last executing test programs: 2m58.931836271s ago: executing program 0 (id=24): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001000000", @ANYRES32=0x1, @ANYBLOB="000004008afa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socket$inet(0x2, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m58.783858604s ago: executing program 0 (id=26): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x8, 0x20000, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x1c, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 2m58.375963752s ago: executing program 0 (id=29): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x2439, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0xe8a, 0x80, 0x0, 0x1000034e, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x46bc, 0x3, 0x20, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getparam(r5, &(0x7f00000004c0)) 2m57.858900872s ago: executing program 0 (id=31): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000180)) tkill(r2, 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 2m57.264075884s ago: executing program 0 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000a1000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="467903ae9794112ea379ac073ea3256ff07fbab0d0cfba1346cc96068b16553d65ae3479e7e9d09881a24bd3d2b856a20bf961dab341e454177f1a576df17a6bdc705361337f0a22eb0f20589d3c8c463546872cbe8594fba725d3f6c338868a2752c3be9b95d2b6bf83788a0d8a1e8991951f8e114b851ea8a3de7bb5230a3765ea733f2c66383d0c2d33686eaa3ef7e60ff31284bbeebca405a6c789b9a00b4522aa896a8dd415536676274e658d10b79fc5e3c443b472c5bfd12027e125ba200d68bc4a825d009fd32f0ccd43ee89522f9aeb8dc5a4ad37c6255b", @ANYRESDEC=r5], 0x20}, 0x1, 0x0, 0x0, 0x40890}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m56.794896882s ago: executing program 0 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 9) 2m56.758826613s ago: executing program 32 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 9) 1m43.072959233s ago: executing program 3 (id=1276): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000100)=0x1, 0x4) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/1, 0x1}, 0x436}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)={0x29, 0x25, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0x1000, [0x10001]}}, @ra={0x5, 0x2, 0x8}, @generic={0x1, 0xce, "e905205ecec73a4f682028e99abf7e16c6ed4499c866b5728f5032ec763ea75e5e5851fd16e9fe54a8d34daa73931f5348f74d384264c7a6aacf258852eb202eb5de65d9c338bc139c13cae2cdab8224631ae18a126cf5dc4408db9c6047a1af33eca34860348990da6d908d1a4f3dcbe01fbeb44a685e96f5699478a18fc4b2b6510ea68a3306a0d85a16b3c3b7d32082e8f0e124247045b6ff61d10d8d80dc940ab7684a84cd78e05a3d1fa5527818d81dee4c0be01bae2ceec65e271a91d0deeaef8f956ec067538d8af31482"}, @calipso={0x7, 0x38, {0x2, 0xc, 0x3, 0x8, [0x7, 0x3, 0x9, 0x6, 0x800, 0x4]}}]}, 0x138) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r10 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x200000000000000, 0x0) openat$cgroup_procs(r11, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 1m42.402739166s ago: executing program 3 (id=1290): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc884, &(0x7f00000014c0)={0xa, 0x4e20, 0x6, @loopback, 0x18}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 1m42.336668837s ago: executing program 3 (id=1291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0xff4f, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x62, @remote, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0x81, 0xfffff40b, 0xc52, 0x12000, r1, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r11}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m42.19618009s ago: executing program 3 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8ktuec++ZOec793XuOTMB9KyR7E8SsS0ifouIoUZ2eYGRxr9rV85O/33l7HQSS0tv/Znk5a5eOTtdFi1ft7XIjKYR6cdJUcly86fPHJ+q12univz4won3xudPn3l29sTUsdqx2snJQ4cOHph44fnJ57oSZxbX1T0fzu3d/do7F1+fPnLx3Z++ydq7rdjeHEe3jGSB/7WUa932ZLcrq9j2pnTSX2FDWJW+iMh210B+/g9FX9zYeUPx6keVNg5YU9m9aVPnzYtLwD0siapbAFSjvNFnz7/lsk5djw3h8kuNB6As7mvF0tjSH2lRZqDl+babRiLiyOI/X2ZLrNE4BABAs0+nvzgcz7Tr/6XxQFO5HcUcynBE/D8idkbEfRGxKyLuj8jLPhgRD62y/tapoZv7P+mlOwrsNmX9vxeLua3l/b+y9xfDfUVuex7/QHJ0tl7bX3wmozGwKctPrFDHd6/8+lmnbc39v2zJ6i/7gkU7LvW3DNDNTC1M5Z3SLrh8PmJPf7v4k+szAUlE7I6IPat76x1lYvapr/d2KnTr+FfQhXmmpa+y8Baz+BejJf5SsvL85PjmqNf2j5dHxc1+/uXCm53qv6v4u+ByrfG/af+3FhlOmudr51dfx4XfP+n4THOHx386mLydzzMPFus+mFpYODURMZgczvPL1k/eeG2ZL8tnx//ovvbn/87iNVn8D0dEdhA/EhGPRsRjRdsfj4gnImLfCvH/+HLnbWX8kVa0/89HzLS9/l0//lv2/+oTfcd/+LZT/be3/w/mqdFiTX79u4V2zckuF60NvJvPDgAAAP4r0vw78Ek6dj2dpmNjje/w74r/pfW5+YWnj869f3Km8V354RhIy5GuoWI8tD5br00ki8U7NsZHJ4ux4nK89EAxbvx535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra0XTs5uO4NASrQOo+eLs+ee2M9GwOsK7/Xht51i/M/Xa92AOvP/R96V7vz/1xL3lwA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ3/WuY2LwxmlFNYqPulDwRUSbSDdEeiTVKVH1lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//+Afus0") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xb, &(0x7f0000000200)=ANY=[@ANYRESDEC=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000000000000258, &(0x7f00000003c0)=ANY=[@ANYRES16=r7], &(0x7f0000000080)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x1f}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7f) r8 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r8, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1m41.793723508s ago: executing program 3 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) 1m41.113111001s ago: executing program 3 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1m41.112942451s ago: executing program 33 (id=1319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 1.735717586s ago: executing program 6 (id=4342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0xff4f, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x62, @remote, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0x81, 0xfffff40b, 0xc52, 0x12000, r1, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r11}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.693627987s ago: executing program 6 (id=4344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.499143161s ago: executing program 6 (id=4352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x690) msgsnd(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000"], 0x401, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x7, 0xfffffffb, 0x4}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f, 0x71, 0x0]}}, &(0x7f0000000540)=""/217, 0x42, 0xd9, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffbffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 1.184850567s ago: executing program 2 (id=4358): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r7, 0x0, 0x46) close(r7) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') lseek(r9, 0x2004, 0x0) r10 = signalfd4(r5, &(0x7f0000000280)={[0xfff]}, 0x8, 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x7}, 0xc) r13 = syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r15}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001100000000000000b050742512620000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x41, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0xbd75, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r9, r10, r11, r12, r13, r14, r15, 0x1], &(0x7f00000004c0)=[{0x3, 0x4, 0x8, 0x6}, {0x5, 0x5, 0xa, 0x1}], 0x10, 0x2}, 0x94) 1.050575039s ago: executing program 2 (id=4361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) 1.02290494s ago: executing program 2 (id=4363): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}, {0x0}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 1.00315763s ago: executing program 2 (id=4364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000380)="1a0000003c3c266c4dd1eea3", 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 940.499951ms ago: executing program 2 (id=4366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0xff4f, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x62, @remote, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0x81, 0xfffff40b, 0xc52, 0x12000, r1, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r11}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 915.349332ms ago: executing program 2 (id=4368): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r1 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_config_ext={0x2, 0x7}, 0x200, 0x10000, 0xb, 0x4, 0x6, 0xb, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x4, 0x1000, 0x40048}, 0x2c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000090601020000000000000000020000000900020073797a31000000000500010007000000380007800c00018008000140ffffffff0500070084000000060004404e2200001800028014000240fe8000000000000000000000000000aad944b18044944c39266c9a5afe6dc42af33a382d3c4d48548168057c9233c687df7e144f525984280648046b5f892217ac0f999e94e79d74c3997b388de94f574f"], 0x60}, 0x1, 0x0, 0x0, 0x1c0400c2}, 0x80) 894.559492ms ago: executing program 6 (id=4370): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x24000000) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 833.292724ms ago: executing program 6 (id=4373): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r7, 0x0, 0x46) close(r7) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') lseek(r9, 0x2004, 0x0) r10 = signalfd4(r5, &(0x7f0000000280)={[0xfff]}, 0x8, 0x80000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x7}, 0xc) r13 = syz_open_dev$mouse(&(0x7f00000003c0), 0x3, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r15}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001100000000000000b050742512620000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x41, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x7, 0xbd75, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000480)=[r9, r10, r11, r12, r13, r14, r15, 0x1], &(0x7f00000004c0)=[{0x3, 0x4, 0x8, 0x6}, {0x5, 0x5, 0xa, 0x1}], 0x10, 0x2}, 0x94) 702.294297ms ago: executing program 4 (id=4378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0xff4f, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x62, @remote, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0x81, 0xfffff40b, 0xc52, 0x12000, r1, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r11}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 673.775307ms ago: executing program 4 (id=4380): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x690) msgsnd(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000"], 0x401, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x7, 0xfffffffb, 0x4}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f, 0x71, 0x0]}}, &(0x7f0000000540)=""/217, 0x42, 0xd9, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffbffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 576.919709ms ago: executing program 5 (id=4384): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 576.592359ms ago: executing program 5 (id=4385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000042528e3400"/20], 0x48) 563.141129ms ago: executing program 6 (id=4386): semget(0x1, 0x2, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r4, 0x2}], 0x1, 0xfa) r5 = dup2(r3, r4) poll(&(0x7f0000000080)=[{r5, 0x4000}, {r4, 0x3}], 0x2, 0xffff8001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r10, &(0x7f0000000280)={0x2000000, 0x100000000000}) 527.14052ms ago: executing program 5 (id=4387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000009c0)}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 465.895161ms ago: executing program 5 (id=4398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 342.194013ms ago: executing program 4 (id=4388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000b2e900007b8af8ff00000000bfa20000000002ae240fe0adcc470007020000f8ffffffb703000000000000b704000000000000850042034b5e21121a915a0ef11fed5146abdfbb574201e7b9eb25d4513e1b2f1ed413a547652f6476ffa060f50174e4cf2f6bfd9fb75fa35d64e3cc05193b05c2528963127ce3dd43e07bd650bc58b27f65cface9dec5b8ab17dbc7fc0387924d7d520ddf0e9c16020fbb220d360a6c80d1ce2a75544bd53b5ff4b592e6c946ec65ece80405d410db350fc78be4cca43d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffff92) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r3}, 0x10) r4 = gettid() r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 341.522883ms ago: executing program 5 (id=4401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x690) msgsnd(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000"], 0x401, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x7, 0xfffffffb, 0x4}]}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f, 0x71, 0x0]}}, &(0x7f0000000540)=""/217, 0x42, 0xd9, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffbffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) 259.976455ms ago: executing program 4 (id=4391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0xff4f, 0x801, &(0x7f0000000280)={0xa, 0x4e23, 0x62, @remote, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xa55c}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r11 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=@bloom_filter={0x1e, 0x81, 0xfffff40b, 0xc52, 0x12000, r1, 0x6, '\x00', r10, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r11}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 233.938145ms ago: executing program 4 (id=4392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0xc884, &(0x7f00000014c0)={0xa, 0x4e20, 0x6, @loopback, 0x18}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 232.862965ms ago: executing program 1 (id=4393): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0xc884, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 212.195746ms ago: executing program 4 (id=4394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000b2e900007b8af8ff00000000bfa20000000002ae240fe0adcc470007020000f8ffffffb703000000000000b704000000000000850042034b5e21121a915a0ef11fed5146abdfbb574201e7b9eb25d4513e1b2f1ed413a547652f6476ffa060f50174e4cf2f6bfd9fb75fa35d64e3cc05193b05c2528963127ce3dd43e07bd650bc58b27f65cface9dec5b8ab17dbc7fc0387924d7d520ddf0e9c16020fbb220d360a6c80d1ce2a75544bd53b5ff4b592e6c946ec65ece80405d410db350fc78be4cca43d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffff92) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/244, 0xf4}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x14ab}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000005880)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) 182.721136ms ago: executing program 1 (id=4395): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='=', 0x1}], 0x1) 182.507956ms ago: executing program 1 (id=4396): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 146.475267ms ago: executing program 1 (id=4400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000042528e3400"/20], 0x48) 85.952228ms ago: executing program 1 (id=4402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.5029ms ago: executing program 5 (id=4403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c400943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf45b665d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000009c0)}, {&(0x7f0000000180)="1b0ad65e03f9915bfddf26c24e848a70b9d041082765acf5bbcc6657aea857184012783975c51c2f", 0x28}, {&(0x7f00000010c0)="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", 0x2bc}], 0x4}}], 0x2, 0x4048884) 0s ago: executing program 1 (id=4404): sendmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(0x0, &(0x7f0000000200)={[&(0x7f0000000100)='*%{%$\xd3+\x00']}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x71, 0x4004, @fd_index=0x3, 0xb, &(0x7f0000000280)=[{0x0}], 0x1, 0x1e, 0x0, {0x2}}) r5 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): ass=netlink_route_socket permissive=1 [ 149.574692][ T29] audit: type=1400 audit(1758275547.984:10207): avc: denied { create } for pid=11959 comm="syz.2.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.585997][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.595047][ T29] audit: type=1400 audit(1758275548.004:10208): avc: denied { create } for pid=11912 comm="syz.5.1928" name=2A257B2524D32B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 149.627189][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.690056][ T29] audit: type=1326 audit(1758275548.214:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 149.714598][ T29] audit: type=1326 audit(1758275548.214:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 149.765897][T11978] loop5: detected capacity change from 0 to 512 [ 149.780904][T11986] serio: Serial port ptm0 [ 149.796625][T11978] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 149.797687][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.843555][T11978] EXT4-fs (loop5): 1 truncate cleaned up [ 149.850777][T11978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.907196][T12002] loop4: detected capacity change from 0 to 1024 [ 149.924336][T12002] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 149.943459][T12009] FAULT_INJECTION: forcing a failure. [ 149.943459][T12009] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.956823][T12009] CPU: 0 UID: 0 PID: 12009 Comm: syz.6.1957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.956942][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.956960][T12009] Call Trace: [ 149.956968][T12009] [ 149.956985][T12009] __dump_stack+0x1d/0x30 [ 149.957012][T12009] dump_stack_lvl+0xe8/0x140 [ 149.957037][T12009] dump_stack+0x15/0x1b [ 149.957057][T12009] should_fail_ex+0x265/0x280 [ 149.957150][T12009] should_fail_alloc_page+0xf2/0x100 [ 149.957185][T12009] __alloc_frozen_pages_noprof+0xff/0x360 [ 149.957259][T12009] alloc_pages_mpol+0xb3/0x250 [ 149.957302][T12009] vma_alloc_folio_noprof+0x1aa/0x300 [ 149.957342][T12009] do_wp_page+0x5db/0x24e0 [ 149.957430][T12009] ? css_rstat_updated+0xb7/0x240 [ 149.957484][T12009] ? __rcu_read_lock+0x37/0x50 [ 149.957536][T12009] handle_mm_fault+0x77d/0x2c20 [ 149.957561][T12009] ? __rcu_read_unlock+0x4f/0x70 [ 149.957598][T12009] do_user_addr_fault+0x3fe/0x1090 [ 149.957647][T12009] exc_page_fault+0x62/0xa0 [ 149.957703][T12009] asm_exc_page_fault+0x26/0x30 [ 149.957723][T12009] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 149.957802][T12009] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 149.957826][T12009] RSP: 0018:ffffc90001c7f9e0 EFLAGS: 00050202 [ 149.957899][T12009] RAX: ffff888102332ba0 RBX: ffff88811ad89000 RCX: 0000000000000d80 [ 149.957961][T12009] RDX: 0000000000000000 RSI: ffff88811ad89140 RDI: 000020000000d000 [ 149.957996][T12009] RBP: 000020000000cec0 R08: 000000000000010d R09: 0000000000000000 [ 149.958065][T12009] R10: 000188811ad89000 R11: 000188811ad89ebf R12: 000020000000dd80 [ 149.958080][T12009] R13: ffffc90001c7fdc0 R14: 0000000000000ec0 R15: 00007ffffffff000 [ 149.958104][T12009] _copy_to_iter+0x141/0xe70 [ 149.958137][T12009] ? __memcg_slab_free_hook+0xbc/0x230 [ 149.958266][T12009] ? refill_obj_stock+0x254/0x2e0 [ 149.958329][T12009] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 149.958375][T12009] __skb_datagram_iter+0xc6/0x690 [ 149.958409][T12009] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 149.958442][T12009] ? __kfree_skb+0x109/0x150 [ 149.958469][T12009] ? kmem_cache_free+0xdf/0x300 [ 149.958523][T12009] skb_copy_datagram_iter+0x3d/0x110 [ 149.958556][T12009] unix_stream_read_actor+0x43/0x70 [ 149.958640][T12009] unix_stream_read_generic+0x6b1/0x1580 [ 149.958679][T12009] unix_stream_recvmsg+0xc3/0xf0 [ 149.958709][T12009] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 149.958742][T12009] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 149.958830][T12009] sock_recvmsg+0x139/0x170 [ 149.958919][T12009] __sys_recvfrom+0x122/0x1f0 [ 149.958955][T12009] __x64_sys_recvfrom+0x76/0x90 [ 149.958984][T12009] x64_sys_call+0x2f20/0x2ff0 [ 149.959013][T12009] do_syscall_64+0xd2/0x200 [ 149.959103][T12009] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.959208][T12009] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 149.959247][T12009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.959272][T12009] RIP: 0033:0x7f8a6114eba9 [ 149.959353][T12009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.959376][T12009] RSP: 002b:00007f8a5fbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 149.959399][T12009] RAX: ffffffffffffffda RBX: 00007f8a61395fa0 RCX: 00007f8a6114eba9 [ 149.959414][T12009] RDX: fffffffffffffedc RSI: 0000200000004000 RDI: 0000000000000003 [ 149.959429][T12009] RBP: 00007f8a5fbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.959441][T12009] R10: 0000000000002080 R11: 0000000000000246 R12: 0000000000000002 [ 149.959453][T12009] R13: 00007f8a61396038 R14: 00007f8a61395fa0 R15: 00007ffdaf454e88 [ 149.959538][T12009] [ 149.961560][T12002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.987786][T12008] bridge0: entered promiscuous mode [ 150.348429][T12008] macsec1: entered promiscuous mode [ 150.350066][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.354979][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.365738][T12008] bridge0: port 1(macsec1) entered blocking state [ 150.378799][T12008] bridge0: port 1(macsec1) entered disabled state [ 150.385891][T12008] macsec1: entered allmulticast mode [ 150.391476][T12008] bridge0: entered allmulticast mode [ 150.398490][T12008] macsec1: left allmulticast mode [ 150.403767][T12008] bridge0: left allmulticast mode [ 150.412598][T12008] bridge0: left promiscuous mode [ 150.438927][T12030] wireguard0: entered promiscuous mode [ 150.444478][T12030] wireguard0: entered allmulticast mode [ 150.527907][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 150.561852][T12047] netlink: 'syz.5.1965': attribute type 30 has an invalid length. [ 150.668279][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 150.740462][T12060] IPVS: Unknown mcast interface: vcan0 [ 150.778983][T12062] tipc: Resetting bearer [ 150.810712][T12074] FAULT_INJECTION: forcing a failure. [ 150.810712][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 150.824386][T12074] CPU: 1 UID: 0 PID: 12074 Comm: syz.5.1975 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.824423][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.824437][T12074] Call Trace: [ 150.824445][T12074] [ 150.824455][T12074] __dump_stack+0x1d/0x30 [ 150.824518][T12074] dump_stack_lvl+0xe8/0x140 [ 150.824538][T12074] dump_stack+0x15/0x1b [ 150.824554][T12074] should_fail_ex+0x265/0x280 [ 150.824580][T12074] should_failslab+0x8c/0xb0 [ 150.824661][T12074] kmem_cache_alloc_noprof+0x50/0x310 [ 150.824691][T12074] ? getname_flags+0x80/0x3b0 [ 150.824721][T12074] getname_flags+0x80/0x3b0 [ 150.824819][T12074] user_path_at+0x28/0x130 [ 150.824919][T12074] __se_sys_name_to_handle_at+0xff/0x630 [ 150.824950][T12074] ? ksys_write+0x192/0x1a0 [ 150.824975][T12074] __x64_sys_name_to_handle_at+0x67/0x80 [ 150.825007][T12074] x64_sys_call+0x1552/0x2ff0 [ 150.825094][T12074] do_syscall_64+0xd2/0x200 [ 150.825209][T12074] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.825234][T12074] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.825265][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.825287][T12074] RIP: 0033:0x7f378128eba9 [ 150.825378][T12074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.825397][T12074] RSP: 002b:00007f377fcef038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 150.825417][T12074] RAX: ffffffffffffffda RBX: 00007f37814d5fa0 RCX: 00007f378128eba9 [ 150.825429][T12074] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 150.825484][T12074] RBP: 00007f377fcef090 R08: 0000000000000200 R09: 0000000000000000 [ 150.825496][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.825508][T12074] R13: 00007f37814d6038 R14: 00007f37814d5fa0 R15: 00007ffd71914938 [ 150.825528][T12074] [ 151.092361][T12076] tmpfs: Unknown parameter 'usrjquota' [ 151.321718][T12107] loop5: detected capacity change from 0 to 1024 [ 151.335927][T12107] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.384554][T12107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.398818][T12123] serio: Serial port ptm0 [ 151.422114][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.461408][T12129] loop5: detected capacity change from 0 to 512 [ 151.491188][T12129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.508382][T12129] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.688827][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.774000][T12165] loop5: detected capacity change from 0 to 1024 [ 151.790684][T12165] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 151.808546][T12165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.882442][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.931839][T12182] netlink: 'syz.6.2010': attribute type 1 has an invalid length. [ 151.974932][T12187] program syz.5.2009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.150891][T12217] serio: Serial port ptm0 [ 152.251036][T12230] FAULT_INJECTION: forcing a failure. [ 152.251036][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 152.263905][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.1.2023 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.263980][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.263996][T12230] Call Trace: [ 152.264003][T12230] [ 152.264013][T12230] __dump_stack+0x1d/0x30 [ 152.264039][T12230] dump_stack_lvl+0xe8/0x140 [ 152.264059][T12230] dump_stack+0x15/0x1b [ 152.264100][T12230] should_fail_ex+0x265/0x280 [ 152.264134][T12230] should_failslab+0x8c/0xb0 [ 152.264164][T12230] kmem_cache_alloc_noprof+0x50/0x310 [ 152.264191][T12230] ? skb_clone+0x151/0x1f0 [ 152.264265][T12230] skb_clone+0x151/0x1f0 [ 152.264291][T12230] __netlink_deliver_tap+0x2c9/0x500 [ 152.264328][T12230] netlink_unicast+0x66b/0x690 [ 152.264428][T12230] netlink_sendmsg+0x58b/0x6b0 [ 152.264504][T12230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.264579][T12230] __sock_sendmsg+0x145/0x180 [ 152.264621][T12230] ____sys_sendmsg+0x31e/0x4e0 [ 152.264730][T12230] ___sys_sendmsg+0x17b/0x1d0 [ 152.264772][T12230] __x64_sys_sendmsg+0xd4/0x160 [ 152.264918][T12230] x64_sys_call+0x191e/0x2ff0 [ 152.264945][T12230] do_syscall_64+0xd2/0x200 [ 152.265064][T12230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.265098][T12230] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.265133][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.265159][T12230] RIP: 0033:0x7f504e79eba9 [ 152.265236][T12230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.265259][T12230] RSP: 002b:00007f504d207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.265283][T12230] RAX: ffffffffffffffda RBX: 00007f504e9e5fa0 RCX: 00007f504e79eba9 [ 152.265359][T12230] RDX: 0000000000008010 RSI: 00002000000000c0 RDI: 0000000000000004 [ 152.265371][T12230] RBP: 00007f504d207090 R08: 0000000000000000 R09: 0000000000000000 [ 152.265387][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.265402][T12230] R13: 00007f504e9e6038 R14: 00007f504e9e5fa0 R15: 00007ffec2a7f5f8 [ 152.265428][T12230] [ 152.527596][T12240] SELinux: Context system_u:object is not valid (left unmapped). [ 152.571780][T12245] syzkaller0: entered promiscuous mode [ 152.577634][T12245] syzkaller0: entered allmulticast mode [ 152.593851][T12245] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 152.602105][T12245] netlink: 'syz.4.2030': attribute type 2 has an invalid length. [ 152.611934][T12245] netlink: 'syz.4.2030': attribute type 1 has an invalid length. [ 152.619798][T12245] netlink: 'syz.4.2030': attribute type 2 has an invalid length. [ 152.689291][T12264] serio: Serial port ptm0 [ 152.893032][T12297] loop5: detected capacity change from 0 to 512 [ 152.901385][T12297] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 152.932466][T12306] FAULT_INJECTION: forcing a failure. [ 152.932466][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.946065][T12306] CPU: 1 UID: 0 PID: 12306 Comm: syz.4.2049 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.946096][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.946110][T12306] Call Trace: [ 152.946117][T12306] [ 152.946126][T12306] __dump_stack+0x1d/0x30 [ 152.946181][T12306] dump_stack_lvl+0xe8/0x140 [ 152.946205][T12306] dump_stack+0x15/0x1b [ 152.946220][T12306] should_fail_ex+0x265/0x280 [ 152.946248][T12306] should_fail+0xb/0x20 [ 152.946274][T12306] should_fail_usercopy+0x1a/0x20 [ 152.946342][T12306] _copy_to_user+0x20/0xa0 [ 152.946382][T12306] simple_read_from_buffer+0xb5/0x130 [ 152.946412][T12306] proc_fail_nth_read+0x10e/0x150 [ 152.946441][T12306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.946556][T12306] vfs_read+0x1a5/0x770 [ 152.946576][T12306] ? __rcu_read_unlock+0x4f/0x70 [ 152.946597][T12306] ? __fget_files+0x184/0x1c0 [ 152.946630][T12306] ksys_read+0xda/0x1a0 [ 152.946660][T12306] __x64_sys_read+0x40/0x50 [ 152.946710][T12306] x64_sys_call+0x27bc/0x2ff0 [ 152.946738][T12306] do_syscall_64+0xd2/0x200 [ 152.946787][T12306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 152.946826][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.946936][T12306] RIP: 0033:0x7f9d26ffd5bc [ 152.947021][T12306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 152.947043][T12306] RSP: 002b:00007f9d25a46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.947067][T12306] RAX: ffffffffffffffda RBX: 00007f9d27246090 RCX: 00007f9d26ffd5bc [ 152.947082][T12306] RDX: 000000000000000f RSI: 00007f9d25a460a0 RDI: 000000000000000a [ 152.947098][T12306] RBP: 00007f9d25a46090 R08: 0000000000000000 R09: 0000000000000000 [ 152.947113][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.947139][T12306] R13: 00007f9d27246128 R14: 00007f9d27246090 R15: 00007ffd0050b818 [ 152.947221][T12306] [ 152.963724][T12297] EXT4-fs (loop5): failed to open journal device unknown-block(0,4) -6 [ 153.165765][T12297] tipc: Started in network mode [ 153.170691][T12297] tipc: Node identity ac14140f, cluster identity 4711 [ 153.177636][T12297] tipc: New replicast peer: 255.255.255.255 [ 153.183726][T12297] tipc: Enabled bearer , priority 10 [ 153.222444][T12329] serio: Serial port ptm0 [ 153.231158][T12332] tipc: Enabled bearer , priority 0 [ 153.238571][T12332] syzkaller0: entered promiscuous mode [ 153.244350][T12332] syzkaller0: entered allmulticast mode [ 153.258721][T12332] tipc: Resetting bearer [ 153.288129][T12335] loop5: detected capacity change from 0 to 1024 [ 153.295563][T12335] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 153.316963][T12335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.346869][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.417832][T12361] tipc: Enabled bearer , priority 0 [ 153.431590][T12361] syzkaller0: entered promiscuous mode [ 153.437321][T12361] syzkaller0: entered allmulticast mode [ 153.449301][T12361] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 153.461347][T12361] FAULT_INJECTION: forcing a failure. [ 153.461347][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 153.474273][T12361] CPU: 0 UID: 0 PID: 12361 Comm: syz.5.2069 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.474308][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.474324][T12361] Call Trace: [ 153.474331][T12361] [ 153.474340][T12361] __dump_stack+0x1d/0x30 [ 153.474441][T12361] dump_stack_lvl+0xe8/0x140 [ 153.474466][T12361] dump_stack+0x15/0x1b [ 153.474488][T12361] should_fail_ex+0x265/0x280 [ 153.474519][T12361] should_failslab+0x8c/0xb0 [ 153.474567][T12361] kmem_cache_alloc_node_noprof+0x57/0x320 [ 153.474607][T12361] ? __alloc_skb+0x101/0x320 [ 153.474649][T12361] __alloc_skb+0x101/0x320 [ 153.474678][T12361] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 153.474759][T12361] ? __rcu_read_unlock+0x4f/0x70 [ 153.474786][T12361] ? __pfx_rtnetlink_event+0x10/0x10 [ 153.474827][T12361] rtnetlink_event+0x18c/0x200 [ 153.474961][T12361] raw_notifier_call_chain+0x6f/0x1b0 [ 153.474988][T12361] ? call_netdevice_notifiers_info+0x9c/0x100 [ 153.475033][T12361] call_netdevice_notifiers_info+0xae/0x100 [ 153.475084][T12361] netif_set_mtu_ext+0x356/0x470 [ 153.475121][T12361] netif_set_mtu+0x4a/0xf0 [ 153.475204][T12361] dev_set_mtu+0xc1/0x170 [ 153.475229][T12361] dev_ifsioc+0x474/0xaa0 [ 153.475304][T12361] ? __rcu_read_unlock+0x4f/0x70 [ 153.475338][T12361] dev_ioctl+0x70a/0x960 [ 153.475374][T12361] sock_do_ioctl+0x197/0x220 [ 153.475418][T12361] sock_ioctl+0x41b/0x610 [ 153.475457][T12361] ? __pfx_sock_ioctl+0x10/0x10 [ 153.475524][T12361] __se_sys_ioctl+0xce/0x140 [ 153.475549][T12361] __x64_sys_ioctl+0x43/0x50 [ 153.475647][T12361] x64_sys_call+0x1816/0x2ff0 [ 153.475674][T12361] do_syscall_64+0xd2/0x200 [ 153.475716][T12361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.475749][T12361] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 153.475890][T12361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.475913][T12361] RIP: 0033:0x7f378128eba9 [ 153.475931][T12361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.476002][T12361] RSP: 002b:00007f377fcef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.476079][T12361] RAX: ffffffffffffffda RBX: 00007f37814d5fa0 RCX: 00007f378128eba9 [ 153.476092][T12361] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 153.476123][T12361] RBP: 00007f377fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 153.476136][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.476148][T12361] R13: 00007f37814d6038 R14: 00007f37814d5fa0 R15: 00007ffd71914938 [ 153.476238][T12361] [ 153.520500][T12370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12370 comm=syz.4.2071 [ 153.526657][T12361] tipc: Resetting bearer [ 153.758249][T12360] tipc: Resetting bearer [ 153.785244][T12360] tipc: Disabling bearer [ 153.845431][T12386] 9pnet_fd: Insufficient options for proto=fd [ 154.019491][T12403] loop4: detected capacity change from 0 to 128 [ 154.031383][T12403] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 154.039301][T12403] FAT-fs (loop4): Filesystem has been set read-only [ 154.046065][T12403] syz.4.2085: attempt to access beyond end of device [ 154.046065][T12403] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 154.059953][T12403] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 154.068033][T12403] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 154.076001][T12403] syz.4.2085: attempt to access beyond end of device [ 154.076001][T12403] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.089361][T12403] syz.4.2085: attempt to access beyond end of device [ 154.089361][T12403] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.105996][T12403] syz.4.2085: attempt to access beyond end of device [ 154.105996][T12403] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 154.170416][T12411] loop4: detected capacity change from 0 to 1024 [ 154.197358][T12411] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.241371][T12411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.279450][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.289291][ T3500] usb 13-1: enqueue for inactive port 0 [ 154.295105][ T3500] usb 13-1: enqueue for inactive port 0 [ 154.355653][T12430] loop4: detected capacity change from 0 to 512 [ 154.375619][T12430] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 154.388037][ T3500] vhci_hcd: vhci_device speed not set [ 154.446368][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 154.446459][ T29] audit: type=1400 audit(1758275552.984:10645): avc: denied { setopt } for pid=12438 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.452090][ T7704] tipc: Node number set to 2886997007 [ 154.453841][T12439] 9pnet_fd: Insufficient options for proto=fd [ 154.504883][ T29] audit: type=1400 audit(1758275553.034:10646): avc: denied { setopt } for pid=12429 comm="syz.4.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.577532][T12444] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 154.609479][T12444] bond0: (slave dummy0): Releasing backup interface [ 154.628139][ T29] audit: type=1326 audit(1758275553.164:10647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.652916][ T29] audit: type=1326 audit(1758275553.164:10648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.677884][ T29] audit: type=1326 audit(1758275553.164:10649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.687817][T12448] netlink: 'syz.4.2098': attribute type 10 has an invalid length. [ 154.702959][ T29] audit: type=1326 audit(1758275553.164:10650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.711164][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2099'. [ 154.734503][ T29] audit: type=1326 audit(1758275553.164:10651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.767268][ T29] audit: type=1326 audit(1758275553.164:10652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.791746][ T29] audit: type=1326 audit(1758275553.164:10653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.816569][ T29] audit: type=1326 audit(1758275553.164:10654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.1.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 154.843626][T12444] team0: Port device dummy0 added [ 154.878887][T12448] team0: Port device dummy0 removed [ 154.886434][T12448] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 154.906805][T12435] FAULT_INJECTION: forcing a failure. [ 154.906805][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 154.921667][T12435] CPU: 1 UID: 0 PID: 12435 Comm: syz.5.2095 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.921725][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.921750][T12435] Call Trace: [ 154.921758][T12435] [ 154.921768][T12435] __dump_stack+0x1d/0x30 [ 154.921805][T12435] dump_stack_lvl+0xe8/0x140 [ 154.921889][T12435] dump_stack+0x15/0x1b [ 154.921906][T12435] should_fail_ex+0x265/0x280 [ 154.921932][T12435] should_failslab+0x8c/0xb0 [ 154.921970][T12435] kmem_cache_alloc_node_noprof+0x57/0x320 [ 154.922037][T12435] ? __alloc_skb+0x101/0x320 [ 154.922108][T12435] __alloc_skb+0x101/0x320 [ 154.922136][T12435] netlink_alloc_large_skb+0xba/0xf0 [ 154.922166][T12435] netlink_sendmsg+0x3cf/0x6b0 [ 154.922201][T12435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.922255][T12435] __sock_sendmsg+0x145/0x180 [ 154.922319][T12435] ____sys_sendmsg+0x31e/0x4e0 [ 154.922363][T12435] ___sys_sendmsg+0x17b/0x1d0 [ 154.922431][T12435] ? prepare_signal+0x596/0x670 [ 154.922492][T12435] __x64_sys_sendmsg+0xd4/0x160 [ 154.922568][T12435] x64_sys_call+0x191e/0x2ff0 [ 154.922595][T12435] do_syscall_64+0xd2/0x200 [ 154.922633][T12435] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.922700][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.922772][T12435] RIP: 0033:0x7f378128eba9 [ 154.922787][T12435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.922815][T12435] RSP: 002b:00007f377fcef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.922838][T12435] RAX: ffffffffffffffda RBX: 00007f37814d5fa0 RCX: 00007f378128eba9 [ 154.922854][T12435] RDX: 0000000000000040 RSI: 00002000000038c0 RDI: 000000000000001b [ 154.922868][T12435] RBP: 00007f377fcef090 R08: 0000000000000000 R09: 0000000000000000 [ 154.922898][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.922910][T12435] R13: 00007f37814d6038 R14: 00007f37814d5fa0 R15: 00007ffd71914938 [ 154.922929][T12435] [ 155.344973][T12475] serio: Serial port ptm0 [ 155.352649][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2111'. [ 155.364942][T12473] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=11792 sclass=netlink_xfrm_socket pid=12473 comm=syz.2.2109 [ 155.554180][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2124'. [ 155.680544][T12537] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2117'. [ 155.914172][T12545] loop5: detected capacity change from 0 to 1024 [ 155.922615][T12545] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 155.947136][T12545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.975536][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.036974][T12558] serio: Serial port ptm0 [ 156.119255][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2126'. [ 156.207287][T12569] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2129'. [ 156.216870][T12570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2129'. [ 156.249955][T12578] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2131'. [ 156.400025][T12591] serio: Serial port ptm0 [ 156.423659][T12593] netlink: 'syz.1.2135': attribute type 30 has an invalid length. [ 156.457389][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 156.526425][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 156.721833][T12620] loop5: detected capacity change from 0 to 1024 [ 156.729559][T12620] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 156.771994][T12630] FAULT_INJECTION: forcing a failure. [ 156.771994][T12630] name failslab, interval 1, probability 0, space 0, times 0 [ 156.772023][T12630] CPU: 1 UID: 0 PID: 12630 Comm: syz.6.2149 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.772056][T12630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.772072][T12630] Call Trace: [ 156.772081][T12630] [ 156.772088][T12630] __dump_stack+0x1d/0x30 [ 156.772203][T12630] dump_stack_lvl+0xe8/0x140 [ 156.772228][T12630] dump_stack+0x15/0x1b [ 156.772248][T12630] should_fail_ex+0x265/0x280 [ 156.772343][T12630] should_failslab+0x8c/0xb0 [ 156.772373][T12630] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 156.772411][T12630] ? __d_alloc+0x3d/0x340 [ 156.772529][T12630] __d_alloc+0x3d/0x340 [ 156.772576][T12630] ? mpol_shared_policy_init+0xbd/0x4c0 [ 156.772611][T12630] d_alloc_pseudo+0x1e/0x80 [ 156.772646][T12630] alloc_file_pseudo+0x71/0x160 [ 156.772746][T12630] __shmem_file_setup+0x1de/0x210 [ 156.772819][T12630] shmem_file_setup+0x3b/0x50 [ 156.772839][T12630] __se_sys_memfd_create+0x2c3/0x590 [ 156.772863][T12630] __x64_sys_memfd_create+0x31/0x40 [ 156.772947][T12630] x64_sys_call+0x2abe/0x2ff0 [ 156.772975][T12630] do_syscall_64+0xd2/0x200 [ 156.773021][T12630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 156.773059][T12630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.773140][T12630] RIP: 0033:0x7f8a6114eba9 [ 156.773158][T12630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.773182][T12630] RSP: 002b:00007f8a5fbb6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 156.773206][T12630] RAX: ffffffffffffffda RBX: 0000000000000473 RCX: 00007f8a6114eba9 [ 156.773221][T12630] RDX: 00007f8a5fbb6ef0 RSI: 0000000000000000 RDI: 00007f8a611d27e8 [ 156.773303][T12630] RBP: 0000200000000640 R08: 00007f8a5fbb6bb7 R09: 00007f8a5fbb6e40 [ 156.773318][T12630] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 156.773333][T12630] R13: 00007f8a5fbb6ef0 R14: 00007f8a5fbb6eb0 R15: 00002000000005c0 [ 156.773496][T12630] [ 156.883626][T12648] loop6: detected capacity change from 0 to 2048 [ 157.001659][T12653] netlink: 'syz.5.2156': attribute type 10 has an invalid length. [ 157.062289][T12653] team0: Device dummy0 is up. Set it down before adding it as a team port [ 157.067317][T12648] loop6: p1 < > p4 [ 157.077932][T12657] netlink: 'syz.1.2157': attribute type 30 has an invalid length. [ 157.078331][T12648] loop6: p4 size 8388608 extends beyond EOD, truncated [ 157.275417][T12682] serio: Serial port ptm0 [ 157.296123][T12686] loop5: detected capacity change from 0 to 1024 [ 157.307670][T12686] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.394551][ T385] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 393: padding at end of block bitmap is not set [ 157.409728][ T385] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 157.422631][ T385] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.422631][ T385] [ 157.480961][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.489749][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.718889][T12715] serio: Serial port ptm0 [ 157.774069][T12727] netlink: 'syz.2.2175': attribute type 30 has an invalid length. [ 157.804027][T12734] serio: Serial port ptm0 [ 158.039454][T12755] loop5: detected capacity change from 0 to 1024 [ 158.047036][T12755] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.140635][T12769] serio: Serial port ptm0 [ 158.281957][T12788] netlink: 'syz.5.2192': attribute type 30 has an invalid length. [ 158.419511][T12800] loop5: detected capacity change from 0 to 1024 [ 158.438131][T12800] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 158.526966][T12812] serio: Serial port ptm0 [ 158.856844][T12830] netlink: 'syz.5.2206': attribute type 30 has an invalid length. [ 158.952502][T12843] loop4: detected capacity change from 0 to 1024 [ 158.960021][T12843] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 159.007149][T12850] loop5: detected capacity change from 0 to 2048 [ 159.045938][T12850] loop5: p1 < > p4 [ 159.050992][T12860] serio: Serial port ptm0 [ 159.051023][T12850] loop5: p4 size 8388608 extends beyond EOD, truncated [ 159.094533][T12872] serio: Serial port ptm1 [ 159.210702][T12893] netlink: 'syz.4.2223': attribute type 30 has an invalid length. [ 159.373319][T12913] serio: Serial port ptm0 [ 159.452372][T12921] netlink: 'syz.5.2234': attribute type 1 has an invalid length. [ 159.485323][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 159.485342][ T29] audit: type=1326 audit(1758275558.014:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.515162][ T29] audit: type=1326 audit(1758275558.014:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12920 comm="syz.5.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.562734][ T29] audit: type=1326 audit(1758275558.094:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.586503][ T29] audit: type=1326 audit(1758275558.094:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.610171][ T29] audit: type=1326 audit(1758275558.094:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.633880][ T29] audit: type=1326 audit(1758275558.094:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.657567][ T29] audit: type=1326 audit(1758275558.094:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.681278][ T29] audit: type=1326 audit(1758275558.094:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.704970][ T29] audit: type=1326 audit(1758275558.094:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.728675][ T29] audit: type=1326 audit(1758275558.094:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12931 comm="syz.5.2237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 159.827045][T12944] netlink: 'syz.5.2242': attribute type 30 has an invalid length. [ 159.860149][T12947] serio: Serial port ptm0 [ 159.883676][T12960] __nla_validate_parse: 10 callbacks suppressed [ 159.883734][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2248'. [ 159.899263][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2248'. [ 159.938664][T12966] loop4: detected capacity change from 0 to 1024 [ 159.959896][T12966] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 160.129983][T12997] netlink: 'syz.4.2262': attribute type 30 has an invalid length. [ 160.186224][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2266'. [ 160.195385][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 160.217981][T13010] loop5: detected capacity change from 0 to 2048 [ 160.250793][T13017] loop4: detected capacity change from 0 to 1024 [ 160.260906][T13017] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 160.289741][T13010] loop5: p1 < > p4 [ 160.294367][T13010] loop5: p4 size 8388608 extends beyond EOD, truncated [ 160.339841][T13035] netlink: 'syz.1.2275': attribute type 30 has an invalid length. [ 160.438667][T13047] SELinux: ebitmap: truncated map [ 160.444303][T13047] SELinux: failed to load policy [ 160.473433][T13047] loop5: detected capacity change from 0 to 2048 [ 160.480299][T13047] EXT4-fs: inline encryption not supported [ 160.500866][T13059] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2280'. [ 160.553498][T13071] serio: Serial port ptm0 [ 160.571300][T13074] loop4: detected capacity change from 0 to 1024 [ 160.580804][T13074] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 160.647776][T13083] serio: Serial port ptm1 [ 160.664997][T13088] netlink: 'syz.4.2287': attribute type 30 has an invalid length. [ 160.873640][T13106] loop4: detected capacity change from 0 to 1024 [ 160.881708][T13106] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 161.011026][T13123] loop4: detected capacity change from 0 to 1024 [ 161.018563][T13123] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 161.072862][T13132] serio: Serial port ptm1 [ 161.154691][T13141] netlink: 'syz.4.2301': attribute type 30 has an invalid length. [ 161.273112][T13157] loop5: detected capacity change from 0 to 2048 [ 161.316944][T13157] loop5: p1 < > p4 [ 161.326577][T13157] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.402245][T13180] loop5: detected capacity change from 0 to 1024 [ 161.410775][T13180] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 161.549966][T13205] netlink: 'syz.6.2320': attribute type 30 has an invalid length. [ 161.572818][T13202] SELinux: ebitmap: truncated map [ 161.578394][T13202] SELinux: failed to load policy [ 161.594831][T13202] loop4: detected capacity change from 0 to 2048 [ 161.601619][T13202] EXT4-fs: inline encryption not supported [ 161.628276][T13216] serio: Serial port ptm0 [ 161.651254][T13214] loop5: detected capacity change from 0 to 2048 [ 161.690465][T13214] loop5: p1 < > p4 [ 161.705201][T13214] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.742112][T13235] serio: Serial port ptm1 [ 161.959968][T13267] netlink: 'syz.6.2337': attribute type 30 has an invalid length. [ 161.967656][T13269] loop5: detected capacity change from 0 to 1024 [ 161.976015][T13269] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.091360][T13288] loop6: detected capacity change from 0 to 2048 [ 162.125863][T13288] loop6: p1 < > p4 [ 162.130396][T13288] loop6: p4 size 8388608 extends beyond EOD, truncated [ 162.168801][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2342'. [ 162.177902][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2342'. [ 162.206343][T13298] loop6: detected capacity change from 0 to 2048 [ 162.265736][T13298] loop6: p1 < > p4 [ 162.275348][T13298] loop6: p4 size 8388608 extends beyond EOD, truncated [ 162.354031][T13322] loop5: detected capacity change from 0 to 1024 [ 162.363442][T13322] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.475682][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2352'. [ 162.502993][T13333] netlink: 'syz.5.2352': attribute type 6 has an invalid length. [ 162.728720][T13350] loop4: detected capacity change from 0 to 512 [ 162.737985][T13350] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.760499][T13350] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2351: Failed to acquire dquot type 1 [ 162.774992][T13350] EXT4-fs (loop4): 1 truncate cleaned up [ 162.947221][T13359] netlink: 'syz.2.2357': attribute type 30 has an invalid length. [ 163.273385][T13377] loop6: detected capacity change from 0 to 1024 [ 163.284502][T13377] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 163.333139][T13384] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2366'. [ 163.438658][T13400] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 163.449848][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2371'. [ 163.487822][T13404] loop4: detected capacity change from 0 to 1024 [ 163.598190][T13420] EXT4-fs (loop4): shut down requested (1) [ 164.040846][T13459] serio: Serial port ptm0 [ 164.565647][T13426] syz.5.2377 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 164.579817][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.5.2377 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.579862][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.579878][T13426] Call Trace: [ 164.579931][T13426] [ 164.579941][T13426] __dump_stack+0x1d/0x30 [ 164.579967][T13426] dump_stack_lvl+0xe8/0x140 [ 164.579991][T13426] dump_stack+0x15/0x1b [ 164.580011][T13426] dump_header+0x81/0x220 [ 164.580108][T13426] oom_kill_process+0x342/0x400 [ 164.580155][T13426] out_of_memory+0x979/0xb80 [ 164.580198][T13426] try_charge_memcg+0x5e6/0x9e0 [ 164.580294][T13426] obj_cgroup_charge_pages+0xa6/0x150 [ 164.580339][T13426] __memcg_kmem_charge_page+0x9f/0x170 [ 164.580415][T13426] __alloc_frozen_pages_noprof+0x188/0x360 [ 164.580463][T13426] alloc_pages_mpol+0xb3/0x250 [ 164.580503][T13426] alloc_pages_noprof+0x90/0x130 [ 164.580572][T13426] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 164.580775][T13426] __kvmalloc_node_noprof+0x30f/0x4e0 [ 164.580828][T13426] ? ip_set_alloc+0x1f/0x30 [ 164.580899][T13426] ? ip_set_alloc+0x1f/0x30 [ 164.580926][T13426] ? hash_netiface_create+0x21b/0x740 [ 164.580953][T13426] ? __kmalloc_cache_noprof+0x189/0x320 [ 164.580993][T13426] ip_set_alloc+0x1f/0x30 [ 164.581073][T13426] hash_netiface_create+0x282/0x740 [ 164.581192][T13426] ? __pfx_hash_netiface_create+0x10/0x10 [ 164.581222][T13426] ip_set_create+0x3c9/0x960 [ 164.581289][T13426] ? save_fpregs_to_fpstate+0x100/0x160 [ 164.581375][T13426] nfnetlink_rcv_msg+0x4c3/0x590 [ 164.581440][T13426] netlink_rcv_skb+0x123/0x220 [ 164.581469][T13426] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.581502][T13426] nfnetlink_rcv+0x16b/0x1690 [ 164.581574][T13426] ? nlmon_xmit+0x4f/0x60 [ 164.581614][T13426] ? consume_skb+0x49/0x150 [ 164.581645][T13426] ? nlmon_xmit+0x4f/0x60 [ 164.581676][T13426] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 164.581779][T13426] ? __dev_queue_xmit+0x1200/0x2000 [ 164.581812][T13426] ? __dev_queue_xmit+0x182/0x2000 [ 164.581858][T13426] ? ref_tracker_free+0x37d/0x3e0 [ 164.581969][T13426] ? __netlink_deliver_tap+0x4dc/0x500 [ 164.582048][T13426] netlink_unicast+0x5bd/0x690 [ 164.582079][T13426] netlink_sendmsg+0x58b/0x6b0 [ 164.582115][T13426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.582151][T13426] __sock_sendmsg+0x145/0x180 [ 164.582261][T13426] ____sys_sendmsg+0x31e/0x4e0 [ 164.582299][T13426] ___sys_sendmsg+0x17b/0x1d0 [ 164.582419][T13426] __x64_sys_sendmsg+0xd4/0x160 [ 164.582461][T13426] x64_sys_call+0x191e/0x2ff0 [ 164.582489][T13426] do_syscall_64+0xd2/0x200 [ 164.582541][T13426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.582634][T13426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.582673][T13426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.582700][T13426] RIP: 0033:0x7f378128eba9 [ 164.582720][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.582742][T13426] RSP: 002b:00007f377fcce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.582791][T13426] RAX: ffffffffffffffda RBX: 00007f37814d6090 RCX: 00007f378128eba9 [ 164.582804][T13426] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 164.582817][T13426] RBP: 00007f3781311e19 R08: 0000000000000000 R09: 0000000000000000 [ 164.582829][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.582845][T13426] R13: 00007f37814d6128 R14: 00007f37814d6090 R15: 00007ffd71914938 [ 164.582912][T13426] [ 164.582933][T13426] memory: usage 307200kB, limit 307200kB, failcnt 191 [ 164.693237][ T385] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.694221][T13426] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 164.717843][ T385] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.719972][T13426] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 164.719990][T13426] Memory cgroup stats for /syz5: [ 164.720697][T13426] cache 0 [ 164.732946][ T385] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.735582][T13426] rss 4096 [ 164.735593][T13426] shmem 0 [ 164.735601][T13426] mapped_file 0 [ 164.735612][T13426] dirty 0 [ 164.735619][T13426] writeback 0 [ 164.735627][T13426] workingset_refault_anon 29 [ 164.735636][T13426] workingset_refault_file 0 [ 164.735646][T13426] swap 192512 [ 164.735655][T13426] swapcached 12288 [ 164.735664][T13426] pgpgin 131169 [ 164.735671][T13426] pgpgout 131162 [ 164.735679][T13426] pgfault 127242 [ 164.735687][T13426] pgmajfault 34 [ 164.735696][T13426] inactive_anon 12288 [ 164.735705][T13426] active_anon 0 [ 164.735713][T13426] inactive_file 16384 [ 164.735722][T13426] active_file 0 [ 164.741891][ T385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.746051][T13426] unevictable 0 [ 164.746061][T13426] hierarchical_memory_limit 314572800 [ 164.746069][T13426] hierarchical_memsw_limit 9223372036854771712 [ 164.746079][T13426] total_cache 0 [ 164.746087][T13426] total_rss 4096 [ 164.746096][T13426] total_shmem 0 [ 164.746105][T13426] total_mapped_file 0 [ 164.746114][T13426] total_dirty 0 [ 164.746122][T13426] total_writeback 0 [ 164.851691][T13503] validate_nla: 3 callbacks suppressed [ 164.851731][T13503] netlink: 'syz.2.2402': attribute type 30 has an invalid length. [ 164.871409][T13426] total_workingset_refault_anon 29 [ 164.871502][T13426] total_workingset_refault_file 0 [ 164.871517][T13426] total_swap 192512 [ 164.871531][T13426] total_swapcached 12288 [ 164.871540][T13426] total_pgpgin 131169 [ 164.871550][T13426] total_pgpgout 131162 [ 164.871559][T13426] total_pgfault 127242 [ 164.871568][T13426] total_pgmajfault 34 [ 164.871575][T13426] total_inactive_anon 12288 [ 164.871584][T13426] total_active_anon 0 [ 164.871674][T13426] total_inactive_file 16384 [ 164.871684][T13426] total_active_file 0 [ 164.871693][T13426] total_unevictable 0 [ 164.871704][T13426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2377,pid=13421,uid=0 [ 164.871868][T13426] Memory cgroup out of memory: Killed process 13421 (syz.5.2377) total-vm:84592kB, anon-rss:1052kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 164.935035][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 164.935055][ T29] audit: type=1326 audit(1758275563.434:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.218610][ T29] audit: type=1326 audit(1758275563.434:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.242535][ T29] audit: type=1326 audit(1758275563.434:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.266233][ T29] audit: type=1326 audit(1758275563.434:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.289873][ T29] audit: type=1326 audit(1758275563.434:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.313685][ T29] audit: type=1326 audit(1758275563.434:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.337827][ T29] audit: type=1326 audit(1758275563.434:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.361474][ T29] audit: type=1326 audit(1758275563.434:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.385199][ T29] audit: type=1326 audit(1758275563.434:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.408826][ T29] audit: type=1326 audit(1758275563.434:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13492 comm="syz.1.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504e79eba9 code=0x7ffc0000 [ 165.475999][T13514] netlink: 'syz.5.2405': attribute type 21 has an invalid length. [ 165.481999][T13520] __nla_validate_parse: 7 callbacks suppressed [ 165.482019][T13520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2407'. [ 165.506791][T13514] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2405'. [ 165.644860][T13542] loop6: detected capacity change from 0 to 1024 [ 165.658625][T13542] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.689559][T13542] EXT4-fs mount: 36 callbacks suppressed [ 165.689643][T13542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.806404][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2415'. [ 165.843884][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.342252][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 166.502964][T13618] serio: Serial port ptm2 [ 166.598792][T13622] netlink: 'syz.5.2434': attribute type 21 has an invalid length. [ 166.615195][T13622] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2434'. [ 166.851642][T13641] loop5: detected capacity change from 0 to 1024 [ 166.860209][T13641] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 166.878391][T13641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.910293][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.036161][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 167.134245][T13666] netlink: 'syz.5.2446': attribute type 21 has an invalid length. [ 167.144875][T13666] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2446'. [ 167.482832][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2455'. [ 167.541280][T13712] netlink: 'syz.5.2461': attribute type 21 has an invalid length. [ 167.551192][T13712] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2461'. [ 167.627607][T13724] serio: Serial port ptm1 [ 167.856974][T13741] loop6: detected capacity change from 0 to 1024 [ 167.864280][T13741] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 167.877441][T13741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.905010][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.116438][T13751] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2470'. [ 168.403922][T13782] netlink: 'syz.5.2481': attribute type 21 has an invalid length. [ 168.652307][T13819] netlink: 'syz.4.2493': attribute type 30 has an invalid length. [ 168.896831][T13860] loop4: detected capacity change from 0 to 1024 [ 168.906572][T13860] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 168.929610][T13860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.979350][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.178228][T13909] netlink: 'syz.4.2523': attribute type 30 has an invalid length. [ 169.776512][T14001] netlink: 'syz.5.2547': attribute type 30 has an invalid length. [ 170.144898][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 170.144916][ T29] audit: type=1326 audit(1758275568.674:11787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.176137][ T29] audit: type=1326 audit(1758275568.674:11788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.201780][ T29] audit: type=1326 audit(1758275568.674:11789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.226217][ T29] audit: type=1326 audit(1758275568.684:11790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.250888][ T29] audit: type=1326 audit(1758275568.684:11791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.275264][ T29] audit: type=1326 audit(1758275568.684:11792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.299881][ T29] audit: type=1326 audit(1758275568.684:11793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.324147][ T29] audit: type=1326 audit(1758275568.684:11794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.348776][ T29] audit: type=1326 audit(1758275568.684:11795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.373376][ T29] audit: type=1326 audit(1758275568.684:11796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14030 comm="syz.5.2557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 170.482491][T14047] netlink: 'syz.6.2562': attribute type 30 has an invalid length. [ 170.652135][T14068] __nla_validate_parse: 9 callbacks suppressed [ 170.652154][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 170.958545][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2584'. [ 171.171227][ T37] gretap0: left allmulticast mode [ 171.176549][ T37] gretap0: left promiscuous mode [ 171.181679][ T37] bridge0: port 3(gretap0) entered disabled state [ 171.195087][T14156] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 171.210029][ T37] bridge_slave_1: left allmulticast mode [ 171.215787][ T37] bridge_slave_1: left promiscuous mode [ 171.221470][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.243093][ T37] bridge_slave_0: left allmulticast mode [ 171.248950][ T37] bridge_slave_0: left promiscuous mode [ 171.254720][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.337105][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2596'. [ 171.346510][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.356571][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.367740][ T37] bond0 (unregistering): Released all slaves [ 171.422184][ T37] tipc: Disabling bearer [ 171.427743][ T37] tipc: Left network mode [ 171.492052][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.509738][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.521425][ T37] pimreg (unregistering): left allmulticast mode [ 171.567944][T14249] serio: Serial port ptm1 [ 171.593952][ T37] team0 (unregistering): Port device team_slave_1 removed [ 171.607253][ T37] team0 (unregistering): Port device team_slave_0 removed [ 171.680874][T14115] chnl_net:caif_netlink_parms(): no params data found [ 171.730172][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 171.740573][T14115] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.747954][T14115] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.755355][T14115] bridge_slave_0: entered allmulticast mode [ 171.761964][T14115] bridge_slave_0: entered promiscuous mode [ 171.769030][T14115] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.776151][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.783429][T14115] bridge_slave_1: entered allmulticast mode [ 171.790814][T14115] bridge_slave_1: entered promiscuous mode [ 171.811147][T14115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.821859][T14115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.843859][T14115] team0: Port device team_slave_0 added [ 171.850624][T14115] team0: Port device team_slave_1 added [ 171.867986][T14115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.875034][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.901390][T14115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.916228][T14115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.923218][T14115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.949309][T14115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.992068][T14458] netlink: 'syz.1.2610': attribute type 30 has an invalid length. [ 171.995494][T14115] hsr_slave_0: entered promiscuous mode [ 172.006546][T14115] hsr_slave_1: entered promiscuous mode [ 172.012660][T14115] debugfs: 'hsr0' already exists in 'hsr' [ 172.018819][T14115] Cannot create hsr debugfs directory [ 172.280350][T14115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.290585][T14115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.303826][T14115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.313798][T14115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.345531][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2617'. [ 172.393648][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.413173][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.431044][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.438266][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.448155][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.455269][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.548781][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.634298][T14115] veth0_vlan: entered promiscuous mode [ 172.643583][T14115] veth1_vlan: entered promiscuous mode [ 172.662302][T14115] veth0_macvtap: entered promiscuous mode [ 172.670129][T14115] veth1_macvtap: entered promiscuous mode [ 172.683393][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.696407][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.708840][ T557] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.718343][ T557] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.727267][ T557] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.740841][ T557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.822692][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2627'. [ 172.836524][T14620] bridge1: entered promiscuous mode [ 172.841809][T14620] bridge1: entered allmulticast mode [ 172.922272][T14631] loop6: detected capacity change from 0 to 1024 [ 172.933084][T14631] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.965086][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 173.009779][T14631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.033766][T14642] serio: Serial port ptm0 [ 173.067079][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.693100][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 173.746502][T14682] netlink: 'syz.2.2645': attribute type 30 has an invalid length. [ 173.942623][T14708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2654'. [ 173.994015][T14718] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 174.139290][T14731] netlink: 'syz.6.2661': attribute type 30 has an invalid length. [ 174.163952][T14737] serio: Serial port ptm0 [ 174.250369][T14747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2665'. [ 174.817961][T14780] netlink: 'syz.5.2677': attribute type 30 has an invalid length. [ 175.153047][T14813] serio: Serial port ptm0 [ 175.223098][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 175.223115][ T29] audit: type=1326 audit(1758275573.754:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.273388][ T29] audit: type=1326 audit(1758275573.794:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.297432][ T29] audit: type=1326 audit(1758275573.794:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.321331][ T29] audit: type=1326 audit(1758275573.794:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.345172][ T29] audit: type=1326 audit(1758275573.794:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.369030][ T29] audit: type=1326 audit(1758275573.794:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.393350][ T29] audit: type=1326 audit(1758275573.794:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.417294][ T29] audit: type=1326 audit(1758275573.794:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.440822][ T29] audit: type=1326 audit(1758275573.794:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.464418][ T29] audit: type=1326 audit(1758275573.794:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14820 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 175.499825][T14828] serio: Serial port ptm1 [ 175.604833][T14846] netlink: 'syz.6.2698': attribute type 30 has an invalid length. [ 176.332588][T14917] serio: Serial port ptm0 [ 176.381927][T14925] netlink: 'syz.1.2722': attribute type 30 has an invalid length. [ 176.481314][T14937] netlink: 'syz.1.2724': attribute type 21 has an invalid length. [ 176.489424][T14937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2724'. [ 176.743442][T14961] serio: Serial port ptm1 [ 176.948762][T14978] netlink: 'syz.6.2737': attribute type 30 has an invalid length. [ 177.300288][T15027] loop5: detected capacity change from 0 to 1024 [ 177.308476][T15027] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 177.327907][T15027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.360913][T15036] serio: Serial port ptm0 [ 177.376686][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.599480][T15049] loop5: detected capacity change from 0 to 1024 [ 177.627325][T15049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.668929][T15049] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2759: bg 0: block 494: padding at end of block bitmap is not set [ 177.684706][T15049] EXT4-fs (loop5): Remounting filesystem read-only [ 177.691442][T15049] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 177.727460][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.762474][T15084] netlink: 'syz.5.2768': attribute type 30 has an invalid length. [ 177.847861][T15095] serio: Serial port ptm1 [ 178.175773][T15134] netlink: 'syz.2.2784': attribute type 30 has an invalid length. [ 178.358829][T15166] serio: Serial port ptm0 [ 178.957309][T15203] netlink: 'syz.6.2804': attribute type 30 has an invalid length. [ 179.154221][T15217] serio: Serial port ptm1 [ 179.419072][T15250] netlink: 'syz.1.2819': attribute type 30 has an invalid length. [ 179.427492][T15251] loop4: detected capacity change from 0 to 1024 [ 179.436059][T15251] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 179.457615][T15251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.508496][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.521942][T15266] serio: Serial port ptm0 [ 179.768193][T15296] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 179.902371][T15313] netlink: 'syz.1.2838': attribute type 30 has an invalid length. [ 180.155418][T15352] serio: Serial port ptm1 [ 180.502743][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 180.502768][ T29] audit: type=1326 audit(1758275579.024:12666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.533047][ T29] audit: type=1326 audit(1758275579.024:12667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.557459][ T29] audit: type=1326 audit(1758275579.024:12668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.581475][ T29] audit: type=1326 audit(1758275579.024:12669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.605284][ T29] audit: type=1326 audit(1758275579.024:12670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.629480][ T29] audit: type=1326 audit(1758275579.024:12671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.653112][ T29] audit: type=1326 audit(1758275579.024:12672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.677015][ T29] audit: type=1326 audit(1758275579.024:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.700896][ T29] audit: type=1326 audit(1758275579.024:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.5.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378128eba9 code=0x7ffc0000 [ 180.785078][T15433] validate_nla: 1 callbacks suppressed [ 180.785096][T15433] netlink: 'syz.6.2866': attribute type 30 has an invalid length. [ 180.829386][T15377] chnl_net:caif_netlink_parms(): no params data found [ 180.881773][ T557] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.910991][T15377] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.918287][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.926491][T15377] bridge_slave_0: entered allmulticast mode [ 180.933068][T15377] bridge_slave_0: entered promiscuous mode [ 180.941386][ T557] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.952347][T15576] serio: Serial port ptm0 [ 180.958673][T15377] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.966038][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.973536][T15377] bridge_slave_1: entered allmulticast mode [ 180.980129][T15377] bridge_slave_1: entered promiscuous mode [ 180.987591][ T557] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.042035][T15377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.053179][ T557] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.067341][T15377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.133574][T15377] team0: Port device team_slave_0 added [ 181.142610][T15377] team0: Port device team_slave_1 added [ 181.144441][ T29] audit: type=1326 audit(1758275579.684:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15642 comm="syz.6.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 181.186315][T15377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.193297][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.219694][T15377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.232377][T15377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.239495][T15377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.265638][T15377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.317850][ T557] tipc: Resetting bearer [ 181.387206][ T557] tipc: Disabling bearer [ 181.507740][ T557] $Hÿ (unregistering): Released all slaves [ 181.516575][ T557] bond0 (unregistering): Released all slaves [ 181.533306][T15704] netlink: 'syz.6.2882': attribute type 30 has an invalid length. [ 181.536616][T15377] hsr_slave_0: entered promiscuous mode [ 181.548392][T15377] hsr_slave_1: entered promiscuous mode [ 181.554312][T15377] debugfs: 'hsr0' already exists in 'hsr' [ 181.560107][T15377] Cannot create hsr debugfs directory [ 181.577945][ T557] tipc: Disabling bearer [ 181.584084][ T557] tipc: Disabling bearer [ 181.589395][ T557] tipc: Left network mode [ 181.657792][ T557] hsr_slave_0: left promiscuous mode [ 181.664373][ T557] hsr_slave_1: left promiscuous mode [ 181.671697][T15763] serio: Serial port ptm1 [ 181.696431][ T385] smc: removing ib device syz0 [ 182.058693][T15824] serio: Serial port ptm0 [ 182.065696][ T557] IPVS: stop unused estimator thread 0... [ 182.193899][T15377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.203581][T15377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.212959][T15377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.222463][T15377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.269014][T15377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.289284][T15377] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.302713][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.309845][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.320352][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.327618][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.407639][T15377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.525021][T15377] veth0_vlan: entered promiscuous mode [ 182.538187][T15377] veth1_vlan: entered promiscuous mode [ 182.558355][T15377] veth0_macvtap: entered promiscuous mode [ 182.566788][T15377] veth1_macvtap: entered promiscuous mode [ 182.578227][T15377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.591496][T15875] netlink: 'syz.6.2898': attribute type 30 has an invalid length. [ 182.594625][T15377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.618271][ T557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.627847][ T557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.638905][ T557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.649849][ T557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.838673][T15915] loop4: detected capacity change from 0 to 2048 [ 182.895758][T15915] loop4: p1 < > p4 [ 182.899885][T15920] loop5: detected capacity change from 0 to 1024 [ 182.901580][T15915] loop4: p4 size 8388608 extends beyond EOD, truncated [ 182.912026][T15920] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 182.928026][T15920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.963433][ T3628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.966019][T15934] netlink: 'syz.4.2914': attribute type 30 has an invalid length. [ 183.132960][T15960] serio: Serial port ptm0 [ 183.237422][T15974] loop4: detected capacity change from 0 to 2048 [ 183.266347][T15974] loop4: p1 < > p4 [ 183.270960][T15974] loop4: p4 size 8388608 extends beyond EOD, truncated [ 183.418831][T16007] netlink: 'syz.4.2939': attribute type 30 has an invalid length. [ 183.525481][T16017] loop4: detected capacity change from 0 to 1024 [ 183.532878][T16017] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 183.547419][T16017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.615596][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.751805][T16031] macvtap1: entered promiscuous mode [ 183.757298][T16031] batadv0: entered promiscuous mode [ 183.773881][T16031] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 183.783050][T16031] batadv0: left promiscuous mode [ 183.907832][T16054] netlink: 'syz.6.2952': attribute type 30 has an invalid length. [ 184.012930][T16070] serio: Serial port ptm0 [ 184.039925][T16072] loop6: detected capacity change from 0 to 512 [ 184.053059][T16072] EXT4-fs: Ignoring removed nobh option [ 184.077711][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2957: corrupted inode contents [ 184.092208][T16072] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.2957: mark_inode_dirty error [ 184.110908][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.2957: corrupted inode contents [ 184.133893][T16072] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.2957: mark_inode_dirty error [ 184.150089][T16072] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.2957: Failed to acquire dquot type 0 [ 184.162328][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2957: corrupted inode contents [ 184.176354][T16072] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.2957: mark_inode_dirty error [ 184.195204][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2957: corrupted inode contents [ 184.210159][T16072] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2957: mark_inode_dirty error [ 184.231930][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2957: corrupted inode contents [ 184.254373][T16072] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 184.263781][T16072] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2957: corrupted inode contents [ 184.276622][T16072] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.2957: mark_inode_dirty error [ 184.290594][T16072] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 184.300813][T16072] EXT4-fs (loop6): 1 truncate cleaned up [ 184.309250][T16072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.322557][T16072] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.396337][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.465991][T16104] serio: Serial port ptm0 [ 184.542184][T16113] netlink: 'syz.5.2969': attribute type 30 has an invalid length. [ 184.577466][T16120] loop6: detected capacity change from 0 to 1024 [ 184.584854][T16120] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 184.617661][T16120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.660824][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.072255][T16163] netlink: 'syz.6.2984': attribute type 30 has an invalid length. [ 185.494233][T16207] netlink: 'syz.1.3000': attribute type 30 has an invalid length. [ 185.505875][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 185.505893][ T29] audit: type=1326 audit(1758275584.044:12892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.536818][ T29] audit: type=1326 audit(1758275584.044:12893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.560504][ T29] audit: type=1326 audit(1758275584.074:12894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.584111][ T29] audit: type=1326 audit(1758275584.074:12895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.608503][ T29] audit: type=1326 audit(1758275584.074:12896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.632493][ T29] audit: type=1326 audit(1758275584.074:12897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.656132][ T29] audit: type=1326 audit(1758275584.074:12898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.679939][ T29] audit: type=1326 audit(1758275584.124:12899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.703651][ T29] audit: type=1326 audit(1758275584.124:12900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.727278][ T29] audit: type=1326 audit(1758275584.124:12901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16208 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 185.761916][T16214] serio: Serial port ptm0 [ 185.992726][T16261] netlink: 'syz.1.3019': attribute type 30 has an invalid length. [ 186.214871][T16263] chnl_net:caif_netlink_parms(): no params data found [ 186.267054][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.274155][T16263] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.282948][T16263] bridge_slave_0: entered allmulticast mode [ 186.289974][T16263] bridge_slave_0: entered promiscuous mode [ 186.297376][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.304467][T16263] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.311678][T16263] bridge_slave_1: entered allmulticast mode [ 186.318411][T16263] bridge_slave_1: entered promiscuous mode [ 186.341289][T16263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.352383][T16263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.390051][T16263] team0: Port device team_slave_0 added [ 186.415949][T16263] team0: Port device team_slave_1 added [ 186.452020][T16263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.459086][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.485052][T16263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.496736][T16263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.503797][T16263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.529773][T16263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.546220][T16529] netlink: 'syz.2.3030': attribute type 30 has an invalid length. [ 186.565382][T16263] hsr_slave_0: entered promiscuous mode [ 186.571789][T16263] hsr_slave_1: entered promiscuous mode [ 186.672502][T16606] serio: Serial port ptm0 [ 186.698972][T16263] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.708859][T16263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.718775][T16263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.761000][T16643] serio: Serial port ptm0 [ 186.761476][T16263] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.775522][T16263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.785562][T16263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.863390][T16263] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.873439][T16263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.883481][T16263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 186.937462][T16263] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.947387][T16263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 186.957415][T16263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.017519][T16263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.027163][T16263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.036708][T16263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.045841][T16685] netlink: 'syz.2.3044': attribute type 30 has an invalid length. [ 187.049021][T16263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.084448][T16263] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.091615][T16263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.099020][T16263] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.106088][T16263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.153490][T16263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.177958][ T1845] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.186749][ T1845] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.206798][T16263] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.222618][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.229761][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.242593][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.249741][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.368260][T16263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.509156][T16263] veth0_vlan: entered promiscuous mode [ 187.517802][T16263] veth1_vlan: entered promiscuous mode [ 187.534876][T16263] veth0_macvtap: entered promiscuous mode [ 187.542694][T16263] veth1_macvtap: entered promiscuous mode [ 187.554454][T16263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.565861][T16263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.577584][ T385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.587341][ T385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.598403][ T385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.610111][ T385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.661388][T16740] loop5: detected capacity change from 0 to 2048 [ 187.706659][T16740] loop5: p1 < > p4 [ 187.714577][T16740] loop5: p4 size 8388608 extends beyond EOD, truncated [ 187.740195][T16759] netlink: 'syz.1.3059': attribute type 30 has an invalid length. [ 187.835771][T16781] serio: Serial port ptm0 [ 187.986434][T16812] netlink: 'syz.4.3077': attribute type 30 has an invalid length. [ 188.168584][T16837] loop4: detected capacity change from 0 to 512 [ 188.177256][T16837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.196150][T16837] EXT4-fs (loop4): 1 truncate cleaned up [ 188.210672][T16837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.387459][T16871] loop5: detected capacity change from 0 to 128 [ 188.398349][T16871] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 188.406415][T16871] FAT-fs (loop5): Filesystem has been set read-only [ 188.413083][T16871] syz.5.3098: attempt to access beyond end of device [ 188.413083][T16871] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 188.426952][T16871] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 188.434787][T16871] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 188.465531][T16871] syz.5.3098: attempt to access beyond end of device [ 188.465531][T16871] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.479044][T16871] syz.5.3098: attempt to access beyond end of device [ 188.479044][T16871] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.495892][T16871] syz.5.3098: attempt to access beyond end of device [ 188.495892][T16871] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 188.697147][T16896] netlink: 'syz.5.3106': attribute type 30 has an invalid length. [ 188.988888][T16926] serio: Serial port ptm0 [ 189.010163][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.141349][T16944] netlink: 'syz.4.3120': attribute type 30 has an invalid length. [ 189.449521][T16991] netlink: 'syz.4.3137': attribute type 30 has an invalid length. [ 189.593657][T17009] serio: Serial port ptm1 [ 189.827771][T17042] netlink: 'syz.2.3154': attribute type 30 has an invalid length. [ 189.909438][T17059] loop4: detected capacity change from 0 to 2048 [ 189.935955][T17059] loop4: p1 < > p4 [ 189.941301][T17059] loop4: p4 size 8388608 extends beyond EOD, truncated [ 190.006313][T17084] serio: Serial port ptm0 [ 190.073734][T17098] netlink: 'syz.4.3173': attribute type 30 has an invalid length. [ 190.515474][ T29] kauditd_printk_skb: 404 callbacks suppressed [ 190.515493][ T29] audit: type=1326 audit(1758275589.054:13306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.549680][ T29] audit: type=1326 audit(1758275589.054:13307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.573487][ T29] audit: type=1326 audit(1758275589.054:13308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.597300][ T29] audit: type=1326 audit(1758275589.054:13309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.621224][ T29] audit: type=1326 audit(1758275589.054:13310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.644995][ T29] audit: type=1326 audit(1758275589.084:13311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17168 comm="syz.2.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769f17eba9 code=0x7ffc0000 [ 190.707383][T17175] loop6: detected capacity change from 0 to 2048 [ 190.771132][T17175] loop6: p1 < > p4 [ 190.778281][T17175] loop6: p4 size 8388608 extends beyond EOD, truncated [ 190.878029][ T29] audit: type=1326 audit(1758275589.414:13312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17212 comm="syz.6.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 190.901775][ T29] audit: type=1326 audit(1758275589.414:13313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17212 comm="syz.6.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 190.926773][ T29] audit: type=1326 audit(1758275589.414:13314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17212 comm="syz.6.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 190.950714][ T29] audit: type=1326 audit(1758275589.444:13315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17212 comm="syz.6.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6114eba9 code=0x7ffc0000 [ 191.084864][T17228] loop5: detected capacity change from 0 to 2048 [ 191.115991][T17228] loop5: p1 < > p4 [ 191.120686][T17228] loop5: p4 size 8388608 extends beyond EOD, truncated [ 191.174135][T17249] serio: Serial port ptm0 [ 191.393082][T17274] validate_nla: 2 callbacks suppressed [ 191.393100][T17274] netlink: 'syz.4.3230': attribute type 30 has an invalid length. [ 191.912628][T17341] netlink: 'syz.2.3253': attribute type 30 has an invalid length. [ 192.238937][T17387] serio: Serial port ptm0 [ 192.269424][T17393] netlink: 'syz.6.3272': attribute type 30 has an invalid length. [ 192.441890][T17418] loop6: detected capacity change from 0 to 2048 [ 192.487521][T17418] loop6: p1 < > p4 [ 192.493062][T17418] loop6: p4 size 8388608 extends beyond EOD, truncated [ 192.588873][T17446] netlink: 'syz.6.3288': attribute type 30 has an invalid length. [ 192.946389][T17504] netlink: 'syz.1.3308': attribute type 30 has an invalid length. [ 193.026520][T17513] loop5: detected capacity change from 0 to 2048 [ 193.065687][T17513] loop5: p1 < > p4 [ 193.070719][T17513] loop5: p4 size 8388608 extends beyond EOD, truncated [ 193.222960][T17552] serio: Serial port ptm0 [ 193.235630][T17555] netlink: 'syz.5.3323': attribute type 30 has an invalid length. [ 193.337120][T17565] loop5: detected capacity change from 0 to 2048 [ 193.385803][T17565] loop5: p1 < > p4 [ 193.390275][T17565] loop5: p4 size 8388608 extends beyond EOD, truncated [ 193.608249][T17601] netlink: 'syz.5.3335': attribute type 30 has an invalid length. [ 193.706115][T17609] loop4: detected capacity change from 0 to 2048 [ 193.736223][T17609] loop4: p1 < > p4 [ 193.742228][T17609] loop4: p4 size 8388608 extends beyond EOD, truncated [ 193.896452][T17651] netlink: 'syz.5.3351': attribute type 30 has an invalid length. [ 194.188610][T17687] netlink: 'syz.5.3363': attribute type 30 has an invalid length. [ 194.275184][T17700] serio: Serial port ptm0 [ 194.624783][T17740] netlink: 'syz.6.3379': attribute type 30 has an invalid length. [ 195.049281][T17773] chnl_net:caif_netlink_parms(): no params data found [ 195.090280][T17773] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.097695][T17773] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.105194][T17773] bridge_slave_0: entered allmulticast mode [ 195.111819][T17773] bridge_slave_0: entered promiscuous mode [ 195.118838][T17773] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.126055][T17773] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.133242][T17773] bridge_slave_1: entered allmulticast mode [ 195.139857][T17773] bridge_slave_1: entered promiscuous mode [ 195.212488][T17773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.223625][T17773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.262644][T17773] team0: Port device team_slave_0 added [ 195.269872][T17773] team0: Port device team_slave_1 added [ 195.292509][T17773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.299573][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.325882][T17773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.343208][T17773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.350289][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.376452][T17773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.413764][T17773] hsr_slave_0: entered promiscuous mode [ 195.420107][T17773] hsr_slave_1: entered promiscuous mode [ 195.426261][T17773] debugfs: 'hsr0' already exists in 'hsr' [ 195.432024][T17773] Cannot create hsr debugfs directory [ 195.554449][T18144] serio: Serial port ptm0 [ 195.626399][T18150] loop5: detected capacity change from 0 to 2048 [ 195.675669][T18150] loop5: p1 < > p4 [ 195.680201][T18150] loop5: p4 size 8388608 extends beyond EOD, truncated [ 195.757537][T17773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.766887][T17773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.776277][T17773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.785352][T17773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.838644][T17773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.851761][T17773] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.872055][T17773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.882654][T17773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.906501][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.913648][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.924286][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.931514][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.003974][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.141646][T17773] veth0_vlan: entered promiscuous mode [ 196.152394][T17773] veth1_vlan: entered promiscuous mode [ 196.167005][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 196.167024][ T29] audit: type=1326 audit(1758275594.704:13550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.197133][ T29] audit: type=1326 audit(1758275594.704:13551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.201124][T17773] veth0_macvtap: entered promiscuous mode [ 196.221255][ T29] audit: type=1326 audit(1758275594.704:13552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.230442][T17773] veth1_macvtap: entered promiscuous mode [ 196.255969][ T29] audit: type=1326 audit(1758275594.794:13553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.280053][ T29] audit: type=1326 audit(1758275594.794:13554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.289697][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.315249][ T29] audit: type=1326 audit(1758275594.794:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.339074][ T29] audit: type=1326 audit(1758275594.794:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.348807][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.362905][ T29] audit: type=1326 audit(1758275594.824:13557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.362942][ T29] audit: type=1326 audit(1758275594.824:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.388547][ T557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.394037][ T29] audit: type=1326 audit(1758275594.824:13559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18236 comm="syz.1.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408546eba9 code=0x7ffc0000 [ 196.467096][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.483689][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.495585][T18242] validate_nla: 2 callbacks suppressed [ 196.495614][T18242] netlink: 'syz.2.3423': attribute type 30 has an invalid length. [ 196.513980][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.638099][T18272] serio: Serial port ptm0 [ 196.885701][T18298] netlink: 'syz.1.3440': attribute type 30 has an invalid length. [ 196.994408][T18316] loop6: detected capacity change from 0 to 2048 [ 197.036752][T18316] loop6: p1 < > p4 [ 197.041425][T18316] loop6: p4 size 8388608 extends beyond EOD, truncated [ 197.657706][T18353] netlink: 'syz.4.3456': attribute type 30 has an invalid length. [ 197.815519][T18371] loop4: detected capacity change from 0 to 2048 [ 197.847008][T18371] loop4: p1 < > p4 [ 197.851712][T18371] loop4: p4 size 8388608 extends beyond EOD, truncated [ 198.002738][T18394] serio: Serial port ptm0 [ 198.103532][T18411] netlink: 'syz.6.3473': attribute type 30 has an invalid length. [ 198.798153][T18460] netlink: 'syz.1.3489': attribute type 30 has an invalid length. [ 198.834967][T18459] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3488'. [ 199.006209][T18495] serio: Serial port ptm0 [ 199.080940][T18505] netlink: 'syz.1.3504': attribute type 30 has an invalid length. [ 199.165187][T18517] netlink: 'syz.1.3505': attribute type 30 has an invalid length. [ 199.372729][T18542] loop6: detected capacity change from 0 to 2048 [ 199.407871][T18542] loop6: p1 < > p4 [ 199.415319][T18542] loop6: p4 size 8388608 extends beyond EOD, truncated [ 199.463095][T18558] netlink: 'syz.6.3518': attribute type 30 has an invalid length. [ 199.643540][T18588] loop5: detected capacity change from 0 to 1024 [ 199.659979][T18588] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 199.679811][T18588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.710227][T16263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.775698][T18609] netlink: 'syz.6.3534': attribute type 30 has an invalid length. [ 199.948193][T18639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3546'. [ 200.031858][T18669] serio: Serial port ptm0 [ 200.069857][T18674] netlink: 'syz.4.3553': attribute type 30 has an invalid length. [ 200.275356][T18700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3562'. [ 200.538409][T18747] loop4: detected capacity change from 0 to 2048 [ 200.555827][T18747] loop4: p1 < > p4 [ 200.560366][T18747] loop4: p4 size 8388608 extends beyond EOD, truncated [ 200.634399][T18764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3577'. [ 200.908164][T18799] serio: Serial port ptm0 [ 200.989190][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3589'. [ 201.529584][T18879] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3610'. [ 201.540989][T18889] loop4: detected capacity change from 0 to 2048 [ 201.595755][T18889] loop4: p1 < > p4 [ 201.600271][T18889] loop4: p4 size 8388608 extends beyond EOD, truncated [ 201.806807][T18944] validate_nla: 4 callbacks suppressed [ 201.806824][T18944] netlink: 'syz.4.3624': attribute type 30 has an invalid length. [ 201.847277][T18946] loop5: detected capacity change from 0 to 2048 [ 201.885888][T18946] loop5: p1 < > p4 [ 201.891966][T18946] loop5: p4 size 8388608 extends beyond EOD, truncated [ 201.994419][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3628'. [ 202.010583][T18981] serio: Serial port ptm0 [ 202.169658][T19011] netlink: 'syz.4.3637': attribute type 30 has an invalid length. [ 202.343748][T19034] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3644'. [ 202.453761][T19067] netlink: 'syz.5.3651': attribute type 1 has an invalid length. [ 202.486751][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 202.486770][ T29] audit: type=1326 audit(1758275600.984:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.516895][ T29] audit: type=1326 audit(1758275600.984:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.540745][ T29] audit: type=1326 audit(1758275600.984:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.564769][ T29] audit: type=1326 audit(1758275600.984:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.588523][ T29] audit: type=1326 audit(1758275600.984:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.612798][ T29] audit: type=1326 audit(1758275600.984:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.636882][ T29] audit: type=1326 audit(1758275600.984:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.660906][ T29] audit: type=1326 audit(1758275600.984:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.684609][ T29] audit: type=1326 audit(1758275600.984:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.708469][ T29] audit: type=1326 audit(1758275600.984:13627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19064 comm="syz.5.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 202.813094][T19086] netlink: 'syz.2.3658': attribute type 30 has an invalid length. [ 202.908568][T19099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3662'. [ 203.078390][T19140] loop6: detected capacity change from 0 to 2048 [ 203.116414][T19140] loop6: p1 < > p4 [ 203.121135][T19140] loop6: p4 size 8388608 extends beyond EOD, truncated [ 203.152792][T19153] serio: Serial port ptm1 [ 203.225200][T19165] netlink: 'syz.6.3677': attribute type 30 has an invalid length. [ 203.428037][T19194] loop4: detected capacity change from 0 to 2048 [ 203.455610][T19194] loop4: p1 < > p4 [ 203.463687][T19194] loop4: p4 size 8388608 extends beyond EOD, truncated [ 203.682142][T19228] netlink: 'syz.6.3694': attribute type 30 has an invalid length. [ 204.043069][T19275] netlink: 'syz.2.3708': attribute type 30 has an invalid length. [ 204.133524][T19289] loop4: detected capacity change from 0 to 2048 [ 204.165993][T19289] loop4: p1 < > p4 [ 204.171506][T19289] loop4: p4 size 8388608 extends beyond EOD, truncated [ 204.231244][T19308] serio: Serial port ptm0 [ 204.424979][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3724'. [ 204.437486][T19332] bridge1: entered promiscuous mode [ 204.442738][T19332] bridge1: entered allmulticast mode [ 204.461857][T19338] netlink: 'syz.1.3725': attribute type 30 has an invalid length. [ 204.522065][T19345] loop5: detected capacity change from 0 to 2048 [ 204.546003][T19345] loop5: p1 < > p4 [ 204.561176][T19345] loop5: p4 size 8388608 extends beyond EOD, truncated [ 204.590223][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3728'. [ 204.739960][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 204.751864][T19389] bridge1: entered promiscuous mode [ 204.757120][T19389] bridge1: entered allmulticast mode [ 204.833184][T19397] netlink: 'syz.2.3740': attribute type 30 has an invalid length. [ 205.108386][T19424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3750'. [ 205.151697][T19428] netlink: 'syz.4.3752': attribute type 30 has an invalid length. [ 205.299320][T19457] serio: Serial port ptm0 [ 205.411380][T19466] loop4: detected capacity change from 0 to 2048 [ 205.465543][T19466] loop4: p1 < > p4 [ 205.470125][T19466] loop4: p4 size 8388608 extends beyond EOD, truncated [ 205.561591][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3766'. [ 205.763521][T19517] loop5: detected capacity change from 0 to 2048 [ 205.785903][T19517] loop5: p1 < > p4 [ 205.790405][T19517] loop5: p4 size 8388608 extends beyond EOD, truncated [ 206.113718][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3785'. [ 206.246005][T19585] loop5: detected capacity change from 0 to 2048 [ 206.280973][T19585] loop5: p1 < > p4 [ 206.286744][T19585] loop5: p4 size 8388608 extends beyond EOD, truncated [ 206.359909][T19608] serio: Serial port ptm0 [ 206.509218][T19630] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3803'. [ 206.832750][T19688] loop6: detected capacity change from 0 to 2048 [ 206.870313][T19690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3819'. [ 206.897190][T19688] loop6: p1 < > p4 [ 206.907411][T19688] loop6: p4 size 8388608 extends beyond EOD, truncated [ 207.203744][T19750] validate_nla: 4 callbacks suppressed [ 207.203758][T19750] netlink: 'syz.6.3832': attribute type 30 has an invalid length. [ 207.290758][T19763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3836'. [ 207.390515][T19794] serio: Serial port ptm0 [ 207.838834][T19815] netlink: 'syz.4.3850': attribute type 30 has an invalid length. [ 207.842405][T19819] netlink: 'syz.5.3848': attribute type 1 has an invalid length. [ 207.846823][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 207.846840][ T29] audit: type=1326 audit(1758275606.374:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 207.846905][ T29] audit: type=1326 audit(1758275606.374:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 207.908605][ T29] audit: type=1326 audit(1758275606.374:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 207.932435][ T29] audit: type=1326 audit(1758275606.374:13899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 207.956552][ T29] audit: type=1326 audit(1758275606.374:13900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 207.980271][ T29] audit: type=1326 audit(1758275606.374:13901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 208.004263][ T29] audit: type=1326 audit(1758275606.374:13902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 208.028178][ T29] audit: type=1326 audit(1758275606.374:13903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 208.052140][ T29] audit: type=1326 audit(1758275606.374:13904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 208.075731][ T29] audit: type=1326 audit(1758275606.374:13905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19817 comm="syz.5.3848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a8feeba9 code=0x7ffc0000 [ 208.331927][T19852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3860'. [ 208.439638][T19889] serio: Serial port ptm0 [ 208.455374][T19892] netlink: 'syz.1.3869': attribute type 30 has an invalid length. [ 208.576835][T19917] netlink: 'syz.1.3886': attribute type 30 has an invalid length. [ 208.610141][T19924] netlink: 'syz.2.3877': attribute type 21 has an invalid length. [ 208.969328][T19980] netlink: 'syz.2.3893': attribute type 30 has an invalid length. [ 209.289118][T20042] netlink: 'syz.6.3909': attribute type 30 has an invalid length. [ 209.502657][T20073] serio: Serial port ptm0 [ 209.605776][T20083] __nla_validate_parse: 3 callbacks suppressed [ 209.605874][T20083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3923'. [ 209.651112][T20113] netlink: 'syz.2.3927': attribute type 30 has an invalid length. [ 209.787836][T20131] netlink: 'syz.2.3941': attribute type 30 has an invalid length. [ 209.942213][T20155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3940'. [ 210.395899][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3955'. [ 210.548880][T20268] serio: Serial port ptm0 [ 210.723030][T20290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3974'. [ 211.410192][T20349] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3989'. [ 211.427523][T20356] 9pnet_fd: Insufficient options for proto=fd [ 211.599665][T20397] serio: Serial port ptm1 [ 211.662315][T20409] 9pnet_fd: Insufficient options for proto=fd [ 211.712104][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4006'. [ 211.887619][T20454] 9pnet_fd: Insufficient options for proto=fd [ 211.943953][T20460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4018'. [ 212.255677][T20482] validate_nla: 5 callbacks suppressed [ 212.255693][T20482] netlink: 'syz.1.4022': attribute type 30 has an invalid length. [ 212.256339][T20480] loop5: detected capacity change from 0 to 1024 [ 212.276790][T20480] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.297412][T20480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.332653][T16263] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.469739][T20515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4030'. [ 212.546564][T20544] netlink: 'syz.4.4036': attribute type 1 has an invalid length. [ 212.559343][T20546] netlink: 'syz.6.4037': attribute type 30 has an invalid length. [ 212.604220][T20560] serio: Serial port ptm0 [ 212.687398][T20574] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4047'. [ 212.831785][T20607] netlink: 'syz.2.4053': attribute type 1 has an invalid length. [ 212.905662][T20621] netlink: 'syz.2.4058': attribute type 30 has an invalid length. [ 212.942578][T20628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4061'. [ 213.015463][T20658] loop4: detected capacity change from 0 to 1024 [ 213.022908][T20658] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 213.037152][T20658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.069270][T17773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.186773][T20687] netlink: 'syz.2.4075': attribute type 30 has an invalid length. [ 213.495719][T20748] serio: Serial port ptm0 [ 213.544155][T20759] netlink: 'syz.1.4091': attribute type 30 has an invalid length. [ 214.180874][T20814] loop6: detected capacity change from 0 to 1024 [ 214.188758][T20814] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.208608][T20814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.229452][T20822] netlink: 'syz.5.4107': attribute type 30 has an invalid length. [ 214.254165][ T9329] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.618024][T20882] netlink: 'syz.6.4124': attribute type 30 has an invalid length. [ 214.668236][T20893] serio: Serial port ptm1 [ 214.713285][T20901] __nla_validate_parse: 4 callbacks suppressed [ 214.713305][T20901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4129'. [ 215.088928][T20934] netlink: 'syz.4.4141': attribute type 30 has an invalid length. [ 215.371156][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4152'. [ 215.672996][T20999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4164'. [ 215.776957][T21015] serio: Serial port ptm1 [ 216.965911][T21107] serio: Serial port ptm1 [ 217.764998][T21165] validate_nla: 4 callbacks suppressed [ 217.765047][T21165] netlink: 'syz.6.4218': attribute type 30 has an invalid length. [ 217.947798][T21186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4223'. [ 218.163240][T21214] serio: Serial port ptm1 [ 218.299777][T21234] netlink: 'syz.1.4237': attribute type 30 has an invalid length. [ 218.392085][T21248] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4242'. [ 218.794014][T21288] netlink: 'syz.2.4251': attribute type 30 has an invalid length. [ 218.844754][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4254'. [ 219.088169][T21341] netlink: 'syz.5.4266': attribute type 30 has an invalid length. [ 219.177899][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4268'. [ 219.317099][T21381] serio: Serial port ptm1 [ 219.383863][T21390] netlink: 'syz.1.4278': attribute type 30 has an invalid length. [ 219.455120][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'. [ 219.792216][T21444] netlink: 'syz.1.4291': attribute type 30 has an invalid length. [ 219.853270][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4292'. [ 220.027246][T21487] netlink: 'syz.1.4303': attribute type 30 has an invalid length. [ 220.160598][T21499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4305'. [ 220.456608][T21540] serio: Serial port ptm1 [ 220.550517][T21547] netlink: 'syz.4.4317': attribute type 30 has an invalid length. [ 220.569819][T21551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4318'. [ 220.994633][T21592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4330'. [ 221.082048][T21613] netlink: 'syz.1.4332': attribute type 30 has an invalid length. [ 221.315845][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4341'. [ 221.349408][T21643] batadv0: entered promiscuous mode [ 221.354892][T21643] macvtap1: entered promiscuous mode [ 221.361539][T21643] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 221.371329][T21643] batadv0: left promiscuous mode [ 221.402510][T21667] netlink: 'syz.4.4345': attribute type 30 has an invalid length. [ 221.567865][T21691] serio: Serial port ptm1 [ 221.643460][T21700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4356'. [ 221.870290][T21720] batadv0: entered promiscuous mode [ 221.875978][T21720] macvtap1: entered promiscuous mode [ 221.882564][T21720] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 221.891967][T21720] batadv0: left promiscuous mode [ 222.160626][T21757] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4370'. [ 222.304516][T21780] macvtap1: entered promiscuous mode [ 222.309994][T21780] batadv0: entered promiscuous mode [ 222.321553][T21780] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 222.330486][T21780] batadv0: left promiscuous mode [ 222.436368][T21811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4384'. [ 222.711851][T21851] serio: Serial port ptm1 [ 222.844246][T21871] serio: Serial port ptm1 [ 222.867724][T21876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4396'. [ 223.067209][T14115] ================================================================== [ 223.075445][T14115] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 223.082089][T14115] [ 223.084432][T14115] write to 0xffff88810c561b48 of 88 bytes by task 3500 on cpu 1: [ 223.092283][T14115] __bpf_get_stackid+0x761/0x800 [ 223.097291][T14115] bpf_get_stackid+0xee/0x120 [ 223.102015][T14115] bpf_get_stackid_raw_tp+0xf6/0x120 [ 223.107340][T14115] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 223.112833][T14115] bpf_trace_run2+0x104/0x1c0 [ 223.117560][T14115] __traceiter_kfree+0x2e/0x50 [ 223.122358][T14115] kfree+0x27b/0x320 [ 223.126484][T14115] bpf_prog_free_deferred+0x21d/0x460 [ 223.131971][T14115] process_scheduled_works+0x4cb/0x9d0 [ 223.137470][T14115] worker_thread+0x582/0x770 [ 223.142097][T14115] kthread+0x489/0x510 [ 223.146220][T14115] ret_from_fork+0x11f/0x1b0 [ 223.150833][T14115] ret_from_fork_asm+0x1a/0x30 [ 223.155651][T14115] [ 223.158011][T14115] read to 0xffff88810c561b90 of 8 bytes by task 14115 on cpu 0: [ 223.165760][T14115] bcmp+0x23/0x90 [ 223.169419][T14115] __bpf_get_stackid+0x371/0x800 [ 223.174387][T14115] bpf_get_stackid+0xee/0x120 [ 223.179322][T14115] bpf_get_stackid_raw_tp+0xf6/0x120 [ 223.184665][T14115] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 223.190170][T14115] bpf_trace_run2+0x104/0x1c0 [ 223.194974][T14115] __traceiter_kfree+0x2e/0x50 [ 223.199768][T14115] kfree+0x27b/0x320 [ 223.204067][T14115] tcp_v4_destroy_sock+0x360/0x4d0 [ 223.209365][T14115] inet_csk_destroy_sock+0xe4/0x250 [ 223.214636][T14115] __tcp_close+0x1013/0x10b0 [ 223.219238][T14115] tcp_close+0x28/0xd0 [ 223.223352][T14115] inet_release+0xce/0xf0 [ 223.227716][T14115] sock_close+0x68/0x150 [ 223.231993][T14115] __fput+0x29b/0x650 [ 223.235996][T14115] fput_close_sync+0x6e/0x120 [ 223.240705][T14115] __x64_sys_close+0x56/0xf0 [ 223.245303][T14115] x64_sys_call+0x2738/0x2ff0 [ 223.249996][T14115] do_syscall_64+0xd2/0x200 [ 223.254535][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.260626][T14115] [ 223.262955][T14115] value changed: 0xffffffff84a60c0e -> 0xffffffff812edf7f [ 223.270068][T14115] [ 223.272394][T14115] Reported by Kernel Concurrency Sanitizer on: [ 223.278561][T14115] CPU: 0 UID: 0 PID: 14115 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.288576][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.298642][T14115] ==================================================================