747570][T14806] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 830.885084][T14817] xt_policy: neither incoming nor outgoing policy selected [ 830.954504][T14806] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 831.061034][T14806] lo speed is unknown, defaulting to 1000 [ 831.109605][T14806] lo speed is unknown, defaulting to 1000 [ 831.747237][T14806] lo speed is unknown, defaulting to 1000 [ 831.755270][T14806] lo speed is unknown, defaulting to 1000 [ 831.804186][T14806] lo speed is unknown, defaulting to 1000 [ 831.817986][T14806] lo speed is unknown, defaulting to 1000 [ 831.838802][T14806] lo speed is unknown, defaulting to 1000 [ 831.861051][T14824] syzkaller0: entered promiscuous mode [ 831.867113][T14824] syzkaller0: entered allmulticast mode [ 834.176823][T14864] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2818'. [ 835.231436][ T9003] bridge_slave_1: left allmulticast mode [ 835.248400][ T9003] bridge_slave_1: left promiscuous mode [ 835.254291][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.287171][ T9003] bridge_slave_0: left allmulticast mode [ 835.306047][ T9003] bridge_slave_0: left promiscuous mode [ 835.312016][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.922916][T14910] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2835'. [ 837.552218][ T9003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.569563][ T9003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.582171][ T9003] bond0 (unregistering): Released all slaves [ 837.771195][ T9003] tipc: Disabling bearer [ 837.802586][ T9003] tipc: Left network mode [ 837.836508][T14896] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 837.970394][T14911] syzkaller0: entered promiscuous mode [ 837.981067][T14911] syzkaller0: entered allmulticast mode [ 838.262374][ T13] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.287008][ T13] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.325673][ T13] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.393511][ T13] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.706136][ T9003] hsr_slave_0: left promiscuous mode [ 838.712781][ T9003] hsr_slave_1: left promiscuous mode [ 838.730773][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.774704][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.052300][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 840.052322][ T30] audit: type=1326 audit(1763324361.641:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14973 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 840.091082][ T30] audit: type=1326 audit(1763324361.691:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14973 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 840.148534][ T30] audit: type=1326 audit(1763324361.691:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14973 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 840.149988][T14976] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2854'. [ 840.180835][ T30] audit: type=1326 audit(1763324361.691:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14973 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a838f6c9 code=0x7ffc0000 [ 841.046746][ T9003] team0 (unregistering): Port device team_slave_1 removed [ 841.142903][ T9003] team0 (unregistering): Port device team_slave_0 removed [ 842.086913][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.094767][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.214295][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 842.281337][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.312139][T14976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.531271][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2868'. [ 842.541103][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2868'. [ 842.577137][T10992] lo speed is unknown, defaulting to 1000 [ 842.585245][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.591408][T10992] syz2: Port: 1 Link DOWN [ 842.615109][ T6006] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.635375][ T6006] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.656725][ T6006] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.872578][ T30] audit: type=1326 audit(1763324364.461:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 842.966859][ T30] audit: type=1326 audit(1763324364.461:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 842.997575][ T30] audit: type=1326 audit(1763324364.461:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 843.057531][ T30] audit: type=1326 audit(1763324364.461:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 843.089113][ T30] audit: type=1326 audit(1763324364.461:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 843.112688][ T30] audit: type=1326 audit(1763324364.461:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15020 comm="syz.0.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 844.249456][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2881'. [ 844.306061][T15047] netlink: 'syz.3.2880': attribute type 4 has an invalid length. [ 844.347496][T15044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.464626][T15055] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2882'. [ 845.706298][T15068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2888'. [ 846.167841][T15084] netlink: 'syz.3.2894': attribute type 10 has an invalid length. [ 846.198336][T15084] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 847.568839][T15103] netlink: 'syz.4.2899': attribute type 4 has an invalid length. [ 850.119625][T15148] netlink: 'syz.6.2915': attribute type 4 has an invalid length. [ 850.566933][T15159] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2919'. [ 851.519008][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2927'. [ 852.488381][T15194] loop0: detected capacity change from 0 to 512 [ 852.585624][T15194] EXT4-fs (loop0): too many log groups per flexible block group [ 852.626291][T15194] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 852.633552][T15194] EXT4-fs (loop0): mount failed [ 852.838843][T15215] loop0: detected capacity change from 0 to 512 [ 852.905463][T15215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.920016][T15215] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.946980][T15215] netlink: 'syz.0.2941': attribute type 4 has an invalid length. [ 853.024356][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.035063][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.059843][ T6006] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.070408][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.080435][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.091265][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2946'. [ 853.109601][T14464] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.125475][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.149262][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.186244][T15230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2948'. [ 853.201089][T15228] IPVS: Error connecting to the multicast addr [ 853.302266][T15235] netlink: 'syz.6.2951': attribute type 1 has an invalid length. [ 853.346140][T15235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.402109][T15243] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2950'. [ 853.449661][T15235] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 853.716002][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 853.716025][ T30] audit: type=1326 audit(1763324375.261:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.831824][ T30] audit: type=1326 audit(1763324375.271:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.854922][ T30] audit: type=1326 audit(1763324375.271:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.877817][ T30] audit: type=1326 audit(1763324375.271:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.900569][ T30] audit: type=1326 audit(1763324375.271:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.923756][ T30] audit: type=1326 audit(1763324375.281:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.947945][ T30] audit: type=1326 audit(1763324375.281:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 853.971277][ T30] audit: type=1326 audit(1763324375.281:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 854.036159][ T30] audit: type=1326 audit(1763324375.291:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 854.091680][ T30] audit: type=1326 audit(1763324375.301:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15244 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b4b8f6c9 code=0x7ffc0000 [ 854.146823][T15253] netlink: 'syz.7.2961': attribute type 4 has an invalid length. [ 854.212599][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2959'. [ 854.257355][T15259] netem: change failed [ 854.413667][T15270] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2964'. [ 854.587892][T15282] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2970'. [ 854.849144][T15294] netlink: 'syz.4.2975': attribute type 4 has an invalid length. [ 855.142328][T15304] tipc: Enabling of bearer rejected, already enabled [ 856.503600][T15311] loop0: detected capacity change from 0 to 512 [ 856.593317][T15311] [ 856.595800][T15311] ====================================================== [ 856.602832][T15311] WARNING: possible circular locking dependency detected [ 856.609856][T15311] syzkaller #0 Not tainted [ 856.614377][T15311] ------------------------------------------------------ [ 856.621394][T15311] syz.0.2981/15311 is trying to acquire lock: [ 856.627501][T15311] ffff88807c7e6b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 856.637740][T15311] [ 856.637740][T15311] but task is already holding lock: [ 856.645144][T15311] ffff888050ddf388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 856.655017][T15311] [ 856.655017][T15311] which lock already depends on the new lock. [ 856.655017][T15311] [ 856.665608][T15311] [ 856.665608][T15311] the existing dependency chain (in reverse order) is: [ 856.674639][T15311] [ 856.674639][T15311] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 856.682224][T15311] lock_acquire+0x120/0x360 [ 856.687272][T15311] down_write+0x96/0x1f0 [ 856.692128][T15311] ext4_destroy_inline_data+0x28/0xe0 [ 856.698127][T15311] ext4_do_writepages+0x526/0x4610 [ 856.703861][T15311] ext4_writepages+0x205/0x350 [ 856.709146][T15311] do_writepages+0x32e/0x550 [ 856.714261][T15311] file_write_and_wait_range+0x23e/0x340 [ 856.720432][T15311] generic_buffers_fsync_noflush+0x6c/0x180 [ 856.726866][T15311] ext4_sync_file+0x332/0xb20 [ 856.732076][T15311] ext4_buffered_write_iter+0x2ca/0x3a0 [ 856.738167][T15311] ext4_file_write_iter+0x298/0x1bc0 [ 856.744169][T15311] do_iter_readv_writev+0x623/0x8c0 [ 856.749929][T15311] vfs_writev+0x31a/0x960 [ 856.754897][T15311] __se_sys_pwritev2+0x179/0x290 [ 856.760405][T15311] do_syscall_64+0xfa/0xfa0 [ 856.765446][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.771878][T15311] [ 856.771878][T15311] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 856.780334][T15311] validate_chain+0xb9b/0x2140 [ 856.785646][T15311] __lock_acquire+0xab9/0xd20 [ 856.791144][T15311] lock_acquire+0x120/0x360 [ 856.796203][T15311] percpu_down_read_internal+0x48/0x1c0 [ 856.802397][T15311] ext4_writepages+0x1cc/0x350 [ 856.807706][T15311] do_writepages+0x32e/0x550 [ 856.812898][T15311] __writeback_single_inode+0x145/0xff0 [ 856.819003][T15311] writeback_single_inode+0x1f9/0x6a0 [ 856.824915][T15311] write_inode_now+0x160/0x1d0 [ 856.830233][T15311] iput+0x830/0xc50 [ 856.834587][T15311] ext4_xattr_block_set+0x1fce/0x2ac0 [ 856.840503][T15311] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 856.846937][T15311] __ext4_expand_extra_isize+0x30d/0x400 [ 856.853198][T15311] __ext4_mark_inode_dirty+0x46c/0x700 [ 856.859199][T15311] ext4_evict_inode+0x80d/0xee0 [ 856.864855][T15311] evict+0x504/0x9c0 [ 856.869303][T15311] ext4_orphan_cleanup+0xc20/0x1460 [ 856.875239][T15311] ext4_fill_super+0x5920/0x61e0 [ 856.880738][T15311] get_tree_bdev_flags+0x40e/0x4d0 [ 856.886417][T15311] vfs_get_tree+0x92/0x2b0 [ 856.891384][T15311] do_new_mount+0x302/0xa10 [ 856.896431][T15311] __se_sys_mount+0x313/0x410 [ 856.901715][T15311] do_syscall_64+0xfa/0xfa0 [ 856.906847][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.913310][T15311] [ 856.913310][T15311] other info that might help us debug this: [ 856.913310][T15311] [ 856.923947][T15311] Possible unsafe locking scenario: [ 856.923947][T15311] [ 856.933148][T15311] CPU0 CPU1 [ 856.938699][T15311] ---- ---- [ 856.944081][T15311] lock(&ei->xattr_sem); [ 856.948962][T15311] lock(&sbi->s_writepages_rwsem); [ 856.957247][T15311] lock(&ei->xattr_sem); [ 856.964159][T15311] rlock(&sbi->s_writepages_rwsem); [ 856.969485][T15311] [ 856.969485][T15311] *** DEADLOCK *** [ 856.969485][T15311] [ 856.977648][T15311] 3 locks held by syz.0.2981/15311: [ 856.982863][T15311] #0: ffff888021ea00e0 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: alloc_super+0x1bb/0x930 [ 856.993104][T15311] #1: ffff888021ea0610 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x2d6/0xee0 [ 857.002643][T15311] #2: ffff888050ddf388 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3eb/0x700 [ 857.012991][T15311] [ 857.012991][T15311] stack backtrace: [ 857.018938][T15311] CPU: 1 UID: 0 PID: 15311 Comm: syz.0.2981 Not tainted syzkaller #0 PREEMPT(full) [ 857.018972][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.018988][T15311] Call Trace: [ 857.019000][T15311] [ 857.019012][T15311] dump_stack_lvl+0x189/0x250 [ 857.019053][T15311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.019092][T15311] ? __pfx__printk+0x10/0x10 [ 857.019276][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019305][T15311] ? print_lock_name+0xde/0x100 [ 857.019331][T15311] print_circular_bug+0x2ee/0x310 [ 857.019367][T15311] check_noncircular+0x134/0x160 [ 857.019400][T15311] validate_chain+0xb9b/0x2140 [ 857.019434][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019460][T15311] ? look_up_lock_class+0x74/0x170 [ 857.019497][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019523][T15311] ? register_lock_class+0x51/0x320 [ 857.019548][T15311] __lock_acquire+0xab9/0xd20 [ 857.019575][T15311] ? ext4_writepages+0x1cc/0x350 [ 857.019603][T15311] lock_acquire+0x120/0x360 [ 857.019624][T15311] ? ext4_writepages+0x1cc/0x350 [ 857.019661][T15311] percpu_down_read_internal+0x48/0x1c0 [ 857.019687][T15311] ? ext4_writepages+0x1cc/0x350 [ 857.019715][T15311] ext4_writepages+0x1cc/0x350 [ 857.019745][T15311] ? __pfx_ext4_writepages+0x10/0x10 [ 857.019779][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019808][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019833][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 857.019866][T15311] ? __pfx_ext4_writepages+0x10/0x10 [ 857.019894][T15311] do_writepages+0x32e/0x550 [ 857.019927][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.019953][T15311] ? do_raw_spin_lock+0x121/0x290 [ 857.019989][T15311] __writeback_single_inode+0x145/0xff0 [ 857.020023][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020080][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 857.020115][T15311] writeback_single_inode+0x1f9/0x6a0 [ 857.020147][T15311] write_inode_now+0x160/0x1d0 [ 857.020175][T15311] ? __pfx_write_inode_now+0x10/0x10 [ 857.020228][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020256][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020281][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 857.020316][T15311] iput+0x830/0xc50 [ 857.020343][T15311] ext4_xattr_block_set+0x1fce/0x2ac0 [ 857.020385][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020414][T15311] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 857.020439][T15311] ? ext4_xattr_block_find+0x2d4/0x350 [ 857.020465][T15311] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 857.020513][T15311] __ext4_expand_extra_isize+0x30d/0x400 [ 857.020544][T15311] __ext4_mark_inode_dirty+0x46c/0x700 [ 857.020586][T15311] ext4_evict_inode+0x80d/0xee0 [ 857.020617][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020650][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 857.020680][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020708][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020733][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 857.020766][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 857.020796][T15311] evict+0x504/0x9c0 [ 857.020830][T15311] ? __pfx_evict+0x10/0x10 [ 857.020855][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 857.020887][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020913][T15311] ? _raw_spin_unlock+0x28/0x50 [ 857.020941][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.020967][T15311] ? iput+0x946/0xc50 [ 857.020992][T15311] ext4_orphan_cleanup+0xc20/0x1460 [ 857.021032][T15311] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 857.021070][T15311] ? ext4_register_li_request+0x640/0x720 [ 857.021101][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021127][T15311] ? errseq_check_and_advance+0x66/0x120 [ 857.021160][T15311] ext4_fill_super+0x5920/0x61e0 [ 857.021192][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021225][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 857.021250][T15311] ? snprintf+0xda/0x120 [ 857.021279][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021304][T15311] ? set_blocksize+0x21e/0x500 [ 857.021337][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021366][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021392][T15311] ? sb_set_blocksize+0x104/0x180 [ 857.021426][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021451][T15311] ? setup_bdev_super+0x4c1/0x5b0 [ 857.021486][T15311] get_tree_bdev_flags+0x40e/0x4d0 [ 857.021520][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 857.021546][T15311] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 857.021580][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021608][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021637][T15311] vfs_get_tree+0x92/0x2b0 [ 857.021671][T15311] do_new_mount+0x302/0xa10 [ 857.021706][T15311] ? apparmor_capable+0x137/0x1b0 [ 857.021734][T15311] ? __pfx_do_new_mount+0x10/0x10 [ 857.021768][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021794][T15311] ? ns_capable+0x8a/0xf0 [ 857.021818][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021844][T15311] ? kmem_cache_free+0x19b/0x690 [ 857.021884][T15311] __se_sys_mount+0x313/0x410 [ 857.021908][T15311] ? __pfx___se_sys_mount+0x10/0x10 [ 857.021931][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.021956][T15311] ? __x64_sys_mount+0x20/0xc0 [ 857.021978][T15311] do_syscall_64+0xfa/0xfa0 [ 857.022011][T15311] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.022043][T15311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.022071][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.022096][T15311] ? exc_page_fault+0xab/0x100 [ 857.022129][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.022151][T15311] RIP: 0033:0x7f97b4b90e6a [ 857.022172][T15311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.022192][T15311] RSP: 002b:00007f97b599fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 857.022222][T15311] RAX: ffffffffffffffda RBX: 00007f97b599fef0 RCX: 00007f97b4b90e6a [ 857.022239][T15311] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f97b599feb0 [ 857.022255][T15311] RBP: 0000200000000180 R08: 00007f97b599fef0 R09: 0000000000000000 [ 857.022270][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 857.022285][T15311] R13: 00007f97b599feb0 R14: 000000000000046f R15: 0000200000000200 [ 857.022313][T15311] [ 857.795331][T15311] ------------[ cut here ]------------ [ 857.800920][T15311] EA inode 11 i_nlink=2 [ 857.809682][T15311] WARNING: CPU: 0 PID: 15311 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 857.824266][T15311] Modules linked in: [ 857.828274][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.0.2981 Not tainted syzkaller #0 PREEMPT(full) [ 857.837713][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 857.847922][T15311] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 857.854546][T15311] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 0f 80 8b 4c 89 e6 e8 97 a6 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 f7 bc 08 44 89 f9 [ 857.874261][T15311] RSP: 0018:ffffc9000d257100 EFLAGS: 00010246 [ 857.880788][T15311] RAX: 252fbef659eecf00 RBX: 0000000000000001 RCX: 0000000000080000 [ 857.888889][T15311] RDX: ffffc9000e7cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 857.896983][T15311] RBP: ffffc9000d2571f8 R08: 0000000000000003 R09: 0000000000000004 [ 857.905337][T15311] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: 000000000000000b [ 857.913813][T15311] R13: ffff888050f8a9b0 R14: 1ffff1100a1f1524 R15: ffff888050f8a920 [ 857.922117][T15311] FS: 00007f97b59a06c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 857.931152][T15311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 857.937842][T15311] CR2: 000000110c4023db CR3: 000000003b20c000 CR4: 0000000000350ef0 [ 857.945868][T15311] Call Trace: [ 857.949226][T15311] [ 857.952189][T15311] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 857.958843][T15311] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 857.965214][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.970945][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 857.976732][T15311] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 857.982488][T15311] ext4_xattr_set_entry+0xabb/0x1e20 [ 857.987874][T15311] ext4_xattr_ibody_set+0x254/0x6a0 [ 857.993116][T15311] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 857.999150][T15311] __ext4_expand_extra_isize+0x30d/0x400 [ 858.004829][T15311] __ext4_mark_inode_dirty+0x46c/0x700 [ 858.010381][T15311] ext4_evict_inode+0x80d/0xee0 [ 858.015278][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.021025][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 858.026467][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.032213][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.037964][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 858.043298][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 858.048748][T15311] evict+0x504/0x9c0 [ 858.052694][T15311] ? __pfx_evict+0x10/0x10 [ 858.057187][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 858.062604][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.068388][T15311] ? _raw_spin_unlock+0x28/0x50 [ 858.073290][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.079020][T15311] ? iput+0x946/0xc50 [ 858.083063][T15311] ext4_orphan_cleanup+0xc20/0x1460 [ 858.088370][T15311] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 858.094039][T15311] ? ext4_register_li_request+0x640/0x720 [ 858.099849][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.105650][T15311] ? errseq_check_and_advance+0x66/0x120 [ 858.111388][T15311] ext4_fill_super+0x5920/0x61e0 [ 858.116479][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.122169][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 858.127518][T15311] ? snprintf+0xda/0x120 [ 858.131976][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.137787][T15311] ? set_blocksize+0x21e/0x500 [ 858.142623][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.148386][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.154141][T15311] ? sb_set_blocksize+0x104/0x180 [ 858.159793][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.165502][T15311] ? setup_bdev_super+0x4c1/0x5b0 [ 858.170821][T15311] get_tree_bdev_flags+0x40e/0x4d0 [ 858.176039][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 858.181432][T15311] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 858.187142][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.192807][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.198546][T15311] vfs_get_tree+0x92/0x2b0 [ 858.202995][T15311] do_new_mount+0x302/0xa10 [ 858.207602][T15311] ? apparmor_capable+0x137/0x1b0 [ 858.212838][T15311] ? __pfx_do_new_mount+0x10/0x10 [ 858.217967][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.223804][T15311] ? ns_capable+0x8a/0xf0 [ 858.228279][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.233942][T15311] ? kmem_cache_free+0x19b/0x690 [ 858.239149][T15311] __se_sys_mount+0x313/0x410 [ 858.243861][T15311] ? __pfx___se_sys_mount+0x10/0x10 [ 858.249255][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.254919][T15311] ? __x64_sys_mount+0x20/0xc0 [ 858.259946][T15311] do_syscall_64+0xfa/0xfa0 [ 858.264588][T15311] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.269908][T15311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.276455][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.282117][T15311] ? exc_page_fault+0xab/0x100 [ 858.286957][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.293024][T15311] RIP: 0033:0x7f97b4b90e6a [ 858.297497][T15311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.317692][T15311] RSP: 002b:00007f97b599fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.326520][T15311] RAX: ffffffffffffffda RBX: 00007f97b599fef0 RCX: 00007f97b4b90e6a [ 858.334520][T15311] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f97b599feb0 [ 858.342631][T15311] RBP: 0000200000000180 R08: 00007f97b599fef0 R09: 0000000000000000 [ 858.350940][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 858.359200][T15311] R13: 00007f97b599feb0 R14: 000000000000046f R15: 0000200000000200 [ 858.367350][T15311] [ 858.370403][T15311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 858.377698][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.0.2981 Not tainted syzkaller #0 PREEMPT(full) [ 858.387122][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.397196][T15311] Call Trace: [ 858.400484][T15311] [ 858.403414][T15311] dump_stack_lvl+0x99/0x250 [ 858.408087][T15311] ? __asan_memcpy+0x40/0x70 [ 858.412789][T15311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 858.418011][T15311] ? __pfx__printk+0x10/0x10 [ 858.422727][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.428418][T15311] vpanic+0x237/0x6d0 [ 858.432451][T15311] ? __pfx_vpanic+0x10/0x10 [ 858.437150][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.442910][T15311] panic+0xb9/0xc0 [ 858.446777][T15311] ? __pfx_panic+0x10/0x10 [ 858.451400][T15311] __warn+0x31b/0x4b0 [ 858.455411][T15311] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 858.461543][T15311] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 858.467745][T15311] report_bug+0x2be/0x4f0 [ 858.472112][T15311] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 858.478251][T15311] ? ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 858.484401][T15311] ? ext4_xattr_inode_update_ref+0x51c/0x5b0 [ 858.490404][T15311] handle_bug+0x84/0x160 [ 858.494661][T15311] exc_invalid_op+0x1a/0x50 [ 858.499167][T15311] asm_exc_invalid_op+0x1a/0x20 [ 858.504043][T15311] RIP: 0010:ext4_xattr_inode_update_ref+0x51a/0x5b0 [ 858.510741][T15311] Code: 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 80 00 00 00 41 8b 17 48 c7 c7 c0 0f 80 8b 4c 89 e6 e8 97 a6 f9 fe 90 <0f> 0b 90 90 4c 8b 6c 24 28 e9 59 fe ff ff e8 b3 f7 bc 08 44 89 f9 [ 858.530398][T15311] RSP: 0018:ffffc9000d257100 EFLAGS: 00010246 [ 858.536575][T15311] RAX: 252fbef659eecf00 RBX: 0000000000000001 RCX: 0000000000080000 [ 858.544653][T15311] RDX: ffffc9000e7cc000 RSI: 000000000007ffff RDI: 0000000000080000 [ 858.552895][T15311] RBP: ffffc9000d2571f8 R08: 0000000000000003 R09: 0000000000000004 [ 858.560976][T15311] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: 000000000000000b [ 858.568966][T15311] R13: ffff888050f8a9b0 R14: 1ffff1100a1f1524 R15: ffff888050f8a920 [ 858.577048][T15311] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 858.582871][T15311] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 858.589204][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.594887][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.600645][T15311] ? ext4_xattr_inode_iget+0x3d2/0x5f0 [ 858.606202][T15311] ext4_xattr_set_entry+0xabb/0x1e20 [ 858.611562][T15311] ext4_xattr_ibody_set+0x254/0x6a0 [ 858.616847][T15311] ext4_expand_extra_isize_ea+0x13ad/0x1ea0 [ 858.622809][T15311] __ext4_expand_extra_isize+0x30d/0x400 [ 858.628516][T15311] __ext4_mark_inode_dirty+0x46c/0x700 [ 858.634476][T15311] ext4_evict_inode+0x80d/0xee0 [ 858.639456][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.645129][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 858.650895][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.656659][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.662302][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 858.667529][T15311] ? __pfx_ext4_evict_inode+0x10/0x10 [ 858.672925][T15311] evict+0x504/0x9c0 [ 858.676858][T15311] ? __pfx_evict+0x10/0x10 [ 858.681273][T15311] ? do_raw_spin_unlock+0x122/0x240 [ 858.686522][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.692244][T15311] ? _raw_spin_unlock+0x28/0x50 [ 858.697218][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.702887][T15311] ? iput+0x946/0xc50 [ 858.706890][T15311] ext4_orphan_cleanup+0xc20/0x1460 [ 858.712211][T15311] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 858.717895][T15311] ? ext4_register_li_request+0x640/0x720 [ 858.723667][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.729321][T15311] ? errseq_check_and_advance+0x66/0x120 [ 858.734967][T15311] ext4_fill_super+0x5920/0x61e0 [ 858.739918][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.745665][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 858.750948][T15311] ? snprintf+0xda/0x120 [ 858.755292][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.760943][T15311] ? set_blocksize+0x21e/0x500 [ 858.765739][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.771383][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.777037][T15311] ? sb_set_blocksize+0x104/0x180 [ 858.782177][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.787818][T15311] ? setup_bdev_super+0x4c1/0x5b0 [ 858.792907][T15311] get_tree_bdev_flags+0x40e/0x4d0 [ 858.798048][T15311] ? __pfx_ext4_fill_super+0x10/0x10 [ 858.803359][T15311] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 858.809026][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.814769][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.820412][T15311] vfs_get_tree+0x92/0x2b0 [ 858.824846][T15311] do_new_mount+0x302/0xa10 [ 858.829355][T15311] ? apparmor_capable+0x137/0x1b0 [ 858.834380][T15311] ? __pfx_do_new_mount+0x10/0x10 [ 858.839413][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.845046][T15311] ? ns_capable+0x8a/0xf0 [ 858.849388][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.855121][T15311] ? kmem_cache_free+0x19b/0x690 [ 858.860108][T15311] __se_sys_mount+0x313/0x410 [ 858.864811][T15311] ? __pfx___se_sys_mount+0x10/0x10 [ 858.870090][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.875728][T15311] ? __x64_sys_mount+0x20/0xc0 [ 858.880497][T15311] do_syscall_64+0xfa/0xfa0 [ 858.885010][T15311] ? lockdep_hardirqs_on+0x9c/0x150 [ 858.890343][T15311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.896614][T15311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 858.902437][T15311] ? exc_page_fault+0xab/0x100 [ 858.907391][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.913372][T15311] RIP: 0033:0x7f97b4b90e6a [ 858.917790][T15311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.937587][T15311] RSP: 002b:00007f97b599fe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 858.946032][T15311] RAX: ffffffffffffffda RBX: 00007f97b599fef0 RCX: 00007f97b4b90e6a [ 858.954036][T15311] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f97b599feb0 [ 858.962204][T15311] RBP: 0000200000000180 R08: 00007f97b599fef0 R09: 0000000000000000 [ 858.970205][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000001c0 [ 858.978304][T15311] R13: 00007f97b599feb0 R14: 000000000000046f R15: 0000200000000200 [ 858.986329][T15311] [ 858.989732][T15311] Kernel Offset: disabled [ 858.994111][T15311] Rebooting in 86400 seconds..