last executing test programs: 57.495854542s ago: executing program 32 (id=2120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x80}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x2, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8) 54.015948277s ago: executing program 4 (id=2170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x46556b34e8e5276f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7, 0x2}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004820}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 54.015500546s ago: executing program 4 (id=2171): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 53.828675594s ago: executing program 4 (id=2172): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) r3 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4000810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmmsg$inet6(r4, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) dup(r4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 53.825567294s ago: executing program 33 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 53.012472433s ago: executing program 4 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000780)=""/4096, &(0x7f0000000080)=0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 52.246665127s ago: executing program 4 (id=2187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 51.968642884s ago: executing program 4 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040), 0x2000000}, 0x20) 51.961554694s ago: executing program 34 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040), 0x2000000}, 0x20) 47.230251219s ago: executing program 0 (id=2246): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) r3 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x4000810) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmmsg$inet6(r4, &(0x7f0000008e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) dup(r4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 47.155344696s ago: executing program 0 (id=2248): r0 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 47.139466878s ago: executing program 0 (id=2249): syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000240)={@mcast1, 0x30, r3}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="efd989f90dc503048503f54b5583f711b316867cb4d15ac2ebde65536d6143a28a717363882366da84ec62906fdb4c94ad6d7614c5315330faf0b143c2eb3038ad20c41d4c89c102bf59a679be1f03787b07092f36717b7b59e15e7fcaef9e112d6557af06c5db50b1652f", 0x6b}], 0x1, &(0x7f0000000380)=[@rthdrdstopts={{0x150, 0x29, 0x37, {0x67, 0x26, '\x00', [@generic={0x40, 0xde, "c7bf0f9a3b59d5837d27341edf6e71f4b745b5acaf04267d918c0a4286df253bda73925eb61596e71e1b315450dd4e0c30ac612892fcbf9132ee5a8b923cb5bed28d3b5fc82fc81c1641dc8e26a1fe4b25c5abae27f00ae7099ea334a00c1839127ac00fddf8c1389b3cc5a661f9d6804469087f807a0fbdcca9a6af4cd0c257ffa56d8aa75ef6eb532f0f96797cda46ddaf3bed063700d4f5937dec8cba34b04986700479acce5600eab2f598dd63dba6981ea2fb259cf29d368755567d6b23633eca0dcd161f1b612056812dc8996f656b6f8de98a8cffc3d4b3e789d9"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x4, [0x38cb, 0x1, 0x0, 0x7, 0x400]}}, @pad1, @ra, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x1a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x579911c1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}], 0x1a0}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x2, @private1, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000580)="c62ac863256db6106453f14af0a02610ab96c0b6980ecf4d48a03febf2f30810c46ab24c53d5", 0x26}, {&(0x7f0000000740)="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", 0x1000}], 0x2, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r3}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x0, 0x7, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x3, [0xf, 0x66, 0x0, 0x9]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x95f1}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001740)="962890d743a83b007a2f8aa3a5e283ef644b749f1d5606080d1612e62f24b30461825fc78f0f24972f3c8727f14df99433fc20ecf9a5dc81b6e39e2cf831bb000dd6ad4faeadc429992d554c51f52ce8d853bd50453d39bf2977a2aab8ba7211510a933b446c28d136e45ec4aba955efdbaf658994d5c7", 0x77}], 0x1}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000017c0)="47656e3a6b4a04cea49dad6ce5a9057bdc27a676cd82c2f84080e9a1aa3656575edaaf5b97b433972ac2f0f9e5db162078aa8941b1d93f85a3154402cc07056e8f617c96936d21c96457b389ab5e83e2f8572e2fcfe4dd8d886d966bba3f7b0f784f5e06b371826a8550d41cf6977260b5367d8af1d2e04406284f9a3d5e18cf74885262089164f37b7bc8a0108c1440a612bf431a62fe3b1ec69f78af98eb5b929eaf56e19e4435436a47e9333de4adc6c484886922084147b6d0f78096bc88899eff92afeb3c6cff0d9d607870b7caa4c358be96fa2a63b4961a294bc5f73f916fe3419ce025db1087dff3b55d0f94a7dcdd5df4c46262267888e89af8452d966e8cc93a7a714e4a26357945416776e7443ce75de245930ebc1a9ff81b35a8ccf92dcff70b1e02ffd6f162a88722d0e19cdfe51a022221be41cafbe5d6e0c3243fe7a69aebbbcafac8be0c9a960171fe3abc05078c8d1fe875e35edfc06a1230b4568ba4fd42ce3031a398d09101966fca8a405b680e0c58a3a0508c9786cf4bc54c91985f4e3fd426012236ec0b82d30fb998d51ed54b04b499d22dc2db173a9fe5032a197e6c67edb0836382fe2b7350c31c5547db0375889c31c727869d55aa583496f0e7c7b7d223170b80ddcd600e6b28841e7caff26458ca6a00b24d413bece995d9a265632ec6a5cdf1a87b2ef6bb57e1b9362be31e9df1dae481c298085f3c2584d486f956b5100f8c453fc2ca6aacb6331f4ecf0009d3a53d722377f51be9360c9009bca8ea70ec4a116191a44dea203c4958c2294e930d604294e132a773215e6f4af2f52629bf918035b300ee4d302fc08278a44e0b59451748d66c75284f0c5a31bd96e2c907e43b4739d72b240d67f5824f19d34ece27e85f711f2622f48eff38cf499c862ca2b8fe79d406fd6ad7e5f1541828cd293b5a9ae350a64d06f6e839a2b73e4530b0a4d46f69cfb4e807a607dafe596bc3de92777bd257768ed7b1605449a593c939883bd3d33549067734edf0076c6075244f5156b27073b9e812f82aba0468577f40595f007e064c9415c12c03a7753db94c3a1ade4d9cf625ee7a962a07d02fbf9248871c90c85e2dc51c3cc94e36a6cb15cedec15d1a98f29f1f5b6c6181445c0817e7d0b3b2e4616f44a0d7d23635e489a2d075e6e9cb451759dfa21d03f11cf5e970be8f9b3784c196c37bddc12105be16a33fca29c7a17d0aa8ae1d944cc0bcfe8c1354d20a949f69eed736dbe43c8d074066a7222f2c6af558407c7bd6f1f7c9fc5004412417b0be7a9945825d0c66dd3e607ba1e825a2e0ba1325c3642aac59d4a055add99316d1af86161d059bc2d588c5f574b22ad5d7397e962afcc47502410612b2df9ce40a03f599312b5008d3001f64cea955b60914f129a24d80a623600f4b46928f3417adc48d312a32977bf84504a820ca017daedc860af83be4c08bddfba3e4d1286403335ccef8b55ce8f3df5127b946f57cee60e159b6849975dd49e9e13915a29283b437cc81f6aa4953d3ba498b87c7d373667c9f27de60b8998ccdc7a30171fb777d94f7e872df8ef2d0fab51f0b0abbec788bec4d674581e10eec805ce7ef4c0bb281c2d2bfe434f4a7fd8bdf9b9e5c11d8472225f59d1eac8e51c85e78842c1ea6d489dc1885d9fca3c3259f9461a3b3a0c30413dd4119dd2daeabd0a9a71b84081f7e087b7383c64ac8a4ba34c5d36791501d0240e2fcacb4e902dba7ac24f10ccc6551e424e72168280741ded5b353a07bc5d4e34f82a8071dcea58e470b213dbf53dda81b8a74065d523d7ac8d7ceeb0abee2cf0706e4c7faedb0c7d2dc7b074849e98bb36092e254897b96327cada8c6260880f130bb2829589eed33e6845bc0577e06d5ef284ebca3ca4b0ecd4d871c8e4bc24f0a4ad1da06dea148f3d61adbba5974197a96e628c3ec927c07257e4dc3b67bbb67ab839959e3e52747853bae32b8623623423e298572fc064bb86c33c51fdad6cb04a85ae1ec4fdf3f33e30f7d07ae986e9392781c0d76d264cf3baac5a6d202f6978c3ffba9612a241e9061e50ad2f4e559a756754d4db450c9a19d6b3fc47a00961a1dd3395a9db3ab9d6c345a8f48236353d6192f469c05656d88a25649ae203825a94d1ef19c4f4d9822d8d23bc08de323a806f4486e011f4600237d8a01f02ac9b437e5534b775ee5090f5aa5a48fcbd93bac17859e0b5a1231440e5f8df466a59533265fa0367247daf1761154f25020f6d3ae55f648d7aefe0ed8242a36ff74944f32fe63bb91dab947c1e33d474f4e7afad1df1ef6d05d25d4f63d34a45892890c9515f77f3a824d46781363ae47fcaa529fd86216a7669564b651d7136c2b20629a148e89fff038b5bbca24299fbff1e568b32353a5b083375c676731fb60591b1e7f724ae1633292388660f4c692415f07b41c179caa7daf4c4f53d6f44627b25d3d99bf024b646f2a23f96ea893a5fc6ed8b6af8cf3c0912af8adf4b2b41b3592b373bbac39f665badc22abc4fc4b49e180954ff0109d35b613549eba91cf78af9b64f30a3ec5099ef10ec73af36e6f6bab27b308ae020c503ca15043b5dc1753c4aa8f18267883293346ae5d8eacd612fc12f4d6ed0dafd5c694fdf96def9c61f66018859701dbb6f3af9e3d5cc6d2c9fad632a79c999c16c9e9220f493b2ac1a3bc9afe18a60e5fa99dc787ad1c05a3c892a52801a856c66a431fd67055493fd3bfe67168bd136b8b41006129ceeaaea9e1db111c7e84780bd46efb79c5d087b0a6f96e816adcab75e2fd18232445ae9a8698c92f26e90df3ed0b785feb24442ffca1524bdc3511827295151dcb9aaf6388522b3610844a01eefd160275914b4e17ea939b70c840c36641872ad029ac641742f656fe9d37bcd2ba3804f7f5aa0ba4b3e052f5a708abf9ad4610071cc664eb2d95a7aa04ce18f1a5e157c6a8c9095ed25175e35c9b996005a41ace0b5df0ca0ffca0c9cecdd8537ed406dccbc8ae4b5f8df8c6e0ea95537720a273e3e5d0f7805f86ba7f66b7e3da68f194ac2515713417b1abf341ba58b5fc4bf653b060ae16ac305cb56dec9e046c1ce0426443fe04ed03f21f681b5c9440cd44039e361b97956f76963895c24074f67801e9116473b6cb634067b65323bd767396b0a5a776569355601adf1a3a90a230b95ba51ac11a16759ffd71a1340823b18afda645a407e7af9386e996dec1357f66af3eed884264eccc4e6e2b8dbc08e7dd456ea1bc9b16d2cc2fa7f561a1e046eea91eaef9a529e8362398b1984c7963feaac622415d5d0141f65b81edf46dc364595f24ee79f917d527c78799388754358080b9eac512060e54498e12b9c04f60bfd1ab7649f30683aaef83187a204fbe4b5dfe3c6f2b2e7cf43f340d08ef1a237e49c302bf248f5871757f1ecdd660ff574dc87ae319bdfc30e30a9c6bd8624a185befc73c24b386e8b49bfb9319f3f33e7638d4f1fab2c7e5fc1856012f6aa5f9ff4ea12e974b2c89e733ff9d3bc842fbbf430c0f5067790951d8636df9a135396c40a58ffda2b509b8a6a1e7aca7d382ed4b43c2c36d3c09409078a55e6cf15ebc8db70cc5fb1b1fc7e9f807901f2e0f901afea4c1e864d822dd270682d86f8eec680f3e05f27d4212a50d85c526f4892fb67728cc13f62a10a329f8379ea82ea768758d3a9313c469f1960bbf0872c7e2b250248a7e61d715c59e9bae19a083986a4c8636da47d1bb8b153d8aeafbc5d713a2cc47903d407da9bc1c7216fac9f011df8f65d33628eded7a1e0f0ce0886a7758aa69285d71621a6175947f2a09b61f19efc676599591e8afb739e4c03ae26aec6705f3805e3c3270016fe5bba28ad6c5cdb8db9d5d397339f875124f76f17fad27e816b2e46dc19cf131e7ee576df35abdbb43a9336207d5ae634c5195e882ecd6ecb310a2a7bc12bec8ef0b1780f23846b5e3d55766d5d046e9610a277a532227835b33b0e1085dee8091093f7404d0c90702501b2b469a9e7a1888153663bfa394660d5d5c4c35b0b67f819aa4f1d08e9d6c1067cb44ac4da9c29c4f734b705c3dcd1afc5a47b3cb8b26b7b1b46af4b41056cdcf03a382a6838c5e0f2555066259030aeec61d2cf58379931a73d0b9ccb57eb3d5f215f6358070c1c1ec326f3d91a6c992a9dbe1e8e1746640ac59f052c13f4f24f9fb52e8c9c9ffaac2a1e52bf6d4cba323a4a26f069aa392e659b4e06d899e70e254ad91512d3119a0c746f0fc34cfdc91477c291399919839f43ed1b7418727648b8f7252313f3b20e8d6747bb8738d3eff72ad11ad65ac85afbe1189729bc43ea24f2cb1bb2d824f55e433f97dc9d170bdd600b08f5b09751b81b972b0e51be4e0a599b7c28dc88280142131800ca1f48eb4943fb052f455dbf2bd454a6fc503fe34e1578a026fe5e7b494fbd97651f843ea0ab99a2159dd2b58355758ece1e5524f43ebb93548cbb30fb69c752ff0ad2aaa047ef21a4a7734930b55d7451c94d4a3f21c7802c2d0ebf885e0aba8c4791c0d2ed4299f682961bfa9d0a46b338340e6a0f0543b48f2fc7d7ad1231665e9979601016a4c98150e271c063ea5872e38e12c59025f7ba58925fc70abca1b1a9e711fa74cf7222a8057abc4335dbcc90b658c35f421fc0f929ea8fa14b3ea41c50023f17c3bf55b3ad89dead44d0576eeb7ac92d1e848177117c4040ad1d8f7aea4be116d5db85915239c0e96da0245a9b54c12ff054c8823436ad0259552dc80d1d780a519fbbcdd3ecf64dab46fa9c93c17e091453a7641b2de7056ec178116bcfcd063a182611e2d6977d031dc26c989d36cc3c29bacff52db918b08cdea4341cfd5f4f8aa4d9c7c16b9ed915a3647c8251c070750ae37d828716235a169c9845a729d13a7b4a17996f2f01374092669b7f1717812b399befc77eaa0c57a370b72c7a805f0b3e7b08ed19ef319086c3d198d5f7971ed1b71811f102d6ca55a2e65a5ec1dd34b5f56db7a2480bc3110d4f290690de35499bde8528ec60698abf447009b34cd55ffe560e74939ace594adcaecf126fd974066ce71b67771a9185dbd473664cfa1cb51854ea37bb42ca440f6ec4286fe809f0620d1dd736c49c1d2c8e5a4983f40c7f5faab584cf9dd6bf32309c0e13ae39351b988d867f26f1b774ec5463ecaea35533b510c1a2abad1436eb8fee6f1d7455127e641a2a199fdc93a62c7cc38b72eb9c58c77a6edae90dcf89163bd7b2b61bdad97c58e85e9eadb08d56ffb5d2ca0f51d72e12838a09dabdbe4740df98e6836756f68420cb8f330225212ca553e0ccf165564cc8618c97af72bfcf0d1a3c29e4d03008ea044b370bc0ca8aaf1a68127c759652dc140484d4adda8afeebe44e5368723e9fad83f3fa91b2fd1374514428d8cbdc14a467f4ce49c3be327cad27ab683fdaf23447c95ae3439893b0cbf5d6c0d173da5aa8a45b7c0a6b10959c7c8c23018be95539ec4e842e364b07fd74bca532e993d77af4d07bd06a0a8d1df6fef0f5f428ebede8fe49f44b63c74bb303c8ed5dddee026c80920ae8e553c01fa574622e412d95e9054dc16b73f07fbe15fbec143e74a4f49dc396814555cfa998aea21c9836d7f675d9eab5e79586a3121884b34374e2602bc991aa9729fde7f66735ef8a94f5c9a7c3f86f66f17bcd2ad46a04468d542c79de514ad775590e861a15d31b6c95a9950ec24a73d6d20d9573a945bc5e80cd88dc314f859287ea998298e07968bc4a3bfe8f04f648f38dad7269a98f22041f6", 0x1000}, {&(0x7f00000027c0)="4285d10411ba782d833b8152f1138ca22c970f7b614b557716b78f8295220eadaa77567e407c7d3a83e300d9efeaa4de79fc69afa242e7b1d4f0a6289055514fc7b9493cbf9d58193432e86cf64da3f1d4f6a8b73f5639490c28226ba97bd6c5424d7dda8aa2f2054786f63ee40f3f847e2f218d8648fac1d711b71a557c97621537df0d1bb33c312d8da91d182e80d2a7551c51", 0x94}], 0x2, &(0x7f00000028c0)=[@rthdrdstopts={{0x90, 0x29, 0x37, {0x3b, 0xe, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x6, 0x5, [0x0, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x40, 0x42, "de659f7c2965b24d64a60f5574d8474bdf46a5532ab3aa9fd29f2bce701dc91a44afc415adfcbf7125f91d9c1b7a51c7a73336a08734f6eaddcdc5ad4a3f68a750e5"}]}}}], 0x90}}, {{&(0x7f0000002980)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3}, 0x1c, &(0x7f0000003ac0)=[{&(0x7f00000029c0)="b99e51f87d4599e1aafbc32c4d24cd9354cc38414ee52966d0abac2fe5d1ab8422860dcd8cca4c5a19647bb13550928987199ec9226dc354e86d50a4b81adeb460014e0cda4697ba30abf2113cf6a5b6f08ed7f7ea50b660b9572aaf7b029760fb13940f2ad86ee1d66fa53cf725d535217a79348c4105a426c5d8857e4542b5d3bb59fd3ee5b28fd7ce1fca1cd09477912d2195a34a61f357a063120be7a76931657fc996c7a17b32d08d2eaf7bb6927907a95f3f994095a2cab95fae03f1d61124f73cd04d56bc5101", 0xca}, {&(0x7f0000002ac0)="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", 0x1000}], 0x2, &(0x7f0000003b00)=[@rthdrdstopts={{0xf8, 0x29, 0x37, {0x3b, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @mcast1}, @pad1, @generic={0xf, 0xbb, "c7ad5b462cc176bec2c7bc66ec7ed9a05074115eff9f31fcf093c3ac1483456935f21a3a4dbe54597003da2e0f4067fd31868e9eeee9b941ccae4331d877935cb2e2242f4ce32f2abdd5d7169144ba8e14b7886bc3dfba62ffd4c32bb445384eff3f0c8cfdc18663957e825809e9276f09cbfae35db8a7eb7427ea27530acfef4e9b30f509b6e71fdb15b0fd6f38c50e36fb70de3663f6afc8d49f3f7b31d7b792d17217199f25fef2d7d238b1cb7c4edbbc7a607f4d81027d354c"}, @enc_lim={0x4, 0x1, 0x9}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0x170}}, {{&(0x7f0000003c80)={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000003cc0)="e30847d1983a50708ede8a911959c5d39012ddbb3a095276a49741d4ead3372054318b3a4bd93e8a180db139193be90435e761812be21412a1a77246660b13a86c6bbedebf326cc19f410610699831afa8a808e20d764f151f1bb9d4c0c64ff7d3da48f1fee8", 0x66}, {&(0x7f0000003d40)="ce2ac8cb6b11bda4e2197690b2bf043230891851ac506cec6fa6f65bd5e90262c3c9f504ee174034241e6842e427804a0873dca84d2a02739750d329444155b2bffb69", 0x43}, {&(0x7f0000003dc0)="8f5a4e4a5122092548ece7fd6545f239cb619cd16f60685b65511b87a68312376b2726f3c5e727f982048e520934487440a6c4ab632e3e469b634f6d62b03c5f89fd170eeb9f2de5f1809a32e88042ed10ac0aa2d168aa5897224abf17d3caf736f20e", 0x63}], 0x3}}, {{&(0x7f0000003e80)={0xa, 0x4e23, 0x3, @local, 0x5}, 0x1c, &(0x7f0000003f80)=[{&(0x7f0000003ec0)="834f6a8aa6cf7258981edd97137edc2e8f025e33c21d5b90c351ca0f5ad0a245ce7d784f9f26868c1b7999831500c8d726fe1e2d824958571ed54fb45017aa688372637b18447de41822104197289bcba69a20fe0ce04bfd1f51adedec7156c795dd28e47fcc58d8800535e691ee86cadc05a884eeb2331fca50ea5f046a73b06c79df47abe6501235d13f", 0x8b}], 0x1}}], 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x200, 0x41790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400cde2c10a014b1ad27139dcbce16a4b00", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 47.060127875s ago: executing program 0 (id=2251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 47.059658605s ago: executing program 0 (id=2252): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0) 46.961460775s ago: executing program 0 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="1588288a2c32b974058d200828d922713223a84d53223d023a", @ANYRESHEX=r1]) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100183f92ebe541ad1693f67db14340def4000000000000000c0000000c0000009b815ef7ccc265f6e1bbf8cbdc"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095000000a3f28e1f"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000060000000000000021bc5d8519f657e9", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095", @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32=r6], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 46.956800445s ago: executing program 35 (id=2255): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="1588288a2c32b974058d200828d922713223a84d53223d023a", @ANYRESHEX=r1]) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100183f92ebe541ad1693f67db14340def4000000000000000c0000000c0000009b815ef7ccc265f6e1bbf8cbdc"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095000000a3f28e1f"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000060000000000000021bc5d8519f657e9", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095", @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32=r6], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 46.062585111s ago: executing program 2 (id=2264): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsm_get_self_attr(0x67, &(0x7f0000000200)={0x0, 0x0, 0x71, 0x51, ""/81}, &(0x7f0000000280)=0x71, 0x0) 46.019962975s ago: executing program 2 (id=2265): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) 45.966038491s ago: executing program 2 (id=2266): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="00000000000000000000000000000000a52b66fe9af9320000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x18) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x1840020, &(0x7f00000001c0)=ANY=[], 0x1, 0x2fc, &(0x7f00000006c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 45.494078966s ago: executing program 2 (id=2270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 45.299159994s ago: executing program 2 (id=2273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 44.82409562s ago: executing program 2 (id=2278): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x46556b34e8e5276f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007fff}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004820}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 44.670059565s ago: executing program 36 (id=2278): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x46556b34e8e5276f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007fff}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c01", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004820}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 41.902767601s ago: executing program 6 (id=2304): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x3, 0x53e, &(0x7f0000000b40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 41.747457416s ago: executing program 6 (id=2306): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 41.617539649s ago: executing program 6 (id=2310): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 41.507029499s ago: executing program 6 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 41.322610157s ago: executing program 6 (id=2312): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000ff1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r4}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 41.314686957s ago: executing program 5 (id=2313): syz_clone(0x9200, 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000780)) 41.190401839s ago: executing program 5 (id=2314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48840) write$cgroup_type(r1, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030200000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYRES16=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8e3c0, 0x0) 40.323538283s ago: executing program 6 (id=2318): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x248, 0x0, 0x5cb12ee1dee05e22, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1ff2ea3c6daf69b263dfc51928eedc1e902368d9e2587798f4625e2b5570215e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x27}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "98d46348c58df31002dc664b5f47134d46647f1f56d1a419e470eda30091a49b9704b5"}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff93ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdc6}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x9, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0xf}, {0x2, 0x0, 0xf8, 0x200}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x42, 0xabe, 0x8, 0x4000000a, 0xffffff80}) socket$netlink(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 40.308167284s ago: executing program 37 (id=2318): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x248, 0x0, 0x5cb12ee1dee05e22, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1ff2ea3c6daf69b263dfc51928eedc1e902368d9e2587798f4625e2b5570215e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x27}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "98d46348c58df31002dc664b5f47134d46647f1f56d1a419e470eda30091a49b9704b5"}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff93ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdc6}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x9, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0xf}, {0x2, 0x0, 0xf8, 0x200}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x42, 0xabe, 0x8, 0x4000000a, 0xffffff80}) socket$netlink(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 40.14588284s ago: executing program 5 (id=2320): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffffe}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 39.957801058s ago: executing program 5 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 39.848174098s ago: executing program 5 (id=2323): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$msr(r4, &(0x7f0000001580)=""/4096, 0x1000) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000005a8622d74f0e9c7fa8678230f20003140000f9e5ce87174e29513a5e00020073797a300000000008004100736977b57c070095b96d30cadac8aec8d8cc39001400330070696d367265673100000000000000000900020073797a320000000065746831"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x3ff}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x2, 0x1, 0x4}}, 0x26) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9}, 0x18) stat(0x0, 0x0) socket$inet6(0xa, 0xa, 0x10001) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000080), 0x4000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd70ec08dbdf25020000000800090655ec6b00"], 0x1c}}, 0x40) 39.572604565s ago: executing program 5 (id=2324): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/82, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) listen(0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) 39.567075665s ago: executing program 38 (id=2324): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/82, 0x52) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) listen(0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) 3.973464518s ago: executing program 9 (id=3138): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 3.973231817s ago: executing program 9 (id=3139): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x108e, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x9, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x5, 0x62cc, 0x2, 0x8, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) 3.9448455s ago: executing program 9 (id=3141): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="00000000000000000000000000000000a52b66fe9af9320000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x1840020, &(0x7f00000001c0)=ANY=[], 0x1, 0x2fc, &(0x7f00000006c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = getpid() r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3.542636619s ago: executing program 9 (id=3149): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 3.52549045s ago: executing program 9 (id=3151): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write$binfmt_script(r8, 0x0, 0xd9) write(r5, 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r10, 0xa, 0x13) fcntl$setlease(r10, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 993.052284ms ago: executing program 3 (id=3197): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB, @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) 975.773036ms ago: executing program 3 (id=3198): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 951.574908ms ago: executing program 3 (id=3199): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 934.36831ms ago: executing program 3 (id=3200): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000010000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, &(0x7f0000001040)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4040082) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xb13, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}], 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 496.550702ms ago: executing program 8 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="1588288a2c32b974058d200828d922713223a84d53223d023a", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100183f92ebe541ad1693f67db14340def4000000000000000c0000000c0000009b815ef7ccc265f6e1bbf8cbdc"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}}, 0x0, 0xffffffffffffffff, r2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000010000107f6ffffff000000000a0000000600010014"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000060000000000000021bc5d8519f657e9", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095", @ANYRESDEC=r4, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES8=r4, @ANYRES32=r6], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') llistxattr(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) 496.310212ms ago: executing program 9 (id=3210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x1, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002749c21105cbda1bb9c27010203010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 464.231605ms ago: executing program 8 (id=3212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 439.164507ms ago: executing program 8 (id=3214): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3, 0x4000}}, 0x20) 407.011121ms ago: executing program 8 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000800000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) 406.839711ms ago: executing program 7 (id=3216): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xc, 0x3, 0x0) 396.269681ms ago: executing program 7 (id=3217): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110130000004fb48405000000000000d2e30036118e1b32"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) dup2(0xffffffffffffffff, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 395.549901ms ago: executing program 8 (id=3227): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@i_version}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000300)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 288.460862ms ago: executing program 1 (id=3220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x4000080) 268.393664ms ago: executing program 1 (id=3221): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20064000}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000018110000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000006c00a43f47ae97dc5573cb46c53e9fa1b0e38dbc6fa65368b9965b0933b38abf0a2ae0cabe863cc37f5724ac0ba47ba809d40a35dd015900000000b5ec000000000100000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}, {0x0, 0x9}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x20040000) 162.344784ms ago: executing program 8 (id=3222): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$read(0xb, r1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES16=r1, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) close(r7) write$binfmt_script(r8, 0x0, 0xd9) write(r5, 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r10, 0xa, 0x13) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 144.379936ms ago: executing program 1 (id=3223): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 109.853289ms ago: executing program 1 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 102.65185ms ago: executing program 7 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000800000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) 89.117941ms ago: executing program 1 (id=3226): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 77.332572ms ago: executing program 3 (id=3228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000800000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc, 0x3, 0x0) 65.968813ms ago: executing program 7 (id=3229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, 0x0, 0x0) 43.777835ms ago: executing program 3 (id=3230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0xff01, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7, 0x0, 0x40000000000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 22.678388ms ago: executing program 7 (id=3231): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)={0x248, 0x0, 0x5cb12ee1dee05e22, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "1ff2ea3c6daf69b263dfc51928eedc1e902368d9e2587798f4625e2b5570215e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x27}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "98d46348c58df31002dc664b5f47134d46647f1f56d1a419e470eda30091a49b9704b5"}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff93ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a83}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x82}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdc6}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x6, 0x2, 0x9, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xf}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0xf}, {0x2, 0x0, 0xf8, 0x200}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x42, 0xabe, 0x8, 0x4000000a, 0xffffff80}) socket$netlink(0x10, 0x3, 0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a", 0xd7}], 0x1}, 0x894) 22.075447ms ago: executing program 1 (id=3232): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110130000004fb48405000000000000d2e30036118e1b32"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r7}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) dup2(r8, r5) 0s ago: executing program 7 (id=3233): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@i_version}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000300)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) kernel console output (not intermixed with test programs): 51.686124][T11143] netlink_sendmsg+0x471/0x6b0 [ 251.686144][T11143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.686163][T11143] __sock_sendmsg+0x145/0x180 [ 251.686191][T11143] ____sys_sendmsg+0x31e/0x4e0 [ 251.686229][T11143] ___sys_sendmsg+0x17b/0x1d0 [ 251.686284][T11143] __x64_sys_sendmsg+0xd4/0x160 [ 251.686412][T11143] x64_sys_call+0x191e/0x3000 [ 251.686434][T11143] do_syscall_64+0xd2/0x200 [ 251.686488][T11143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 251.686522][T11143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 251.686553][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.686575][T11143] RIP: 0033:0x7ffb5063efc9 [ 251.686593][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.686669][T11143] RSP: 002b:00007ffb4f09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.686687][T11143] RAX: ffffffffffffffda RBX: 00007ffb50895fa0 RCX: 00007ffb5063efc9 [ 251.686698][T11143] RDX: 0000000000000040 RSI: 0000200000000440 RDI: 0000000000000006 [ 251.686743][T11143] RBP: 00007ffb4f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 251.686793][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.686815][T11143] R13: 00007ffb50896038 R14: 00007ffb50895fa0 R15: 00007ffd4d24fa98 [ 251.686833][T11143] [ 251.991603][T11175] loop9: detected capacity change from 0 to 7 [ 251.999322][ T6187] buffer_io_error: 8 callbacks suppressed [ 251.999335][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.015521][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.023391][ T6187] loop9: unable to read partition table [ 252.086262][T11175] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.098133][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2382'. [ 252.107972][T11175] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.115946][T11175] loop9: unable to read partition table [ 252.121794][T11186] hsr_slave_0: left promiscuous mode [ 252.134948][T11175] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 252.134948][T11175] ) failed (rc=-5) [ 252.135609][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.155939][T11186] hsr_slave_1: left promiscuous mode [ 252.211733][T11194] netlink: 'syz.9.2383': attribute type 6 has an invalid length. [ 252.244708][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.253064][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.269500][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.277898][ T6187] Buffer I/O error on dev loop9, logical block 0, async page read [ 252.470368][T11200] vlan2: entered allmulticast mode [ 252.711268][T11209] FAULT_INJECTION: forcing a failure. [ 252.711268][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.724505][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.9.2387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.724635][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.724652][T11209] Call Trace: [ 252.724660][T11209] [ 252.724669][T11209] __dump_stack+0x1d/0x30 [ 252.724726][T11209] dump_stack_lvl+0xe8/0x140 [ 252.724746][T11209] dump_stack+0x15/0x1b [ 252.724763][T11209] should_fail_ex+0x265/0x280 [ 252.724804][T11209] should_fail+0xb/0x20 [ 252.724863][T11209] should_fail_usercopy+0x1a/0x20 [ 252.724964][T11209] _copy_from_iter+0xd2/0xe80 [ 252.724994][T11209] ? __build_skb_around+0x1ab/0x200 [ 252.725053][T11209] ? __alloc_skb+0x223/0x320 [ 252.725092][T11209] netlink_sendmsg+0x471/0x6b0 [ 252.725120][T11209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.725151][T11209] __sock_sendmsg+0x145/0x180 [ 252.725183][T11209] ____sys_sendmsg+0x31e/0x4e0 [ 252.725251][T11209] ___sys_sendmsg+0x17b/0x1d0 [ 252.725307][T11209] __x64_sys_sendmsg+0xd4/0x160 [ 252.725351][T11209] x64_sys_call+0x191e/0x3000 [ 252.725445][T11209] do_syscall_64+0xd2/0x200 [ 252.725468][T11209] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.725559][T11209] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 252.725599][T11209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.725670][T11209] RIP: 0033:0x7ffb5063efc9 [ 252.725708][T11209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.725731][T11209] RSP: 002b:00007ffb4f09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.725755][T11209] RAX: ffffffffffffffda RBX: 00007ffb50895fa0 RCX: 00007ffb5063efc9 [ 252.725771][T11209] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 252.725783][T11209] RBP: 00007ffb4f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.725795][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.725811][T11209] R13: 00007ffb50896038 R14: 00007ffb50895fa0 R15: 00007ffd4d24fa98 [ 252.725875][T11209] [ 252.728596][T11204] loop8: detected capacity change from 0 to 1024 [ 252.830603][T11190] loop7: detected capacity change from 0 to 32768 [ 252.877441][T11204] EXT4-fs: Ignoring removed orlov option [ 252.978273][T11218] FAULT_INJECTION: forcing a failure. [ 252.978273][T11218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.991455][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.9.2388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.991548][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.991564][T11218] Call Trace: [ 252.991572][T11218] [ 252.991582][T11218] __dump_stack+0x1d/0x30 [ 252.991605][T11218] dump_stack_lvl+0xe8/0x140 [ 252.991628][T11218] dump_stack+0x15/0x1b [ 252.991650][T11218] should_fail_ex+0x265/0x280 [ 252.991711][T11218] should_fail+0xb/0x20 [ 252.991729][T11218] should_fail_usercopy+0x1a/0x20 [ 252.991754][T11218] _copy_to_user+0x20/0xa0 [ 252.991778][T11218] simple_read_from_buffer+0xb5/0x130 [ 252.991883][T11218] proc_fail_nth_read+0x10e/0x150 [ 252.991917][T11218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.991970][T11218] vfs_read+0x1a8/0x770 [ 252.992003][T11218] ? __rcu_read_unlock+0x4f/0x70 [ 252.992028][T11218] ? __fget_files+0x184/0x1c0 [ 252.992056][T11218] ksys_read+0xda/0x1a0 [ 252.992084][T11218] __x64_sys_read+0x40/0x50 [ 252.992116][T11218] x64_sys_call+0x27c0/0x3000 [ 252.992144][T11218] do_syscall_64+0xd2/0x200 [ 252.992166][T11218] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.992298][T11218] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 252.992331][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.992364][T11218] RIP: 0033:0x7ffb5063d9dc [ 252.992462][T11218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.992510][T11218] RSP: 002b:00007ffb4f09f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.992572][T11218] RAX: ffffffffffffffda RBX: 00007ffb50895fa0 RCX: 00007ffb5063d9dc [ 252.992587][T11218] RDX: 000000000000000f RSI: 00007ffb4f09f0a0 RDI: 0000000000000004 [ 252.992602][T11218] RBP: 00007ffb4f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.992618][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.992632][T11218] R13: 00007ffb50896038 R14: 00007ffb50895fa0 R15: 00007ffd4d24fa98 [ 252.992652][T11218] [ 253.011360][T11190] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 253.016822][T11204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.025118][T11190] loop7: p1 start 460800 is beyond EOD, truncated [ 253.218795][T11190] loop7: p2 size 83886080 extends beyond EOD, truncated [ 253.242765][T11190] loop7: p5 start 460800 is beyond EOD, truncated [ 253.249378][T11190] loop7: p6 size 83886080 extends beyond EOD, truncated [ 253.348624][T11240] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 253.427562][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.524813][T11258] netlink: 'syz.3.2397': attribute type 3 has an invalid length. [ 253.532601][T11258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2397'. [ 253.576164][T11258] loop3: detected capacity change from 0 to 256 [ 253.595736][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 253.607343][ T6231] udevd[6231]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 253.679120][ T9824] udevd[9824]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 253.691340][ T6388] udevd[6388]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 253.737472][T11277] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.244888][T11289] loop9: detected capacity change from 0 to 1024 [ 254.277040][T11289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.342464][T11303] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 254.352300][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2402'. [ 254.361456][T11303] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2402'. [ 254.370702][T11303] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2402'. [ 254.423234][T11309] wg2: left promiscuous mode [ 254.428012][T11309] wg2: left allmulticast mode [ 254.505263][T11315] loop7: detected capacity change from 0 to 512 [ 254.537648][T11315] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 254.546771][T11315] EXT4-fs (loop7): orphan cleanup on readonly fs [ 254.555188][T11315] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.2405: corrupted inode contents [ 254.567608][T11315] EXT4-fs (loop7): Remounting filesystem read-only [ 254.574328][T11315] EXT4-fs (loop7): 1 truncate cleaned up [ 254.580141][T10518] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.590797][T10518] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.602039][T10518] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 254.617289][T11315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.687103][T11330] SELinux: ebitmap: truncated map [ 254.694013][T11330] SELinux: failed to load policy [ 254.704736][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.729286][T11330] FAULT_INJECTION: forcing a failure. [ 254.729286][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 254.742123][T11330] CPU: 1 UID: 0 PID: 11330 Comm: syz.1.2408 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.742155][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.742171][T11330] Call Trace: [ 254.742180][T11330] [ 254.742189][T11330] __dump_stack+0x1d/0x30 [ 254.742215][T11330] dump_stack_lvl+0xe8/0x140 [ 254.742234][T11330] dump_stack+0x15/0x1b [ 254.742260][T11330] should_fail_ex+0x265/0x280 [ 254.742301][T11330] should_failslab+0x8c/0xb0 [ 254.742329][T11330] kmem_cache_alloc_noprof+0x50/0x480 [ 254.742431][T11330] ? audit_log_start+0x342/0x720 [ 254.742452][T11330] audit_log_start+0x342/0x720 [ 254.742476][T11330] ? kstrtouint+0x76/0xc0 [ 254.742517][T11330] audit_seccomp+0x48/0x100 [ 254.742645][T11330] ? __seccomp_filter+0x82d/0x1250 [ 254.742757][T11330] __seccomp_filter+0x83e/0x1250 [ 254.742794][T11330] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.742824][T11330] ? vfs_write+0x7e8/0x960 [ 254.742860][T11330] ? __rcu_read_unlock+0x4f/0x70 [ 254.742961][T11330] ? __fget_files+0x184/0x1c0 [ 254.743000][T11330] __secure_computing+0x82/0x150 [ 254.743092][T11330] syscall_trace_enter+0xcf/0x1e0 [ 254.743152][T11330] do_syscall_64+0xac/0x200 [ 254.743211][T11330] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 254.743248][T11330] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 254.743350][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.743371][T11330] RIP: 0033:0x7fd4ed64efc9 [ 254.743386][T11330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.743407][T11330] RSP: 002b:00007fd4ec0af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 254.743497][T11330] RAX: ffffffffffffffda RBX: 00007fd4ed8a5fa0 RCX: 00007fd4ed64efc9 [ 254.743512][T11330] RDX: 0000200000000780 RSI: 00002000000002c0 RDI: 0000200000000180 [ 254.743526][T11330] RBP: 00007fd4ec0af090 R08: 0000000000000000 R09: 0000000000000000 [ 254.743541][T11330] R10: 00000000000000de R11: 0000000000000246 R12: 0000000000000001 [ 254.743557][T11330] R13: 00007fd4ed8a6038 R14: 00007fd4ed8a5fa0 R15: 00007ffd8162b9c8 [ 254.743578][T11330] [ 254.963641][T11337] netlink: 'syz.8.2410': attribute type 6 has an invalid length. [ 254.985951][T11277] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.027898][T11351] loop1: detected capacity change from 0 to 512 [ 255.047477][T11277] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.053128][T11355] 9pnet_fd: Insufficient options for proto=fd [ 255.106013][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 255.106030][ T29] audit: type=1326 audit(1761309404.256:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.136020][ T29] audit: type=1326 audit(1761309404.256:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.138340][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.160061][ T29] audit: type=1326 audit(1761309404.256:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.192774][ T29] audit: type=1326 audit(1761309404.256:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.216443][ T29] audit: type=1326 audit(1761309404.256:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.240059][ T29] audit: type=1326 audit(1761309404.256:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.263707][ T29] audit: type=1326 audit(1761309404.256:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.287565][ T29] audit: type=1326 audit(1761309404.256:11589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.311253][ T29] audit: type=1326 audit(1761309404.256:11590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.8.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6e91eefc9 code=0x7ffc0000 [ 255.336919][T11277] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.337477][ T29] audit: type=1326 audit(1761309404.306:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11350 comm="syz.1.2411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd4ed64dc2a code=0x7ffc0000 [ 255.386172][T11371] __nla_validate_parse: 1 callbacks suppressed [ 255.386245][T11371] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2414'. [ 255.402801][T11351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.417354][T11351] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.451059][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.463322][T11371] loop9: detected capacity change from 0 to 512 [ 255.477293][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.497719][T11371] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.510328][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.516279][T11351] SELinux: Context @ is not valid (left unmapped). [ 255.518965][T11371] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.536318][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.559460][T11371] SELinux: policydb version 576 does not match my version range 15-35 [ 255.569383][T11371] SELinux: failed to load policy [ 255.616823][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.627319][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.700880][T11395] loop7: detected capacity change from 0 to 1024 [ 255.751141][T11395] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.798492][T11416] FAULT_INJECTION: forcing a failure. [ 255.798492][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.811692][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.1.2429 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.811748][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.811765][T11416] Call Trace: [ 255.811773][T11416] [ 255.811783][T11416] __dump_stack+0x1d/0x30 [ 255.811812][T11416] dump_stack_lvl+0xe8/0x140 [ 255.811839][T11416] dump_stack+0x15/0x1b [ 255.811861][T11416] should_fail_ex+0x265/0x280 [ 255.811940][T11416] should_fail+0xb/0x20 [ 255.811961][T11416] should_fail_usercopy+0x1a/0x20 [ 255.812017][T11416] _copy_from_user+0x1c/0xb0 [ 255.812041][T11416] ___sys_sendmsg+0xc1/0x1d0 [ 255.812101][T11416] __x64_sys_sendmsg+0xd4/0x160 [ 255.812160][T11416] x64_sys_call+0x191e/0x3000 [ 255.812190][T11416] do_syscall_64+0xd2/0x200 [ 255.812213][T11416] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.812329][T11416] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 255.812370][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.812398][T11416] RIP: 0033:0x7fd4ed64efc9 [ 255.812417][T11416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.812490][T11416] RSP: 002b:00007fd4ec0af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.812514][T11416] RAX: ffffffffffffffda RBX: 00007fd4ed8a5fa0 RCX: 00007fd4ed64efc9 [ 255.812556][T11416] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 255.812572][T11416] RBP: 00007fd4ec0af090 R08: 0000000000000000 R09: 0000000000000000 [ 255.812588][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.812604][T11416] R13: 00007fd4ed8a6038 R14: 00007fd4ed8a5fa0 R15: 00007ffd8162b9c8 [ 255.812628][T11416] [ 255.846181][T11403] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 255.966939][T11426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2425'. [ 256.002796][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2425'. [ 256.011820][T11426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2425'. [ 256.021502][T11428] netlink: 'syz.1.2431': attribute type 3 has an invalid length. [ 256.023525][T11426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2425'. [ 256.029382][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2431'. [ 256.031737][T11428] loop1: detected capacity change from 0 to 256 [ 256.214282][T11444] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.349139][T11444] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.419558][T11444] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.478449][T11444] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.521787][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.548689][T10518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.599167][T10518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.631131][T11451] wg2: entered promiscuous mode [ 256.636250][T11451] wg2: entered allmulticast mode [ 256.651699][T10518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.709212][T10518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.322624][T11486] x_tables: duplicate underflow at hook 1 [ 257.457322][T11503] wg2: left promiscuous mode [ 257.461985][T11503] wg2: left allmulticast mode [ 257.509029][T11503] wg2: entered promiscuous mode [ 257.513991][T11503] wg2: entered allmulticast mode [ 257.638721][T11516] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 257.731495][T11531] vlan2: entered allmulticast mode [ 257.814128][T11548] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 257.851958][T11553] xt_connbytes: Forcing CT accounting to be enabled [ 257.860856][T11553] Cannot find set identified by id 0 to match [ 257.875472][T11554] wg2: left promiscuous mode [ 257.880209][T11554] wg2: left allmulticast mode [ 257.930815][T11554] wg2: entered promiscuous mode [ 257.935782][T11554] wg2: entered allmulticast mode [ 258.045154][T11584] wg2: left promiscuous mode [ 258.049812][T11584] wg2: left allmulticast mode [ 258.092525][T11584] wg2: entered promiscuous mode [ 258.097504][T11584] wg2: entered allmulticast mode [ 258.118889][T11583] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 258.165996][T11600] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.244213][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2481'. [ 258.281667][T11619] loop7: detected capacity change from 0 to 512 [ 258.321374][T11619] ext2: Unknown parameter 'pcr' [ 258.343000][T11624] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 258.361272][T11619] loop7: detected capacity change from 0 to 512 [ 258.395794][T11630] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2486'. [ 258.419219][T11619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.452182][T11619] ext4 filesystem being mounted at /49/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.501412][T11639] vlan2: entered allmulticast mode [ 258.524220][T11630] team0: entered promiscuous mode [ 258.529494][T11630] team_slave_0: entered promiscuous mode [ 258.535291][T11630] team_slave_1: entered promiscuous mode [ 258.561305][T11619] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.608071][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2486'. [ 258.645830][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2492'. [ 258.656802][T11627] team0: left promiscuous mode [ 258.661701][T11627] team_slave_0: left promiscuous mode [ 258.667352][T11627] team_slave_1: left promiscuous mode [ 258.704264][T11666] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 258.734027][T11673] loop8: detected capacity change from 0 to 512 [ 258.750050][T11673] ext2: Unknown parameter 'pcr' [ 258.814293][T11673] loop8: detected capacity change from 0 to 512 [ 258.869856][T11673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.886503][T11673] ext4 filesystem being mounted at /46/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.897574][T11696] wg2: left promiscuous mode [ 258.902217][T11696] wg2: left allmulticast mode [ 258.916451][T11697] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 258.928687][T11696] wg2: entered promiscuous mode [ 258.933589][T11696] wg2: entered allmulticast mode [ 258.974490][T11673] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.023600][T11706] vlan2: entered allmulticast mode [ 259.099206][ T5871] hid_parser_main: 77 callbacks suppressed [ 259.099230][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.112731][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.120218][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.130852][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.138332][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.145860][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.153337][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.160837][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.168358][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.175832][ T5871] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 259.183663][T11730] wg2: left promiscuous mode [ 259.184023][ T5871] hid-generic 0000:0000:0000.002A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 259.188346][T11730] wg2: left allmulticast mode [ 259.225486][T11735] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 259.238219][T11730] FAULT_INJECTION: forcing a failure. [ 259.238219][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.245210][T11737] fido_id[11737]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.251589][T11730] CPU: 0 UID: 0 PID: 11730 Comm: syz.7.2506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.251624][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.251642][T11730] Call Trace: [ 259.251650][T11730] [ 259.251659][T11730] __dump_stack+0x1d/0x30 [ 259.251692][T11730] dump_stack_lvl+0xe8/0x140 [ 259.251721][T11730] dump_stack+0x15/0x1b [ 259.251769][T11730] should_fail_ex+0x265/0x280 [ 259.251825][T11730] should_fail+0xb/0x20 [ 259.251847][T11730] should_fail_usercopy+0x1a/0x20 [ 259.251875][T11730] _copy_from_user+0x1c/0xb0 [ 259.251910][T11730] sock_do_ioctl+0xe6/0x220 [ 259.252005][T11730] sock_ioctl+0x41b/0x610 [ 259.252037][T11730] ? __pfx_sock_ioctl+0x10/0x10 [ 259.252083][T11730] __se_sys_ioctl+0xce/0x140 [ 259.252112][T11730] __x64_sys_ioctl+0x43/0x50 [ 259.252142][T11730] x64_sys_call+0x1816/0x3000 [ 259.252172][T11730] do_syscall_64+0xd2/0x200 [ 259.252198][T11730] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.252308][T11730] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.252351][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.252443][T11730] RIP: 0033:0x7f4c63c9efc9 [ 259.252464][T11730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.252507][T11730] RSP: 002b:00007f4c626ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.252564][T11730] RAX: ffffffffffffffda RBX: 00007f4c63ef5fa0 RCX: 00007f4c63c9efc9 [ 259.252582][T11730] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000006 [ 259.252599][T11730] RBP: 00007f4c626ff090 R08: 0000000000000000 R09: 0000000000000000 [ 259.252680][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.252697][T11730] R13: 00007f4c63ef6038 R14: 00007f4c63ef5fa0 R15: 00007ffc8af3a388 [ 259.252723][T11730] [ 259.492565][T11748] loop1: detected capacity change from 0 to 512 [ 259.501581][ T5871] hid-generic 0000:0000:0000.002B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 259.529618][T11748] ext2: Unknown parameter 'pcr' [ 259.581661][T11756] fido_id[11756]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.588623][T11748] loop1: detected capacity change from 0 to 512 [ 259.691321][T11748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.733328][T11748] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.779494][T11784] loop3: detected capacity change from 0 to 512 [ 259.846492][T11792] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 259.862802][T11784] ext2: Unknown parameter 'pcr' [ 259.863595][T11748] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.024125][ T5871] hid-generic 0000:0000:0000.002C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 260.153557][T11825] fido_id[11825]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.178951][T11833] loop3: detected capacity change from 0 to 512 [ 260.193214][T11839] wg2: left promiscuous mode [ 260.194136][T11833] ext2: Unknown parameter 'pcr' [ 260.198201][T11839] wg2: left allmulticast mode [ 260.288483][T11847] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 260.304546][T11839] wg2: entered promiscuous mode [ 260.309493][T11839] wg2: entered allmulticast mode [ 260.355456][T11859] loop3: detected capacity change from 0 to 512 [ 260.362473][T11859] ext2: Unknown parameter 'pcr' [ 260.385452][T10850] hid-generic 0000:0000:0000.002D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 260.396151][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 260.396168][ T29] audit: type=1326 audit(1761309409.576:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.442327][ T29] audit: type=1326 audit(1761309409.606:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.466127][ T29] audit: type=1326 audit(1761309409.606:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.490030][ T29] audit: type=1326 audit(1761309409.606:12454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.513827][ T29] audit: type=1326 audit(1761309409.606:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.537593][ T29] audit: type=1326 audit(1761309409.606:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.561421][ T29] audit: type=1326 audit(1761309409.606:12457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.585026][ T29] audit: type=1326 audit(1761309409.606:12458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.608555][ T29] audit: type=1326 audit(1761309409.606:12459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.632190][ T29] audit: type=1326 audit(1761309409.606:12460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11861 comm="syz.9.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ffb5063efc9 code=0x7ffc0000 [ 260.675164][T11867] fido_id[11867]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.695833][T11879] wg2: entered promiscuous mode [ 260.700761][T11879] wg2: entered allmulticast mode [ 260.722549][T11882] loop9: detected capacity change from 0 to 1024 [ 260.735153][T11882] EXT4-fs: Ignoring removed orlov option [ 260.741909][T11870] __nla_validate_parse: 6 callbacks suppressed [ 260.741929][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2544'. [ 260.760309][T11870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=11870 comm=syz.7.2544 [ 260.780747][T11870] hub 9-0:1.0: USB hub found [ 260.785805][T11870] hub 9-0:1.0: 8 ports detected [ 260.789320][T11882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.808714][T11889] lo speed is unknown, defaulting to 1000 [ 260.815660][T11889] lo speed is unknown, defaulting to 1000 [ 260.821594][T11889] lo speed is unknown, defaulting to 1000 [ 260.860731][T11894] x_tables: duplicate underflow at hook 1 [ 260.938310][T11900] wg2: entered promiscuous mode [ 260.943259][T11900] wg2: entered allmulticast mode [ 260.999155][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'. [ 261.012784][T11889] infiniband sz1: set active [ 261.017643][T11889] infiniband sz1: added lo [ 261.033675][ T10] lo speed is unknown, defaulting to 1000 [ 261.046634][T11914] tbf_change: 1 callbacks suppressed [ 261.046649][T11914] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 261.161286][ T1029] hid-generic 0000:0000:0000.002E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 261.181763][T11920] vlan2: entered allmulticast mode [ 261.225081][T11889] RDS/IB: sz1: added [ 261.234625][T11889] smc: adding ib device sz1 with port count 1 [ 261.241775][T11926] fido_id[11926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.265198][T11889] smc: ib device sz1 port 1 has no pnetid [ 261.271421][ T10] lo speed is unknown, defaulting to 1000 [ 261.288132][T11889] lo speed is unknown, defaulting to 1000 [ 261.288877][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.331207][T11936] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 261.392208][T11889] lo speed is unknown, defaulting to 1000 [ 261.418088][T11940] wg2: entered promiscuous mode [ 261.423012][T11940] wg2: entered allmulticast mode [ 261.473276][T11944] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2561'. [ 261.518987][T11948] SELinux: ebitmap: truncated map [ 261.531281][T11889] lo speed is unknown, defaulting to 1000 [ 261.538499][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2561'. [ 261.561287][T11956] loop3: detected capacity change from 0 to 1024 [ 261.562617][T11948] SELinux: failed to load policy [ 261.580663][T11956] EXT4-fs: inline encryption not supported [ 261.591658][T11956] EXT4-fs: Ignoring removed i_version option [ 261.597833][T11956] EXT4-fs: Ignoring removed bh option [ 261.641316][T11956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.674665][T11965] wg2: left promiscuous mode [ 261.679338][T11965] wg2: left allmulticast mode [ 261.689466][T11889] lo speed is unknown, defaulting to 1000 [ 261.724110][T11965] wg2: entered promiscuous mode [ 261.729360][T11965] wg2: entered allmulticast mode [ 261.759047][T11952] lo speed is unknown, defaulting to 1000 [ 261.815329][T11974] loop8: detected capacity change from 0 to 512 [ 261.825875][T11974] ext2: Unknown parameter 'pcr' [ 261.891569][T11889] lo speed is unknown, defaulting to 1000 [ 261.996054][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.013216][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.026851][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.107216][T12003] x_tables: duplicate underflow at hook 1 [ 262.146485][T12009] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 262.178694][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2571'. [ 262.187778][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2571'. [ 262.196886][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2571'. [ 262.224576][T12013] loop3: detected capacity change from 0 to 1024 [ 262.232050][T12013] EXT4-fs: Ignoring removed orlov option [ 262.242015][T12016] loop7: detected capacity change from 0 to 512 [ 262.248638][T12009] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2571'. [ 262.261142][T12016] ext2: Unknown parameter 'pcr' [ 262.261935][T12018] 9pnet: Could not find request transport: fd0x0000000000000005ˆ(Š [ 262.286139][T12013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.381278][T12027] vlan2: entered allmulticast mode [ 262.561052][T12044] FAULT_INJECTION: forcing a failure. [ 262.561052][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 262.573813][T12044] CPU: 1 UID: 0 PID: 12044 Comm: syz.7.2582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.573842][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.573857][T12044] Call Trace: [ 262.573866][T12044] [ 262.573875][T12044] __dump_stack+0x1d/0x30 [ 262.573939][T12044] dump_stack_lvl+0xe8/0x140 [ 262.573963][T12044] dump_stack+0x15/0x1b [ 262.574044][T12044] should_fail_ex+0x265/0x280 [ 262.574085][T12044] should_failslab+0x8c/0xb0 [ 262.574120][T12044] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 262.574237][T12044] ? __alloc_skb+0x101/0x320 [ 262.574272][T12044] __alloc_skb+0x101/0x320 [ 262.574306][T12044] netlink_alloc_large_skb+0xbf/0xf0 [ 262.574352][T12044] netlink_sendmsg+0x3cf/0x6b0 [ 262.574375][T12044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.574398][T12044] __sock_sendmsg+0x145/0x180 [ 262.574424][T12044] ____sys_sendmsg+0x31e/0x4e0 [ 262.574487][T12044] ___sys_sendmsg+0x17b/0x1d0 [ 262.574543][T12044] __x64_sys_sendmsg+0xd4/0x160 [ 262.574586][T12044] x64_sys_call+0x191e/0x3000 [ 262.574611][T12044] do_syscall_64+0xd2/0x200 [ 262.574631][T12044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.574700][T12044] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 262.574736][T12044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.574756][T12044] RIP: 0033:0x7f4c63c9efc9 [ 262.574774][T12044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.574796][T12044] RSP: 002b:00007f4c626ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.574886][T12044] RAX: ffffffffffffffda RBX: 00007f4c63ef5fa0 RCX: 00007f4c63c9efc9 [ 262.574900][T12044] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.574969][T12044] RBP: 00007f4c626ff090 R08: 0000000000000000 R09: 0000000000000000 [ 262.574981][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.574994][T12044] R13: 00007f4c63ef6038 R14: 00007f4c63ef5fa0 R15: 00007ffc8af3a388 [ 262.575015][T12044] [ 262.835464][T12047] loop8: detected capacity change from 0 to 512 [ 262.842470][T12047] ext2: Unknown parameter 'pcr' [ 262.852979][T12047] loop8: detected capacity change from 0 to 512 [ 262.878055][T12049] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 262.906141][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.916821][T12035] loop1: detected capacity change from 0 to 32768 [ 262.926610][T12047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.954904][ T6388] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 262.960337][ T6388] loop1: p1 start 460800 is beyond EOD, truncated [ 262.967015][ T6388] loop1: p2 size 83886080 extends beyond EOD, truncated [ 262.983089][T12054] loop9: detected capacity change from 0 to 512 [ 262.990163][T12054] ext2: Unknown parameter 'pcr' [ 263.000165][T12047] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.003388][T12057] lo speed is unknown, defaulting to 1000 [ 263.036887][T12054] loop9: detected capacity change from 0 to 512 [ 263.046227][T12047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.069549][ T6388] loop1: p5 start 460800 is beyond EOD, truncated [ 263.076089][ T6388] loop1: p6 size 83886080 extends beyond EOD, truncated [ 263.096562][T12054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.122357][T12054] ext4 filesystem being mounted at /54/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.136927][T12035] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 263.142366][T12035] loop1: p1 start 460800 is beyond EOD, truncated [ 263.149040][T12035] loop1: p2 size 83886080 extends beyond EOD, truncated [ 263.177393][T12058] loop3: detected capacity change from 0 to 1024 [ 263.184718][T12058] EXT4-fs: inline encryption not supported [ 263.190890][T12058] EXT4-fs: Ignoring removed i_version option [ 263.197070][T12058] EXT4-fs: Ignoring removed bh option [ 263.205039][T12066] netlink: 'syz.8.2588': attribute type 7 has an invalid length. [ 263.212812][T12066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2588'. [ 263.233861][T12058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.257419][T12035] loop1: p5 start 460800 is beyond EOD, truncated [ 263.263943][T12035] loop1: p6 size 83886080 extends beyond EOD, truncated [ 263.269076][T12073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12073 comm=syz.7.2589 [ 263.320750][T12073] wireguard0: entered promiscuous mode [ 263.326418][T12073] wireguard0: entered allmulticast mode [ 263.381532][T12054] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.393977][T12078] netlink: 'syz.1.2591': attribute type 6 has an invalid length. [ 263.418757][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.433776][T12080] loop8: detected capacity change from 0 to 1024 [ 263.495403][T12080] EXT4-fs: Ignoring removed orlov option [ 263.514535][T12082] loop9: detected capacity change from 0 to 512 [ 263.545343][T12080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.558242][T12089] wg2: left promiscuous mode [ 263.562866][T12089] wg2: left allmulticast mode [ 263.580428][T12082] ext2: Unknown parameter 'pcr' [ 263.590585][T12082] loop9: detected capacity change from 0 to 512 [ 263.609989][ T9824] udevd[9824]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 263.622625][ T6388] udevd[6388]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 263.633916][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 263.644146][T12089] wg2: entered promiscuous mode [ 263.648917][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 263.649111][T12089] wg2: entered allmulticast mode [ 263.662037][T12098] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2597'. [ 263.720373][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.755306][T12082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.785580][ T6187] udevd[6187]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 263.793113][ T9824] udevd[9824]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 263.807352][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 263.819223][ T9819] udevd[9819]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 263.830644][T12082] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.867068][T12116] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 263.912195][T12123] wg2: left promiscuous mode [ 263.916925][T12123] wg2: left allmulticast mode [ 263.948849][T12123] wg2: entered promiscuous mode [ 263.953784][T12123] wg2: entered allmulticast mode [ 263.998205][T12082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.077418][T12137] lo speed is unknown, defaulting to 1000 [ 264.129693][T12140] netlink: 'syz.1.2604': attribute type 6 has an invalid length. [ 264.203115][T12146] loop7: detected capacity change from 0 to 512 [ 264.231532][T12146] ext2: Unknown parameter 'pcr' [ 264.276753][T12162] netlink: 'syz.3.2612': attribute type 3 has an invalid length. [ 264.288103][T12159] loop9: detected capacity change from 0 to 512 [ 264.296019][T12159] ext2: Unknown parameter 'pcr' [ 264.338206][T12162] loop3: detected capacity change from 0 to 256 [ 264.370496][T12164] FAULT_INJECTION: forcing a failure. [ 264.370496][T12164] name failslab, interval 1, probability 0, space 0, times 0 [ 264.383235][T12164] CPU: 1 UID: 0 PID: 12164 Comm: syz.9.2613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.383274][T12164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.383287][T12164] Call Trace: [ 264.383293][T12164] [ 264.383299][T12164] __dump_stack+0x1d/0x30 [ 264.383330][T12164] dump_stack_lvl+0xe8/0x140 [ 264.383351][T12164] dump_stack+0x15/0x1b [ 264.383412][T12164] should_fail_ex+0x265/0x280 [ 264.383454][T12164] should_failslab+0x8c/0xb0 [ 264.383490][T12164] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 264.383531][T12164] ? sidtab_sid2str_get+0xa0/0x130 [ 264.383563][T12164] kmemdup_noprof+0x2b/0x70 [ 264.383741][T12164] sidtab_sid2str_get+0xa0/0x130 [ 264.383780][T12164] security_sid_to_context_core+0x1eb/0x2e0 [ 264.383897][T12164] security_sid_to_context+0x27/0x40 [ 264.383928][T12164] selinux_lsmprop_to_secctx+0x67/0xf0 [ 264.384023][T12164] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 264.384048][T12164] audit_log_subj_ctx+0xa4/0x3e0 [ 264.384069][T12164] ? skb_put+0xa9/0xf0 [ 264.384112][T12164] audit_log_task_context+0x48/0x70 [ 264.384208][T12164] audit_log_task+0xf4/0x250 [ 264.384243][T12164] ? kstrtouint+0x76/0xc0 [ 264.384348][T12164] audit_seccomp+0x61/0x100 [ 264.384384][T12164] ? __seccomp_filter+0x82d/0x1250 [ 264.384417][T12164] __seccomp_filter+0x83e/0x1250 [ 264.384521][T12164] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 264.384575][T12164] ? vfs_write+0x7e8/0x960 [ 264.384610][T12164] __secure_computing+0x82/0x150 [ 264.384643][T12164] syscall_trace_enter+0xcf/0x1e0 [ 264.384679][T12164] do_syscall_64+0xac/0x200 [ 264.384700][T12164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 264.384853][T12164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 264.384890][T12164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.384970][T12164] RIP: 0033:0x7ffb5063efc9 [ 264.385043][T12164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.385060][T12164] RSP: 002b:00007ffb4f09f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 264.385096][T12164] RAX: ffffffffffffffda RBX: 00007ffb50895fa0 RCX: 00007ffb5063efc9 [ 264.385110][T12164] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 264.385125][T12164] RBP: 00007ffb4f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 264.385140][T12164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.385178][T12164] R13: 00007ffb50896038 R14: 00007ffb50895fa0 R15: 00007ffd4d24fa98 [ 264.385202][T12164] [ 264.632819][T12146] loop7: detected capacity change from 0 to 512 [ 264.651633][T12166] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.735516][T12146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.774646][T12175] wg2: left promiscuous mode [ 264.779456][T12175] wg2: left allmulticast mode [ 264.838835][T12146] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.867133][T12166] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.884169][T12146] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.904168][T12175] wg2: entered promiscuous mode [ 264.909156][T12175] wg2: entered allmulticast mode [ 264.936758][T12166] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.959928][T12190] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 264.987083][T12166] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.010340][ T3422] hid_parser_main: 135 callbacks suppressed [ 265.010361][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.023919][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.031388][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.050622][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.052086][T12200] vlan2: entered allmulticast mode [ 265.058207][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.070739][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.078204][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.085779][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.093303][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.100761][ T3422] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 265.114398][ T3422] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 265.131049][T12204] netlink: 'syz.1.2620': attribute type 6 has an invalid length. [ 265.184965][T12206] fido_id[12206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.207542][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.238526][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.249006][T12215] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 265.275138][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.275997][T12220] 9pnet_fd: Insufficient options for proto=fd [ 265.299788][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.380495][T12229] loop3: detected capacity change from 0 to 512 [ 265.387688][T12229] ext2: Unknown parameter 'pcr' [ 265.397082][T12229] loop3: detected capacity change from 0 to 512 [ 265.446377][T12246] wg2: left promiscuous mode [ 265.451085][T12246] wg2: left allmulticast mode [ 265.458540][T12229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.472343][T12229] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.483065][T12246] wg2: entered promiscuous mode [ 265.488367][T12246] wg2: entered allmulticast mode [ 265.495953][T12227] infiniband syz!: set active [ 265.500738][T12227] infiniband syz!: added team_slave_0 [ 265.522355][T12227] RDS/IB: syz!: added [ 265.537349][T12229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.556604][T12227] smc: adding ib device syz! with port count 1 [ 265.581470][T12227] smc: ib device syz! port 1 has no pnetid [ 265.593189][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 265.593207][ T29] audit: type=1326 audit(1761309414.766:12741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.624701][ T29] audit: type=1326 audit(1761309414.806:12742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.648391][ T29] audit: type=1326 audit(1761309414.806:12743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.672959][ T29] audit: type=1326 audit(1761309414.806:12744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.696686][ T29] audit: type=1326 audit(1761309414.806:12745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.720281][ T29] audit: type=1326 audit(1761309414.806:12746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.744012][ T29] audit: type=1326 audit(1761309414.806:12747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.767720][ T29] audit: type=1326 audit(1761309414.806:12748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.791405][ T29] audit: type=1326 audit(1761309414.806:12749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.815163][ T29] audit: type=1326 audit(1761309414.806:12750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 265.920465][T12263] vlan2: entered allmulticast mode [ 265.929567][T12265] loop9: detected capacity change from 0 to 1024 [ 265.938598][T12265] EXT4-fs: Ignoring removed orlov option [ 265.956180][T12265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.067034][ T6392] printk: udevd: 56 output lines suppressed due to ratelimiting [ 266.077631][T12274] macvlan1: entered promiscuous mode [ 266.084866][T12274] ipvlan0: entered promiscuous mode [ 266.104256][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.115662][T12274] ipvlan0: left promiscuous mode [ 266.121043][T12274] macvlan1: left promiscuous mode [ 266.135322][T12276] loop1: detected capacity change from 0 to 4096 [ 266.149257][T12276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.162729][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.181708][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.182394][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.302219][T12287] __nla_validate_parse: 6 callbacks suppressed [ 266.302240][T12287] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2643'. [ 266.393841][T12288] lo speed is unknown, defaulting to 1000 [ 266.399802][T12295] loop8: detected capacity change from 0 to 512 [ 266.406807][T12295] ext2: Unknown parameter 'pcr' [ 266.416151][T12295] loop8: detected capacity change from 0 to 512 [ 266.453138][T12297] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2647'. [ 266.466025][T12295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.493517][T12295] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.509430][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 266.518854][T12305] hsr_slave_0: left promiscuous mode [ 266.530612][T12295] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.539764][T12305] hsr_slave_1: left promiscuous mode [ 266.606470][T12315] lo speed is unknown, defaulting to 1000 [ 266.637088][T12316] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2652'. [ 266.655453][T12318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2654'. [ 266.670863][T12319] loop7: detected capacity change from 0 to 1024 [ 266.678875][T12319] EXT4-fs: inline encryption not supported [ 266.694713][T12319] EXT4-fs: Ignoring removed i_version option [ 266.700866][T12319] EXT4-fs: Ignoring removed bh option [ 266.730503][T12321] lo speed is unknown, defaulting to 1000 [ 266.740392][T12319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.823160][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.871155][T12328] wg2: left promiscuous mode [ 266.876008][T12328] wg2: left allmulticast mode [ 266.885551][T12327] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 266.900914][T12328] wg2: entered promiscuous mode [ 266.906090][T12328] wg2: entered allmulticast mode [ 266.943938][T12332] x_tables: duplicate underflow at hook 1 [ 266.979515][T12336] loop7: detected capacity change from 0 to 512 [ 266.986580][T12336] ext2: Unknown parameter 'pcr' [ 267.089028][T12336] loop7: detected capacity change from 0 to 512 [ 267.137430][T12336] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.146826][T12346] lo speed is unknown, defaulting to 1000 [ 267.157504][T12344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.166807][T12350] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2665'. [ 267.232860][T12351] loop3: detected capacity change from 0 to 1024 [ 267.246249][T12351] EXT4-fs: inline encryption not supported [ 267.266365][T12351] EXT4-fs: Ignoring removed i_version option [ 267.272425][T12351] EXT4-fs: Ignoring removed bh option [ 267.283613][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.293406][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.356347][T12366] loop9: detected capacity change from 0 to 1024 [ 267.388689][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.397245][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.412494][T12344] loop1: detected capacity change from 0 to 1024 [ 267.424885][T12344] ext4: Bad value for 'debug_want_extra_isize' [ 267.449290][T12375] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 267.457983][T12377] loop8: detected capacity change from 0 to 512 [ 267.470109][T12377] ext2: Unknown parameter 'pcr' [ 267.480171][T12344] can: request_module (can-proto-0) failed. [ 267.486304][T12377] loop8: detected capacity change from 0 to 512 [ 267.496972][T12344] loop1: detected capacity change from 0 to 1024 [ 267.498114][T12377] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.579747][T12390] FAULT_INJECTION: forcing a failure. [ 267.579747][T12390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.592988][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.3.2680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.593023][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.593037][T12390] Call Trace: [ 267.593044][T12390] [ 267.593052][T12390] __dump_stack+0x1d/0x30 [ 267.593078][T12390] dump_stack_lvl+0xe8/0x140 [ 267.593100][T12390] dump_stack+0x15/0x1b [ 267.593143][T12390] should_fail_ex+0x265/0x280 [ 267.593180][T12390] should_fail+0xb/0x20 [ 267.593196][T12390] should_fail_usercopy+0x1a/0x20 [ 267.593220][T12390] _copy_from_user+0x1c/0xb0 [ 267.593292][T12390] ___sys_sendmsg+0xc1/0x1d0 [ 267.593341][T12390] __x64_sys_sendmsg+0xd4/0x160 [ 267.593448][T12390] x64_sys_call+0x191e/0x3000 [ 267.593472][T12390] do_syscall_64+0xd2/0x200 [ 267.593491][T12390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.593521][T12390] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 267.593580][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.593603][T12390] RIP: 0033:0x7fc8383fefc9 [ 267.593620][T12390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.593640][T12390] RSP: 002b:00007fc836e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.593661][T12390] RAX: ffffffffffffffda RBX: 00007fc838655fa0 RCX: 00007fc8383fefc9 [ 267.593675][T12390] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 267.593765][T12390] RBP: 00007fc836e67090 R08: 0000000000000000 R09: 0000000000000000 [ 267.593778][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.593791][T12390] R13: 00007fc838656038 R14: 00007fc838655fa0 R15: 00007ffcc7838b68 [ 267.593833][T12390] [ 267.780744][T12393] wg2: left promiscuous mode [ 267.785463][T12393] wg2: left allmulticast mode [ 267.797297][T12393] wg2: entered promiscuous mode [ 267.802290][T12393] wg2: entered allmulticast mode [ 267.840959][T12398] lo speed is unknown, defaulting to 1000 [ 267.850338][T12400] netlink: 'syz.8.2684': attribute type 6 has an invalid length. [ 267.896406][T12403] loop3: detected capacity change from 0 to 1024 [ 267.903223][T12403] EXT4-fs: inline encryption not supported [ 267.909302][T12403] EXT4-fs: Ignoring removed i_version option [ 267.915348][T12403] EXT4-fs: Ignoring removed bh option [ 268.000426][T12415] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2687'. [ 268.029059][T12419] netlink: 'syz.7.2691': attribute type 3 has an invalid length. [ 268.036904][T12419] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2691'. [ 268.048350][T12419] loop7: detected capacity change from 0 to 256 [ 268.055912][T12421] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2692'. [ 268.090942][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 268.140585][T12422] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.180276][T12422] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.236446][T12422] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.268969][T12432] x_tables: duplicate underflow at hook 1 [ 268.269117][T12430] loop3: detected capacity change from 0 to 512 [ 268.284939][T12430] ext2: Unknown parameter 'pcr' [ 268.297751][T12422] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.301546][T12430] loop3: detected capacity change from 0 to 512 [ 268.316868][T10707] EXT4-fs unmount: 11 callbacks suppressed [ 268.316887][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.331954][T12434] loop9: detected capacity change from 0 to 1024 [ 268.339121][T12434] EXT4-fs: Ignoring removed orlov option [ 268.347072][T12430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.359939][T12430] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.385088][T12434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.400750][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.412028][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.420461][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.433678][T12430] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.443165][ T52] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.444678][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.469190][T12442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.486181][T12442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.534306][T12444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.550775][T12453] loop7: detected capacity change from 0 to 1024 [ 268.580498][T12453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.629576][T12461] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 268.654935][T12463] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 268.672174][T12465] netlink: 'syz.9.2708': attribute type 6 has an invalid length. [ 268.696778][T12469] wg2: left promiscuous mode [ 268.701428][T12469] wg2: left allmulticast mode [ 268.713013][T12469] wg2: entered promiscuous mode [ 268.718189][T12469] wg2: entered allmulticast mode [ 268.736982][T12471] IPv6: Can't replace route, no match found [ 268.749949][T12473] 9pnet_fd: Insufficient options for proto=fd [ 268.853374][T12481] 9pnet_fd: Insufficient options for proto=fd [ 268.926768][T12475] loop9: detected capacity change from 0 to 32768 [ 268.964776][T12475] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 268.970145][T12475] loop9: p1 start 460800 is beyond EOD, truncated [ 268.976631][T12475] loop9: p2 size 83886080 extends beyond EOD, truncated [ 268.985076][T12475] loop9: p5 start 460800 is beyond EOD, truncated [ 268.991620][T12475] loop9: p6 size 83886080 extends beyond EOD, truncated [ 269.004295][T12475] netlink: 'syz.9.2712': attribute type 4 has an invalid length. [ 269.087088][T12493] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 269.128573][T12495] lo speed is unknown, defaulting to 1000 [ 269.179797][T12497] loop9: detected capacity change from 0 to 1024 [ 269.186632][T12497] EXT4-fs: inline encryption not supported [ 269.193142][T12497] EXT4-fs: Ignoring removed i_version option [ 269.199248][T12497] EXT4-fs: Ignoring removed bh option [ 269.218291][T12497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.264732][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.295675][T12503] 9pnet_fd: Insufficient options for proto=fd [ 269.375881][T12507] x_tables: duplicate underflow at hook 1 [ 269.409593][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.450855][T12516] vlan2: entered allmulticast mode [ 269.463084][T12519] vlan2: entered allmulticast mode [ 269.472502][T12520] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 269.531603][T12524] lo speed is unknown, defaulting to 1000 [ 269.572149][T12530] 9pnet_fd: Insufficient options for proto=fd [ 269.584235][T12531] loop1: detected capacity change from 0 to 1024 [ 269.595229][T12531] EXT4-fs: inline encryption not supported [ 269.601360][T12531] EXT4-fs: Ignoring removed i_version option [ 269.607470][T12531] EXT4-fs: Ignoring removed bh option [ 269.628569][T12535] wg2: left promiscuous mode [ 269.629684][T12531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.633222][T12535] wg2: left allmulticast mode [ 269.678784][T12539] loop7: detected capacity change from 0 to 1024 [ 269.704561][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.718842][T12539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.732816][T12535] wg2: entered promiscuous mode [ 269.737821][T12535] wg2: entered allmulticast mode [ 269.755878][T12549] netlink: 'syz.1.2741': attribute type 6 has an invalid length. [ 269.799825][T12555] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 269.866349][T12560] vlan2: entered allmulticast mode [ 269.892949][T12562] loop1: detected capacity change from 0 to 1024 [ 269.901168][T12562] EXT4-fs: Ignoring removed orlov option [ 269.928909][T12565] 9pnet_fd: Insufficient options for proto=fd [ 269.946384][T12562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.985049][T12575] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 270.000668][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.012193][T12573] lo speed is unknown, defaulting to 1000 [ 270.042665][T12582] wg2: left promiscuous mode [ 270.047500][T12582] wg2: left allmulticast mode [ 270.047750][T12581] loop9: detected capacity change from 0 to 1024 [ 270.067307][T12581] EXT4-fs: inline encryption not supported [ 270.073512][T12581] EXT4-fs: Ignoring removed i_version option [ 270.079619][T12581] EXT4-fs: Ignoring removed bh option [ 270.090036][T12582] wg2: entered promiscuous mode [ 270.094972][T12582] wg2: entered allmulticast mode [ 270.106867][T12581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.149357][T12580] loop1: detected capacity change from 0 to 1024 [ 270.162400][T12580] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 270.173369][T12580] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 270.189032][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.205272][T12580] JBD2: no valid journal superblock found [ 270.211062][T12580] EXT4-fs (loop1): Could not load journal inode [ 270.224011][T12591] vlan2: entered allmulticast mode [ 270.269027][T12597] wg2: left promiscuous mode [ 270.273672][T12597] wg2: left allmulticast mode [ 270.288464][T12597] wg2: entered promiscuous mode [ 270.293411][T12597] wg2: entered allmulticast mode [ 270.348370][T12604] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 270.375103][T12606] x_tables: duplicate underflow at hook 1 [ 270.426607][T12612] lo speed is unknown, defaulting to 1000 [ 270.501938][T12617] loop9: detected capacity change from 0 to 1024 [ 270.513169][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.531971][T12617] EXT4-fs: inline encryption not supported [ 270.552903][T12617] EXT4-fs: Ignoring removed i_version option [ 270.559009][T12617] EXT4-fs: Ignoring removed bh option [ 270.565525][T12623] wg2: left promiscuous mode [ 270.570205][T12623] wg2: left allmulticast mode [ 270.598782][T12617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.621294][T12636] loop3: detected capacity change from 0 to 512 [ 270.628174][T12636] ext2: Unknown parameter 'pcr' [ 270.637203][T12636] loop3: detected capacity change from 0 to 512 [ 270.646818][T12623] wg2: entered promiscuous mode [ 270.651716][T12623] wg2: entered allmulticast mode [ 270.678768][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.689021][T12636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.703290][T10850] hid-generic 0000:0000:0000.0030: collection stack underflow [ 270.710848][T10850] hid-generic 0000:0000:0000.0030: item 0 0 0 12 parsing failed [ 270.711070][T12636] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.741974][T10850] hid-generic 0000:0000:0000.0030: probe with driver hid-generic failed with error -22 [ 270.764744][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 270.764761][ T29] audit: type=1326 audit(1761309419.936:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.794803][ T29] audit: type=1326 audit(1761309419.936:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.818543][ T29] audit: type=1326 audit(1761309419.936:13132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz.7.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.843780][T12636] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.905020][ T29] audit: type=1326 audit(1761309420.086:13133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.936414][T12655] vlan2: entered allmulticast mode [ 270.947976][ T29] audit: type=1326 audit(1761309420.086:13134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.971809][ T29] audit: type=1326 audit(1761309420.116:13135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 270.995424][ T29] audit: type=1326 audit(1761309420.116:13136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 271.019199][ T29] audit: type=1326 audit(1761309420.116:13137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 271.042906][ T29] audit: type=1326 audit(1761309420.116:13138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 271.066599][ T29] audit: type=1326 audit(1761309420.116:13139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12652 comm="syz.7.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c63c9efc9 code=0x7ffc0000 [ 271.137773][T12665] lo speed is unknown, defaulting to 1000 [ 271.193044][T12669] loop9: detected capacity change from 0 to 1024 [ 271.215814][T12669] EXT4-fs: inline encryption not supported [ 271.230821][T12669] EXT4-fs: Ignoring removed i_version option [ 271.237027][T12669] EXT4-fs: Ignoring removed bh option [ 271.269312][T12669] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.292479][T12674] loop3: detected capacity change from 0 to 512 [ 271.300081][T12674] ext2: Unknown parameter 'pcr' [ 271.309334][T12674] loop3: detected capacity change from 0 to 512 [ 271.329822][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.330695][T12674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.352576][T12674] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.397163][T12674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.407136][T12687] wg2: left promiscuous mode [ 271.411843][T12687] wg2: left allmulticast mode [ 271.420874][T12690] __nla_validate_parse: 14 callbacks suppressed [ 271.420894][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2799'. [ 271.436730][T12687] wg2: entered promiscuous mode [ 271.441622][T12687] wg2: entered allmulticast mode [ 271.461720][T12695] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2801'. [ 271.492543][T12693] loop3: detected capacity change from 0 to 512 [ 271.504367][T12693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 271.510850][T12693] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 271.521637][T12693] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 271.537599][T12693] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2800: attempt to clear invalid blocks 2 len 1 [ 271.540319][T12699] vlan2: entered allmulticast mode [ 271.551654][T12693] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2800: invalid indirect mapped block 1819239214 (level 0) [ 271.570451][T12693] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2800: invalid indirect mapped block 1819239214 (level 1) [ 271.584898][T12701] tipc: Enabling of bearer rejected, media not registered [ 271.591242][T12693] EXT4-fs (loop3): 1 truncate cleaned up [ 271.600297][T12693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.632341][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.667463][T12707] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 271.737187][T12716] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2810'. [ 271.769193][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2810'. [ 271.796061][T12721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2812'. [ 271.828006][T12725] loop1: detected capacity change from 0 to 1024 [ 271.873553][T12725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.891631][T12732] vlan2: entered allmulticast mode [ 271.909993][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2818'. [ 271.925017][T12736] hsr_slave_0: left promiscuous mode [ 271.939550][T12736] hsr_slave_1: left promiscuous mode [ 271.968518][T12739] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 272.031080][T12750] FAULT_INJECTION: forcing a failure. [ 272.031080][T12750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.044277][T12750] CPU: 0 UID: 0 PID: 12750 Comm: syz.9.2825 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.044359][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.044376][T12750] Call Trace: [ 272.044384][T12750] [ 272.044392][T12750] __dump_stack+0x1d/0x30 [ 272.044416][T12750] dump_stack_lvl+0xe8/0x140 [ 272.044437][T12750] dump_stack+0x15/0x1b [ 272.044454][T12750] should_fail_ex+0x265/0x280 [ 272.044540][T12750] should_fail+0xb/0x20 [ 272.044557][T12750] should_fail_usercopy+0x1a/0x20 [ 272.044578][T12750] _copy_from_user+0x1c/0xb0 [ 272.044683][T12750] dev_ethtool+0x52/0x1670 [ 272.044709][T12750] ? full_name_hash+0x92/0xe0 [ 272.044820][T12750] ? strcmp+0x22/0x50 [ 272.044841][T12750] dev_ioctl+0x2e0/0x960 [ 272.044863][T12750] sock_do_ioctl+0x197/0x220 [ 272.044889][T12750] sock_ioctl+0x41b/0x610 [ 272.045011][T12750] ? __pfx_sock_ioctl+0x10/0x10 [ 272.045032][T12750] __se_sys_ioctl+0xce/0x140 [ 272.045108][T12750] __x64_sys_ioctl+0x43/0x50 [ 272.045149][T12750] x64_sys_call+0x1816/0x3000 [ 272.045190][T12750] do_syscall_64+0xd2/0x200 [ 272.045208][T12750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.045317][T12750] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.045350][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.045372][T12750] RIP: 0033:0x7ffb5063efc9 [ 272.045387][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.045406][T12750] RSP: 002b:00007ffb4f09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.045473][T12750] RAX: ffffffffffffffda RBX: 00007ffb50895fa0 RCX: 00007ffb5063efc9 [ 272.045486][T12750] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 272.045543][T12750] RBP: 00007ffb4f09f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.045556][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.045643][T12750] R13: 00007ffb50896038 R14: 00007ffb50895fa0 R15: 00007ffd4d24fa98 [ 272.045664][T12750] [ 272.250884][T12754] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2826'. [ 272.265952][T12751] loop8: detected capacity change from 0 to 512 [ 272.272931][T12751] ext2: Unknown parameter 'pcr' [ 272.275018][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2826'. [ 272.283161][T12751] loop8: detected capacity change from 0 to 512 [ 272.300305][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2822'. [ 272.311329][T12751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.324126][T12751] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.345118][T12761] wg2: left promiscuous mode [ 272.349796][T12761] wg2: left allmulticast mode [ 272.362834][T12751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.375855][T12761] wg2: entered promiscuous mode [ 272.380840][T12761] wg2: entered allmulticast mode [ 272.418186][T12770] wg2: left promiscuous mode [ 272.422905][T12770] wg2: left allmulticast mode [ 272.438556][T12770] wg2: entered promiscuous mode [ 272.443504][T12770] wg2: entered allmulticast mode [ 272.493098][T12780] FAULT_INJECTION: forcing a failure. [ 272.493098][T12780] name failslab, interval 1, probability 0, space 0, times 0 [ 272.505806][T12780] CPU: 0 UID: 0 PID: 12780 Comm: syz.7.2838 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.505872][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.505888][T12780] Call Trace: [ 272.505897][T12780] [ 272.505907][T12780] __dump_stack+0x1d/0x30 [ 272.505930][T12780] dump_stack_lvl+0xe8/0x140 [ 272.505950][T12780] dump_stack+0x15/0x1b [ 272.505984][T12780] should_fail_ex+0x265/0x280 [ 272.506018][T12780] ? bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 272.506053][T12780] should_failslab+0x8c/0xb0 [ 272.506096][T12780] __kmalloc_cache_noprof+0x4c/0x4a0 [ 272.506130][T12780] bpf_prog_alloc_no_stats+0xc4/0x3b0 [ 272.506164][T12780] bpf_prog_alloc+0x3c/0x150 [ 272.506241][T12780] bpf_prog_load+0x506/0x1100 [ 272.506295][T12780] ? security_bpf+0x2b/0x90 [ 272.506366][T12780] __sys_bpf+0x469/0x7c0 [ 272.506393][T12780] __x64_sys_bpf+0x41/0x50 [ 272.506450][T12780] x64_sys_call+0x2aee/0x3000 [ 272.506474][T12780] do_syscall_64+0xd2/0x200 [ 272.506547][T12780] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.506576][T12780] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.506609][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.506631][T12780] RIP: 0033:0x7f4c63c9efc9 [ 272.506699][T12780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.506717][T12780] RSP: 002b:00007f4c626ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.506737][T12780] RAX: ffffffffffffffda RBX: 00007f4c63ef5fa0 RCX: 00007f4c63c9efc9 [ 272.506750][T12780] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 272.506762][T12780] RBP: 00007f4c626ff090 R08: 0000000000000000 R09: 0000000000000000 [ 272.506774][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.506789][T12780] R13: 00007f4c63ef6038 R14: 00007f4c63ef5fa0 R15: 00007ffc8af3a388 [ 272.506808][T12780] [ 272.726160][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.744489][T12789] loop9: detected capacity change from 0 to 512 [ 272.751294][T12789] ext2: Unknown parameter 'pcr' [ 272.768007][T12789] loop9: detected capacity change from 0 to 512 [ 272.781302][T12795] loop7: detected capacity change from 0 to 1024 [ 272.796296][T12789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.803367][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2844'. [ 272.809282][T12789] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.829423][T12795] EXT4-fs: Ignoring removed orlov option [ 272.835313][T12803] loop8: detected capacity change from 0 to 1024 [ 272.835813][T12803] EXT4-fs: Ignoring removed orlov option [ 272.855122][T12789] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.861741][T12795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.877380][T12803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.909943][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.940782][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.954483][T12816] hsr_slave_0: left promiscuous mode [ 272.960393][T12816] hsr_slave_1: left promiscuous mode [ 273.001341][T12824] wg2: left promiscuous mode [ 273.006185][T12824] wg2: left allmulticast mode [ 273.028095][T12819] loop8: detected capacity change from 0 to 256 [ 273.037379][T12819] FAT-fs (loop8): bogus number of FAT sectors [ 273.043521][T12819] FAT-fs (loop8): Can't find a valid FAT filesystem [ 273.050475][T12824] wg2: entered promiscuous mode [ 273.055533][T12824] wg2: entered allmulticast mode [ 273.098515][T12833] wg2: left promiscuous mode [ 273.103224][T12833] wg2: left allmulticast mode [ 273.148711][T12833] wg2: entered promiscuous mode [ 273.153620][T12833] wg2: entered allmulticast mode [ 273.217359][T12853] loop7: detected capacity change from 0 to 1024 [ 273.227697][T12853] EXT4-fs: Ignoring removed orlov option [ 273.246241][T12853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.297324][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.319001][T12864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.327780][T12864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.354697][T12869] 9pnet_fd: Insufficient options for proto=fd [ 273.850542][T12888] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 273.869852][T12890] x_tables: duplicate underflow at hook 1 [ 273.898039][T12897] wg2: left promiscuous mode [ 273.902709][T12897] wg2: left allmulticast mode [ 273.912855][T12897] wg2: entered promiscuous mode [ 273.917870][T12897] wg2: entered allmulticast mode [ 273.920389][T12899] loop1: detected capacity change from 0 to 512 [ 273.931248][T12899] ext2: Unknown parameter 'pcr' [ 273.983080][T12906] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 274.040221][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.063495][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.074941][T12920] hsr_slave_0: left promiscuous mode [ 274.080789][T12920] hsr_slave_1: left promiscuous mode [ 274.086355][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.094906][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.161381][T12924] wg2: left promiscuous mode [ 274.166069][T12924] wg2: left allmulticast mode [ 274.177144][T12924] wg2: entered promiscuous mode [ 274.182116][T12924] wg2: entered allmulticast mode [ 274.301346][T12935] netlink: 'syz.7.2902': attribute type 1 has an invalid length. [ 274.315826][T12935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.328316][T12935] bond1 (unregistering): Released all slaves [ 274.358254][T12938] vlan2: entered allmulticast mode [ 274.421013][T12943] wg2: left promiscuous mode [ 274.425811][T12943] wg2: left allmulticast mode [ 274.440329][T12943] wg2: entered promiscuous mode [ 274.445399][T12943] wg2: entered allmulticast mode [ 274.482506][T12950] loop7: detected capacity change from 0 to 512 [ 274.491128][T12950] EXT4-fs (loop7): orphan cleanup on readonly fs [ 274.497595][T12950] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 274.506493][T12950] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 274.521953][T12950] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2907: attempt to clear invalid blocks 2 len 1 [ 274.535120][T12950] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2907: invalid indirect mapped block 1819239214 (level 0) [ 274.549515][T12950] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2907: invalid indirect mapped block 1819239214 (level 1) [ 274.563847][T12950] EXT4-fs (loop7): 1 truncate cleaned up [ 274.570019][T12950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.595646][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.631687][T12960] wg2: left promiscuous mode [ 274.636407][T12960] wg2: left allmulticast mode [ 274.648260][T12960] wg2: entered promiscuous mode [ 274.653262][T12960] wg2: entered allmulticast mode [ 274.657345][T12967] 9pnet_fd: Insufficient options for proto=fd [ 274.686284][T12969] vlan2: entered allmulticast mode [ 274.712365][T12974] wg2: left promiscuous mode [ 274.717151][T12974] wg2: left allmulticast mode [ 274.729585][T12974] wg2: entered promiscuous mode [ 274.734535][T12974] wg2: entered allmulticast mode [ 274.764162][T12977] netlink: 'syz.8.2919': attribute type 3 has an invalid length. [ 274.773965][T12977] loop8: detected capacity change from 0 to 256 [ 274.778246][T12979] lo speed is unknown, defaulting to 1000 [ 274.822845][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.838722][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.868325][T12985] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.884779][T12982] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 274.909384][T12985] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.957254][T12985] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.008195][T12985] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.037458][T12987] loop3: detected capacity change from 0 to 512 [ 275.045336][T12987] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.051747][T12987] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 275.060974][T12987] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 275.076191][T12987] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2923: attempt to clear invalid blocks 2 len 1 [ 275.089063][T10518] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.097778][T10518] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.104421][T12987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2923: invalid indirect mapped block 1819239214 (level 0) [ 275.114220][T10518] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.128733][T10518] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.137021][T12987] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2923: invalid indirect mapped block 1819239214 (level 1) [ 275.151607][T12987] EXT4-fs (loop3): 1 truncate cleaned up [ 275.162109][T12987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.191423][T10761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.246705][T12997] 9pnet_fd: Insufficient options for proto=fd [ 275.299544][T10850] hid_parser_main: 19 callbacks suppressed [ 275.299625][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.313090][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.320641][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.328332][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.335943][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.343375][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.350825][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.358293][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.365802][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.373583][T10850] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 275.384519][T10850] hid-generic 0000:0000:0000.0031: hidraw0: HID v8.00 Device [syz0] on syz0 [ 275.421461][T13007] loop8: detected capacity change from 0 to 1024 [ 275.428692][T13007] EXT4-fs: Ignoring removed orlov option [ 275.436612][T13007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.649241][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.665755][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.674239][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.687922][ T3423] hid-generic 0000:0000:0000.0032: hidraw0: HID v8.00 Device [syz0] on syz0 [ 275.731271][T13038] loop8: detected capacity change from 0 to 1024 [ 275.738076][T13038] EXT4-fs: inline encryption not supported [ 275.744046][T13038] EXT4-fs: Ignoring removed i_version option [ 275.750106][T13038] EXT4-fs: Ignoring removed bh option [ 275.776060][T13038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.788670][T13032] loop1: detected capacity change from 0 to 32768 [ 275.805353][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.824470][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 275.824488][ T29] audit: type=1326 audit(1761309424.996:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13041 comm="syz.8.2943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb6e91eefc9 code=0x0 [ 275.854800][T13032] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 275.860107][T13032] loop1: p1 start 460800 is beyond EOD, truncated [ 275.866596][T13032] loop1: p2 size 83886080 extends beyond EOD, truncated [ 275.875078][T13032] loop1: p5 start 460800 is beyond EOD, truncated [ 275.881627][T13032] loop1: p6 size 83886080 extends beyond EOD, truncated [ 275.988085][T13051] netlink: 'syz.1.2947': attribute type 7 has an invalid length. [ 276.017524][T13053] vlan2: entered allmulticast mode [ 276.133902][T10850] hid-generic 0000:0000:0000.0033: hidraw0: HID v8.00 Device [syz0] on syz0 [ 276.142066][ T29] audit: type=1326 audit(1761309425.316:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.167617][ T29] audit: type=1326 audit(1761309425.316:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.191413][ T29] audit: type=1326 audit(1761309425.316:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.215351][ T29] audit: type=1326 audit(1761309425.316:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.239071][ T29] audit: type=1326 audit(1761309425.316:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.262713][ T29] audit: type=1326 audit(1761309425.316:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.286324][ T29] audit: type=1326 audit(1761309425.316:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.310088][ T29] audit: type=1326 audit(1761309425.316:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.333721][ T29] audit: type=1326 audit(1761309425.316:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13061 comm="syz.1.2952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 276.427715][T13074] netlink: 'syz.9.2958': attribute type 7 has an invalid length. [ 276.435746][T13074] __nla_validate_parse: 17 callbacks suppressed [ 276.435765][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2958'. [ 276.482797][T13076] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 276.503676][T13067] loop7: detected capacity change from 0 to 32768 [ 276.528415][T13083] vlan2: entered allmulticast mode [ 276.555159][T13067] loop7: p1 p2 p3 < > p4 < p5 p6 > [ 276.560737][T13067] loop7: p1 start 460800 is beyond EOD, truncated [ 276.567214][T13067] loop7: p2 size 83886080 extends beyond EOD, truncated [ 276.577189][T13067] loop7: p5 start 460800 is beyond EOD, truncated [ 276.583668][T13067] loop7: p6 size 83886080 extends beyond EOD, truncated [ 276.590009][ T3559] hid-generic 0000:0000:0000.0034: hidraw0: HID v8.00 Device [syz0] on syz0 [ 276.713607][T13097] netlink: 'syz.8.2969': attribute type 7 has an invalid length. [ 276.721470][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2969'. [ 276.777219][T13103] lo speed is unknown, defaulting to 1000 [ 276.834422][T13110] loop7: detected capacity change from 0 to 1024 [ 276.857652][T13113] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 276.875297][T13110] EXT4-fs: inline encryption not supported [ 276.883341][T13110] EXT4-fs: Ignoring removed i_version option [ 276.889462][T13110] EXT4-fs: Ignoring removed bh option [ 276.906913][T13115] vlan2: entered allmulticast mode [ 276.934522][T13110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.019537][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.045236][T13131] netlink: 'syz.9.2984': attribute type 7 has an invalid length. [ 277.053093][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2984'. [ 277.083759][T13128] loop1: detected capacity change from 0 to 1024 [ 277.104248][T13128] EXT4-fs: Ignoring removed orlov option [ 277.116003][T13138] wg2: left promiscuous mode [ 277.120638][T13138] wg2: left allmulticast mode [ 277.140791][T13138] wg2: entered promiscuous mode [ 277.146023][T13138] wg2: entered allmulticast mode [ 277.159325][T13128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.176696][T13145] wg2: left promiscuous mode [ 277.181522][T13145] wg2: left allmulticast mode [ 277.210340][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2987'. [ 277.228281][T13145] wg2: entered promiscuous mode [ 277.233215][T13145] wg2: entered allmulticast mode [ 277.266889][T13152] lo speed is unknown, defaulting to 1000 [ 277.356589][T13156] loop7: detected capacity change from 0 to 1024 [ 277.403000][T13166] netlink: 'syz.8.2997': attribute type 7 has an invalid length. [ 277.410900][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2997'. [ 277.411306][T13156] EXT4-fs: inline encryption not supported [ 277.449433][T10707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.459633][T13156] EXT4-fs: Ignoring removed i_version option [ 277.465864][T13156] EXT4-fs: Ignoring removed bh option [ 277.490763][T10850] hid-generic 0000:0000:0000.0035: hidraw0: HID v8.00 Device [syz0] on syz0 [ 277.503411][T13173] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 277.515423][T13156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.573703][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.606537][T13192] wg2: left promiscuous mode [ 277.611187][T13192] wg2: left allmulticast mode [ 277.624929][T13192] wg2: entered promiscuous mode [ 277.629972][T13192] wg2: entered allmulticast mode [ 277.680700][T13204] loop7: detected capacity change from 0 to 1024 [ 277.681635][T13203] loop8: detected capacity change from 0 to 1024 [ 277.694824][T13203] EXT4-fs: Ignoring removed orlov option [ 277.703314][T13203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.703443][T13204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.761640][T13212] 9pnet_fd: Insufficient options for proto=fd [ 277.784454][T13213] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 277.926077][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.958499][T13220] lo speed is unknown, defaulting to 1000 [ 277.982821][T13218] loop9: detected capacity change from 0 to 32768 [ 278.010875][T13221] loop8: detected capacity change from 0 to 1024 [ 278.017696][T13221] EXT4-fs: inline encryption not supported [ 278.023839][T13221] EXT4-fs: Ignoring removed i_version option [ 278.029912][T13221] EXT4-fs: Ignoring removed bh option [ 278.036208][T13218] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 278.041525][T13218] loop9: p1 start 460800 is beyond EOD, truncated [ 278.048050][T13218] loop9: p2 size 83886080 extends beyond EOD, truncated [ 278.058109][T13221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.058528][T13218] loop9: p5 start 460800 is beyond EOD, truncated [ 278.077165][T13218] loop9: p6 size 83886080 extends beyond EOD, truncated [ 278.096535][T10380] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.116680][T13225] netlink: 'syz.8.3018': attribute type 3 has an invalid length. [ 278.124564][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3018'. [ 278.146984][T13225] loop8: detected capacity change from 0 to 256 [ 278.162512][T13227] loop9: detected capacity change from 0 to 1024 [ 278.170806][T13227] EXT4-fs: Ignoring removed orlov option [ 278.185732][T13227] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.214164][T10520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.225439][T13230] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.265822][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3020'. [ 278.278820][T13230] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.396104][T13230] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.417179][T13244] wg2: left promiscuous mode [ 278.421841][T13244] wg2: left allmulticast mode [ 278.431342][T13246] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.444793][T13244] wg2: entered promiscuous mode [ 278.449707][T13244] wg2: entered allmulticast mode [ 278.473395][T13249] wg2: left promiscuous mode [ 278.478222][T13249] wg2: left allmulticast mode [ 278.487815][T13249] wg2: entered promiscuous mode [ 278.492725][T13249] wg2: entered allmulticast mode [ 278.510077][T13230] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.533382][T10049] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.548670][T13255] 9pnet_fd: Insufficient options for proto=fd [ 278.562120][T13257] loop1: detected capacity change from 0 to 512 [ 278.569583][T13257] ext2: Unknown parameter 'pcr' [ 278.582898][T13257] loop1: detected capacity change from 0 to 512 [ 278.596256][T13257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.611382][T13257] ext4 filesystem being mounted at /125/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.631580][T13265] x_tables: duplicate underflow at hook 1 [ 278.642233][T13257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.663176][T13268] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3035'. [ 278.691592][T13274] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.708251][T13277] wg2: left promiscuous mode [ 278.712966][T13277] wg2: left allmulticast mode [ 278.722480][T13279] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.738517][T13277] wg2: entered promiscuous mode [ 278.743433][T13277] wg2: entered allmulticast mode [ 278.772403][T13283] vlan2: entered allmulticast mode [ 278.840830][T13292] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.849952][T13294] x_tables: duplicate underflow at hook 1 [ 278.873448][T13296] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3047'. [ 278.900576][T13302] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.918526][T13304] loop1: detected capacity change from 0 to 1024 [ 278.925517][T13304] EXT4-fs: Ignoring removed orlov option [ 278.934296][T13306] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 278.944779][T13304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.985996][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3053'. [ 279.059949][T13320] x_tables: duplicate underflow at hook 1 [ 279.134086][T13332] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 279.213634][T10850] hid-generic 0000:0000:0000.0036: hidraw0: HID v8.00 Device [syz0] on syz0 [ 279.258108][T13345] wg2: left promiscuous mode [ 279.262844][T13345] wg2: left allmulticast mode [ 279.272687][T13345] wg2: entered promiscuous mode [ 279.277830][T13345] wg2: entered allmulticast mode [ 279.309416][T13353] x_tables: duplicate underflow at hook 1 [ 279.364617][ T37] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.394604][ T37] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.421060][ T37] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.431711][ T37] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.455665][T13366] loop8: detected capacity change from 0 to 512 [ 279.462908][T13366] ext2: Unknown parameter 'pcr' [ 279.471886][T13366] loop8: detected capacity change from 0 to 512 [ 279.489840][T13366] ext4 filesystem being mounted at /136/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.507373][ T3411] hid-generic 0000:0000:0000.0037: hidraw0: HID v8.00 Device [syz0] on syz0 [ 279.576005][T13384] loop9: detected capacity change from 0 to 1024 [ 279.580049][T13386] 9pnet_fd: Insufficient options for proto=fd [ 279.583007][T13384] EXT4-fs: Ignoring removed orlov option [ 279.692154][T13396] loop3: detected capacity change from 0 to 1024 [ 279.699061][T13396] EXT4-fs: Ignoring removed orlov option [ 279.822096][T13388] loop8: detected capacity change from 0 to 32768 [ 279.875952][T13388] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 279.883732][T13415] loop9: detected capacity change from 0 to 1024 [ 279.890480][T13388] loop8: p1 start 460800 is beyond EOD, truncated [ 279.897116][T13388] loop8: p2 size 83886080 extends beyond EOD, truncated [ 279.905110][T13417] wg2: left promiscuous mode [ 279.909034][T13388] loop8: p5 start 460800 is beyond EOD, truncated [ 279.909746][T13417] wg2: left allmulticast mode [ 279.916182][T13388] loop8: p6 size 83886080 extends beyond EOD, truncated [ 279.934419][T13417] wg2: entered promiscuous mode [ 279.939356][T13417] wg2: entered allmulticast mode [ 279.952314][T13420] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 279.988161][T13424] loop3: detected capacity change from 0 to 1024 [ 279.995107][T13424] EXT4-fs: Ignoring removed orlov option [ 280.013389][T13428] x_tables: duplicate underflow at hook 1 [ 280.037506][ T36] hid-generic 0000:0000:0000.0038: hidraw0: HID v8.00 Device [syz0] on syz0 [ 280.168629][T13444] 9pnet_fd: Insufficient options for proto=fd [ 280.346508][T13447] loop3: detected capacity change from 0 to 32768 [ 280.385137][T13447] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 280.390566][T13447] loop3: p1 start 460800 is beyond EOD, truncated [ 280.397112][T13447] loop3: p2 size 83886080 extends beyond EOD, truncated [ 280.405512][T13447] loop3: p5 start 460800 is beyond EOD, truncated [ 280.411947][T13447] loop3: p6 size 83886080 extends beyond EOD, truncated [ 280.504681][T13453] x_tables: duplicate underflow at hook 1 [ 280.557174][T13459] wg2: left promiscuous mode [ 280.561847][T13459] wg2: left allmulticast mode [ 280.570969][T13459] wg2: entered promiscuous mode [ 280.576039][T13459] wg2: entered allmulticast mode [ 280.680485][ T3411] hid_parser_main: 222 callbacks suppressed [ 280.680531][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.693936][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.701805][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.710118][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.717718][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.725160][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.732670][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.740363][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.747898][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.755324][ T3411] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 280.763461][ T3411] hid-generic 0000:0000:0000.0039: hidraw0: HID v8.00 Device [syz0] on syz0 [ 280.792576][T13470] vlan2: entered allmulticast mode [ 280.801378][T13472] loop3: detected capacity change from 0 to 1024 [ 280.808249][T13472] EXT4-fs: Ignoring removed orlov option [ 280.851188][T13477] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 280.913642][T13488] wg2: left promiscuous mode [ 280.918328][T13488] wg2: left allmulticast mode [ 280.929774][T13488] wg2: entered promiscuous mode [ 280.934779][T13488] wg2: entered allmulticast mode [ 280.964164][ T3411] hid-generic 0000:0000:0000.003A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 280.971154][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 280.971174][ T29] audit: type=1326 audit(1761309430.146:13746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.005400][ T29] audit: type=1326 audit(1761309430.146:13747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.029090][ T29] audit: type=1326 audit(1761309430.146:13748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.052840][ T29] audit: type=1326 audit(1761309430.146:13749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.076473][ T29] audit: type=1326 audit(1761309430.146:13750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.100027][ T29] audit: type=1326 audit(1761309430.146:13751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.123655][ T29] audit: type=1326 audit(1761309430.146:13752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.147208][ T29] audit: type=1326 audit(1761309430.146:13753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.170787][ T29] audit: type=1326 audit(1761309430.146:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.194256][ T29] audit: type=1326 audit(1761309430.146:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13493 comm="syz.3.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8383fefc9 code=0x7ffc0000 [ 281.275140][T13500] loop9: detected capacity change from 0 to 1024 [ 281.281936][T13500] EXT4-fs: Ignoring removed orlov option [ 281.336601][T13505] loop9: detected capacity change from 0 to 1024 [ 281.344057][T13505] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 281.355094][T13505] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 281.365496][T13505] JBD2: no valid journal superblock found [ 281.371253][T13505] EXT4-fs (loop9): Could not load journal inode [ 281.485394][T13508] loop3: detected capacity change from 0 to 32768 [ 281.534879][T13508] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 281.540144][T13508] loop3: p1 start 460800 is beyond EOD, truncated [ 281.546772][T13508] loop3: p2 size 83886080 extends beyond EOD, truncated [ 281.555048][T13508] loop3: p5 start 460800 is beyond EOD, truncated [ 281.561479][T13508] loop3: p6 size 83886080 extends beyond EOD, truncated [ 281.601271][T13514] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 281.631343][T13518] netlink: 'syz.9.3141': attribute type 3 has an invalid length. [ 281.639251][T13518] __nla_validate_parse: 12 callbacks suppressed [ 281.639270][T13518] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3141'. [ 281.657964][T13518] loop9: detected capacity change from 0 to 256 [ 281.692496][T13523] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3142'. [ 281.743414][T13526] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.757087][T13528] x_tables: duplicate underflow at hook 1 [ 281.781346][T13531] serio: Serial port ptm0 [ 281.797447][T13526] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.847591][T13526] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.897940][T13526] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.962718][ T37] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.982535][ T37] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.991341][ T37] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.005177][ T37] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.060599][T13545] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 282.142545][T13551] loop3: detected capacity change from 0 to 1024 [ 282.149282][T13551] EXT4-fs: Ignoring removed orlov option [ 282.188631][T13557] wg2: left promiscuous mode [ 282.193311][T13557] wg2: left allmulticast mode [ 282.207082][T13557] wg2: entered promiscuous mode [ 282.212004][T13557] wg2: entered allmulticast mode [ 282.239661][T13563] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 282.257001][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3157'. [ 282.282738][T13569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3159'. [ 282.311986][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3160'. [ 282.340055][T13579] wg2: left promiscuous mode [ 282.344806][T13579] wg2: left allmulticast mode [ 282.350414][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 282.365085][T13579] wg2: entered promiscuous mode [ 282.370024][T13579] wg2: entered allmulticast mode [ 282.410380][T13587] loop3: detected capacity change from 0 to 512 [ 282.418064][T13587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 282.424512][T13587] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 282.433075][T13587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 282.448840][T13587] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.3166: attempt to clear invalid blocks 2 len 1 [ 282.462054][T13587] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3166: invalid indirect mapped block 1819239214 (level 0) [ 282.466378][T13595] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 282.477557][T13587] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3166: invalid indirect mapped block 1819239214 (level 1) [ 282.497069][T13587] EXT4-fs (loop3): 1 truncate cleaned up [ 282.503345][T13597] wg2: left promiscuous mode [ 282.508029][T13597] wg2: left allmulticast mode [ 282.522994][T13597] wg2: entered promiscuous mode [ 282.527960][T13597] wg2: entered allmulticast mode [ 282.607425][T13606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'. [ 282.671636][T13615] wg2: left promiscuous mode [ 282.676321][T13615] wg2: left allmulticast mode [ 282.685408][ T5871] hid-generic 0000:0000:0000.003B: collection stack underflow [ 282.692953][ T5871] hid-generic 0000:0000:0000.003B: item 0 0 0 12 parsing failed [ 282.700989][ T5871] hid-generic 0000:0000:0000.003B: probe with driver hid-generic failed with error -22 [ 282.701193][T13615] wg2: entered promiscuous mode [ 282.715693][T13615] wg2: entered allmulticast mode [ 282.823913][T13620] tipc: Enabling of bearer rejected, media not registered [ 282.856189][T13624] loop1: detected capacity change from 0 to 1024 [ 282.920716][T13629] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 283.111049][T13632] loop8: detected capacity change from 0 to 512 [ 283.119109][T13632] EXT4-fs (loop8): orphan cleanup on readonly fs [ 283.125552][T13632] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 283.133976][T13632] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 283.148919][T13632] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3183: attempt to clear invalid blocks 2 len 1 [ 283.162107][T13632] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3183: invalid indirect mapped block 1819239214 (level 0) [ 283.176327][T13632] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3183: invalid indirect mapped block 1819239214 (level 1) [ 283.190657][T13632] EXT4-fs (loop8): 1 truncate cleaned up [ 283.256679][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3185'. [ 283.590031][T13649] IPv6: Can't replace route, no match found [ 283.709792][T13651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 284.385112][T13655] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 284.399468][T13657] loop1: detected capacity change from 0 to 1024 [ 284.471256][T13663] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 284.527305][ T3395] hid-generic 0000:0000:0000.003C: collection stack underflow [ 284.534968][ T3395] hid-generic 0000:0000:0000.003C: item 0 0 0 12 parsing failed [ 284.543374][ T3395] hid-generic 0000:0000:0000.003C: probe with driver hid-generic failed with error -22 [ 284.556017][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3196'. [ 284.598704][T13676] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 284.681985][T13682] loop8: detected capacity change from 0 to 1024 [ 284.689155][T13682] EXT4-fs: Ignoring removed orlov option [ 284.825155][T13687] loop7: detected capacity change from 0 to 512 [ 284.833132][T13687] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.839636][T13687] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 284.849357][T13687] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 284.864213][T13687] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3202: attempt to clear invalid blocks 2 len 1 [ 284.877328][T13687] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3202: invalid indirect mapped block 1819239214 (level 0) [ 284.891497][T13687] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3202: invalid indirect mapped block 1819239214 (level 1) [ 284.906580][T13687] EXT4-fs (loop7): 1 truncate cleaned up [ 284.960248][T13694] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 285.059353][T13705] 9pnet_fd: Insufficient options for proto=fd [ 285.094442][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.103293][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.109024][T13711] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 285.187982][T13724] lo speed is unknown, defaulting to 1000 [ 285.192571][T13726] loop7: detected capacity change from 0 to 1024 [ 285.201004][T13726] EXT4-fs: Ignoring removed orlov option [ 285.272187][T13728] loop8: detected capacity change from 0 to 1024 [ 285.346399][T13728] EXT4-fs: inline encryption not supported [ 285.352483][T13728] EXT4-fs: Ignoring removed i_version option [ 285.358582][T13728] EXT4-fs: Ignoring removed bh option [ 285.441677][T13747] IPv6: Can't replace route, no match found [ 285.492089][T13753] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 285.557751][T13760] loop3: detected capacity change from 0 to 1024 [ 285.571581][T13765] loop1: detected capacity change from 0 to 1024 [ 285.578936][T13765] EXT4-fs: Ignoring removed orlov option [ 285.596751][T13767] lo speed is unknown, defaulting to 1000 [ 285.640360][T13772] loop7: detected capacity change from 0 to 1024 [ 285.657404][T13772] EXT4-fs: inline encryption not supported [ 285.663879][T13772] EXT4-fs: Ignoring removed i_version option [ 285.664982][T13774] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 285.669954][T13772] EXT4-fs: Ignoring removed bh option [ 285.694516][T13773] ================================================================== [ 285.702688][T13773] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 285.710994][T13773] [ 285.713322][T13773] write to 0xffff8881004b01a0 of 4 bytes by task 13765 on cpu 1: [ 285.721059][T13773] writeback_single_inode+0x150/0x3f0 [ 285.726455][T13773] sync_inode_metadata+0x5b/0x90 [ 285.731412][T13773] generic_buffers_fsync_noflush+0xd9/0x120 [ 285.737321][T13773] ext4_sync_file+0x1ab/0x690 [ 285.742006][T13773] vfs_fsync_range+0x10d/0x130 [ 285.746781][T13773] ext4_buffered_write_iter+0x34f/0x3c0 [ 285.752330][T13773] ext4_file_write_iter+0x387/0xf60 [ 285.757534][T13773] iter_file_splice_write+0x666/0xa60 [ 285.762935][T13773] direct_splice_actor+0x156/0x2a0 [ 285.768261][T13773] splice_direct_to_actor+0x312/0x680 [ 285.773645][T13773] do_splice_direct+0xda/0x150 [ 285.778416][T13773] do_sendfile+0x380/0x650 [ 285.782847][T13773] __x64_sys_sendfile64+0x105/0x150 [ 285.788060][T13773] x64_sys_call+0x2bb4/0x3000 [ 285.792751][T13773] do_syscall_64+0xd2/0x200 [ 285.797257][T13773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.803160][T13773] [ 285.805499][T13773] read to 0xffff8881004b01a0 of 4 bytes by task 13773 on cpu 0: [ 285.813132][T13773] __mark_inode_dirty+0x55/0x750 [ 285.818083][T13773] ext4_write_inline_data_end+0x3e5/0x5f0 [ 285.823812][T13773] ext4_write_end+0x3d7/0x730 [ 285.828501][T13773] generic_perform_write+0x312/0x490 [ 285.833794][T13773] ext4_buffered_write_iter+0x1ee/0x3c0 [ 285.839350][T13773] ext4_file_write_iter+0x387/0xf60 [ 285.844556][T13773] iter_file_splice_write+0x666/0xa60 [ 285.849936][T13773] direct_splice_actor+0x156/0x2a0 [ 285.855062][T13773] splice_direct_to_actor+0x312/0x680 [ 285.860451][T13773] do_splice_direct+0xda/0x150 [ 285.865239][T13773] do_sendfile+0x380/0x650 [ 285.869674][T13773] __x64_sys_sendfile64+0x105/0x150 [ 285.874887][T13773] x64_sys_call+0x2bb4/0x3000 [ 285.879584][T13773] do_syscall_64+0xd2/0x200 [ 285.884094][T13773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.890001][T13773] [ 285.892325][T13773] value changed: 0x00000010 -> 0x00000002 [ 285.898037][T13773] [ 285.900360][T13773] Reported by Kernel Concurrency Sanitizer on: [ 285.906515][T13773] CPU: 0 UID: 0 PID: 13773 Comm: syz.1.3232 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.916324][T13773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.926378][T13773] ================================================================== [ 286.046440][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 286.046454][ T29] audit: type=1326 audit(1761309435.226:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000 [ 286.076470][ T29] audit: type=1326 audit(1761309435.256:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13764 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4ed64efc9 code=0x7ffc0000