last executing test programs: 3m5.510649967s ago: executing program 2 (id=2814): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddb, 0x10100, 0x1, 0x92}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="4ecec27cf18820a4ec18ee210249ec702546b28b4c5f493dcd2c11e3196dff3bcc2e6c0a404411b6d5c50e0c63cd149f8ead3c7649648a89819b27f75f6bae4a0066941724496461619a30d3afcca1c53a57e4013f60fdb1052c1296e4d2f4b214a3ef152dcde73e99fe1bce0c63fddadef196f0d44879ff94d8408a4f8dbd33d48a66d0e60541dac7276f7e34a40a4dd7b752c3d88c63bf1416d851ec91dcfff6dd7cfa38edba20ada5e7e852687a9c", @ANYRES64=r0, @ANYBLOB='\t\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="03373ada06a20413d6b660e857923da8ae4287d92f04b68ff6af741da628c139b5922540e75fb38cbf6829ffffb8b8b42daaf1aab3b29dc4b469ae449cedb1c8c22648e78ee4897812de99e3bd1188cbc585e961dccbf0d5350ea9856161b5c46047"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x3, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000e72ff55146b66b6a000000003200000000000000000000000000000000000001feffffffffffffff0500000000000000000000000000000065000000000000000000000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000a0004fdaf00000000000000480002006362632873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000940)="912a31a3e770234f2c4e52c03da5a7dfa5aa54f85a39d58496c464cffce6bf60ce229bd6bf11744080e7cfe730a831c2238fbef25847ae4588872caae41959a439ddeca96f54e8748c7f361545d809d7814d09d010f16d41f3dab527474e61371bb2bf4b734ac423dde1aa73ed30138cffac8013dee6cc8f07e5490d0bb07297f0f69317f9f43c9acd9ab624e47d623ff3c41ee717ecb0ac814958e85f"}, {&(0x7f0000000b80)="250f2f6c0caf4062889c778f50896aad1daa31d6a2322857600cabf49cdc08701be57784da9d4e34941d9781106f56f2032f83ac8ae4798c3ead6dc108ba7000a9874370669968d0c72b795041aa64884be384e5c7b6f62ac4cbc6614d4dfe54aae2136db566cf0885c467546a698ef5d5d6f39068cc860c4281e03db56e9a46a9b70c428bbb70b976ae3ce3857178ae3c50d0831789131717eab92ca6ac4016765fc8dba371af16483f2b9a6c957dc1328b4ef76a1160eefa0d8c95ca1f5653704838cacfa2b81a1343775a92b62535dc6ff50838a9a668525a6afbfecd"}, {&(0x7f0000000c80)="ef3a45b0cd0c3f7b0b2c1cfca32e657498f050a3137f674f9b67181baf48c49b00b3bd582aaaeeb71de5b0c3ed3e99636fc74a1a65aabb5022ec11579c44e403482d86013d27705648f5855f2b02a5cbb21e69f0f775d86ba0e43e6c7b24bb02885f2f2d4cc39a43a29a66442c8e6df08847a4909563c6772007b1dae8eeacaa5b962099f99a2d40c281f5e7545c4f64a7744e5bbdfd8e64d4828ce26f1e3cf87df6ada811dae8131628ca617fddf9a9dc3d8d96eeba46fa254174c4f3f7630aec2030d0710c9bbcb4d91d21f66050d55d0bc441fbb4405b919b64d046330eeb632e35678e618d3c4dceca3a72fffcfec5419304a5"}, {&(0x7f0000000d80)="781273415217f4577745b419adea274f22429ba43090cc98b3e2938c5e1394c6a7b511365548674360415fa48c880be686b0acf12586c912a4d0c3aec56b9dc96c442dff2424594b23bb3a95de89879dfb96d9416a284490845c0c6ccdcc2f56a0550036d1c3f29b5eca185e2d92437222c5c8bbceba177f2070761bddf844e49b8bfae0fa0bb37c1ff55353d1f8eb62efb0573b44960c57db313853c151fa3aecb71ed1f0c57734db2b4feca9f191abfc5592fc3961216c7b2a8191219d189680d73184d1808780ec4da326febe81727376831f297b43468fd1e7e7c69b"}, {&(0x7f0000000f80)="16266a204a0b32e8cac12b11043905c2e605cd5e3b09e5dff49601ee9aa30f1d8a8338d5b8a9b40a07cc4f745e9dfd1b5c97e4b900534428fb5c3e2dc40111094ee847e447072b608e85053c755cd3f14222a7b3167af29158ac71057b8219731b7bcc4879f7124b6fa06566df7ee140c6d7e3245a00c9402bf3e43b47dce107f694a6"}], 0x2a, 0x0, 0x0, 0x1f00c00e}, 0x20040084) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r12, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r13}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3m4.637141076s ago: executing program 2 (id=2819): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 4) 3m4.510175756s ago: executing program 2 (id=2821): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000004c0)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000340), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef08000840000000000800084000000001080001400000001708000840000000000900020073797a3200000000090007"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3m3.460380039s ago: executing program 2 (id=2840): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r5 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x104) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) dup(r6) sendfile(r4, r5, 0x0, 0x8000fffffffc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f00000015c0)={0x6d8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x64, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb317}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740503e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ad24bc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x586d002f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x296e2532}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x761e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ffe788}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8054}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1043157d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cbd1edf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49993d03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cc6d9b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfef6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5346672b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf848}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1502b69f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a853f37}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33e0032e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfbf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7248}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x633d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e46}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffff7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xafe2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc025}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcec8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b0e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23ba7c51}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44079148}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b5a4283}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f2a53ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41aec4ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x849127e}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d498b71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7728401f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dc37258}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d76c3fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2589ed4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4000098}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x270016dc}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e448584}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24fd7b93}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42dd6957}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36508bc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x335cab68}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c9546d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x797e105d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ddc8790}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ebff72}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc154}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1353e1c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43d42016}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ad702d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a785e15}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d15a1a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb13f31}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48c3c84f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7224a73d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84eb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbde}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df6835c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a8171a7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9961}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a142bb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26aaf752}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65441b74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x375a85d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4927c171}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a782a3b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bea90bd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x589a5685}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38e52cbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5784cb9b}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40c26a02}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14197cb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4622cd7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47040bb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a213c2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9f2f52b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4505f033}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47e578e9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca53561}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fdd0a93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc24a810}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cedb88}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bd00eda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaa70f64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x276d5e7f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d03da9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599130fe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41d13738}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d391b8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9776}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb637}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x333f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x392e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe24a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9274e63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x825e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x327e3ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1983}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf19d7aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ce5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfae}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740617d7}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13b1f92b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1260}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa336}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8063}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x280faf42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab89505}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2715bcac}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9075}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40ccbf09}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa80d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7fa1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x647f4271}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd04856f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x760b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a52}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b710e16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39126433}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60a91229}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eb075e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8970}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbdb7150}]}]}]}, 0x6d8}, 0x1, 0x0, 0x0, 0x20004810}, 0x4000000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004000000b47c000000000000", @ANYRES32, @ANYRESDEC], 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x8, 'erspan0\x00', {'lo\x00'}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x8000, 0x6, 0x4, 0x4}, {0xe90d, 0x1, 0x5, 0x6}, {0x5, 0x0, 0x5, 0x800}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.981984597s ago: executing program 2 (id=2848): r0 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[], 0x3, 0x7fd, &(0x7f0000000840)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) 3m2.787260773s ago: executing program 2 (id=2852): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/exec\x00') syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) close(r2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlock(&(0x7f0000b2b000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18f1000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000001dc0)="bb", 0xfdef}], 0x1}}], 0x2, 0x0) ioctl$sock_ifreq(r9, 0x8947, &(0x7f00000002c0)={'nr0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x1}}) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000fe8000000075d89f72000000000000aa"], 0x18) 3m2.740222327s ago: executing program 32 (id=2852): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/exec\x00') syz_clone(0x10000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) close(r2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlock(&(0x7f0000b2b000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18f1000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) r8 = socket$inet6(0xa, 0x3, 0x3c) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000005}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000001dc0)="bb", 0xfdef}], 0x1}}], 0x2, 0x0) ioctl$sock_ifreq(r9, 0x8947, &(0x7f00000002c0)={'nr0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x1}}) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000fe8000000075d89f72000000000000aa"], 0x18) 2.51594447s ago: executing program 4 (id=5880): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002695d9f4c1dd6a011ef17fc3ec76dc8221bc9d4e59b5726ba0a70c32a1cc88c5a3d53f42ef14c79fbce0f3ac2f360e25055c81d601e276c60707274056ba7e1956fd62e053ef8a7e9184730ae281ac71451baf3a2afc681b1e22dda9a0bcce48433136a96a33435fb5b140c3799efd78c5ee644377b22e203cf17cc9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x44, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x44}}, 0x0) (fail_nth: 6) 1.733285842s ago: executing program 1 (id=5888): socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xfffffffa, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a00b400", 0x1e}], 0x1}, 0x0) 1.712475764s ago: executing program 1 (id=5890): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/54, 0x36}], 0x1, 0x5b, 0x0) 1.646223309s ago: executing program 1 (id=5891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1539, &(0x7f00000003c0)={0x0, 0xed32, 0x2, 0x0, 0x394}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0xfffffffffffffd66, 0x0}}], 0x1, 0x40002003, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier_val}, {@norecovery}, {@mb_optimize_scan}, {@resuid}, {@nodiscard}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) listen(r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, 0x1411, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000000) r7 = syz_clone(0xa00c0100, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0xf5, 0x40000) rt_tgsigqueueinfo(r7, r7, 0x1c, 0x0) bind$can_raw(r6, &(0x7f0000000100), 0x10) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) 1.645046229s ago: executing program 4 (id=5893): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd}, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000002c0), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r5, 0x3) 1.63167536s ago: executing program 4 (id=5894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="70d3d49069f2b9b1a88edc5396fdbf33045fd35b73e532cfb36adc4ef54a4ae9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x2c, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x80}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x40004) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) unshare(0x2c020400) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @empty}, 0xffffff8f) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x10200, 0xa4) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x3ffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r9) 1.160981457s ago: executing program 0 (id=5899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) socket$inet6(0xa, 0x400000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 1.108281722s ago: executing program 0 (id=5900): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.102065552s ago: executing program 5 (id=5901): creat(&(0x7f0000000080)='./file0\x00', 0x12c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0x7f, 0x0, 0x4) 1.076338934s ago: executing program 0 (id=5902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r3, &(0x7f00000076c0)=""/252, 0xfc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES8=r5, @ANYRES32=r4, @ANYRESOCT=r10, @ANYRESHEX=r6, @ANYRES8=r4, @ANYRESOCT=r9, @ANYRESOCT=r0, @ANYRESDEC=r10, @ANYRESOCT=r9], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x2008805) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r7, @ANYRESDEC, @ANYRESHEX=r11, @ANYBLOB="9c44b88d544a426bcc2edfccabeedefe53b2b2893652c9798d7fbb5beb078a36df37c1bf62f6815e88b536883979b67155851ec62535682e39167faca2db3644af3738bf238d9002d4f8c12c8109e16d57c95dfced4bfc53d5193eeb231849a0a24ff5fbf6d1f77feed8172e82e0851941ab2e9eb355", @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRESOCT=r10, @ANYRES32, @ANYRESDEC=r3, @ANYRESDEC=r6, @ANYRES16, @ANYRESDEC=r3, @ANYRES32], 0x50, 0x24040094}, 0x80) r12 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8=r8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES64=r10, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r9, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r10, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r12, @ANYBLOB="100004000000f86db8c7a55b2cf37e922131606a000020000000000000006bb359"], 0x94, 0x1) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r9, &(0x7f0000000040)) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x3, r3, 'id0\x00'}) r14 = io_uring_setup(0x3c92, &(0x7f0000000240)={0x0, 0x3, 0x2, 0xffffffff, 0x20023c}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0xd, 0x0, 0x0) close_range(r14, 0xffffffffffffffff, 0x0) 1.00992397s ago: executing program 5 (id=5903): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x31, 0xffffffffffffffff, 0xd0fb6000) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x2c000400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r1, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.00960321s ago: executing program 0 (id=5904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000175d56048fb7cb7647db9d9a1bdfd0bd02ad6ade1a81dce4ceeb447b087102129b820832968262d5356c92761913bdd11bfffb9b4b23854e13122c6a2354c157969e985d8c5a11d33ce6cfb5c468edceb3d65cc89ab4ec72b3f5b009457cbfd76b601f00f98f68d74c14d79784b604f22b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710400000000000095040000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdfb}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000015090100000000009500000000000000de9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.00929771s ago: executing program 0 (id=5905): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x4040854) 945.207355ms ago: executing program 0 (id=5906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000022) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/44, 0x2c}], 0x1, 0x0, 0xfffffffffffffffc}}, @rdma_args={0x48, 0x114, 0x1, {{0x2}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 908.206928ms ago: executing program 5 (id=5907): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1) getdents(r0, &(0x7f0000000180)=""/48, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007910a800009500000c00"/31], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x20080e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x504, &(0x7f0000000f40)="$eJzs3c9vG1kdAPCvnV9ONrvJLnsAhNiyLBRU1Unc3Wi1B1hOCKGVEHsEqRsSN4pix1HsLJvQQ/o/IFGJExz5Azj3xJ+A4MYFDkj8iEBNJZBmNWM7dVO7cZvETuPPRxrNm3ljf99rO+95vk38AhhZ1yLiICImI+KTiJhrnc9FxFha+LC5pdc9PLy7enR4dzUXSfLxv3LZNem56HhN6pXWexYi4sffj/hZ7um49b39zZVKpbzTPJxeaFS3F+p7+zc3qivr5fXyVqm0vLS8+P6t90rn1te3qpPNQtqxg2//Im3WbKuusx/n6P9JZuI4Tmo8In54AcGGYazVn8lhN4QXko+INyLi7ez+n4ux7G8TALjKkmQukrnHH+ASAODKy2c5sFy+2MoFzEY+Xyw2c3hvxky+Uqs3btyp7W6tNXNl8zGRv7NRKS+2coXzMZFLj5ey8uPj0onjWxHxekT8cmo6Oy6u1iprw/7wAwAj6pUT8/9/p5rzPwBwxRWG3QAAYODM/wAwesz/ADB6zP8AMHrM/wAwesz/ADB6zP8AMFJ+9NFH6ZYctb7/eu3Tvd3N2qc318r1zWJ1d7W4WtvZLq7XauvZd/ZUT3u/Sq22vfRu7H42/53temOhvrd/u1rb3Wrczr7X+3Z5YiC9AgCe5fW3Hvw5FxEHH0xnW3Ss5WCuhqstf5YXT59fO4DBGxt2A4ChsdoXjK4zPONLD8AV0WWJ3icUOh73j58ZkiRJLrZZwAW6/iX5fxhVHfl/PwUMI0b+H0ZXv/n/0/IDwMsnSXL9rvkf/V4IAFxucvxAj+f7N1r737X+c+CnayevuH+RrQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDLrb3+b7G1Fvhs5PPFYsSrETEfE7k7G5XyYkS8FhF/mpqYSo+XhtxmAOCs8n/Ptdb/uj73zuzJ2snco6lsHxE///XHv/pspdHY+WN6/t/H5xv3W+dLw2g/AHCa9jyd7Tse5B8e3l1tb4Nszz++FxGFZvyjw8k4Oo4/HuPZvhATETHzn1zruCnXkbs4i4N7EfHFbv3PxWyWA2mufHoyfhr71YHGzz8RP5/VNffpn8UXnjtyMncOzYeX2oN0/Pmw2/2Xj2vZvvv9X8hGqLNrjX/pW60eZWPg4/jt8W+sx/h3rd8Y7/7hB83S9NN19yK+PB7Rjn3UMf604+d6xH+nz/h/+cpX3+5Vl/wm4np0j98Za6FR3V6o7+3f3KiurJfXy1ul0vLS8uL7t94rLWQ56oXes8E/P7jxWq+6tP8zPeIXTun/N/rs/2//98lPvvaM+N/6erf4+XjzGfHTOfGbfcZfmfl9oVddGn+ta//bevf/Rp/x//q3/aeWDQcAhqe+t7+5UqmUdwZZaH+QGGhQhStQSP/VXIJmdC18d1CxJuO5XpUkLxSr14hxHlk34DJo3utJeSciHg27MQAAAAAAAAAAAAAAQFeD+I2lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAq+vzAAAA//+YttWs") 822.371174ms ago: executing program 1 (id=5908): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x28a05480, 0x0, 0x24, 0x0, 0x0, 0x0) 770.102828ms ago: executing program 5 (id=5910): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000e30300000208820000d90000dd9526cf80000000e07cd568000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0xfffffff8, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x3, 0x6, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1a, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb38, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x2000000, 0xc, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004000000061122400000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000100)={r10, 0x7}, 0x8) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000440)=0x800004) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) socket(0x11, 0x800000003, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xddf0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 671.392236ms ago: executing program 3 (id=5913): creat(&(0x7f0000000080)='./file0\x00', 0x12c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) fadvise64(r0, 0x7f, 0x0, 0x4) 638.077859ms ago: executing program 4 (id=5914): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x31, 0xffffffffffffffff, 0xd0fb6000) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) mount_setattr(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000500)={0x0, 0x7, 0x80000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r1, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (fail_nth: 9) 630.61297ms ago: executing program 5 (id=5915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") setresuid(0xee00, 0xee01, 0xee01) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) (async) r2 = socket$inet6(0xa, 0x9b9747aa07b3edbd, 0xa) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 550.233606ms ago: executing program 3 (id=5916): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xb}, 0x0, 0x0, 0x0, 0x2a492a5b5ecb1d8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) 509.205599ms ago: executing program 3 (id=5917): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2200000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 429.796856ms ago: executing program 5 (id=5918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8084, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x1539, &(0x7f00000003c0)={0x0, 0xed32, 0x2, 0x0, 0x394}, &(0x7f0000000440), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0xfffffffffffffd66, 0x0}}], 0x1, 0x40002003, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@barrier_val}, {@norecovery}, {@mb_optimize_scan}, {@resuid}, {@nodiscard}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000000e40)="$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") r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) listen(r1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x40, 0x1411, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000000) r7 = syz_clone(0xa00c0100, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0xf5, 0x40000) rt_tgsigqueueinfo(r7, r7, 0x1c, 0x0) bind$can_raw(r6, &(0x7f0000000100), 0x10) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) 194.357474ms ago: executing program 3 (id=5919): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100400, 0x10000, 0xfffffffe, 0x0, 0x4, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073", @ANYRESOCT=r0], 0x2a4}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, 0x0, 0x0}, 0x94) 153.612637ms ago: executing program 4 (id=5920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 101.682372ms ago: executing program 3 (id=5921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x50000}, 0x0) 60.157245ms ago: executing program 1 (id=5922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) socket$inet6(0xa, 0x400000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 59.033265ms ago: executing program 4 (id=5923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="341e000084f02ebcde74115034664d1aaf8e2ae2b98259a4", @ANYRES16=r9, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) 46.865946ms ago: executing program 3 (id=5924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 0s ago: executing program 1 (id=5925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="70d3d49069f2b9b1a88edc5396fdbf33045fd35b73e532cfb36adc4ef54a4ae9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x2c, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x80}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x40004) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) unshare(0x2c020400) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @empty}, 0xffffff8f) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x10200, 0xa4) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x3ffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r9) kernel console output (not intermixed with test programs): or (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 362.780714][T17539] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #12: comm syz.5.4887: corrupted inode contents [ 362.807294][T17539] EXT4-fs error (device loop5): ext4_truncate:4666: inode #12: comm syz.5.4887: mark_inode_dirty error [ 362.824393][T17539] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 362.835266][T17539] EXT4-fs (loop5): 1 truncate cleaned up [ 362.843236][T17539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.864082][T17539] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 362.878592][T17543] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 362.883664][T17539] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 362.888763][T17543] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 363.061750][T17562] openvswitch: netlink: Message has 6 unknown bytes. [ 363.086801][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.093562][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4897'. [ 363.601501][T17588] loop5: detected capacity change from 0 to 1024 [ 363.652643][T17588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.745408][T17588] netlink: 'syz.5.4898': attribute type 21 has an invalid length. [ 363.761999][T17588] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4898'. [ 363.817245][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.820831][T17614] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4919'. [ 364.314772][T17632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17632 comm=syz.4.4924 [ 364.426625][T17644] netlink: 'syz.4.4930': attribute type 21 has an invalid length. [ 364.438451][T17644] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4930'. [ 364.447800][T17646] lo speed is unknown, defaulting to 1000 [ 364.476805][T17650] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4933'. [ 364.637860][T17666] loop5: detected capacity change from 0 to 512 [ 364.656041][T17666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.721518][T17671] validate_nla: 1 callbacks suppressed [ 364.721533][T17671] netlink: 'syz.1.4941': attribute type 25 has an invalid length. [ 364.966679][T17702] pimreg: entered allmulticast mode [ 364.976539][T17702] pimreg: left allmulticast mode [ 365.129016][T17718] netlink: 'syz.1.4959': attribute type 21 has an invalid length. [ 365.221629][T17736] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.268932][T17743] IPVS: Error joining to the multicast group [ 365.534819][T17666] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.570329][T17768] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 365.579224][T17768] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (133) [ 365.829956][T17786] tmpfs: Bad value for 'mpol' [ 365.995511][T17793] netlink: 'syz.0.4988': attribute type 4 has an invalid length. [ 366.339227][T17808] netlink: 'syz.4.4995': attribute type 10 has an invalid length. [ 366.349517][T17808] dummy0: entered promiscuous mode [ 366.355664][T17808] bridge0: port 3(dummy0) entered blocking state [ 366.362122][T17808] bridge0: port 3(dummy0) entered disabled state [ 366.371606][T17808] dummy0: entered allmulticast mode [ 366.377885][T17808] bridge0: port 3(dummy0) entered blocking state [ 366.384325][T17808] bridge0: port 3(dummy0) entered forwarding state [ 367.028154][T17847] loop3: detected capacity change from 0 to 128 [ 367.089309][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 367.089326][ T29] audit: type=1326 audit(1789948031.497:19063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.146661][T17847] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.180357][T17857] loop5: detected capacity change from 0 to 512 [ 367.198952][T17847] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.211304][T17861] __nla_validate_parse: 13 callbacks suppressed [ 367.211320][T17861] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5013'. [ 367.232872][ T29] audit: type=1326 audit(1789948031.497:19064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.256866][ T29] audit: type=1326 audit(1789948031.536:19065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.280535][ T29] audit: type=1326 audit(1789948031.536:19066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.304165][ T29] audit: type=1326 audit(1789948031.536:19067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.327812][ T29] audit: type=1326 audit(1789948031.536:19068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.351466][ T29] audit: type=1326 audit(1789948031.536:19069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.375091][ T29] audit: type=1326 audit(1789948031.536:19070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.398693][ T29] audit: type=1326 audit(1789948031.536:19071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.422460][ T29] audit: type=1326 audit(1789948031.536:19072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17850 comm="syz.0.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 367.489881][T17847] bridge0: port 4(batadv1) entered blocking state [ 367.496467][T17847] bridge0: port 4(batadv1) entered disabled state [ 367.520671][T17857] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 367.532385][T17847] batadv1: entered allmulticast mode [ 367.535539][T17857] EXT4-fs (loop5): mount failed [ 367.541157][T17847] batadv1: entered promiscuous mode [ 367.568567][T17874] bridge0: port 2(batadv1) entered blocking state [ 367.575243][T17874] bridge0: port 2(batadv1) entered disabled state [ 367.591705][T17874] batadv1: entered allmulticast mode [ 367.593793][T12425] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.604896][T17874] batadv1: entered promiscuous mode [ 367.631085][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5018'. [ 367.640206][T17874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.648974][T17874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.771564][T17894] netlink: 'syz.1.5028': attribute type 10 has an invalid length. [ 367.787584][T17896] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5026'. [ 367.799376][T17898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5029'. [ 367.813176][T17898] loop3: detected capacity change from 0 to 512 [ 367.821047][T17894] netlink: 'syz.1.5028': attribute type 4 has an invalid length. [ 367.828822][T17894] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5028'. [ 367.841233][T17898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.855752][T17898] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.899513][T17902] lo speed is unknown, defaulting to 1000 [ 368.013503][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.024581][ T5971] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 368.033900][ T5971] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 368.081457][ T5971] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 368.090767][ T5971] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 368.600021][T17889] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.142064][T17955] netlink: 'syz.4.5049': attribute type 21 has an invalid length. [ 369.181425][T17955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5049'. [ 369.301513][T17973] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5057'. [ 369.327608][T17969] loop5: detected capacity change from 0 to 128 [ 369.354571][T17969] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 369.361744][T17969] FAT-fs (loop5): Filesystem has been set read-only [ 369.384550][T17969] FAT-fs (loop5): error, clusters badly computed (3 != 2) [ 369.396545][T17969] FAT-fs (loop5): error, clusters badly computed (4 != 3) [ 369.420071][T17969] FAT-fs (loop5): error, clusters badly computed (5 != 4) [ 369.433757][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5052'. [ 369.487176][T17969] FAT-fs (loop5): error, clusters badly computed (6 != 5) [ 369.510674][T17969] FAT-fs (loop5): error, clusters badly computed (7 != 6) [ 369.538329][T17969] FAT-fs (loop5): error, clusters badly computed (8 != 7) [ 369.594196][T17980] tipc: Started in network mode [ 369.599158][T17980] tipc: Node identity ac14140f, cluster identity 4711 [ 369.707328][T17969] syz.5.5056: attempt to access beyond end of device [ 369.707328][T17969] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 369.811377][T17969] syz.5.5056: attempt to access beyond end of device [ 369.811377][T17969] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 369.856293][T17980] tipc: New replicast peer: 255.255.255.255 [ 369.862409][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862409][T17969] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 369.862455][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862455][T17969] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 369.862539][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862539][T17969] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 369.862582][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862582][T17969] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 369.862625][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862625][T17969] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 369.862675][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862675][T17969] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 369.862712][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862712][T17969] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 369.862800][T17969] syz.5.5056: attempt to access beyond end of device [ 369.862800][T17969] loop5: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 369.975519][T17980] tipc: Enabled bearer , priority 10 [ 370.002671][T17987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5061'. [ 370.013696][T17987] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5061'. [ 370.127133][T17996] netlink: 'syz.0.5065': attribute type 21 has an invalid length. [ 370.311867][T18014] pim6reg: entered allmulticast mode [ 370.868190][T18074] sch_fq: defrate 4294967295 ignored. [ 370.880561][T18076] 9p: Unknown access argument ‚: -22 [ 370.907840][T18074] netlink: 'syz.3.5089': attribute type 1 has an invalid length. [ 370.949149][T18085] loop3: detected capacity change from 0 to 128 [ 370.986839][T18085] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 370.994264][T18085] FAT-fs (loop3): Filesystem has been set read-only [ 371.001218][T18085] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 371.017647][T18085] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 371.027537][T18085] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 371.036657][T18085] FAT-fs (loop3): error, clusters badly computed (6 != 5) [ 371.044076][T18085] FAT-fs (loop3): error, clusters badly computed (7 != 6) [ 371.136271][ T9] tipc: Node number set to 2886997007 [ 371.238263][T18113] loop5: detected capacity change from 0 to 8192 [ 371.346027][T18124] netlink: 'syz.0.5107': attribute type 4 has an invalid length. [ 372.215774][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 372.215793][ T29] audit: type=1326 audit(1790472324.509:19558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.456866][ T29] audit: type=1326 audit(1790472324.548:19559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.480545][ T29] audit: type=1326 audit(1790472324.558:19560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.505576][ T29] audit: type=1326 audit(1790472324.567:19561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.529174][ T29] audit: type=1326 audit(1790472324.587:19562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.554129][ T29] audit: type=1326 audit(1790472324.597:19563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.578920][ T29] audit: type=1326 audit(1790472324.606:19564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.602484][ T29] audit: type=1326 audit(1790472324.616:19565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.627470][ T29] audit: type=1326 audit(1790472324.626:19566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 372.651039][ T29] audit: type=1326 audit(1790472324.635:19567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18145 comm="syz.3.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 373.195144][T18207] __nla_validate_parse: 10 callbacks suppressed [ 373.195168][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'. [ 373.773001][T18221] veth3: entered promiscuous mode [ 373.786612][T18221] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 373.861149][T18227] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5138'. [ 373.880716][T18221] lo speed is unknown, defaulting to 1000 [ 373.909071][T18232] netlink: 'syz.0.5140': attribute type 10 has an invalid length. [ 373.921055][T18232] netlink: 'syz.0.5140': attribute type 4 has an invalid length. [ 373.928924][T18232] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5140'. [ 373.961606][T18237] dummy0: left allmulticast mode [ 373.966703][T18237] bridge0: port 3(dummy0) entered disabled state [ 373.987489][T18237] batman_adv: batadv0: Adding interface: dummy0 [ 373.993863][T18237] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.021129][T18237] batman_adv: batadv0: Interface activated: dummy0 [ 374.077652][T18237] batadv0: mtu less than device minimum [ 374.083765][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.094636][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.105483][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.116457][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.127201][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.138041][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.149024][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.159975][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.170665][T18237] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.222850][T18252] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5145'. [ 374.275149][T18261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5150'. [ 374.325040][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'. [ 374.403172][T18277] netlink: 'syz.1.5158': attribute type 4 has an invalid length. [ 374.453557][T18283] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5161'. [ 374.466726][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5161'. [ 374.612010][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 374.647122][T18300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5166'. [ 374.724510][T18300] loop3: detected capacity change from 0 to 512 [ 374.784804][T18300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.871329][T18300] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.103263][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.273787][T18345] netlink: 'syz.0.5187': attribute type 10 has an invalid length. [ 375.283875][T18345] netlink: 'syz.0.5187': attribute type 4 has an invalid length. [ 375.640888][T18368] 9pnet_fd: p9_fd_create_tcp (18368): problem connecting socket to 127.0.0.1 [ 375.742729][T18378] FAULT_INJECTION: forcing a failure. [ 375.742729][T18378] name failslab, interval 1, probability 0, space 0, times 0 [ 375.756843][T18378] CPU: 0 UID: 0 PID: 18378 Comm: syz.0.5198 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 375.756871][T18378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.756883][T18378] Call Trace: [ 375.756891][T18378] [ 375.756901][T18378] __dump_stack+0x1d/0x30 [ 375.756987][T18378] dump_stack_lvl+0xe8/0x140 [ 375.757012][T18378] dump_stack+0x15/0x1b [ 375.757034][T18378] should_fail_ex+0x265/0x280 [ 375.757075][T18378] should_failslab+0x8c/0xb0 [ 375.757173][T18378] kmem_cache_alloc_node_noprof+0x57/0x320 [ 375.757203][T18378] ? __alloc_skb+0x101/0x320 [ 375.757241][T18378] __alloc_skb+0x101/0x320 [ 375.757338][T18378] ? audit_log_start+0x365/0x6c0 [ 375.757371][T18378] audit_log_start+0x380/0x6c0 [ 375.757465][T18378] audit_seccomp+0x48/0x100 [ 375.757499][T18378] ? __seccomp_filter+0x68c/0x10d0 [ 375.757546][T18378] __seccomp_filter+0x69d/0x10d0 [ 375.757575][T18378] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 375.757622][T18378] ? vfs_write+0x75e/0x8e0 [ 375.757657][T18378] __secure_computing+0x82/0x150 [ 375.757685][T18378] syscall_trace_enter+0xcf/0x1e0 [ 375.757717][T18378] do_syscall_64+0xac/0x200 [ 375.757847][T18378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 375.757878][T18378] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 375.757906][T18378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.757937][T18378] RIP: 0033:0x7fed44dfeb69 [ 375.757952][T18378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.757970][T18378] RSP: 002b:00007fed4345f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 375.758032][T18378] RAX: ffffffffffffffda RBX: 00007fed45025fa0 RCX: 00007fed44dfeb69 [ 375.758045][T18378] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 375.758057][T18378] RBP: 00007fed4345f090 R08: 0000000000010d00 R09: 000000000000000f [ 375.758070][T18378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.758087][T18378] R13: 0000000000000000 R14: 00007fed45025fa0 R15: 00007fffd72b91a8 [ 375.758111][T18378] [ 375.918499][T18378] netlink: 'syz.0.5198': attribute type 5 has an invalid length. [ 376.058988][T18386] netlink: 'syz.4.5201': attribute type 10 has an invalid length. [ 376.131005][T18386] netlink: 'syz.4.5201': attribute type 4 has an invalid length. [ 376.261415][T18398] netlink: 'syz.5.5204': attribute type 21 has an invalid length. [ 376.641276][T18412] FAULT_INJECTION: forcing a failure. [ 376.641276][T18412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.654539][T18412] CPU: 1 UID: 0 PID: 18412 Comm: syz.5.5210 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 376.654577][T18412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.654594][T18412] Call Trace: [ 376.654603][T18412] [ 376.654613][T18412] __dump_stack+0x1d/0x30 [ 376.654636][T18412] dump_stack_lvl+0xe8/0x140 [ 376.654655][T18412] dump_stack+0x15/0x1b [ 376.654716][T18412] should_fail_ex+0x265/0x280 [ 376.654801][T18412] should_fail+0xb/0x20 [ 376.654839][T18412] should_fail_usercopy+0x1a/0x20 [ 376.654865][T18412] _copy_to_user+0x20/0xa0 [ 376.654927][T18412] simple_read_from_buffer+0xb5/0x130 [ 376.654951][T18412] proc_fail_nth_read+0x10e/0x150 [ 376.655015][T18412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.655048][T18412] vfs_read+0x1a0/0x6f0 [ 376.655117][T18412] ? __rcu_read_unlock+0x4f/0x70 [ 376.655137][T18412] ? __fget_files+0x184/0x1c0 [ 376.655165][T18412] ksys_read+0xda/0x1a0 [ 376.655257][T18412] __x64_sys_read+0x40/0x50 [ 376.655286][T18412] x64_sys_call+0x27bc/0x2ff0 [ 376.655313][T18412] do_syscall_64+0xd2/0x200 [ 376.655343][T18412] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 376.655433][T18412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 376.655456][T18412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.655507][T18412] RIP: 0033:0x7f10fb9dd57c [ 376.655522][T18412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.655540][T18412] RSP: 002b:00007f10fa03f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.655564][T18412] RAX: ffffffffffffffda RBX: 00007f10fbc05fa0 RCX: 00007f10fb9dd57c [ 376.655580][T18412] RDX: 000000000000000f RSI: 00007f10fa03f0a0 RDI: 0000000000000007 [ 376.655668][T18412] RBP: 00007f10fa03f090 R08: 0000000000000000 R09: 0000000000000000 [ 376.655680][T18412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.655696][T18412] R13: 0000000000000000 R14: 00007f10fbc05fa0 R15: 00007fff7bc9cff8 [ 376.655719][T18412] [ 376.863291][T18416] loop3: detected capacity change from 0 to 164 [ 376.963047][T18416] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 377.068674][T18436] netlink: 'syz.5.5221': attribute type 21 has an invalid length. [ 377.360477][T18467] loop5: detected capacity change from 0 to 512 [ 377.391336][T18467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.420825][T18467] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.536234][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.647792][T18479] netlink: 'syz.0.5237': attribute type 21 has an invalid length. [ 377.737930][T18482] FAULT_INJECTION: forcing a failure. [ 377.737930][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 377.752157][T18482] CPU: 0 UID: 0 PID: 18482 Comm: syz.3.5238 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 377.752188][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.752273][T18482] Call Trace: [ 377.752279][T18482] [ 377.752287][T18482] __dump_stack+0x1d/0x30 [ 377.752337][T18482] dump_stack_lvl+0xe8/0x140 [ 377.752356][T18482] dump_stack+0x15/0x1b [ 377.752377][T18482] should_fail_ex+0x265/0x280 [ 377.752431][T18482] ? alloc_super+0x3d/0x570 [ 377.752471][T18482] should_failslab+0x8c/0xb0 [ 377.752499][T18482] __kmalloc_cache_noprof+0x4c/0x320 [ 377.752535][T18482] alloc_super+0x3d/0x570 [ 377.752673][T18482] sget_fc+0x24e/0x6e0 [ 377.752706][T18482] ? __pfx_set_anon_super_fc+0x10/0x10 [ 377.752840][T18482] ? __pfx_shmem_fill_super+0x10/0x10 [ 377.752865][T18482] get_tree_nodev+0x2a/0x100 [ 377.752945][T18482] shmem_get_tree+0x1c/0x30 [ 377.752992][T18482] vfs_get_tree+0x54/0x1d0 [ 377.753019][T18482] do_new_mount+0x207/0x5e0 [ 377.753050][T18482] ? security_capable+0x83/0x90 [ 377.753073][T18482] path_mount+0x4a4/0xb20 [ 377.753093][T18482] ? user_path_at+0x109/0x130 [ 377.753206][T18482] __se_sys_mount+0x28f/0x2e0 [ 377.753283][T18482] ? fput+0x8f/0xc0 [ 377.753313][T18482] __x64_sys_mount+0x67/0x80 [ 377.753334][T18482] x64_sys_call+0x2b4d/0x2ff0 [ 377.753357][T18482] do_syscall_64+0xd2/0x200 [ 377.753447][T18482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 377.753476][T18482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 377.753591][T18482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.753658][T18482] RIP: 0033:0x7fe99d29eb69 [ 377.753675][T18482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.753698][T18482] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.753723][T18482] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 377.753740][T18482] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 377.753757][T18482] RBP: 00007fe99b8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 377.753827][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.753839][T18482] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 377.753858][T18482] [ 378.010010][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 378.010028][ T29] audit: type=1326 audit(1792045194.179:19694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 378.039866][ T29] audit: type=1326 audit(1792045194.179:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18439 comm="syz.1.5223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 378.119812][T18490] loop3: detected capacity change from 0 to 512 [ 378.126861][T18490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.136833][T18499] FAULT_INJECTION: forcing a failure. [ 378.136833][T18499] name failslab, interval 1, probability 0, space 0, times 0 [ 378.150239][T18499] CPU: 0 UID: 0 PID: 18499 Comm: syz.5.5243 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 378.150279][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.150296][T18499] Call Trace: [ 378.150305][T18499] [ 378.150315][T18499] __dump_stack+0x1d/0x30 [ 378.150343][T18499] dump_stack_lvl+0xe8/0x140 [ 378.150366][T18499] dump_stack+0x15/0x1b [ 378.150459][T18499] should_fail_ex+0x265/0x280 [ 378.150558][T18499] should_failslab+0x8c/0xb0 [ 378.150583][T18499] __kvmalloc_node_noprof+0x123/0x4e0 [ 378.150611][T18499] ? page_pool_create_percpu+0x236/0x630 [ 378.150720][T18499] page_pool_create_percpu+0x236/0x630 [ 378.150758][T18499] page_pool_create+0x1a/0x30 [ 378.150790][T18499] bpf_test_run_xdp_live+0x12e/0xfe0 [ 378.150851][T18499] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 378.150877][T18499] ? __pfx_autoremove_wake_function+0x10/0x10 [ 378.150912][T18499] ? 0xffffffffa02054c0 [ 378.150997][T18499] ? synchronize_rcu+0x45/0x320 [ 378.151030][T18499] ? 0xffffffffa02054c0 [ 378.151046][T18499] ? 0xffffffffa02054c0 [ 378.151062][T18499] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 378.151102][T18499] ? 0xffffffffa0201d58 [ 378.151129][T18499] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 378.151243][T18499] bpf_prog_test_run_xdp+0x4f5/0x910 [ 378.151359][T18499] ? __rcu_read_unlock+0x4f/0x70 [ 378.151426][T18499] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 378.151488][T18499] bpf_prog_test_run+0x227/0x390 [ 378.151527][T18499] __sys_bpf+0x4b9/0x7b0 [ 378.151570][T18499] __x64_sys_bpf+0x41/0x50 [ 378.151618][T18499] x64_sys_call+0x2aea/0x2ff0 [ 378.151639][T18499] do_syscall_64+0xd2/0x200 [ 378.151669][T18499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 378.151699][T18499] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 378.151727][T18499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.151770][T18499] RIP: 0033:0x7f10fb9deb69 [ 378.151803][T18499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.151832][T18499] RSP: 002b:00007f10fa03f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.151868][T18499] RAX: ffffffffffffffda RBX: 00007f10fbc05fa0 RCX: 00007f10fb9deb69 [ 378.151881][T18499] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 378.151892][T18499] RBP: 00007f10fa03f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.151904][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.151920][T18499] R13: 0000000000000000 R14: 00007f10fbc05fa0 R15: 00007fff7bc9cff8 [ 378.151957][T18499] [ 378.407264][T18499] page_pool_create_percpu() gave up with errno -12 [ 378.413799][T18490] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.5242: casefold flag without casefold feature [ 378.413909][T18490] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.5242: couldn't read orphan inode 15 (err -117) [ 378.445601][T18490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.459445][T18506] netlink: 'syz.0.5247': attribute type 4 has an invalid length. [ 378.476389][T18503] __nla_validate_parse: 11 callbacks suppressed [ 378.476411][T18503] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5246'. [ 378.493849][T18508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.503935][T18508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.567939][T18512] netlink: 'syz.5.5248': attribute type 1 has an invalid length. [ 378.575818][T18512] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5248'. [ 378.664159][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.064863][ T29] audit: type=1400 audit(1792045195.189:19696): avc: denied { append } for pid=18524 comm="syz.3.5253" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 379.206933][T18533] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 379.231123][ T29] audit: type=1326 audit(1792045195.354:19697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 379.254772][ T29] audit: type=1326 audit(1792045195.354:19698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 379.278480][ T29] audit: type=1326 audit(1792045195.354:19699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 379.302215][ T29] audit: type=1326 audit(1792045195.354:19700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.5.5258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 379.329337][T18537] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5259'. [ 379.398211][T18542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5257'. [ 379.453937][T18547] loop5: detected capacity change from 0 to 512 [ 379.480302][T18547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.534780][T18550] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5262'. [ 379.544943][T18550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=18550 comm=syz.0.5262 [ 379.662702][T18555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5265'. [ 379.792044][T18564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.803700][T18564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.821277][T18568] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5270'. [ 379.838393][T18570] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5271'. [ 379.872483][T18573] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5268'. [ 379.895523][T18570] 8021q: adding VLAN 0 to HW filter on device  [ 379.904669][T18570] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.932084][T18570] net_ratelimit: 10 callbacks suppressed [ 379.932146][T18570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.954424][T18577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=18577 comm=syz.1.5271 [ 379.973286][ T29] audit: type=1326 audit(1792045196.102:19701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18569 comm="syz.1.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 380.015162][T18582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5275'. [ 380.019720][ T29] audit: type=1326 audit(1792045196.122:19702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18569 comm="syz.1.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 380.048078][ T29] audit: type=1326 audit(1792045196.122:19703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18569 comm="syz.1.5271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 380.385474][T18547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.061632][T18602] validate_nla: 6 callbacks suppressed [ 381.061651][T18602] netlink: 'syz.5.5283': attribute type 4 has an invalid length. [ 381.079637][T18602] loop5: detected capacity change from 0 to 512 [ 381.104168][T18602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.335796][T18622] netlink: 'syz.0.5291': attribute type 21 has an invalid length. [ 381.728350][T18650] netlink: 'syz.1.5302': attribute type 21 has an invalid length. [ 381.873319][T18657] netlink: 'syz.1.5305': attribute type 1 has an invalid length. [ 381.886641][T18657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.900023][T18657] bond0 (unregistering): Released all slaves [ 381.959480][T18660] netlink: 'syz.4.5306': attribute type 21 has an invalid length. [ 381.974409][T18602] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.990847][T18662] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 382.712200][T18684] netlink: 'syz.0.5314': attribute type 21 has an invalid length. [ 382.872317][T18688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.918593][T18688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.043418][T18703] netlink: 'syz.0.5317': attribute type 1 has an invalid length. [ 383.139229][T18706] loop5: detected capacity change from 0 to 512 [ 383.418460][T18710] FAULT_INJECTION: forcing a failure. [ 383.418460][T18710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.432929][T18710] CPU: 0 UID: 0 PID: 18710 Comm: syz.3.5324 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 383.433032][T18710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.433045][T18710] Call Trace: [ 383.433051][T18710] [ 383.433058][T18710] __dump_stack+0x1d/0x30 [ 383.433079][T18710] dump_stack_lvl+0xe8/0x140 [ 383.433110][T18710] dump_stack+0x15/0x1b [ 383.433132][T18710] should_fail_ex+0x265/0x280 [ 383.433210][T18710] should_fail+0xb/0x20 [ 383.433271][T18710] should_fail_usercopy+0x1a/0x20 [ 383.433381][T18710] _copy_from_user+0x1c/0xb0 [ 383.433410][T18710] memdup_user+0x5e/0xd0 [ 383.433435][T18710] strndup_user+0x68/0xb0 [ 383.433544][T18710] __se_sys_mount+0x8e/0x2e0 [ 383.433566][T18710] ? __schedule+0x6b9/0xb30 [ 383.433610][T18710] __x64_sys_mount+0x67/0x80 [ 383.433632][T18710] x64_sys_call+0x2b4d/0x2ff0 [ 383.433661][T18710] do_syscall_64+0xd2/0x200 [ 383.433691][T18710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.433715][T18710] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 383.433741][T18710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.433810][T18710] RIP: 0033:0x7fe99d29eb69 [ 383.433825][T18710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.433850][T18710] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.433874][T18710] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 383.433924][T18710] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 00002000000000c0 [ 383.433936][T18710] RBP: 00007fe99b8ff090 R08: 0000200000000040 R09: 0000000000000000 [ 383.433948][T18710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.433961][T18710] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 383.433985][T18710] [ 383.931549][T18719] netlink: 'syz.3.5327': attribute type 21 has an invalid length. [ 383.945675][T18718] __nla_validate_parse: 8 callbacks suppressed [ 383.945692][T18718] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5328'. [ 383.964012][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5327'. [ 384.165399][T18726] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5330'. [ 384.938185][T18732] pim6reg1: entered promiscuous mode [ 384.943554][T18732] pim6reg1: entered allmulticast mode [ 385.014296][T18739] FAULT_INJECTION: forcing a failure. [ 385.014296][T18739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.027588][T18739] CPU: 1 UID: 0 PID: 18739 Comm: syz.3.5336 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 385.027631][T18739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.027707][T18739] Call Trace: [ 385.027717][T18739] [ 385.027726][T18739] __dump_stack+0x1d/0x30 [ 385.027754][T18739] dump_stack_lvl+0xe8/0x140 [ 385.027783][T18739] dump_stack+0x15/0x1b [ 385.027808][T18739] should_fail_ex+0x265/0x280 [ 385.027918][T18739] should_fail+0xb/0x20 [ 385.027955][T18739] should_fail_usercopy+0x1a/0x20 [ 385.028013][T18739] _copy_from_user+0x1c/0xb0 [ 385.028044][T18739] copy_from_sockptr+0x5e/0xa0 [ 385.028080][T18739] do_ipv6_setsockopt+0x142c/0x2160 [ 385.028120][T18739] ? kstrtoull+0x111/0x140 [ 385.028173][T18739] ? __rcu_read_unlock+0x4f/0x70 [ 385.028200][T18739] ? avc_has_perm_noaudit+0x1b1/0x200 [ 385.028241][T18739] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 385.028280][T18739] ipv6_setsockopt+0x59/0x130 [ 385.028401][T18739] tcp_setsockopt+0x95/0xb0 [ 385.028441][T18739] sock_common_setsockopt+0x66/0x80 [ 385.028469][T18739] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 385.028501][T18739] __sys_setsockopt+0x184/0x200 [ 385.028586][T18739] __x64_sys_setsockopt+0x64/0x80 [ 385.028629][T18739] x64_sys_call+0x20ec/0x2ff0 [ 385.028654][T18739] do_syscall_64+0xd2/0x200 [ 385.028680][T18739] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 385.028789][T18739] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 385.028812][T18739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.028836][T18739] RIP: 0033:0x7fe99d29eb69 [ 385.028852][T18739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.028879][T18739] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 385.028907][T18739] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 385.028924][T18739] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 385.028938][T18739] RBP: 00007fe99b8ff090 R08: 0000000000000020 R09: 0000000000000000 [ 385.029009][T18739] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 385.029041][T18739] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 385.029068][T18739] [ 385.457897][ T29] kauditd_printk_skb: 2415 callbacks suppressed [ 385.457918][ T29] audit: type=1326 audit(1792045201.408:22119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.487857][ T29] audit: type=1326 audit(1792045201.408:22120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.511657][ T29] audit: type=1326 audit(1792045201.408:22121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.535389][ T29] audit: type=1326 audit(1792045201.408:22122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.558999][ T29] audit: type=1326 audit(1792045201.418:22123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.573109][T18750] loop3: detected capacity change from 0 to 1024 [ 385.582770][ T29] audit: type=1326 audit(1792045201.418:22124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.582820][ T29] audit: type=1326 audit(1792045201.418:22125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.582856][ T29] audit: type=1326 audit(1792045201.418:22126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.582933][ T29] audit: type=1326 audit(1792045201.418:22127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.582971][ T29] audit: type=1326 audit(1792045201.418:22128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.5338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb9deb69 code=0x7ffc0000 [ 385.712980][T18750] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.726354][T18750] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 385.778446][T18754] netlink: 'syz.5.5340': attribute type 4 has an invalid length. [ 385.834746][T18757] loop5: detected capacity change from 0 to 512 [ 385.843876][T18757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.030924][T18763] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5341'. [ 386.502144][T18779] netlink: 'syz.4.5345': attribute type 4 has an invalid length. [ 386.785721][T18757] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.051091][T18797] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5353'. [ 387.158987][T18809] netlink: 'syz.3.5346': attribute type 30 has an invalid length. [ 387.306315][T18818] sctp: [Deprecated]: syz.1.5359 (pid 18818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.306315][T18818] Use struct sctp_sack_info instead [ 387.330197][T18824] 8021q: VLANs not supported on ipvlan1 [ 387.351535][T18826] FAULT_INJECTION: forcing a failure. [ 387.351535][T18826] name failslab, interval 1, probability 0, space 0, times 0 [ 387.364339][T18826] CPU: 1 UID: 0 PID: 18826 Comm: syz.3.5362 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 387.364424][T18826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.364464][T18826] Call Trace: [ 387.364473][T18826] [ 387.364483][T18826] __dump_stack+0x1d/0x30 [ 387.364507][T18826] dump_stack_lvl+0xe8/0x140 [ 387.364539][T18826] dump_stack+0x15/0x1b [ 387.364555][T18826] should_fail_ex+0x265/0x280 [ 387.364587][T18826] should_failslab+0x8c/0xb0 [ 387.364615][T18826] kmem_cache_alloc_node_noprof+0x57/0x320 [ 387.364664][T18826] ? __alloc_skb+0x101/0x320 [ 387.364693][T18826] __alloc_skb+0x101/0x320 [ 387.364721][T18826] ? audit_log_start+0x365/0x6c0 [ 387.364832][T18826] audit_log_start+0x380/0x6c0 [ 387.364866][T18826] audit_seccomp+0x48/0x100 [ 387.364921][T18826] ? __seccomp_filter+0x68c/0x10d0 [ 387.364949][T18826] __seccomp_filter+0x69d/0x10d0 [ 387.364971][T18826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 387.364997][T18826] ? vfs_write+0x75e/0x8e0 [ 387.365051][T18826] ? __rcu_read_unlock+0x4f/0x70 [ 387.365081][T18826] ? __fget_files+0x184/0x1c0 [ 387.365138][T18826] __secure_computing+0x82/0x150 [ 387.365165][T18826] syscall_trace_enter+0xcf/0x1e0 [ 387.365194][T18826] do_syscall_64+0xac/0x200 [ 387.365247][T18826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.365278][T18826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 387.365346][T18826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.365367][T18826] RIP: 0033:0x7fe99d29eb69 [ 387.365387][T18826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.365409][T18826] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 387.365428][T18826] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 387.365442][T18826] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000000 [ 387.365471][T18826] RBP: 00007fe99b8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 387.365483][T18826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.365495][T18826] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 387.365515][T18826] [ 387.601411][T18831] netlink: 'syz.1.5363': attribute type 1 has an invalid length. [ 387.639548][T18834] loop5: detected capacity change from 0 to 1764 [ 387.650507][T18831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.660015][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5363'. [ 387.683160][T18837] bond0 (unregistering): Released all slaves [ 388.019106][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5373'. [ 388.313243][T18868] netlink: 'syz.1.5378': attribute type 4 has an invalid length. [ 388.486824][T18874] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 388.527179][T18874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.551952][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5380'. [ 388.631736][T18874] bond2 (unregistering): Released all slaves [ 389.289105][T18898] loop5: detected capacity change from 0 to 1024 [ 389.304904][T18898] EXT4-fs: Ignoring removed orlov option [ 389.323538][T18906] netlink: 'syz.4.5392': attribute type 4 has an invalid length. [ 389.346395][T18898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.409294][T18914] netlink: 'syz.4.5394': attribute type 10 has an invalid length. [ 389.455008][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.467219][T18914] netlink: 'syz.4.5394': attribute type 4 has an invalid length. [ 389.475042][T18914] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5394'. [ 389.765665][T18924] loop5: detected capacity change from 0 to 512 [ 389.996545][T18930] 9pnet_fd: Insufficient options for proto=fd [ 390.044619][T18930] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5400'. [ 390.232912][T18924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.245470][T18924] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.259296][T18924] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 390.273692][T18924] EXT4-fs (loop5): Remounting filesystem read-only [ 390.329326][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.574514][T18957] SELinux: Context @ is not valid (left unmapped). [ 390.581652][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 390.581669][ T29] audit: type=1400 audit(1792569723.535:22189): avc: denied { relabelto } for pid=18956 comm="syz.5.5412" name="cgroup.controllers" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 390.614154][ T29] audit: type=1400 audit(1792569723.535:22190): avc: denied { associate } for pid=18956 comm="syz.5.5412" name="cgroup.controllers" dev="tmpfs" ino=2418 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 390.655193][ T29] audit: type=1400 audit(1792569723.594:22191): avc: denied { ioctl } for pid=18956 comm="syz.5.5412" path="/447/cgroup.controllers" dev="tmpfs" ino=2418 ioctlcmd=0x2287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 390.683557][ T29] audit: type=1400 audit(1792569723.604:22192): avc: denied { unlink } for pid=11836 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 391.657873][T19000] netlink: 'syz.5.5427': attribute type 4 has an invalid length. [ 391.698255][T19000] loop5: detected capacity change from 0 to 512 [ 391.878160][T19009] pim6reg: entered allmulticast mode [ 391.889203][T19000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.911576][T19009] pim6reg: left allmulticast mode [ 391.965033][T19012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19012 comm=syz.0.5430 [ 392.005505][T19012] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 392.083116][T19009] bond2: (slave bridge2): making interface the new active one [ 392.095948][T19009] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 392.190299][T19031] sctp: [Deprecated]: syz.0.5439 (pid 19031) Use of int in max_burst socket option. [ 392.190299][T19031] Use struct sctp_assoc_value instead [ 392.208537][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'. [ 392.216066][T19034] netlink: 'syz.3.5438': attribute type 4 has an invalid length. [ 392.245642][T19034] loop3: detected capacity change from 0 to 512 [ 392.273250][T19034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.382131][T19049] 9pnet_fd: Insufficient options for proto=fd [ 392.398493][T19049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5444'. [ 392.420224][ T29] audit: type=1326 audit(1792569725.360:22193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b29085b27 code=0x7ffc0000 [ 392.448000][ T29] audit: type=1326 audit(1792569725.360:22194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b2902ad69 code=0x7ffc0000 [ 392.472320][ T29] audit: type=1326 audit(1792569725.360:22195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0b29085b27 code=0x7ffc0000 [ 392.495905][ T29] audit: type=1326 audit(1792569725.360:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b2902ad69 code=0x7ffc0000 [ 392.520955][ T29] audit: type=1326 audit(1792569725.360:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 392.544929][ T29] audit: type=1326 audit(1792569725.360:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19048 comm="syz.1.5444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 392.609625][T19000] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.109318][T19034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.201020][T19078] loop3: detected capacity change from 0 to 164 [ 393.224828][T19078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 393.269424][T19078] 9pnet_fd: Insufficient options for proto=fd [ 393.305386][T19078] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5456'. [ 393.339003][T19084] netlink: 'syz.0.5458': attribute type 4 has an invalid length. [ 393.432019][T19095] loop3: detected capacity change from 0 to 512 [ 393.465270][T19095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.479430][T19095] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.534757][T19113] loop5: detected capacity change from 0 to 512 [ 393.537240][T19112] 9pnet_fd: Insufficient options for proto=fd [ 393.548878][T19112] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5469'. [ 393.561329][T19113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.573969][T19113] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.588249][T19113] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 393.602866][T19113] EXT4-fs (loop5): Remounting filesystem read-only [ 393.629040][T19117] 9pnet_fd: Insufficient options for proto=fd [ 393.636326][T19117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5470'. [ 394.099507][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.159941][T19142] netlink: 'syz.1.5481': attribute type 21 has an invalid length. [ 394.178231][T19142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5481'. [ 394.217087][T19145] 9pnet_fd: Insufficient options for proto=fd [ 394.234841][T19145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5482'. [ 394.325591][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.402597][T19174] netlink: 'syz.0.5492': attribute type 21 has an invalid length. [ 394.412490][T19174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5492'. [ 394.459739][T19182] netlink: 'syz.5.5493': attribute type 4 has an invalid length. [ 394.471816][T19182] loop5: detected capacity change from 0 to 512 [ 394.483259][T19182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.692705][T19202] 9pnet_fd: Insufficient options for proto=fd [ 394.719434][T19202] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5499'. [ 394.985555][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5504'. [ 395.030287][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5501'. [ 395.325217][T19234] netlink: 'syz.4.5505': attribute type 21 has an invalid length. [ 395.381309][T19234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5505'. [ 395.500259][T19241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5508'. [ 395.512780][T19241] netlink: 'syz.4.5508': attribute type 10 has an invalid length. [ 395.555258][T19182] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.749425][T19251] 9pnet_fd: Insufficient options for proto=fd [ 395.762112][T19260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5516'. [ 395.773868][T19251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5513'. [ 395.785027][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 395.785045][ T29] audit: type=1326 audit(1793094016.708:22422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.816693][ T29] audit: type=1326 audit(1793094016.708:22423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.841765][ T29] audit: type=1326 audit(1793094016.738:22424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.865323][ T29] audit: type=1326 audit(1793094016.738:22425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.890240][ T29] audit: type=1326 audit(1793094016.738:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.914105][ T29] audit: type=1326 audit(1793094016.738:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.924261][T19270] netlink: 'syz.5.5518': attribute type 21 has an invalid length. [ 395.937837][ T29] audit: type=1326 audit(1793094016.738:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.947633][T19270] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5518'. [ 395.969164][ T29] audit: type=1326 audit(1793094016.738:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 395.969202][ T29] audit: type=1326 audit(1793094016.738:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 396.028298][ T29] audit: type=1326 audit(1793094016.738:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19250 comm="syz.1.5513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2908eb69 code=0x7ffc0000 [ 396.076754][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5519'. [ 396.087625][T19272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5519'. [ 396.264766][T19296] hsr_slave_0: left promiscuous mode [ 396.270938][T19296] hsr_slave_1: left promiscuous mode [ 396.376368][T19304] 9pnet_fd: Insufficient options for proto=fd [ 396.453793][T19310] 9pnet_fd: Insufficient options for proto=fd [ 396.632036][T19324] lo speed is unknown, defaulting to 1000 [ 396.638949][T19324] lo speed is unknown, defaulting to 1000 [ 396.652815][T19324] lo speed is unknown, defaulting to 1000 [ 396.659569][T19324] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 396.733946][T19328] validate_nla: 6 callbacks suppressed [ 396.733966][T19328] netlink: 'syz.4.5546': attribute type 10 has an invalid length. [ 396.736535][T19324] lo speed is unknown, defaulting to 1000 [ 396.763235][T19324] lo speed is unknown, defaulting to 1000 [ 396.771684][T19324] lo speed is unknown, defaulting to 1000 [ 396.900630][T19324] lo speed is unknown, defaulting to 1000 [ 396.909201][T19324] lo speed is unknown, defaulting to 1000 [ 396.918368][T19328] netlink: 'syz.4.5546': attribute type 4 has an invalid length. [ 396.931784][T19324] lo speed is unknown, defaulting to 1000 [ 396.938187][T19324] lo speed is unknown, defaulting to 1000 [ 396.946346][T19324] lo speed is unknown, defaulting to 1000 [ 397.029068][T19343] 9pnet_fd: Insufficient options for proto=fd [ 397.271774][T19368] netlink: 'syz.1.5561': attribute type 21 has an invalid length. [ 397.349817][T19378] loop5: detected capacity change from 0 to 164 [ 397.358362][T19377] netlink: 'syz.1.5566': attribute type 10 has an invalid length. [ 397.368993][T19377] netlink: 'syz.1.5566': attribute type 4 has an invalid length. [ 397.389553][T19378] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 397.406547][T19378] 9pnet_fd: Insufficient options for proto=fd [ 397.671960][T19407] netlink: 'syz.5.5577': attribute type 4 has an invalid length. [ 397.718685][T19407] loop5: detected capacity change from 0 to 512 [ 397.799775][T19407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.080476][T19425] lo speed is unknown, defaulting to 1000 [ 398.210477][T19425] lo speed is unknown, defaulting to 1000 [ 399.353525][T19407] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.874709][T19485] 9pnet_fd: Insufficient options for proto=fd [ 399.881836][T19485] __nla_validate_parse: 22 callbacks suppressed [ 399.881883][T19485] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5605'. [ 399.928642][T19487] netlink: 'syz.0.5606': attribute type 21 has an invalid length. [ 399.936737][T19487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5606'. [ 400.035936][T19491] netlink: 'syz.3.5607': attribute type 4 has an invalid length. [ 400.120745][T19491] loop3: detected capacity change from 0 to 512 [ 400.145935][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5609'. [ 400.165198][T19491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.530257][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'. [ 400.543927][T19519] 9pnet_fd: Insufficient options for proto=fd [ 400.551219][T19519] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5617'. [ 400.630731][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5616'. [ 400.646056][T19533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5622'. [ 400.685218][T19538] SELinux: Context system_u:object_r:hald_acl_exec_t:s0 is not valid (left unmapped). [ 400.716053][T19540] wireguard0: entered promiscuous mode [ 400.732293][T19541] wireguard0: entered promiscuous mode [ 400.760059][T19545] netlink: 'syz.1.5626': attribute type 10 has an invalid length. [ 400.771085][T19545] netlink: 'syz.1.5626': attribute type 4 has an invalid length. [ 400.778916][T19545] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5626'. [ 400.958984][T19491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.994609][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 400.994624][ T29] audit: type=1400 audit(1795191173.877:22613): avc: denied { accept } for pid=19551 comm="syz.3.5629" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.037579][T19554] loop5: detected capacity change from 0 to 164 [ 401.046076][ T29] audit: type=1326 audit(1795191173.937:22614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.073077][T19554] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 401.073768][T19552] IPv6: Can't replace route, no match found [ 401.082914][T19554] 9pnet_fd: Insufficient options for proto=fd [ 401.096586][ T29] audit: type=1326 audit(1795191173.957:22615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.121686][ T29] audit: type=1326 audit(1795191173.957:22616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.145401][ T29] audit: type=1326 audit(1795191173.957:22617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.170442][ T29] audit: type=1326 audit(1795191173.957:22618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.194316][ T29] audit: type=1326 audit(1795191173.957:22619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.219513][ T29] audit: type=1326 audit(1795191173.957:22620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.243384][ T29] audit: type=1326 audit(1795191173.957:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.268179][ T29] audit: type=1326 audit(1795191173.957:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.3.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99d29eb69 code=0x7ffc0000 [ 401.304675][T19554] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5630'. [ 401.446050][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5632'. [ 401.528809][T19586] loop5: detected capacity change from 0 to 512 [ 401.538095][T19586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.598671][T19594] dummy0: entered promiscuous mode [ 401.604140][T19594] dummy0: entered allmulticast mode [ 401.609800][T19594] team0: Port device dummy0 added [ 401.850761][T19623] pim6reg: entered allmulticast mode [ 401.857632][T19622] pim6reg: left allmulticast mode [ 402.058348][T19644] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 402.067996][T19644] validate_nla: 5 callbacks suppressed [ 402.068031][T19644] netlink: 'syz.0.5670': attribute type 1 has an invalid length. [ 402.134004][T19652] FAULT_INJECTION: forcing a failure. [ 402.134004][T19652] name failslab, interval 1, probability 0, space 0, times 0 [ 402.146841][T19652] CPU: 1 UID: 0 PID: 19652 Comm: syz.3.5674 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 402.146871][T19652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.146886][T19652] Call Trace: [ 402.146896][T19652] [ 402.146906][T19652] __dump_stack+0x1d/0x30 [ 402.146933][T19652] dump_stack_lvl+0xe8/0x140 [ 402.146959][T19652] dump_stack+0x15/0x1b [ 402.147054][T19652] should_fail_ex+0x265/0x280 [ 402.147093][T19652] should_failslab+0x8c/0xb0 [ 402.147192][T19652] __kvmalloc_node_noprof+0x123/0x4e0 [ 402.147231][T19652] ? page_pool_create_percpu+0x236/0x630 [ 402.147264][T19652] page_pool_create_percpu+0x236/0x630 [ 402.147296][T19652] page_pool_create+0x1a/0x30 [ 402.147462][T19652] bpf_test_run_xdp_live+0x12e/0xfe0 [ 402.147576][T19652] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 402.147603][T19652] ? cpus_read_unlock+0x6e/0xc0 [ 402.147630][T19652] ? __static_call_update+0x37c/0x3b0 [ 402.147678][T19652] ? 0xffffffffa02054c0 [ 402.147692][T19652] ? synchronize_rcu+0x45/0x320 [ 402.147722][T19652] ? 0xffffffffa02054c0 [ 402.147736][T19652] ? 0xffffffffa02054c0 [ 402.147750][T19652] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 402.147868][T19652] ? 0xffffffffa0201b50 [ 402.147896][T19652] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 402.147984][T19652] bpf_prog_test_run_xdp+0x4f5/0x910 [ 402.148054][T19652] ? __rcu_read_unlock+0x4f/0x70 [ 402.148087][T19652] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.148123][T19652] bpf_prog_test_run+0x227/0x390 [ 402.148187][T19652] __sys_bpf+0x4b9/0x7b0 [ 402.148219][T19652] __x64_sys_bpf+0x41/0x50 [ 402.148247][T19652] x64_sys_call+0x2aea/0x2ff0 [ 402.148276][T19652] do_syscall_64+0xd2/0x200 [ 402.148314][T19652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 402.148338][T19652] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 402.148359][T19652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.148386][T19652] RIP: 0033:0x7fe99d29eb69 [ 402.148405][T19652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.148442][T19652] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.148467][T19652] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 402.148494][T19652] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 402.148507][T19652] RBP: 00007fe99b8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 402.148522][T19652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.148534][T19652] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 402.148552][T19652] [ 402.148558][T19652] page_pool_create_percpu() gave up with errno -12 [ 402.230717][T19655] 9pnet_fd: Insufficient options for proto=fd [ 402.312247][T19656] lo speed is unknown, defaulting to 1000 [ 402.455507][T19658] loop3: detected capacity change from 0 to 512 [ 402.488949][T19656] lo speed is unknown, defaulting to 1000 [ 402.498566][T19658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.639316][T19658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.653603][T19658] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.666079][T19658] FAULT_INJECTION: forcing a failure. [ 402.666079][T19658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.679420][T19658] CPU: 1 UID: 0 PID: 19658 Comm: syz.3.5676 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 402.679615][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.679693][T19658] Call Trace: [ 402.679701][T19658] [ 402.679710][T19658] __dump_stack+0x1d/0x30 [ 402.679786][T19658] dump_stack_lvl+0xe8/0x140 [ 402.679809][T19658] dump_stack+0x15/0x1b [ 402.679830][T19658] should_fail_ex+0x265/0x280 [ 402.679870][T19658] should_fail_alloc_page+0xf2/0x100 [ 402.679914][T19658] __alloc_frozen_pages_noprof+0xff/0x360 [ 402.679958][T19658] alloc_pages_mpol+0xb3/0x250 [ 402.680004][T19658] folio_alloc_noprof+0x97/0x150 [ 402.680036][T19658] filemap_alloc_folio_noprof+0x66/0x210 [ 402.680146][T19658] __filemap_get_folio+0x28f/0x6b0 [ 402.680187][T19658] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 402.680218][T19658] ext4_da_write_begin+0x3ac/0x6e0 [ 402.680309][T19658] generic_perform_write+0x181/0x490 [ 402.680343][T19658] ext4_buffered_write_iter+0x1ee/0x3c0 [ 402.680383][T19658] ? ext4_file_write_iter+0xfe/0xf00 [ 402.680473][T19658] ext4_file_write_iter+0x383/0xf00 [ 402.680511][T19658] ? path_openat+0x1bf8/0x2170 [ 402.680535][T19658] ? _parse_integer_limit+0x170/0x190 [ 402.680581][T19658] do_iter_readv_writev+0x421/0x4c0 [ 402.680620][T19658] vfs_writev+0x2df/0x8b0 [ 402.680713][T19658] __se_sys_pwritev2+0xfc/0x1c0 [ 402.680784][T19658] __x64_sys_pwritev2+0x67/0x80 [ 402.680873][T19658] x64_sys_call+0x2c55/0x2ff0 [ 402.680900][T19658] do_syscall_64+0xd2/0x200 [ 402.680926][T19658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 402.680953][T19658] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 402.681020][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.681042][T19658] RIP: 0033:0x7fe99d29eb69 [ 402.681058][T19658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.681079][T19658] RSP: 002b:00007fe99b8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 402.681162][T19658] RAX: ffffffffffffffda RBX: 00007fe99d4c5fa0 RCX: 00007fe99d29eb69 [ 402.681175][T19658] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 402.681188][T19658] RBP: 00007fe99b8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 402.681200][T19658] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000002 [ 402.681216][T19658] R13: 0000000000000000 R14: 00007fe99d4c5fa0 R15: 00007ffdbdfebeb8 [ 402.681237][T19658] [ 402.930646][T19658] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 402.954995][T19658] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 402.967299][T19658] EXT4-fs (loop3): This should not happen!! Data will be lost [ 402.967299][T19658] [ 402.977015][T19658] EXT4-fs (loop3): Total free blocks count 0 [ 402.983038][T19658] EXT4-fs (loop3): Free/Dirty block details [ 402.988998][T19658] EXT4-fs (loop3): free_blocks=39626 [ 402.994358][T19658] EXT4-fs (loop3): dirty_blocks=1 [ 402.999402][T19658] EXT4-fs (loop3): Block reservation details [ 403.005447][T19658] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 403.013784][T19586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.060228][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.469864][T19687] loop3: detected capacity change from 0 to 164 [ 403.478892][T19687] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 403.488567][T19687] 9pnet_fd: Insufficient options for proto=fd [ 403.606636][T19699] loop5: detected capacity change from 0 to 512 [ 403.650720][T19699] EXT4-fs (loop5): orphan cleanup on readonly fs [ 403.661563][T19706] netlink: 'syz.3.5697': attribute type 21 has an invalid length. [ 403.671390][T19699] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5694: bg 0: block 248: padding at end of block bitmap is not set [ 403.720062][T19699] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5694: Failed to acquire dquot type 1 [ 403.735090][T19706] loop3: detected capacity change from 0 to 512 [ 403.752818][T19706] EXT4-fs: Ignoring removed orlov option [ 403.758607][T19706] ext4: Unknown parameter 'noacl' [ 403.787451][T19699] EXT4-fs (loop5): 1 truncate cleaned up [ 403.822535][T19699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.854275][T19719] loop3: detected capacity change from 0 to 164 [ 403.878091][T19699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.885562][T19699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.893923][T19699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.894839][T19719] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 403.902889][T19699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.920634][T19719] 9pnet_fd: Insufficient options for proto=fd [ 404.050383][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.100393][T19730] loop3: detected capacity change from 0 to 1024 [ 404.116637][T19730] ext4: Invalid uid '0x00000000ffffffff' [ 404.316552][T19748] netlink: 'syz.3.5712': attribute type 7 has an invalid length. [ 404.334496][T19750] 9pnet_fd: Insufficient options for proto=fd [ 404.383281][T19752] loop5: detected capacity change from 0 to 2048 [ 404.419430][T19748] loop3: detected capacity change from 0 to 2048 [ 404.426775][T19748] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 404.438432][T19748] sch_tbf: burst 0 is lower than device dummy0 mtu (1514) ! [ 404.447397][T19752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.548838][T19771] pimreg: entered allmulticast mode [ 404.554775][T19771] pimreg: left allmulticast mode [ 404.663646][T19784] syzkaller1: entered promiscuous mode [ 404.669241][T19784] syzkaller1: entered allmulticast mode [ 405.028826][T19801] netlink: 'syz.1.5721': attribute type 21 has an invalid length. [ 405.050638][T19801] __nla_validate_parse: 15 callbacks suppressed [ 405.050660][T19801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5721'. [ 405.409571][T19837] loop3: detected capacity change from 0 to 164 [ 405.420312][T19837] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 405.438358][T19837] 9pnet_fd: Insufficient options for proto=fd [ 405.445994][T19837] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5727'. [ 405.525498][T19844] loop3: detected capacity change from 0 to 1024 [ 405.532490][T19844] EXT4-fs: Ignoring removed mblk_io_submit option [ 405.539613][T19844] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 405.916315][T19878] lo speed is unknown, defaulting to 1000 [ 405.931714][ T5922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.973517][ T5922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.020828][ T5922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.047331][T19878] lo speed is unknown, defaulting to 1000 [ 406.067805][ T5922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.147592][ T5922] bridge_slave_1: left allmulticast mode [ 406.153415][ T5922] bridge_slave_1: left promiscuous mode [ 406.159135][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.167509][ T5922] bridge_slave_0: left allmulticast mode [ 406.174623][ T5922] bridge_slave_0: left promiscuous mode [ 406.180386][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.368487][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 406.368505][ T29] audit: type=1326 audit(1795191179.205:23125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.401266][ T29] audit: type=1326 audit(1795191179.235:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.425880][ T29] audit: type=1326 audit(1795191179.235:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.449784][ T29] audit: type=1326 audit(1795191179.235:23128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.474308][ T29] audit: type=1326 audit(1795191179.235:23129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.498326][ T29] audit: type=1326 audit(1795191179.235:23130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.521921][ T29] audit: type=1326 audit(1795191179.235:23131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.546198][ T29] audit: type=1326 audit(1795191179.235:23132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.569810][ T29] audit: type=1326 audit(1795191179.235:23133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.594131][ T29] audit: type=1326 audit(1795191179.235:23134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19924 comm="syz.0.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 406.657363][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.667642][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.685791][ T5922] bond0 (unregistering): Released all slaves [ 406.737908][ T5922] tipc: Disabling bearer [ 406.743217][ T5922] tipc: Left network mode [ 406.750459][T19878] chnl_net:caif_netlink_parms(): no params data found [ 406.982353][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5736'. [ 407.061124][T19878] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.068271][T19878] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.094630][T19878] bridge_slave_0: entered allmulticast mode [ 407.113188][T19878] bridge_slave_0: entered promiscuous mode [ 407.120324][T19878] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.127417][T19878] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.134595][T19878] bridge_slave_1: entered allmulticast mode [ 407.148898][T19878] bridge_slave_1: entered promiscuous mode [ 407.157686][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.165107][ T5922] batadv0: mtu less than device minimum [ 407.171108][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.181980][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.192720][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.203626][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.214378][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.225266][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.235992][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.236016][T19956] netlink: 'syz.1.5737': attribute type 4 has an invalid length. [ 407.246838][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.247305][ T5922] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.280532][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.292391][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.308050][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.317997][ T5922] batman_adv: batadv0: Interface deactivated: dummy0 [ 407.324702][ T5922] batman_adv: batadv0: Removing interface: dummy0 [ 407.335109][ T5922] veth1_macvtap: left promiscuous mode [ 407.335176][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.340832][ T5922] veth0_macvtap: left promiscuous mode [ 407.340926][ T5922] veth1_vlan: left promiscuous mode [ 407.359441][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.366910][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.374423][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.382440][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.389982][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.397394][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.404915][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.413046][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.420500][ T3890] hid-generic 0008:0006:0007.0005: unknown main item tag 0x0 [ 407.428901][ T3890] hid-generic 0008:0006:0007.0005: hidraw0: HID v0.0b Device [syz1] on syz1 [ 407.465662][ T5922] pim6reg (unregistering): left allmulticast mode [ 407.550348][T19878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.566042][T19878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.592968][T19878] team0: Port device team_slave_0 added [ 407.601897][T19878] team0: Port device team_slave_1 added [ 407.621376][T19878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.628417][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.655243][T19878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.666998][T19878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.674019][T19878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.700751][T19878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.769599][T19968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4902 sclass=netlink_route_socket pid=19968 comm=syz.3.5740 [ 407.794159][T19968] loop3: detected capacity change from 0 to 512 [ 407.802811][T19878] hsr_slave_0: entered promiscuous mode [ 407.808668][T19968] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 407.809044][T19878] hsr_slave_1: entered promiscuous mode [ 407.817301][T19968] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5740: invalid indirect mapped block 2683928664 (level 1) [ 407.838832][T19968] EXT4-fs (loop3): 1 truncate cleaned up [ 407.845365][T19968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.862266][T19968] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.914689][T19975] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5743'. [ 407.924640][T19976] netlink: 'syz.1.5742': attribute type 4 has an invalid length. [ 407.980637][T19982] loop3: detected capacity change from 0 to 164 [ 407.988134][T19982] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 407.999155][T19982] 9pnet_fd: Insufficient options for proto=fd [ 408.007038][T19982] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5745'. [ 408.188078][T19878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.218429][T19878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.233261][T19999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5750'. [ 408.243711][T19878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.265950][T19878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.357726][T20016] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5754'. [ 408.421582][T19878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.502233][T20019] netlink: 'syz.3.5755': attribute type 4 has an invalid length. [ 408.513290][T19878] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.524633][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.531878][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.551952][T20018] loop3: detected capacity change from 0 to 512 [ 408.560037][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.567146][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.580908][T20018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.611433][T19878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.622048][T19878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.715732][T19878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.749460][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.864247][T19878] veth0_vlan: entered promiscuous mode [ 408.873990][T19878] veth1_vlan: entered promiscuous mode [ 408.892114][T19878] veth0_macvtap: entered promiscuous mode [ 408.901869][T19878] veth1_macvtap: entered promiscuous mode [ 408.913030][T19878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.923969][T19878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.934907][ T5953] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.943818][ T5953] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.097323][T20053] loop5: detected capacity change from 0 to 2048 [ 409.124656][T20053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.144780][ T5953] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.267759][ T5953] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.400507][T20062] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 409.418689][T20062] vlan0: entered allmulticast mode [ 409.462762][T20018] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.472843][T20062] dummy0: entered allmulticast mode [ 409.481092][T20066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.495045][T20066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.557207][T20071] loop3: detected capacity change from 0 to 164 [ 409.569101][T20073] netlink: 'syz.4.5764': attribute type 1 has an invalid length. [ 409.576990][T20073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5764'. [ 409.601322][T20071] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.656481][T20071] 9pnet_fd: Insufficient options for proto=fd [ 409.664030][T20071] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5766'. [ 409.808143][T20074] lo speed is unknown, defaulting to 1000 [ 409.886141][T20074] lo speed is unknown, defaulting to 1000 [ 409.948649][T11836] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 409.972690][T11836] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 410.000783][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.040584][ T5960] batadv1: left allmulticast mode [ 410.045776][ T5960] batadv1: left promiscuous mode [ 410.050970][ T5960] bridge0: port 2(batadv1) entered disabled state [ 410.078940][ T5960] team0: left allmulticast mode [ 410.083844][ T5960] team_slave_0: left allmulticast mode [ 410.089439][ T5960] team_slave_1: left allmulticast mode [ 410.094924][ T5960] team0: left promiscuous mode [ 410.099846][ T5960] team_slave_0: left promiscuous mode [ 410.105353][ T5960] team_slave_1: left promiscuous mode [ 410.107771][T20102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.111060][ T5960] bridge0: port 3(team0) entered disabled state [ 410.128048][T20102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.171154][ T5960] bridge_slave_0: left allmulticast mode [ 410.176866][ T5960] bridge_slave_0: left promiscuous mode [ 410.183229][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.197106][T20103] netlink: 'syz.5.5772': attribute type 4 has an invalid length. [ 410.390248][T20108] loop5: detected capacity change from 0 to 512 [ 410.400763][T20108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.464118][ T5960]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.475339][ T5960]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.485213][ T5960]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 410.496626][ T5960]  (unregistering): Released all slaves [ 410.510890][T20074] chnl_net:caif_netlink_parms(): no params data found [ 410.578600][T20116] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5777'. [ 410.606683][ T5960] hsr_slave_0: left promiscuous mode [ 410.615566][ T5960] hsr_slave_1: left promiscuous mode [ 410.618648][T20118] loop4: detected capacity change from 0 to 164 [ 410.628254][T20118] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 410.638079][T20118] 9pnet_fd: Insufficient options for proto=fd [ 410.646312][T20118] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5778'. [ 410.703798][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 410.715735][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 410.798803][T20074] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.806610][T20074] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.816751][T20074] bridge_slave_0: entered allmulticast mode [ 410.823989][T20074] bridge_slave_0: entered promiscuous mode [ 410.837942][T20074] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.845147][T20074] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.853035][T20074] bridge_slave_1: entered allmulticast mode [ 410.859783][T20074] bridge_slave_1: entered promiscuous mode [ 410.880076][T20074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.891021][T20074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.953256][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5781'. [ 411.245045][T20074] team0: Port device team_slave_0 added [ 411.253138][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.264650][T20074] team0: Port device team_slave_1 added [ 411.289809][T20074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.296870][T20074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.322871][T20074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.334505][T20074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.335286][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.341515][T20074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.375937][T20074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.385234][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.406985][T20137] netlink: 'syz.0.5785': attribute type 12 has an invalid length. [ 411.415022][T20137] netlink: 'syz.0.5785': attribute type 29 has an invalid length. [ 411.423609][T20137] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5785'. [ 411.432752][T20137] netlink: 'syz.0.5785': attribute type 3 has an invalid length. [ 411.440527][T20137] netlink: 'syz.0.5785': attribute type 2 has an invalid length. [ 411.449046][T20137] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5785'. [ 411.461069][T20138] netlink: 'syz.5.5784': attribute type 1 has an invalid length. [ 411.468894][T20138] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5784'. [ 411.491182][T20074] hsr_slave_0: entered promiscuous mode [ 411.501227][T20074] hsr_slave_1: entered promiscuous mode [ 411.508201][T20074] debugfs: 'hsr0' already exists in 'hsr' [ 411.514704][T20074] Cannot create hsr debugfs directory [ 411.600678][T20146] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5788'. [ 411.650631][T20150] 9pnet_fd: Insufficient options for proto=fd [ 411.671124][T20150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5789'. [ 411.695359][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 411.695378][ T29] audit: type=1326 audit(1795191184.495:23360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.703397][T20156] loop4: detected capacity change from 0 to 164 [ 411.735974][T20156] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 411.747381][ T29] audit: type=1326 audit(1795191184.535:23361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.771829][ T29] audit: type=1326 audit(1795191184.535:23362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.795430][ T29] audit: type=1326 audit(1795191184.535:23363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.819855][ T29] audit: type=1326 audit(1795191184.535:23364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.844159][ T29] audit: type=1326 audit(1795191184.535:23365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.856643][T20156] 9pnet_fd: Insufficient options for proto=fd [ 411.867827][ T29] audit: type=1326 audit(1795191184.535:23366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.867860][ T29] audit: type=1326 audit(1795191184.535:23367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.922641][ T29] audit: type=1326 audit(1795191184.535:23368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 411.946548][ T29] audit: type=1326 audit(1795191184.535:23369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20149 comm="syz.0.5789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fed44dfeb69 code=0x7ffc0000 [ 412.003704][T20156] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5793'. [ 412.090376][T20168] loop5: detected capacity change from 0 to 164 [ 412.124270][T20168] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 412.133750][T20168] 9pnet_fd: Insufficient options for proto=fd [ 412.141341][T20168] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5796'. [ 412.255107][T20074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.268117][T20074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.313561][T20074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.434271][T20074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.535257][T20074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.686718][T20074] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.737185][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.744376][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.788297][T20195] netlink: 'syz.3.5803': attribute type 21 has an invalid length. [ 412.820178][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.827339][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.915809][T20197] loop3: detected capacity change from 0 to 164 [ 412.963022][T20197] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 412.986610][T20197] 9pnet_fd: Insufficient options for proto=fd [ 412.992798][T20074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.084713][T20208] loop3: detected capacity change from 0 to 1024 [ 413.096911][T20208] ext4: Unknown parameter 'smackfsdef' [ 413.146204][T20074] veth0_vlan: entered promiscuous mode [ 413.203967][T20074] veth1_vlan: entered promiscuous mode [ 413.216631][T20074] veth0_macvtap: entered promiscuous mode [ 413.223977][T20074] veth1_macvtap: entered promiscuous mode [ 413.280320][T20074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.317497][T20074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.330957][T20224] loop5: detected capacity change from 0 to 164 [ 413.340187][T20225] netlink: 'syz.3.5813': attribute type 21 has an invalid length. [ 413.350526][ T5966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.371315][T20224] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 413.387652][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.398656][T20224] 9pnet_fd: Insufficient options for proto=fd [ 413.419561][ T5966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.443135][ T5966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.523823][T20234] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 413.558748][T20234] vlan2: entered allmulticast mode [ 413.567573][T20234] dummy0: entered allmulticast mode [ 413.585749][ T9] hid_parser_main: 43 callbacks suppressed [ 413.585777][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.599134][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.606575][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.614727][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.622218][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.629676][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.637284][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.645658][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.653116][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.660582][ T9] hid-generic 0008:0006:0007.0006: unknown main item tag 0x0 [ 413.735327][ T9] hid-generic 0008:0006:0007.0006: hidraw0: HID v0.0b Device [syz1] on syz1 [ 414.425334][T20262] loop4: detected capacity change from 0 to 1024 [ 414.451580][T20262] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 414.486506][T20266] netlink: 'syz.0.5826': attribute type 53 has an invalid length. [ 414.611317][T20262] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5825: Invalid block bitmap block 0 in block_group 0 [ 414.626834][T20273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.651424][ T997] hid-generic 0008:0006:0007.0007: hidraw0: HID v0.0b Device [syz1] on syz1 [ 414.671371][T20262] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5825: Failed to acquire dquot type 0 [ 414.688976][T20273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.697949][T20281] loop3: detected capacity change from 0 to 1024 [ 414.705429][T20262] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.5825: Freeing blocks not in datazone - block = 0, count = 4096 [ 414.719150][T20281] EXT4-fs: Ignoring removed orlov option [ 414.729434][T20262] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5825: Invalid inode bitmap blk 0 in block_group 0 [ 414.743183][ T5960] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:54: Failed to release dquot type 0 [ 414.755097][T20262] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 414.756133][T20283] netlink: 'syz.0.5829': attribute type 1 has an invalid length. [ 414.773265][T20262] EXT4-fs (loop4): 1 orphan inode deleted [ 414.781699][T20262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.808154][T20281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.884806][T12425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.897948][T19878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.929960][T20290] netlink: 'syz.3.5833': attribute type 4 has an invalid length. [ 414.952216][T20290] loop3: detected capacity change from 0 to 512 [ 414.990133][T20290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.221967][T20300] 9pnet: Could not find request transport: 0xffffffffffffffff [ 415.248197][T20300] netlink: 'syz.4.5837': attribute type 10 has an invalid length. [ 415.268946][T20300] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 415.323948][T20307] loop4: detected capacity change from 0 to 512 [ 415.338228][T20307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.353019][T20307] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.380562][T20307] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 415.400593][T20307] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 415.413037][T20307] EXT4-fs (loop4): This should not happen!! Data will be lost [ 415.413037][T20307] [ 415.422745][T20307] EXT4-fs (loop4): Total free blocks count 0 [ 415.429622][T20307] EXT4-fs (loop4): Free/Dirty block details [ 415.435592][T20307] EXT4-fs (loop4): free_blocks=65280 [ 415.441027][T20307] EXT4-fs (loop4): dirty_blocks=33 [ 415.446207][T20307] EXT4-fs (loop4): Block reservation details [ 415.452235][T20307] EXT4-fs (loop4): i_reserved_data_blocks=33 [ 415.470807][ T9] hid-generic 0008:0006:0007.0008: hidraw0: HID v0.0b Device [syz1] on syz1 [ 415.515027][T19878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.536633][T20327] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 415.570626][T20327] vlan0: entered allmulticast mode [ 415.709531][T20344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.718494][T20344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.757573][T20346] loop4: detected capacity change from 0 to 1024 [ 415.776409][T20346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.790105][T20346] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.807192][T20356] netlink: 'syz.1.5853': attribute type 1 has an invalid length. [ 415.815058][T20356] __nla_validate_parse: 15 callbacks suppressed [ 415.815111][T20356] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5853'. [ 415.843319][ T9] hid-generic 0008:0006:0007.0009: hidraw0: HID v0.0b Device [syz1] on syz1 [ 415.884719][T20364] lo speed is unknown, defaulting to 1000 [ 415.911050][T20290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.944036][T20369] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 415.955885][T20346] net_ratelimit: 32 callbacks suppressed [ 415.955905][T20346] netlink: zone id is out of range [ 415.977028][T20346] netlink: zone id is out of range [ 415.987185][T20346] netlink: zone id is out of range [ 415.987911][T20364] lo speed is unknown, defaulting to 1000 [ 416.002397][T20346] netlink: zone id is out of range [ 416.015949][T20346] netlink: zone id is out of range [ 416.044052][T20346] netlink: zone id is out of range [ 416.057561][T20346] netlink: zone id is out of range [ 416.069737][T20346] netlink: zone id is out of range [ 416.117122][T20346] netlink: zone id is out of range [ 416.132055][T20346] netlink: zone id is out of range [ 416.174560][T20383] loop5: detected capacity change from 0 to 1024 [ 416.183862][T20383] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.190664][T20383] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 416.204052][T19878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.237446][T20388] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 416.255672][T20388] vlan2: entered allmulticast mode [ 416.269142][T20389] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 416.270082][T20388] dummy0: entered allmulticast mode [ 416.291606][ T9] hid-generic 0008:0006:0007.000A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 416.418521][T20402] netlink: 'syz.0.5871': attribute type 4 has an invalid length. [ 416.515063][T20409] loop4: detected capacity change from 0 to 164 [ 416.532582][T20409] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 416.547437][T20409] 9pnet_fd: Insufficient options for proto=fd [ 416.555825][T20409] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5873'. [ 416.657719][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5876'. [ 416.807010][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 416.807029][ T29] audit: type=1326 audit(1795191189.580:23700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.855081][ T29] audit: type=1326 audit(1795191189.580:23701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.878786][ T29] audit: type=1326 audit(1795191189.600:23702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.902505][ T29] audit: type=1326 audit(1795191189.600:23703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.926207][ T29] audit: type=1326 audit(1795191189.600:23704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.949915][ T29] audit: type=1326 audit(1795191189.600:23705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.973540][ T29] audit: type=1326 audit(1795191189.600:23706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.973856][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 416.997213][ T29] audit: type=1326 audit(1795191189.600:23707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.997329][ T29] audit: type=1326 audit(1795191189.600:23708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 416.997428][ T29] audit: type=1326 audit(1795191189.600:23709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20420 comm="syz.4.5879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66b3beb69 code=0x7ffc0000 [ 417.086524][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5880'. [ 417.116430][T20424] FAULT_INJECTION: forcing a failure. [ 417.116430][T20424] name failslab, interval 1, probability 0, space 0, times 0 [ 417.129973][T20424] CPU: 0 UID: 0 PID: 20424 Comm: syz.4.5880 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 417.130011][T20424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.130085][T20424] Call Trace: [ 417.130093][T20424] [ 417.130102][T20424] __dump_stack+0x1d/0x30 [ 417.130129][T20424] dump_stack_lvl+0xe8/0x140 [ 417.130234][T20424] dump_stack+0x15/0x1b [ 417.130321][T20424] should_fail_ex+0x265/0x280 [ 417.130363][T20424] ? drr_change_class+0x227/0x7e0 [ 417.130392][T20424] should_failslab+0x8c/0xb0 [ 417.130423][T20424] __kmalloc_cache_noprof+0x4c/0x320 [ 417.130540][T20424] drr_change_class+0x227/0x7e0 [ 417.130639][T20424] tc_ctl_tclass+0x6ed/0xc70 [ 417.130680][T20424] ? ns_capable+0x7d/0xb0 [ 417.130706][T20424] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 417.130736][T20424] rtnetlink_rcv_msg+0x657/0x6d0 [ 417.130872][T20424] netlink_rcv_skb+0x120/0x220 [ 417.130910][T20424] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.130947][T20424] rtnetlink_rcv+0x1c/0x30 [ 417.130973][T20424] netlink_unicast+0x5c0/0x690 [ 417.131049][T20424] netlink_sendmsg+0x58b/0x6b0 [ 417.131086][T20424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.131217][T20424] __sock_sendmsg+0x145/0x180 [ 417.131310][T20424] ____sys_sendmsg+0x31e/0x4e0 [ 417.131356][T20424] ___sys_sendmsg+0x17b/0x1d0 [ 417.131449][T20424] __x64_sys_sendmsg+0xd4/0x160 [ 417.131487][T20424] x64_sys_call+0x191e/0x2ff0 [ 417.131542][T20424] do_syscall_64+0xd2/0x200 [ 417.131569][T20424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 417.131594][T20424] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 417.131638][T20424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.131660][T20424] RIP: 0033:0x7fb66b3beb69 [ 417.131676][T20424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.131756][T20424] RSP: 002b:00007fb6699fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.131778][T20424] RAX: ffffffffffffffda RBX: 00007fb66b5e6080 RCX: 00007fb66b3beb69 [ 417.131791][T20424] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 417.131860][T20424] RBP: 00007fb6699fe090 R08: 0000000000000000 R09: 0000000000000000 [ 417.131873][T20424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.131885][T20424] R13: 0000000000000000 R14: 00007fb66b5e6080 R15: 00007ffcad82d978 [ 417.131904][T20424] [ 417.136008][T20427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5882'. [ 417.468369][T20436] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 417.482653][T20436] vlan2: entered allmulticast mode [ 417.487892][T20436] dummy0: entered allmulticast mode [ 417.551610][T20438] loop1: detected capacity change from 0 to 164 [ 417.558702][T20438] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 417.568292][T20438] 9pnet_fd: Insufficient options for proto=fd [ 417.575491][T20438] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5885'. [ 417.652565][ T3391] hid-generic 0008:0006:0007.000B: hidraw0: HID v0.0b Device [syz1] on syz1 [ 417.688177][T20451] loop1: detected capacity change from 0 to 1024 [ 417.700234][T20451] EXT4-fs: Ignoring removed mblk_io_submit option [ 417.707382][T20451] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 417.737876][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'. [ 417.747833][T20459] netlink: 'syz.4.5894': attribute type 4 has an invalid length. [ 417.764273][T20459] loop4: detected capacity change from 0 to 512 [ 417.773758][T20459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.006308][T20465] netlink: 'syz.0.5895': attribute type 21 has an invalid length. [ 418.033000][T20465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5895'. [ 418.088303][T20469] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 418.101836][T20469] vlan0: entered allmulticast mode [ 418.167572][T20471] loop5: detected capacity change from 0 to 164 [ 418.175146][T20471] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 418.187251][T20471] 9pnet_fd: Insufficient options for proto=fd [ 418.206798][T20471] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5898'. [ 418.301592][ T10] hid-generic 0008:0006:0007.000C: hidraw0: HID v0.0b Device [syz1] on syz1 [ 418.468786][T20491] loop5: detected capacity change from 0 to 512 [ 418.475985][T20491] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 418.556634][T20494] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 418.566265][T20496] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 418.579920][T20496] vlan2: entered allmulticast mode [ 418.595222][T20496] dummy0: entered allmulticast mode [ 418.633174][T20501] loop3: detected capacity change from 0 to 164 [ 418.652809][T20501] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 418.666960][T20501] 9pnet_fd: Insufficient options for proto=fd [ 418.683832][T20459] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.801609][T20509] loop5: detected capacity change from 0 to 2048 [ 418.840894][T20509] Alternate GPT is invalid, using primary GPT. [ 418.847204][T20509] loop5: p1 p2 p3 [ 418.897649][T20507] FAULT_INJECTION: forcing a failure. [ 418.897649][T20507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.910897][T20507] CPU: 1 UID: 0 PID: 20507 Comm: syz.4.5914 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 418.910935][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.910952][T20507] Call Trace: [ 418.910960][T20507] [ 418.910970][T20507] __dump_stack+0x1d/0x30 [ 418.910995][T20507] dump_stack_lvl+0xe8/0x140 [ 418.911079][T20507] dump_stack+0x15/0x1b [ 418.911101][T20507] should_fail_ex+0x265/0x280 [ 418.911143][T20507] should_fail+0xb/0x20 [ 418.911180][T20507] should_fail_usercopy+0x1a/0x20 [ 418.911240][T20507] _copy_from_iter+0xcf/0xe40 [ 418.911290][T20507] ? __build_skb_around+0x1a0/0x200 [ 418.911355][T20507] ? __alloc_skb+0x223/0x320 [ 418.911390][T20507] netlink_sendmsg+0x471/0x6b0 [ 418.911464][T20507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.911507][T20507] __sock_sendmsg+0x145/0x180 [ 418.911561][T20507] ____sys_sendmsg+0x31e/0x4e0 [ 418.911682][T20507] ___sys_sendmsg+0x17b/0x1d0 [ 418.911727][T20507] __x64_sys_sendmsg+0xd4/0x160 [ 418.911835][T20507] x64_sys_call+0x191e/0x2ff0 [ 418.911869][T20507] do_syscall_64+0xd2/0x200 [ 418.911892][T20507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 418.911922][T20507] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 418.911988][T20507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.912013][T20507] RIP: 0033:0x7fb66b3beb69 [ 418.912028][T20507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.912052][T20507] RSP: 002b:00007fb669a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.912077][T20507] RAX: ffffffffffffffda RBX: 00007fb66b5e5fa0 RCX: 00007fb66b3beb69 [ 418.912161][T20507] RDX: 0000000000044084 RSI: 0000200000004bc0 RDI: 0000000000000006 [ 418.912174][T20507] RBP: 00007fb669a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 418.912185][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.912197][T20507] R13: 0000000000000000 R14: 00007fb66b5e5fa0 R15: 00007ffcad82d978 [ 418.912216][T20507] [ 419.134042][T20517] loop5: detected capacity change from 0 to 1024 [ 419.140920][T20517] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.162705][T20517] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 419.221583][T20523] netlink: 'syz.4.5920': attribute type 21 has an invalid length. [ 419.250060][T20526] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 419.338619][ T153] ================================================================== [ 419.346876][ T153] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 419.354990][ T153] [ 419.357361][ T153] write to 0xffff88810424a7a0 of 8 bytes by task 20534 on cpu 0: [ 419.365086][ T153] sk_common_release+0xae/0x220 [ 419.369969][ T153] udp_lib_close+0x15/0x20 [ 419.374416][ T153] inet_release+0xcb/0xf0 [ 419.378787][ T153] inet6_release+0x3e/0x60 [ 419.383247][ T153] sock_close+0x68/0x150 [ 419.387537][ T153] __fput+0x298/0x650 [ 419.391552][ T153] ____fput+0x1c/0x30 [ 419.395567][ T153] task_work_run+0x12e/0x1a0 [ 419.400190][ T153] exit_to_user_mode_loop+0xe4/0x100 [ 419.405482][ T153] do_syscall_64+0x1d6/0x200 [ 419.410084][ T153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.415995][ T153] [ 419.418325][ T153] read to 0xffff88810424a7a0 of 8 bytes by task 153 on cpu 1: [ 419.425784][ T153] l2tp_tunnel_del_work+0x2f/0x1a0 [ 419.430915][ T153] process_scheduled_works+0x4ce/0x9d0 [ 419.432867][T20538] netlink: 'syz.1.5925': attribute type 4 has an invalid length. [ 419.436412][ T153] worker_thread+0x582/0x770 [ 419.436453][ T153] kthread+0x489/0x510 [ 419.436472][ T153] ret_from_fork+0xdd/0x150 [ 419.436490][ T153] ret_from_fork_asm+0x1a/0x30 [ 419.436510][ T153] [ 419.436514][ T153] value changed: 0xffff888119011d40 -> 0x0000000000000000 [ 419.436525][ T153] [ 419.436528][ T153] Reported by Kernel Concurrency Sanitizer on: [ 419.478810][T20538] loop1: detected capacity change from 0 to 512 [ 419.480021][ T153] CPU: 1 UID: 0 PID: 153 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 419.498415][ T153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.508477][ T153] Workqueue: l2tp l2tp_tunnel_del_work [ 419.513961][ T153] ================================================================== [ 419.545808][T20531] loop4: detected capacity change from 0 to 512 [ 419.563863][T20538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.614206][T20531] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 419.649482][T20531] EXT4-fs (loop4): mount failed [ 420.289054][T20538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.